Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa
File:                     91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa (raw, json)
Hash identifier:          ZxgnxnhUdB7sp7u00fAAmadgG6ufSJqxF66KXOkeNyA=
Subject key identifier:   04:0B:CF:67:3B:36:C5:62:A1:7B:24:A6:F1:91:AF:68:4F:8F:14:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049F6880E5D7065906DD880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33652
IP address blocks:        96.109.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:f6:88:0e:5d:70:65:90:6d:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=05e7cff9-64d8-425f-b2a3-6f45bf51de43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:33:f2:39:af:8f:55:be:fe:45:27:67:80:
                    a4:4e:de:60:d7:64:18:c3:49:9c:e8:9e:d4:4e:f7:
                    87:b7:d7:96:9f:a3:64:8e:32:96:fe:af:7d:c8:1b:
                    5a:18:f1:5c:55:8f:b1:5f:d6:ec:09:bd:41:42:48:
                    be:c0:15:a3:53:d3:2e:37:0e:58:2a:50:63:7e:21:
                    c9:93:16:72:b7:68:77:9d:a4:04:14:e9:5a:48:d9:
                    7c:a1:89:3e:42:8f:3a:45:cc:de:85:50:65:4e:ac:
                    3c:e1:3c:f1:c1:a1:42:aa:ec:c5:c2:22:88:1f:47:
                    3c:cc:1a:7b:13:3f:4d:fd:62:a7:19:fc:65:ea:44:
                    eb:86:65:13:ea:c2:c8:12:4c:78:bd:3d:c8:80:73:
                    1c:61:5a:5f:68:4d:47:48:92:44:31:56:a3:ec:6d:
                    46:39:1a:39:de:96:e3:19:fc:76:4e:68:ab:8c:6c:
                    7a:ab:cc:b7:48:ea:b5:3b:cf:47:25:a3:f5:77:02:
                    32:e4:38:59:cf:ea:1a:9a:43:17:3c:26:a5:a9:ba:
                    d6:3c:74:13:9f:60:fd:7d:4f:bb:6a:87:01:90:ff:
                    8f:a4:cc:38:a6:11:27:83:b2:39:23:d2:b2:a4:94:
                    57:df:7a:77:8f:d5:6d:47:3b:4f:a0:88:2b:59:d2:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0B:CF:67:3B:36:C5:62:A1:7B:24:A6:F1:91:AF:68:4F:8F:14:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a39e04-a4bd-3f6e-8b3c-06c3c9c6e665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.109.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:aa:4e:b1:d1:88:19:c2:91:48:ac:ce:9d:e4:f9:15:a8:2b:
         2b:c3:a6:fa:1d:e6:a8:55:dc:6c:5f:f8:ee:9f:9a:a9:e7:e4:
         0e:e6:fc:ba:0b:f6:a8:b6:8e:3c:39:12:04:e0:28:1e:04:1a:
         a5:92:25:26:b0:87:a9:c3:74:6e:42:0f:f9:0f:07:95:90:69:
         52:42:7d:2f:3a:f6:57:ed:b6:49:b5:2d:e8:f6:57:c6:da:f5:
         85:d2:c6:d9:01:17:ea:01:60:2f:50:c9:81:cd:61:18:88:46:
         66:2e:e8:b9:e1:c0:74:19:63:e8:3b:ea:4b:24:52:e6:50:60:
         1c:9f:7d:6a:22:62:98:95:f5:7e:ed:d5:15:d4:60:45:a8:f8:
         d8:d2:1d:53:28:4c:33:80:54:8b:54:19:2c:68:5f:dc:bd:5d:
         c0:b0:3b:87:08:87:b5:84:35:60:9b:0b:85:67:e0:14:e9:d0:
         15:d9:31:eb:a8:0b:75:97:84:d5:02:c7:f7:d9:dd:42:8a:8c:
         f5:7a:13:69:91:68:7b:16:5b:29:a5:7a:3c:ae:b2:bb:e3:9a:
         a9:06:a3:43:c5:8f:fc:56:98:7e:61:1d:fe:f7:72:7f:35:d9:
         51:9b:54:f2:08:5a:cf:79:5e:3d:65:b2:9c:26:f7:a6:73:68:
         2f:df:f1:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASfaIDl1wZZBt2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
MDVlN2NmZjktNjRkOC00MjVmLWIyYTMtNmY0NWJmNTFkZTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Yz8jmvj1W+/kUnZ4CkTt5g12QYw0mc6J7U
TveHt9eWn6NkjjKW/q99yBtaGPFcVY+xX9bsCb1BQki+wBWjU9MuNw5YKlBjfiHJ
kxZyt2h3naQEFOlaSNl8oYk+Qo86RczehVBlTqw84TzxwaFCquzFwiKIH0c8zBp7
Ez9N/WKnGfxl6kTrhmUT6sLIEkx4vT3IgHMcYVpfaE1HSJJEMVaj7G1GORo53pbj
Gfx2TmirjGx6q8y3SOq1O89HJaP1dwIy5DhZz+oamkMXPCalqbrWPHQTn2D9fU+7
aocBkP+PpMw4phEng7I5I9KypJRX33p3j9VtRztPoIgrWdIxewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQLz2c7NsVioXskpvGRr2hPjxSEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFhMzllMDQtYTRiZC0z
ZjZlLThiM2MtMDZjM2M5YzZlNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYG3UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImqTrHRiBnCkUiszp3k+RWoKyvDpvod5qhV3Gxf+O6fmqnn5A7m/LoL
9qi2jjw5EgTgKB4EGqWSJSawh6nDdG5CD/kPB5WQaVJCfS869lfttkm1Lej2V8ba
9YXSxtkBF+oBYC9QyYHNYRiIRmYu6LnhwHQZY+g76kskUuZQYByffWoiYpiV9X7t
1RXUYEWo+NjSHVMoTDOAVItUGSxoX9y9XcCwO4cIh7WENWCbC4Vn4BTp0BXZMeuo
C3WXhNUCx/fZ3UKKjPV6E2mRaHsWWymlejyusrvjmqkGo0PFj/xWmH5hHf73cn81
2VGbVPIIWs95Xj1lspwm96ZzaC/f8Vo=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:43:07 2024 by rpki-client on console-fra.rpki-client.org