Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01be9cb0-4496-3ad8-a224-f89ef3023ba5.roa
File:                     01be9cb0-4496-3ad8-a224-f89ef3023ba5.roa (raw, json)
Hash identifier:          KrVC7E3bpMP11gZztptciv60MpbNeJW4m/ERRpUIwp0=
Subject key identifier:   F6:36:DD:4B:8E:AA:8C:63:86:1E:F5:31:28:12:B1:F6:16:64:64:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847D29F68ACD9483024E058D8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01be9cb0-4496-3ad8-a224-f89ef3023ba5.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        96.114.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:68:ac:d9:48:30:24:e0:58:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=b6ed5988-7f23-4318-b31f-ce66d8bbc282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:49:a4:9c:6d:33:d1:79:7e:72:fe:16:59:
                    23:2c:b4:fe:ef:5c:f3:28:06:90:52:98:f5:13:58:
                    9f:51:8c:9a:a4:27:75:08:25:3f:06:a9:f7:47:fe:
                    b7:cd:df:23:65:fa:83:fe:b9:b8:83:d5:2d:c4:18:
                    ea:c2:e1:7e:b1:aa:df:63:05:c0:56:85:d1:ee:17:
                    47:6b:34:1a:64:33:55:3f:d2:7f:78:04:23:1d:20:
                    7b:0b:68:a3:28:71:0c:01:7e:a8:0a:8f:26:70:72:
                    84:c7:7c:3f:16:dd:8f:68:39:59:49:49:a4:76:4d:
                    52:7e:5d:64:d0:4d:1f:5b:75:a2:db:55:18:d3:c1:
                    2a:f3:66:91:67:67:10:6f:40:4c:ea:d1:c5:ba:3f:
                    7e:f6:16:e1:2b:ee:52:74:8f:60:c0:e8:e6:90:05:
                    84:6f:4e:19:13:a1:40:c8:6c:d6:03:6c:b0:ed:09:
                    d2:ae:7e:14:4c:93:a3:51:92:07:9b:cd:4f:c9:d3:
                    7a:a1:94:6e:93:b5:5e:e2:af:12:2c:ae:8b:53:3e:
                    22:51:aa:3a:65:6a:37:61:99:bd:ae:a7:c3:1f:79:
                    fc:83:27:e3:2f:6a:57:f4:62:32:49:9e:4a:92:e4:
                    22:1e:87:b2:22:2c:e8:00:c0:0d:4c:ad:f5:fe:89:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:DD:4B:8E:AA:8C:63:86:1E:F5:31:28:12:B1:F6:16:64:64:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01be9cb0-4496-3ad8-a224-f89ef3023ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.114.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:de:78:bb:43:82:a1:e2:c8:af:c4:c1:73:a3:fa:d4:65:
         ee:b9:b4:28:3e:0f:98:47:fe:02:ee:19:6b:7a:66:55:e1:97:
         2a:7d:14:a4:f1:51:1d:de:b8:12:ed:9f:22:f0:72:8f:21:7d:
         09:e1:3d:1f:51:33:c1:fc:dd:d7:95:0b:8e:03:c5:2c:b7:c8:
         ce:73:0c:ee:78:30:8f:22:93:dd:cf:49:98:53:9c:c3:4a:d6:
         27:7a:2d:50:7e:fa:0c:7d:51:68:33:d3:27:56:68:73:7e:e9:
         a6:7c:ca:d9:5d:60:a4:a5:26:3a:8d:c0:2a:b5:2c:58:40:38:
         37:ad:44:5b:b4:dc:fc:08:ba:d4:a6:2b:f9:b8:1a:38:d2:f6:
         f3:f7:72:b0:66:9a:0f:82:0e:ab:6d:08:af:1a:c1:f9:80:de:
         7e:b1:e8:fc:3c:74:84:8c:e4:83:2c:ec:58:92:f0:4e:eb:d1:
         15:f2:c7:76:82:3b:51:b8:93:33:27:3d:3d:3a:8c:30:a0:0c:
         e2:f2:70:9a:6f:6f:f2:c3:04:a5:69:32:62:03:e6:3f:89:7b:
         f8:f3:b7:73:11:34:b6:b2:b9:8b:fe:59:d5:aa:3e:1c:c7:47:
         64:dd:b9:c7:57:6b:56:8a:a7:8e:46:b7:28:ce:37:da:bd:23:
         ea:8f:3c:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn2is2UgwJOBY2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk
YjZlZDU5ODgtN2YyMy00MzE4LWIzMWYtY2U2NmQ4YmJjMjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhktJpJxtM9F5fnL+FlkjLLT+71zzKAaQUpj1
E1ifUYyapCd1CCU/Bqn3R/63zd8jZfqD/rm4g9UtxBjqwuF+sarfYwXAVoXR7hdH
azQaZDNVP9J/eAQjHSB7C2ijKHEMAX6oCo8mcHKEx3w/Ft2PaDlZSUmkdk1Sfl1k
0E0fW3Wi21UY08Eq82aRZ2cQb0BM6tHFuj9+9hbhK+5SdI9gwOjmkAWEb04ZE6FA
yGzWA2yw7QnSrn4UTJOjUZIHm81PydN6oZRuk7Ve4q8SLK6LUz4iUao6ZWo3YZm9
rqfDH3n8gyfjL2pX9GIySZ5KkuQiHoeyIizoAMANTK31/on6hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPY23UuOqoxjhh71MSgSsfYWZGRvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDFiZTljYjAtNDQ5Ni0z
YWQ4LWEyMjQtZjg5ZWYzMDIzYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYHLWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTG3ni7Q4Kh4sivxMFzo/rUZe65tCg+D5hH/gLuGWt6ZlXhlyp9FKTx
UR3euBLtnyLwco8hfQnhPR9RM8H83deVC44DxSy3yM5zDO54MI8ik93PSZhTnMNK
1id6LVB++gx9UWgz0ydWaHN+6aZ8ytldYKSlJjqNwCq1LFhAODetRFu03PwIutSm
K/m4GjjS9vP3crBmmg+CDqttCK8awfmA3n6x6Pw8dISM5IMs7FiS8E7r0RXyx3aC
O1G4kzMnPT06jDCgDOLycJpvb/LDBKVpMmID5j+Je/jzt3MRNLayuYv+WdWqPhzH
R2TducdXa1aKp45GtyjON9q9I+qPPNs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:02:56 2024 by rpki-client on console-fra.rpki-client.org