Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b9d6b1-b3f2-3684-9b0e-fff5e48b91a3.roa
File:                     20b9d6b1-b3f2-3684-9b0e-fff5e48b91a3.roa (raw, json)
Hash identifier:          Wu6WZDjvplMMG78DYHujyrU4TDoGWo2iXiuQjI+NFi0=
Subject key identifier:   38:17:C6:05:80:4D:6F:CE:A0:59:64:CC:AA:20:C5:79:B3:EE:AC:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FD319D1868910F787E500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b9d6b1-b3f2-3684-9b0e-fff5e48b91a3.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     13367
IP address blocks:        71.193.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:d3:19:d1:86:89:10:f7:87:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=a06f4123-0e63-47bd-9262-6d9d4e150f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:5c:b3:bd:97:b4:27:cb:13:68:bc:a6:c0:
                    0d:ab:12:13:a0:4a:3c:fc:68:be:9c:33:6a:c9:9d:
                    2c:1d:41:b6:a1:8b:2a:6f:fb:30:0f:1b:ee:19:5e:
                    77:8c:cf:03:6c:e7:02:15:29:64:51:f5:86:81:e2:
                    c2:b2:ae:72:2f:80:be:7d:06:89:6a:35:81:91:0e:
                    2b:75:95:5c:28:6c:c5:13:92:b6:3b:eb:23:6b:96:
                    f3:25:c7:e9:15:a6:16:08:da:a5:c9:1b:65:2a:1d:
                    af:f8:4c:f2:8a:5a:8e:f7:0e:53:25:5b:4a:c9:8a:
                    7d:63:a5:5c:cf:ec:8b:04:d2:03:31:a4:2f:43:90:
                    8c:8c:e6:c3:14:93:41:2b:10:a4:3f:f3:a6:35:ff:
                    09:f1:f1:55:91:98:b6:46:e6:87:07:8f:0d:23:f6:
                    ba:bb:45:76:bf:25:8a:11:0c:3b:1a:bb:92:2b:2d:
                    f1:d6:02:60:a0:1d:32:66:1b:25:82:06:7d:76:ba:
                    8b:cc:0c:e6:97:26:77:9c:27:0f:09:11:7b:fc:33:
                    72:d8:14:0e:e0:b4:cb:c1:09:e8:cf:3e:f3:a8:9a:
                    80:2d:d8:29:5c:61:da:42:54:26:e4:dc:ac:b6:8a:
                    61:27:86:80:2a:0f:a8:7d:b8:e4:39:e3:8f:05:f9:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:C6:05:80:4D:6F:CE:A0:59:64:CC:AA:20:C5:79:B3:EE:AC:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b9d6b1-b3f2-3684-9b0e-fff5e48b91a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.193.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:11:ab:8b:44:ad:f2:11:d6:74:5e:e2:ee:d5:16:48:b1:04:
         4a:3a:43:85:84:05:4b:f7:61:6e:ba:e0:91:20:a4:4a:1f:90:
         c6:bd:d7:c5:32:e5:7b:13:0d:41:9d:3f:b9:80:1d:78:1a:58:
         b0:16:d3:6e:c4:f3:57:78:b2:39:d5:99:1e:3d:46:98:86:f0:
         5d:52:c2:60:e9:ec:b7:cf:f1:ac:3c:aa:62:76:e6:fd:3f:da:
         ee:e3:35:58:96:82:e5:3b:af:76:e9:09:1c:72:0f:1b:e0:7d:
         c7:2b:80:3b:e1:34:49:83:ba:0c:91:30:17:b5:3e:e6:64:a2:
         0c:97:97:cd:a7:e7:05:67:be:f4:bc:6e:0d:01:25:82:3e:d7:
         14:7b:29:d6:4c:35:54:a2:22:13:45:3a:58:59:84:c5:8c:18:
         01:23:b5:66:3f:8d:5e:5c:cc:fc:d8:de:e7:b4:ff:cb:ba:a8:
         39:ce:8a:dd:10:c9:23:ae:78:9b:66:03:83:fc:3a:e4:db:01:
         fe:24:85:35:5c:95:d3:d2:01:3b:9f:00:06:b0:37:4b:32:af:
         de:a6:7f:29:e0:89:25:50:a2:27:37:8b:de:c0:60:cf:4e:73:
         42:ad:6b:8c:65:6c:48:b1:cb:8e:89:78:eb:c8:59:c2:d2:29:
         c7:0b:02:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb9MZ0YaJEPeH5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
YTA2ZjQxMjMtMGU2My00N2JkLTkyNjItNmQ5ZDRlMTUwZjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDhcs72XtCfLE2i8psANqxIToEo8/Gi+nDNq
yZ0sHUG2oYsqb/swDxvuGV53jM8DbOcCFSlkUfWGgeLCsq5yL4C+fQaJajWBkQ4r
dZVcKGzFE5K2O+sja5bzJcfpFaYWCNqlyRtlKh2v+EzyilqO9w5TJVtKyYp9Y6Vc
z+yLBNIDMaQvQ5CMjObDFJNBKxCkP/OmNf8J8fFVkZi2RuaHB48NI/a6u0V2vyWK
EQw7GruSKy3x1gJgoB0yZhslggZ9drqLzAzmlyZ3nCcPCRF7/DNy2BQO4LTLwQno
zz7zqJqALdgpXGHaQlQm5NystophJ4aAKg+ofbjkOeOPBfnUSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgXxgWATW/OoFlkzKogxXmz7qxVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBiOWQ2YjEtYjNmMi0z
Njg0LTliMGUtZmZmNWU0OGI5MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8FMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGERq4tErfIR1nRe4u7VFkixBEo6Q4WEBUv3YW664JEgpEofkMa918Uy
5XsTDUGdP7mAHXgaWLAW027E81d4sjnVmR49RpiG8F1SwmDp7LfP8aw8qmJ25v0/
2u7jNViWguU7r3bpCRxyDxvgfccrgDvhNEmDugyRMBe1PuZkogyXl82n5wVnvvS8
bg0BJYI+1xR7KdZMNVSiIhNFOlhZhMWMGAEjtWY/jV5czPzY3ue0/8u6qDnOit0Q
ySOueJtmA4P8OuTbAf4khTVcldPSATufAAawN0syr96mfyngiSVQoic3i97AYM9O
c0Kta4xlbEixy46JeOvIWcLSKccLAt8=
-----END CERTIFICATE-----
Generated at Sun Dec 22 12:48:18 2024 by rpki-client on console-ams.rpki-client.org