Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb0498e-5d44-3cb3-a716-c141fdea0e9c.roa
File:                     5fb0498e-5d44-3cb3-a716-c141fdea0e9c.roa (raw, json)
Hash identifier:          /d3IAEwcboDppC0qndogP9o5OyF5O9QB8EVKIwC3Tq0=
Subject key identifier:   1A:88:67:3A:14:DE:C3:48:26:5D:A8:A6:72:1E:66:62:9D:F4:E5:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845304D4930B55E0FA3F6EB2940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb0498e-5d44-3cb3-a716-c141fdea0e9c.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     33661
IP address blocks:        96.85.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:49:30:b5:5e:0f:a3:f6:eb:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=8c68eb5f-3dc5-4b80-bc2d-a4b114c67d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:9d:85:49:bb:f0:da:44:cd:18:4a:b4:8a:
                    e0:3a:ce:5c:d1:b0:12:31:15:5d:ce:ec:a7:66:e6:
                    e0:15:d6:a0:01:ed:f7:77:d1:eb:9c:71:09:a0:4d:
                    ee:7c:c6:5a:07:33:de:bd:7c:07:b4:2f:ca:73:68:
                    f7:52:2c:37:6f:2e:51:20:b7:fe:03:9d:ad:e3:62:
                    49:30:ef:97:fb:2b:ad:99:d8:64:5a:f8:1b:cc:3d:
                    d8:98:d7:36:41:42:c9:d3:7b:e3:05:16:a9:37:4c:
                    c9:6a:79:9d:11:52:2c:c7:d8:2d:5f:42:44:f6:81:
                    98:84:ac:cb:62:61:e2:2b:a5:bc:61:14:ca:9a:a3:
                    0a:11:c7:42:1b:e9:8b:9e:bf:e2:89:61:3c:85:f5:
                    9f:6c:f8:97:1f:d7:ca:4a:78:4a:5b:ef:6e:07:c4:
                    77:5a:50:b1:4e:52:bd:27:65:61:aa:07:47:ab:2a:
                    e1:14:b4:a4:e9:d1:ee:bb:cc:ba:de:f9:c1:8c:dc:
                    f9:1c:c0:8c:08:bb:0a:ae:8f:7b:30:df:3b:e2:af:
                    3e:24:10:17:8e:52:0a:7c:a9:e0:16:30:9a:47:b4:
                    27:2a:bb:51:1e:b2:58:87:56:01:e2:41:a9:86:01:
                    2e:14:b5:3c:fc:0a:87:be:7e:05:63:5c:25:37:20:
                    b0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:88:67:3A:14:DE:C3:48:26:5D:A8:A6:72:1E:66:62:9D:F4:E5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5fb0498e-5d44-3cb3-a716-c141fdea0e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.85.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:dc:fe:15:20:ef:19:e5:75:dd:fe:c5:08:e7:d4:5e:91:83:
         e4:4e:cf:be:6a:98:14:c5:c6:10:4f:54:45:9b:1e:0b:df:96:
         7a:82:2c:f3:f8:7f:e3:bc:80:c2:e5:44:4a:8b:0e:15:1d:b8:
         c1:4d:df:a7:c8:c1:2a:56:f3:e7:23:ac:02:75:96:eb:b8:8e:
         b8:30:4e:de:59:02:1c:2c:b6:c6:cc:33:ce:36:a1:0e:21:0b:
         e3:67:ed:a5:86:b3:84:33:f6:df:f7:35:c6:31:d1:cd:53:78:
         9d:28:e8:59:c8:6b:1a:e3:3a:33:78:69:7a:d8:21:ec:6e:11:
         19:2b:81:b0:b4:b1:4c:f8:e4:e5:0d:3a:af:20:ea:11:05:14:
         30:80:7f:e1:ba:26:a5:aa:a7:5c:fc:f3:30:81:6e:64:be:d1:
         52:54:21:47:94:e5:3a:7d:72:14:07:ff:3e:24:a3:62:bc:98:
         6c:e9:ba:9a:66:c6:9d:5f:9d:c5:df:af:3e:ce:1e:51:b7:17:
         57:bc:5f:ad:6f:3b:f7:dc:2b:e9:19:6d:d4:55:da:96:fe:3c:
         b6:6c:6c:5a:88:1a:3e:ba:aa:5e:b6:24:ef:da:8a:8b:30:44:
         17:0c:b4:d1:3a:ab:ab:d0:55:0f:e0:3f:e0:6c:f7:42:13:88:
         82:86:ce:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUwTUkwtV4Po/brKUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk
OGM2OGViNWYtM2RjNS00YjgwLWJjMmQtYTRiMTE0YzY3ZDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjCdhUm78NpEzRhKtIrgOs5c0bASMRVdzuyn
ZubgFdagAe33d9HrnHEJoE3ufMZaBzPevXwHtC/Kc2j3Uiw3by5RILf+A52t42JJ
MO+X+yutmdhkWvgbzD3YmNc2QULJ03vjBRapN0zJanmdEVIsx9gtX0JE9oGYhKzL
YmHiK6W8YRTKmqMKEcdCG+mLnr/iiWE8hfWfbPiXH9fKSnhKW+9uB8R3WlCxTlK9
J2VhqgdHqyrhFLSk6dHuu8y63vnBjNz5HMCMCLsKro97MN874q8+JBAXjlIKfKng
FjCaR7QnKrtRHrJYh1YB4kGphgEuFLU8/AqHvn4FY1wlNyCwBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqIZzoU3sNIJl2opnIeZmKd9OVZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWZiMDQ5OGUtNWQ0NC0z
Y2IzLWE3MTYtYzE0MWZkZWEwZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYFVQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL/c/hUg7xnldd3+xQjn1F6Rg+ROz75qmBTFxhBPVEWbHgvflnqCLPP4
f+O8gMLlREqLDhUduMFN36fIwSpW8+cjrAJ1luu4jrgwTt5ZAhwstsbMM842oQ4h
C+Nn7aWGs4Qz9t/3NcYx0c1TeJ0o6FnIaxrjOjN4aXrYIexuERkrgbC0sUz45OUN
Oq8g6hEFFDCAf+G6JqWqp1z88zCBbmS+0VJUIUeU5Tp9chQH/z4ko2K8mGzpuppm
xp1fncXfrz7OHlG3F1e8X61vO/fcK+kZbdRV2pb+PLZsbFqIGj66ql62JO/aiosw
RBcMtNE6q6vQVQ/gP+Bs90ITiIKGzm4=
-----END CERTIFICATE-----
Generated at Sat May 4 14:49:37 2024 by rpki-client on console-fra.rpki-client.org