Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f918e1-67a0-37f1-90b5-f869aa9125de.roa
File:                     57f918e1-67a0-37f1-90b5-f869aa9125de.roa (raw, json)
Hash identifier:          gxWZfgok8/PCdQ+Xt2D+I+e44kMyrWmvQjXczPkKe4c=
Subject key identifier:   0C:9F:6D:F9:18:86:2A:17:3B:EA:A5:4F:A1:98:96:5A:8F:89:BB:36
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858457FDDE1DBD4A413FEB87F4700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f918e1-67a0-37f1-90b5-f869aa9125de.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     35994
IP address blocks:        96.6.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:e1:db:d4:a4:13:fe:b8:7f:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=7834b1c2-d594-4e70-bd92-995a9393a3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d8:ba:f7:57:64:52:d5:fa:d5:d7:fd:52:08:
                    dc:ae:3a:ef:c0:da:21:6d:14:45:bc:78:7a:7f:09:
                    22:f3:4b:bc:a3:71:09:6e:26:87:27:6f:25:6c:ee:
                    c6:7b:17:c4:44:10:b9:88:e3:33:9f:a1:4a:cf:35:
                    b2:47:a6:c2:ac:07:f8:3d:d2:6d:e0:63:13:71:9d:
                    1d:d7:d6:3f:fc:b5:0c:5b:38:fc:32:2d:e5:6a:55:
                    27:eb:b9:f6:35:04:94:3c:4c:d3:29:c8:63:d9:21:
                    ba:bf:7c:d6:df:10:67:3d:76:d8:b8:e0:71:49:2f:
                    1e:31:4e:5a:af:ed:30:dc:51:26:fc:c7:e7:5e:c4:
                    73:d5:c1:9b:15:ba:c2:6b:e7:cb:67:5f:0f:88:2a:
                    06:32:d6:10:b5:9e:1f:d5:df:5f:af:6b:a9:76:de:
                    77:98:7a:a5:55:f3:46:da:08:4c:3e:0e:b5:ae:16:
                    14:a3:f4:81:f9:c3:82:b1:3c:07:b7:10:01:dd:88:
                    d1:57:b2:d1:b4:da:49:65:96:e4:43:68:e1:e1:cc:
                    0d:bd:22:8f:12:47:02:b8:9e:5e:95:4b:56:64:f8:
                    72:d4:4c:6b:00:26:31:57:3e:18:a4:35:be:4b:56:
                    78:50:07:78:f7:df:01:d7:9c:53:ef:83:e5:44:7f:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9F:6D:F9:18:86:2A:17:3B:EA:A5:4F:A1:98:96:5A:8F:89:BB:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f918e1-67a0-37f1-90b5-f869aa9125de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.6.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4d:a5:83:bd:5e:aa:1d:7b:26:6c:2f:2b:13:d2:7f:3e:9e:
         46:ad:e0:c4:35:ce:5d:87:ea:be:e5:23:6f:a9:21:0c:cc:fc:
         fa:65:b8:6c:fc:0b:5f:95:09:ca:90:67:44:f9:1b:2b:16:50:
         31:af:7b:ec:3b:02:3a:ff:6a:ed:a1:f3:9a:d2:a7:79:af:ab:
         5e:0d:42:b7:f1:1a:38:1b:a6:c8:35:33:5b:53:af:ae:93:c9:
         3a:a9:a4:42:ea:ee:70:8f:67:d2:c3:5e:a5:e2:39:12:c3:51:
         70:38:a9:1b:6b:ab:fe:34:34:cf:18:3f:f6:4e:76:c1:60:7f:
         5b:c5:de:e9:fa:67:21:34:32:db:5f:17:ab:f1:46:d8:b5:e4:
         13:48:7f:5f:f2:7d:7c:57:84:52:95:b4:ed:d1:b3:ce:af:41:
         c7:12:36:b9:51:a3:ec:34:e0:c0:71:f8:42:cd:2a:fb:e6:62:
         0e:49:66:cc:87:c4:21:47:43:d5:58:4f:7b:6f:f3:06:05:f1:
         dd:ad:32:9d:20:0c:de:19:9e:4a:4d:45:a3:f9:f9:a8:c2:f5:
         c2:27:4c:85:4c:ef:e4:4c:d5:aa:fd:70:89:fa:d1:de:d7:34:
         56:c8:44:47:fc:c9:b1:b0:c0:bc:fd:9c:94:c9:b5:dd:e9:e5:
         11:84:c8:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV/3eHb1KQT/rh/RwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
NzgzNGIxYzItZDU5NC00ZTcwLWJkOTItOTk1YTkzOTNhM2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ni691dkUtX61df9UgjcrjrvwNohbRRFvHh6
fwki80u8o3EJbiaHJ28lbO7GexfERBC5iOMzn6FKzzWyR6bCrAf4PdJt4GMTcZ0d
19Y//LUMWzj8Mi3lalUn67n2NQSUPEzTKchj2SG6v3zW3xBnPXbYuOBxSS8eMU5a
r+0w3FEm/MfnXsRz1cGbFbrCa+fLZ18PiCoGMtYQtZ4f1d9fr2updt53mHqlVfNG
2ghMPg61rhYUo/SB+cOCsTwHtxAB3YjRV7LRtNpJZZbkQ2jh4cwNvSKPEkcCuJ5e
lUtWZPhy1ExrACYxVz4YpDW+S1Z4UAd4998B15xT74PlRH96PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyfbfkYhioXO+qlT6GYllqPibs2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdmOTE4ZTEtNjdhMC0z
N2YxLTkwYjUtZjg2OWFhOTEyNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAZ+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpNpYO9XqodeyZsLysT0n8+nkat4MQ1zl2H6r7lI2+pIQzM/PpluGz8
C1+VCcqQZ0T5GysWUDGve+w7Ajr/au2h85rSp3mvq14NQrfxGjgbpsg1M1tTr66T
yTqppELq7nCPZ9LDXqXiORLDUXA4qRtrq/40NM8YP/ZOdsFgf1vF3un6ZyE0Mttf
F6vxRti15BNIf1/yfXxXhFKVtO3Rs86vQccSNrlRo+w04MBx+ELNKvvmYg5JZsyH
xCFHQ9VYT3tv8wYF8d2tMp0gDN4ZnkpNRaP5+ajC9cInTIVM7+RM1ar9cIn60d7X
NFbIREf8ybGwwLz9nJTJtd3p5RGEyBQ=
-----END CERTIFICATE-----
Generated at Fri May 17 20:58:00 2024 by rpki-client on console-fra.rpki-client.org