Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02080763-c4c6-38fe-9474-41e7d9f11c65.roa
File:                     02080763-c4c6-38fe-9474-41e7d9f11c65.roa (raw, json)
Hash identifier:          NRHgUPkTE5OJlJ5Lrjp81qU4UpGPmoqTFIs9W02yHUM=
Subject key identifier:   5D:C2:2C:C8:D4:31:B6:10:7D:4E:B6:0C:B3:70:1A:89:6F:CD:83:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7A201E851B6176BD7D780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02080763-c4c6-38fe-9474-41e7d9f11c65.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        96.110.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:a2:01:e8:51:b6:17:6b:d7:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=fc15f2c5-7938-4362-954c-897bd6d71537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:6d:01:aa:e3:12:45:37:7c:1f:b7:83:96:
                    01:fb:56:08:f4:94:c1:03:60:03:57:7d:a4:26:60:
                    e8:e2:e5:38:af:dc:2d:03:85:71:ef:ad:1c:65:d7:
                    02:e2:50:e6:54:5e:83:ac:6f:42:cb:73:41:82:6c:
                    31:f7:e2:1f:55:ce:50:35:84:13:99:51:1b:0d:5e:
                    07:7d:08:fd:69:14:3b:72:5a:7f:7e:3e:71:18:ee:
                    e3:8e:d5:99:f3:44:0e:f5:fd:93:22:0b:1b:6f:32:
                    6e:b5:65:ed:c5:be:15:85:09:36:74:06:9c:86:e1:
                    d9:6f:e7:7a:77:eb:50:19:77:4d:d5:d6:ed:f0:01:
                    2b:29:45:13:38:b8:0b:03:56:84:a6:8c:19:1b:a1:
                    08:63:33:99:a7:ad:cc:86:e4:cf:31:85:fe:bb:36:
                    01:f3:e9:c6:ae:7e:37:22:2b:5f:25:43:56:32:79:
                    c5:53:e6:48:ec:58:e3:7d:f3:b5:b8:63:b9:6b:63:
                    52:5a:e1:82:ad:13:84:fa:31:47:e0:77:5f:c7:ca:
                    a4:7d:2b:ab:c6:80:a0:32:89:e6:e7:72:dc:85:73:
                    29:32:50:9a:64:77:e5:d8:00:b0:80:e3:aa:7a:85:
                    61:39:4f:f6:45:33:80:50:5d:9c:8d:fd:46:2f:cf:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C2:2C:C8:D4:31:B6:10:7D:4E:B6:0C:B3:70:1A:89:6F:CD:83:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02080763-c4c6-38fe-9474-41e7d9f11c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3b:6c:d1:e2:8a:69:e3:f1:69:17:e3:ef:67:67:c3:c4:e2:
         77:50:e8:5b:92:9d:6f:4f:a6:f4:d5:1a:93:ec:03:06:a1:97:
         2f:c7:b8:98:ba:57:76:fd:a0:72:fa:71:38:a7:e8:bd:d1:c6:
         1d:2a:63:0c:64:92:e2:23:4d:09:6a:c3:45:2a:35:1c:2c:2e:
         13:46:07:b0:e3:95:fd:32:e7:66:71:74:76:6e:7b:15:0e:92:
         f1:70:d9:c2:b4:75:55:c1:90:62:6f:73:54:06:87:8f:13:1a:
         42:d2:72:d9:59:fa:0a:95:e9:cd:12:98:c7:c3:ef:a7:45:59:
         cb:02:99:00:ca:09:5e:35:34:95:df:fe:ab:48:13:74:55:ee:
         7e:af:a0:95:c7:0b:05:4e:0a:04:38:b7:e4:51:63:e7:96:5a:
         81:3a:a6:23:0d:b9:34:f4:0b:04:5c:39:8a:5d:d9:0a:f4:e0:
         e8:e8:14:5c:89:d7:a0:6a:40:bd:4e:7c:65:f0:c5:5d:c3:fc:
         52:fc:9c:eb:c6:69:4d:6f:30:a4:87:24:87:be:69:0b:51:c7:
         dd:b4:24:9e:b4:78:96:14:58:4e:a8:ea:60:84:ec:ce:54:83:
         4c:2c:92:fc:ca:8f:7c:23:45:93:34:e2:00:58:0c:8d:0a:aa:
         58:aa:f4:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+96IB6FG2F2vX14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZmMxNWYyYzUtNzkzOC00MzYyLTk1NGMtODk3YmQ2ZDcxNTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YBtAarjEkU3fB+3g5YB+1YI9JTBA2ADV32k
JmDo4uU4r9wtA4Vx760cZdcC4lDmVF6DrG9Cy3NBgmwx9+IfVc5QNYQTmVEbDV4H
fQj9aRQ7clp/fj5xGO7jjtWZ80QO9f2TIgsbbzJutWXtxb4VhQk2dAachuHZb+d6
d+tQGXdN1dbt8AErKUUTOLgLA1aEpowZG6EIYzOZp63MhuTPMYX+uzYB8+nGrn43
IitfJUNWMnnFU+ZI7FjjffO1uGO5a2NSWuGCrROE+jFH4Hdfx8qkfSurxoCgMonm
53LchXMpMlCaZHfl2ACwgOOqeoVhOU/2RTOAUF2cjf1GL8/0nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3CLMjUMbYQfU62DLNwGolvzYPHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDIwODA3NjMtYzRjNi0z
OGZlLTk0NzQtNDFlN2Q5ZjExYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYG4UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGI7bNHiimnj8WkX4+9nZ8PE4ndQ6FuSnW9PpvTVGpPsAwahly/HuJi6
V3b9oHL6cTin6L3Rxh0qYwxkkuIjTQlqw0UqNRwsLhNGB7Djlf0y52ZxdHZuexUO
kvFw2cK0dVXBkGJvc1QGh48TGkLSctlZ+gqV6c0SmMfD76dFWcsCmQDKCV41NJXf
/qtIE3RV7n6voJXHCwVOCgQ4t+RRY+eWWoE6piMNuTT0CwRcOYpd2Qr04OjoFFyJ
16BqQL1OfGXwxV3D/FL8nOvGaU1vMKSHJIe+aQtRx920JJ60eJYUWE6o6mCE7M5U
g0wskvzKj3wjRZM04gBYDI0Kqliq9Eo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:17 2024 by rpki-client on console-ams.rpki-client.org