Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0270121-54f9-3c0a-acaf-5112bb4ae498.roa
File:                     a0270121-54f9-3c0a-acaf-5112bb4ae498.roa (raw, json)
Hash identifier:          caPc1Ib2DbS9XwTDdRm4BY0EFtFtiKnNpC1CWk+AFeM=
Subject key identifier:   34:A2:44:26:2D:93:A1:D9:CB:33:9B:6B:0F:EF:D9:04:5E:40:33:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049B05A4B5557B8A6ECC700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0270121-54f9-3c0a-acaf-5112bb4ae498.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7725
IP address blocks:        96.88.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:b0:5a:4b:55:57:b8:a6:ec:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=5b2fa8b1-a8e5-459c-a7c6-765afef7e6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:39:d8:cb:6f:99:68:e1:f0:d7:c3:c1:b4:
                    81:16:39:01:61:74:8e:80:d8:49:a0:0b:a2:bb:cd:
                    5e:da:52:c6:36:ee:a6:92:2d:68:cf:94:42:65:69:
                    0f:41:3f:8b:2d:42:d5:94:e3:f6:d2:59:99:3f:d0:
                    1e:2c:b1:07:ee:8c:13:02:3c:36:6c:1d:51:d5:15:
                    a1:60:e9:66:ad:1b:e2:63:51:db:11:6e:3f:9f:85:
                    78:46:d0:12:11:ae:0e:2a:e6:97:b5:cf:c8:db:13:
                    aa:e6:94:f8:33:3b:56:f2:e5:9c:63:e7:85:2e:7b:
                    d8:6c:ef:d1:c3:bb:7a:ab:d5:6e:f3:cb:8a:b1:bb:
                    a1:36:2b:fa:0d:cb:f4:1c:5f:34:f8:78:07:11:55:
                    19:c4:09:2e:a3:7c:5c:f8:b5:ae:a9:11:08:b9:56:
                    59:27:cd:1a:5a:ad:07:f9:c2:e8:51:94:2f:a5:eb:
                    26:10:d1:38:24:0f:e6:31:5e:3f:6c:20:fb:15:36:
                    93:f0:ad:21:7f:1a:3d:7d:58:1c:a6:a8:19:e9:a3:
                    35:8b:ff:49:15:03:5d:2b:8e:cd:75:3a:4f:09:6b:
                    6a:0f:00:35:78:4a:1a:2c:73:29:3b:7c:3c:3a:cf:
                    59:f8:a5:85:12:47:ed:2d:43:86:d9:34:52:21:aa:
                    86:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A2:44:26:2D:93:A1:D9:CB:33:9B:6B:0F:EF:D9:04:5E:40:33:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0270121-54f9-3c0a-acaf-5112bb4ae498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.88.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:86:fb:7b:1c:35:4f:af:b9:20:c6:7a:fb:59:de:55:bd:e8:
         ce:75:bb:42:d7:b4:b4:28:53:f6:b8:6e:69:4b:1f:0e:d2:4a:
         ae:16:ef:d2:27:a2:75:01:bf:b3:c2:62:09:7d:9f:76:22:91:
         42:cd:b2:8f:49:d7:01:8c:b1:8f:09:72:7b:51:f5:7a:e7:33:
         f7:08:cc:e4:fd:c8:7d:0e:61:64:9d:66:52:3a:0f:db:6f:78:
         7a:c9:d0:51:8e:59:0f:e1:14:3d:01:fb:73:06:34:37:2f:f2:
         72:e2:51:b1:eb:8d:aa:07:44:8c:d0:da:0d:36:52:8e:e2:83:
         6c:a0:a7:e8:c2:e6:8e:50:f5:d5:16:ca:73:f7:a9:ce:48:94:
         7b:e5:00:7d:dd:91:37:2b:ec:d8:41:9b:93:c5:ff:a8:86:e3:
         5f:5b:a3:8c:b7:fc:e3:ac:88:73:cb:a1:5b:b1:ea:99:4e:be:
         f0:1a:15:7c:fb:4b:68:5e:d8:80:97:a6:1f:e7:79:a2:ad:90:
         7d:b4:09:19:db:fb:c6:f8:7a:5a:2e:98:52:60:7c:05:dd:dd:
         79:66:27:68:b1:e9:db:52:c3:82:c7:c8:13:fb:44:0f:67:55:
         92:76:94:1d:04:11:ed:dd:00:97:b7:5a:7d:f9:e1:b6:c1:8d:
         fa:20:dd:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASbBaS1VXuKbsxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
NWIyZmE4YjEtYThlNS00NTljLWE3YzYtNzY1YWZlZjdlNmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHw52MtvmWjh8NfDwbSBFjkBYXSOgNhJoAui
u81e2lLGNu6mki1oz5RCZWkPQT+LLULVlOP20lmZP9AeLLEH7owTAjw2bB1R1RWh
YOlmrRviY1HbEW4/n4V4RtASEa4OKuaXtc/I2xOq5pT4MztW8uWcY+eFLnvYbO/R
w7t6q9Vu88uKsbuhNiv6Dcv0HF80+HgHEVUZxAkuo3xc+LWuqREIuVZZJ80aWq0H
+cLoUZQvpesmENE4JA/mMV4/bCD7FTaT8K0hfxo9fVgcpqgZ6aM1i/9JFQNdK47N
dTpPCWtqDwA1eEoaLHMpO3w8Os9Z+KWFEkftLUOG2TRSIaqGHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSiRCYtk6HZyzObaw/v2QReQDP7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTAyNzAxMjEtNTRmOS0z
YzBhLWFjYWYtNTExMmJiNGFlNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYFgMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALyG+3scNU+vuSDGevtZ3lW96M51u0LXtLQoU/a4bmlLHw7SSq4W79In
onUBv7PCYgl9n3YikULNso9J1wGMsY8JcntR9XrnM/cIzOT9yH0OYWSdZlI6D9tv
eHrJ0FGOWQ/hFD0B+3MGNDcv8nLiUbHrjaoHRIzQ2g02Uo7ig2ygp+jC5o5Q9dUW
ynP3qc5IlHvlAH3dkTcr7NhBm5PF/6iG419bo4y3/OOsiHPLoVux6plOvvAaFXz7
S2he2ICXph/neaKtkH20CRnb+8b4eloumFJgfAXd3XlmJ2ix6dtSw4LHyBP7RA9n
VZJ2lB0EEe3dAJe3Wn354bbBjfog3Wo=
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:31:31 2024 by rpki-client on console-fra.rpki-client.org