Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dade5b5a-d044-3a7b-a8f8-7650b260cf3d.roa
File:                     dade5b5a-d044-3a7b-a8f8-7650b260cf3d.roa (raw, json)
Hash identifier:          YinWf43zM8mxxuKKA7e1zFjdebjCrp08BPhuZ659u/Q=
Subject key identifier:   4F:01:60:A6:96:FA:9F:BD:4C:6A:1C:B7:32:65:00:F3:40:7E:90:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B3BDCA96C229F06629680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dade5b5a-d044-3a7b-a8f8-7650b260cf3d.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7016
IP address blocks:        96.77.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:3b:dc:a9:6c:22:9f:06:62:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=c569b9e1-5d44-40fe-8623-0bb5ff5a8121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:7b:0a:90:1a:62:46:19:59:d8:a3:4e:2a:
                    11:a3:79:3a:28:c3:70:aa:01:66:f6:1d:ea:3e:25:
                    88:77:4b:fa:52:2d:e5:6e:83:3c:ba:62:b1:d2:9b:
                    a8:76:25:37:d7:7e:45:31:2b:99:d7:16:92:91:76:
                    ff:7f:69:d5:d5:bf:3b:a4:4e:56:bb:65:5a:a3:3f:
                    51:09:1a:48:2d:88:4a:09:93:6d:3f:58:94:82:ee:
                    c0:92:fa:4b:67:33:ed:1b:db:15:0e:e4:bb:58:60:
                    c9:0c:af:9e:1a:ff:08:51:e7:f0:fb:63:62:31:9a:
                    bc:b6:15:54:4f:91:d7:93:c1:02:09:d9:6b:ed:8d:
                    6e:42:3c:6a:80:05:2f:16:2e:02:ae:41:f1:d4:da:
                    7d:b0:93:9d:cc:47:83:80:e4:0d:e5:b2:be:05:9c:
                    c1:af:73:8f:95:96:46:d7:6c:4c:06:13:f2:83:0e:
                    f1:d2:39:bc:9e:b3:62:71:b3:2f:70:a6:87:63:ae:
                    62:4f:d8:4b:71:9c:41:d7:ed:4a:e9:16:06:36:3e:
                    58:28:a9:58:5d:06:2a:ad:dd:e0:e0:9c:9f:18:a2:
                    da:a7:f8:8c:2a:12:56:46:a2:3c:67:a3:35:44:f0:
                    2c:8a:5b:43:9f:bd:73:21:8d:96:c7:0d:6b:32:c1:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:60:A6:96:FA:9F:BD:4C:6A:1C:B7:32:65:00:F3:40:7E:90:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dade5b5a-d044-3a7b-a8f8-7650b260cf3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.77.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:ba:51:e6:ca:85:b2:d4:43:71:ce:7d:be:da:b4:37:14:
         f0:31:0e:cf:b5:23:5b:62:3b:03:ab:08:af:06:42:c4:6c:9c:
         02:08:2d:c2:62:34:0f:75:96:7b:c6:db:42:e7:ee:da:5f:05:
         4c:c8:84:cd:a6:a2:01:6a:10:9b:5c:3a:d0:0c:c1:13:0d:1e:
         5c:87:ba:24:a6:91:e9:9f:f9:57:ab:50:e2:50:78:c9:bf:1d:
         57:f4:7f:89:4d:54:e5:a2:4a:55:fb:02:e1:3a:6b:79:b8:88:
         3a:cd:84:c6:51:2a:48:df:09:5b:46:cc:2f:11:43:45:e8:93:
         59:2e:58:77:1a:33:ca:7e:4a:e8:28:25:5f:52:4e:10:bf:7a:
         43:97:4f:b4:60:0a:20:13:5c:51:a9:7e:90:5b:82:e1:cc:1a:
         5c:f3:7d:10:6e:3c:61:c4:41:77:20:8d:ed:07:e5:09:df:07:
         0d:23:15:f8:80:84:b0:ed:71:b3:2d:00:9f:a3:cb:20:11:be:
         4e:c9:97:8d:3a:fc:fa:23:bd:24:96:d8:c0:40:da:19:80:0b:
         df:31:dd:05:2b:df:24:a6:44:68:ef:da:33:8e:17:94:f4:f1:
         aa:5f:8d:4c:73:92:25:ac:2c:46:ea:26:1f:c2:9f:85:63:3e:
         22:57:99:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASzvcqWwinwZiloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
YzU2OWI5ZTEtNWQ0NC00MGZlLTg2MjMtMGJiNWZmNWE4MTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKN7CpAaYkYZWdijTioRo3k6KMNwqgFm9h3q
PiWId0v6Ui3lboM8umKx0puodiU3135FMSuZ1xaSkXb/f2nV1b87pE5Wu2Vaoz9R
CRpILYhKCZNtP1iUgu7AkvpLZzPtG9sVDuS7WGDJDK+eGv8IUefw+2NiMZq8thVU
T5HXk8ECCdlr7Y1uQjxqgAUvFi4CrkHx1Np9sJOdzEeDgOQN5bK+BZzBr3OPlZZG
12xMBhPygw7x0jm8nrNicbMvcKaHY65iT9hLcZxB1+1K6RYGNj5YKKlYXQYqrd3g
4JyfGKLap/iMKhJWRqI8Z6M1RPAsiltDn71zIY2Wxw1rMsHAVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8BYKaW+p+9TGoctzJlAPNAfpCAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFkZTViNWEtZDA0NC0z
YTdiLWE4ZjgtNzY1MGIyNjBjZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYE2kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpuulHmyoWy1ENxzn2+2rQ3FPAxDs+1I1tiOwOrCK8GQsRsnAIILcJi
NA91lnvG20Ln7tpfBUzIhM2mogFqEJtcOtAMwRMNHlyHuiSmkemf+VerUOJQeMm/
HVf0f4lNVOWiSlX7AuE6a3m4iDrNhMZRKkjfCVtGzC8RQ0Xok1kuWHcaM8p+Sugo
JV9SThC/ekOXT7RgCiATXFGpfpBbguHMGlzzfRBuPGHEQXcgje0H5QnfBw0jFfiA
hLDtcbMtAJ+jyyARvk7Jl406/PojvSSW2MBA2hmAC98x3QUr3ySmRGjv2jOOF5T0
8apfjUxzkiWsLEbqJh/Cn4VjPiJXmTg=
-----END CERTIFICATE-----
Generated at Fri Jun 7 12:46:10 2024 by rpki-client on console-ams.rpki-client.org