Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44161d2b-71f2-3444-b368-f8ff032c70fc.roa
File:                     44161d2b-71f2-3444-b368-f8ff032c70fc.roa (raw, json)
Hash identifier:          xEhlpPt3Kq03k8/u+HTmYGHExTYpSEggrd8Lrhtq/Cs=
Subject key identifier:   45:35:35:A8:8A:07:5E:78:2A:99:D2:64:F7:A5:40:EE:5B:71:9E:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848424B0B2B3AB19453AA28E1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44161d2b-71f2-3444-b368-f8ff032c70fc.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     33656
IP address blocks:        96.70.16.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:0b:2b:3a:b1:94:53:aa:28:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=8a217d0b-3ec0-4c45-8474-5b31892eaddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:20:5d:19:9a:25:21:6a:0b:03:ea:ec:22:
                    29:ea:70:e9:50:b1:c5:b5:91:08:ee:ea:90:ba:b3:
                    65:9e:72:60:63:c4:fd:ab:43:de:6e:56:92:8b:68:
                    35:03:63:c8:c2:d2:1e:35:a4:35:ad:c9:09:96:82:
                    72:09:6f:e0:15:2b:f0:80:fe:5e:6f:f8:c1:30:25:
                    a2:23:95:54:3c:c9:78:51:38:b1:d3:58:6e:b4:e4:
                    77:89:5a:63:d5:63:4f:2b:64:2f:0d:03:d0:7d:e1:
                    56:a6:03:05:9a:9a:5f:4d:68:87:8a:2c:25:5d:54:
                    5c:11:c2:1c:f9:b3:e8:f3:ce:29:1e:e0:60:3c:85:
                    ae:2e:d4:11:db:e5:61:99:91:7a:a5:cf:e3:e9:42:
                    40:7b:cd:9f:ef:ea:0e:2d:6c:d2:64:86:b0:fc:92:
                    23:f6:b8:51:9c:df:53:51:9a:fa:79:e9:bf:9a:a2:
                    14:dd:84:98:48:96:6b:a8:0b:43:12:e4:29:b6:27:
                    26:84:9f:ce:a3:75:32:20:67:f4:eb:db:ec:02:b3:
                    15:b8:eb:db:40:07:63:4d:c3:fb:6f:d5:e0:41:9f:
                    9f:31:22:d0:91:cb:cc:eb:4b:f4:1f:76:70:e5:a7:
                    d1:7a:c5:b3:69:01:a4:c0:70:ae:05:d9:fd:b3:58:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:35:35:A8:8A:07:5E:78:2A:99:D2:64:F7:A5:40:EE:5B:71:9E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44161d2b-71f2-3444-b368-f8ff032c70fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.70.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:02:c0:07:5e:8c:74:13:ec:9b:cf:cb:95:da:03:5b:b5:04:
         bb:51:76:a9:3b:d2:6f:a4:e4:dc:cd:26:fd:4e:d1:bb:cc:69:
         cd:fc:2a:b5:ee:23:37:81:e1:ce:ed:84:ed:6e:ef:ae:36:ea:
         5a:ca:dd:73:0d:38:a7:a4:9a:21:67:53:0f:c6:3e:e5:92:ef:
         a2:37:7f:84:71:23:53:59:9b:bb:ce:75:81:e8:d0:23:2e:46:
         16:3c:73:a1:93:c9:9c:d2:ea:77:d7:c8:d4:e9:96:4f:a8:09:
         05:04:ea:40:4f:51:ec:63:7b:5a:a4:72:ae:ee:2b:ff:d0:52:
         d3:b4:67:85:9c:8d:7b:95:61:40:d3:fa:c9:06:a3:3e:ca:d2:
         4e:29:66:5d:c6:6f:7f:61:e5:7c:32:ad:2c:12:03:13:27:82:
         c5:be:ff:1e:63:dc:ed:c8:b9:69:f1:a4:f9:d1:74:0e:94:8c:
         1f:77:f9:98:23:f2:95:f5:21:0d:fc:98:ee:3d:5f:51:44:02:
         2c:e0:a5:24:f1:ba:7a:0c:90:ae:e5:0e:8a:0e:a8:ec:81:6f:
         eb:17:ba:22:50:ba:10:07:c4:30:c7:f4:f4:5a:d7:63:31:45:
         36:3c:bf:68:34:0a:e9:fe:9f:c6:19:c1:ba:6e:f3:4c:90:18:
         e5:b0:4c:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSwsrOrGUU6oo4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
OGEyMTdkMGItM2VjMC00YzQ1LTg0NzQtNWIzMTg5MmVhZGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP8gXRmaJSFqCwPq7CIp6nDpULHFtZEI7uqQ
urNlnnJgY8T9q0PeblaSi2g1A2PIwtIeNaQ1rckJloJyCW/gFSvwgP5eb/jBMCWi
I5VUPMl4UTix01hutOR3iVpj1WNPK2QvDQPQfeFWpgMFmppfTWiHiiwlXVRcEcIc
+bPo884pHuBgPIWuLtQR2+VhmZF6pc/j6UJAe82f7+oOLWzSZIaw/JIj9rhRnN9T
UZr6eem/mqIU3YSYSJZrqAtDEuQpticmhJ/Oo3UyIGf069vsArMVuOvbQAdjTcP7
b9XgQZ+fMSLQkcvM60v0H3Zw5afResWzaQGkwHCuBdn9s1ik+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEU1NaiKB154KpnSZPelQO5bcZ5iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDQxNjFkMmItNzFmMi0z
NDQ0LWIzNjgtZjhmZjAzMmM3MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYEYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM8CwAdejHQT7JvPy5XaA1u1BLtRdqk70m+k5NzNJv1O0bvMac38KrXu
IzeB4c7thO1u76426lrK3XMNOKekmiFnUw/GPuWS76I3f4RxI1NZm7vOdYHo0CMu
RhY8c6GTyZzS6nfXyNTplk+oCQUE6kBPUexje1qkcq7uK//QUtO0Z4WcjXuVYUDT
+skGoz7K0k4pZl3Gb39h5XwyrSwSAxMngsW+/x5j3O3IuWnxpPnRdA6UjB93+Zgj
8pX1IQ38mO49X1FEAizgpSTxunoMkK7lDooOqOyBb+sXuiJQuhAHxDDH9PRa12Mx
RTY8v2g0Cun+n8YZwbpu80yQGOWwTOE=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:08:26 2024 by rpki-client on console-fra.rpki-client.org