Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24536d94-bbd8-37b8-b298-1d85240f5ad6.roa
File:                     24536d94-bbd8-37b8-b298-1d85240f5ad6.roa (raw, json)
Hash identifier:          vWWrr3VrZdOM6wrWI0J48eCUjLzCnX7YSp2QKSPpO7s=
Subject key identifier:   D8:E2:03:C7:79:4C:CA:66:27:73:73:E9:F5:93:D1:90:03:62:1E:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AACBEBE723C2A70B73A20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24536d94-bbd8-37b8-b298-1d85240f5ad6.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33657
IP address blocks:        96.97.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:ac:be:be:72:3c:2a:70:b7:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=99db6209-1d54-429c-b948-8c9db62fa8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:0a:ec:32:d6:2e:13:78:22:09:41:87:a6:
                    45:20:77:58:32:d2:23:b0:2a:92:8b:4c:9f:a6:b4:
                    d9:ad:6a:2c:b2:28:c7:c4:3c:c7:55:8c:30:8d:ec:
                    c5:1f:b0:3f:a8:85:cc:24:62:c0:a3:70:d6:f2:9c:
                    ce:f3:43:e9:65:7c:86:54:1b:3a:01:1e:77:37:25:
                    ba:85:e2:00:2a:77:d9:ac:99:69:34:2f:90:58:d1:
                    3e:ef:c8:c0:7f:1f:90:b7:8b:77:0a:b3:3b:39:20:
                    19:07:9c:f3:16:2e:ef:d9:e5:e1:67:31:db:c4:69:
                    56:db:17:e3:7c:3d:87:67:5e:ed:3b:36:d4:7a:05:
                    83:8b:eb:da:eb:8a:69:07:c9:1b:5e:ae:1d:b0:09:
                    95:48:a9:7f:a0:30:35:dd:5b:c0:07:09:12:52:bd:
                    90:48:51:96:60:74:5c:44:23:0a:c1:ca:7d:ca:ee:
                    1f:5d:e5:91:4e:84:15:db:82:e9:ff:2a:41:9c:8b:
                    35:c1:c0:28:59:2e:90:76:77:f4:69:f6:ae:49:08:
                    82:65:02:26:7f:ea:4d:8d:00:b5:99:9e:22:d8:9d:
                    db:c9:bb:21:0c:84:15:37:d0:5e:cd:ac:c9:7b:7c:
                    b9:35:0a:b0:36:73:42:81:48:39:f1:54:87:08:b6:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E2:03:C7:79:4C:CA:66:27:73:73:E9:F5:93:D1:90:03:62:1E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24536d94-bbd8-37b8-b298-1d85240f5ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.97.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:02:80:b8:b5:b7:07:28:ca:6f:3c:c4:97:17:16:77:35:ac:
         25:8b:d9:ce:9e:ef:99:71:bb:da:aa:12:b2:fa:f2:86:e5:55:
         32:1a:b9:10:9c:f0:76:1d:bb:7f:5d:58:ab:75:1d:e0:50:35:
         66:54:d6:2e:bf:31:0b:2f:f4:23:e9:fd:e6:88:fe:31:d4:5b:
         6e:4d:54:6d:7b:b6:c8:c0:ee:1d:cd:06:70:cd:b6:36:25:bc:
         12:b8:eb:a2:c3:fd:ef:6e:ff:e0:da:17:f5:1d:c0:25:e7:63:
         d8:d7:11:74:ea:7b:e9:3c:16:45:ba:9e:20:70:40:53:10:c9:
         9c:33:a6:18:7e:07:3d:d7:22:11:b1:0b:59:dd:89:87:f0:29:
         af:c1:32:70:e7:2a:b2:83:81:86:1f:37:76:f9:26:9d:ac:d4:
         f7:f5:ea:56:1c:f2:92:a4:e7:69:3e:96:c8:30:ae:59:b4:3d:
         60:db:7e:00:bf:5d:28:b1:d1:be:7d:4e:c2:e3:8d:40:51:d0:
         8c:45:98:fb:d2:d0:c6:ed:8b:80:50:66:70:26:cf:92:65:3b:
         c8:dd:68:19:16:aa:a3:67:77:ff:c4:22:85:5f:a7:db:d8:a2:
         a9:75:9f:2b:f5:ed:fe:82:f0:26:b3:c4:03:1c:1f:76:34:19:
         9a:39:48:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASqy+vnI8KnC3OiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
OTlkYjYyMDktMWQ1NC00MjljLWI5NDgtOGM5ZGI2MmZhOGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoUK7DLWLhN4IglBh6ZFIHdYMtIjsCqSi0yf
prTZrWossijHxDzHVYwwjezFH7A/qIXMJGLAo3DW8pzO80PpZXyGVBs6AR53NyW6
heIAKnfZrJlpNC+QWNE+78jAfx+Qt4t3CrM7OSAZB5zzFi7v2eXhZzHbxGlW2xfj
fD2HZ17tOzbUegWDi+va64ppB8kbXq4dsAmVSKl/oDA13VvABwkSUr2QSFGWYHRc
RCMKwcp9yu4fXeWRToQV24Lp/ypBnIs1wcAoWS6Qdnf0afauSQiCZQImf+pNjQC1
mZ4i2J3bybshDIQVN9BezazJe3y5NQqwNnNCgUg58VSHCLbItQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjiA8d5TMpmJ3Nz6fWT0ZADYh5WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQ1MzZkOTQtYmJkOC0z
N2I4LWIyOTgtMWQ4NTI0MGY1YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYGGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkCgLi1twcoym88xJcXFnc1rCWL2c6e75lxu9qqErL68oblVTIauRCc
8HYdu39dWKt1HeBQNWZU1i6/MQsv9CPp/eaI/jHUW25NVG17tsjA7h3NBnDNtjYl
vBK466LD/e9u/+DaF/UdwCXnY9jXEXTqe+k8FkW6niBwQFMQyZwzphh+Bz3XIhGx
C1ndiYfwKa/BMnDnKrKDgYYfN3b5Jp2s1Pf16lYc8pKk52k+lsgwrlm0PWDbfgC/
XSix0b59TsLjjUBR0IxFmPvS0Mbti4BQZnAmz5JlO8jdaBkWqqNnd//EIoVfp9vY
oql1nyv17f6C8CazxAMcH3Y0GZo5SGg=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:40:12 2024 by rpki-client on console-fra.rpki-client.org