Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4fc7f9-ac5d-34dd-9b49-b2689a52febd.roa
File:                     2e4fc7f9-ac5d-34dd-9b49-b2689a52febd.roa (raw, json)
Hash identifier:          UnL+mdffsAQdVL/GFX+ic4KMPIAQO75U8Q+1hjzu8CI=
Subject key identifier:   6D:43:40:88:D6:1F:DC:71:48:BF:EC:0A:9D:EA:31:DB:71:2C:7D:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB36377D145A5E33D2A580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4fc7f9-ac5d-34dd-9b49-b2689a52febd.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33661
IP address blocks:        96.124.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:36:37:7d:14:5a:5e:33:d2:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=6dd2d1eb-b15f-4ff4-9eaa-2d47f5776646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:6a:60:c7:71:a8:fe:a4:3f:6c:72:54:4e:
                    ed:87:33:ef:6a:a9:c8:12:60:db:2c:04:1e:38:91:
                    9f:fc:6d:42:aa:af:2e:21:ec:15:50:bb:5e:e6:f5:
                    b1:05:a1:dd:67:94:73:f0:3d:6f:6f:ec:7c:f2:72:
                    da:e8:c2:98:47:b9:09:65:cf:6d:80:0c:f9:06:90:
                    c3:f1:58:5c:c6:ed:b2:6b:c1:a9:07:70:5d:92:a6:
                    11:c5:5b:6a:7a:4f:c4:61:d6:04:58:80:31:f9:f6:
                    37:6b:9c:a9:24:2e:10:77:ce:90:f8:66:b9:21:0a:
                    37:f8:79:b9:46:61:4e:8a:c1:25:03:b5:38:11:29:
                    c0:a3:e6:e3:39:e8:4c:b4:65:fe:e0:e3:d4:ec:3e:
                    1e:94:9f:4a:55:55:dd:95:d2:5f:31:61:11:aa:fb:
                    de:90:23:77:94:87:30:8b:c2:1f:0e:cd:a0:0a:cb:
                    bf:23:73:9e:a2:04:84:f8:d6:9e:37:93:2e:e7:e5:
                    ea:c3:e2:58:10:96:05:bb:17:c6:7a:c7:a2:6f:3a:
                    0d:54:9b:f4:5b:fc:ac:cf:cd:c9:b8:9b:6c:ed:5d:
                    c3:20:51:9b:6f:97:3a:bb:cf:2e:e6:6b:30:8d:da:
                    54:df:ca:df:2e:6d:10:47:b3:f9:e3:26:fb:a4:61:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:43:40:88:D6:1F:DC:71:48:BF:EC:0A:9D:EA:31:DB:71:2C:7D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4fc7f9-ac5d-34dd-9b49-b2689a52febd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.124.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:68:64:9b:72:44:09:2d:28:aa:ac:a9:3b:a4:36:3d:06:54:
         3a:84:bf:e0:7c:59:c6:ad:8a:e9:7e:d1:9c:cd:8c:35:ca:2f:
         b2:aa:d2:68:6d:6b:5c:db:3f:6c:98:f9:a6:14:e8:8a:5e:29:
         f7:c8:ad:31:ce:06:0d:c7:53:c3:93:e5:8e:08:85:57:8b:40:
         75:db:15:35:8e:e7:17:16:6f:f3:d9:11:d0:bd:eb:ca:94:73:
         cf:16:32:71:21:58:44:44:e8:62:30:da:84:c3:22:8d:e3:43:
         2c:d5:1f:1d:d3:cc:e6:9d:2d:d2:16:2c:05:ab:62:c3:09:91:
         26:a9:36:33:cd:9c:24:30:68:a8:db:e2:8d:74:cb:b8:6e:3e:
         93:24:b2:af:dd:a6:48:39:ef:7e:1d:cb:2d:17:a9:37:bc:0a:
         33:be:a5:15:70:16:96:d7:db:6e:2b:0d:45:ce:f1:0e:c0:ed:
         f9:a9:c6:93:1e:e7:ce:e7:18:ce:1c:29:c8:4d:a2:97:d6:60:
         0b:9d:79:c9:63:ae:09:cb:46:dc:83:af:8f:62:be:17:4b:2a:
         b1:4c:cf:ad:ac:0c:66:63:25:d3:8d:b3:5d:6a:4e:a8:99:ed:
         ef:f6:c8:b9:63:84:96:1c:b1:c9:6f:f9:93:9e:30:5e:87:ff:
         0d:49:84:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqzY3fRRaXjPSpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NmRkMmQxZWItYjE1Zi00ZmY0LTllYWEtMmQ0N2Y1Nzc2NjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlxqYMdxqP6kP2xyVE7thzPvaqnIEmDbLAQe
OJGf/G1Cqq8uIewVULte5vWxBaHdZ5Rz8D1vb+x88nLa6MKYR7kJZc9tgAz5BpDD
8Vhcxu2ya8GpB3BdkqYRxVtqek/EYdYEWIAx+fY3a5ypJC4Qd86Q+Ga5IQo3+Hm5
RmFOisElA7U4ESnAo+bjOehMtGX+4OPU7D4elJ9KVVXdldJfMWERqvvekCN3lIcw
i8IfDs2gCsu/I3OeogSE+NaeN5Mu5+Xqw+JYEJYFuxfGeseibzoNVJv0W/ysz83J
uJts7V3DIFGbb5c6u88u5mswjdpU38rfLm0QR7P54yb7pGGCkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1DQIjWH9xxSL/sCp3qMdtxLH0nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU0ZmM3ZjktYWM1ZC0z
NGRkLTliNDktYjI2ODlhNTJmZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYHyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJloZJtyRAktKKqsqTukNj0GVDqEv+B8Wcatiul+0ZzNjDXKL7Kq0mht
a1zbP2yY+aYU6IpeKffIrTHOBg3HU8OT5Y4IhVeLQHXbFTWO5xcWb/PZEdC968qU
c88WMnEhWERE6GIw2oTDIo3jQyzVHx3TzOadLdIWLAWrYsMJkSapNjPNnCQwaKjb
4o10y7huPpMksq/dpkg5734dyy0XqTe8CjO+pRVwFpbX224rDUXO8Q7A7fmpxpMe
587nGM4cKchNopfWYAudecljrgnLRtyDr49ivhdLKrFMz62sDGZjJdONs11qTqiZ
7e/2yLljhJYcsclv+ZOeMF6H/w1JhDo=
-----END CERTIFICATE-----
Generated at Sat May 4 14:49:02 2024 by rpki-client on console-ams.rpki-client.org