Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bdb8031-5d6e-3b95-8178-a8d5d84c9285.roa
File:                     6bdb8031-5d6e-3b95-8178-a8d5d84c9285.roa (raw, json)
Hash identifier:          qXb4rNCgzRJhWLW+RCsnNQeqOMTkk673iYANofrEbkk=
Subject key identifier:   CC:3F:43:EE:65:39:08:83:A3:DD:EB:65:25:C8:35:CA:0B:F9:1F:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB91E1F6499CAFDC945E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bdb8031-5d6e-3b95-8178-a8d5d84c9285.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33651
IP address blocks:        96.110.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:91:e1:f6:49:9c:af:dc:94:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=da073c65-b82e-4e63-9965-d20711570157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:73:75:46:d5:b9:e8:d2:4b:6d:1f:e8:80:
                    90:a2:a1:be:df:bb:0f:5c:c5:fe:82:38:de:59:d0:
                    1e:f7:d5:0b:30:a0:4a:5f:98:06:6f:b8:f1:e8:fe:
                    13:d1:a9:c8:81:9b:bb:24:c8:74:14:26:46:7d:20:
                    d0:14:48:f9:d8:32:46:88:03:7b:a1:75:5c:83:64:
                    63:98:27:41:36:f6:90:ac:8c:bc:38:fb:0f:d5:c9:
                    8d:0b:7a:e9:0b:a8:51:e1:1f:45:bb:d7:f0:68:69:
                    03:d4:e9:be:18:7e:c5:2e:a2:8b:03:47:24:55:18:
                    e5:dd:99:41:2c:e9:8e:76:84:59:b5:ee:dc:72:90:
                    48:50:a3:03:60:02:a9:bd:90:08:37:f3:e7:93:2c:
                    f8:66:aa:75:12:5c:73:7e:12:68:8f:93:50:61:c6:
                    37:59:06:6f:d7:7d:9c:61:fa:b6:c4:6d:bb:81:b4:
                    50:94:d5:1c:df:0f:f0:36:bb:f6:f4:b5:69:1e:b3:
                    5b:f8:67:10:2e:ac:78:7f:3b:b6:4c:44:81:79:1c:
                    7e:28:2a:65:7c:46:f1:e8:8c:56:4f:16:35:e3:99:
                    96:12:a6:55:36:69:b4:56:81:ba:d0:11:37:5e:b2:
                    2c:06:54:c6:77:ab:ee:05:b3:f4:5e:1c:bb:ac:5f:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3F:43:EE:65:39:08:83:A3:DD:EB:65:25:C8:35:CA:0B:F9:1F:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bdb8031-5d6e-3b95-8178-a8d5d84c9285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.110.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:91:97:9a:f8:d3:5a:0f:cc:39:53:d8:47:b4:d2:ef:c0:bf:
         14:c6:30:e4:03:13:ff:4f:96:c7:91:f8:a4:bb:9c:bc:c1:c4:
         00:2e:16:11:65:6e:bb:df:ef:a9:5d:48:eb:6f:99:32:0c:9e:
         71:9a:1e:ec:a6:9a:ed:39:00:5c:95:af:db:63:55:f0:7a:16:
         5a:2c:69:15:d6:9a:6e:d2:8f:df:10:3d:7e:23:a1:1b:2a:e0:
         9a:10:b3:ab:c9:7d:db:cf:f5:e9:77:55:0e:53:b6:71:00:71:
         fc:6f:05:84:44:4a:b9:61:35:10:47:32:2d:73:34:33:f8:43:
         16:c7:14:ef:97:5c:20:2c:e3:25:f9:0f:0c:a9:b0:e4:48:a9:
         b1:a3:cc:18:37:b9:6c:96:13:6a:06:7e:fc:c0:5c:b9:8d:e2:
         2e:1d:b8:cf:5a:2a:d8:d5:3e:81:4c:24:af:72:9f:b3:cf:c1:
         aa:28:33:bf:70:06:9b:f1:c7:a8:81:4b:89:a6:d5:af:7c:84:
         5c:ea:04:95:11:c5:b2:b4:b7:b5:2b:d6:a7:c2:a5:8e:38:ac:
         c7:57:05:01:56:0a:62:66:a4:b2:72:b8:04:97:2f:23:0b:6e:
         41:60:bc:b0:23:f3:c8:37:eb:36:0c:97:35:34:f1:ec:ca:ba:
         79:bf:d5:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfq5Hh9kmcr9yUXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
ZGEwNzNjNjUtYjgyZS00ZTYzLTk5NjUtZDIwNzExNTcwMTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyttzdUbVuejSS20f6ICQoqG+37sPXMX+gjje
WdAe99ULMKBKX5gGb7jx6P4T0anIgZu7JMh0FCZGfSDQFEj52DJGiAN7oXVcg2Rj
mCdBNvaQrIy8OPsP1cmNC3rpC6hR4R9Fu9fwaGkD1Om+GH7FLqKLA0ckVRjl3ZlB
LOmOdoRZte7ccpBIUKMDYAKpvZAIN/Pnkyz4Zqp1ElxzfhJoj5NQYcY3WQZv132c
Yfq2xG27gbRQlNUc3w/wNrv29LVpHrNb+GcQLqx4fzu2TESBeRx+KCplfEbx6IxW
TxY145mWEqZVNmm0VoG60BE3XrIsBlTGd6vuBbP0Xhy7rF+XwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMw/Q+5lOQiDo93rZSXINcoL+R/gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmJkYjgwMzEtNWQ2ZS0z
Yjk1LTgxNzgtYThkNWQ4NGM5Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYG5mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMuRl5r401oPzDlT2Ee00u/AvxTGMOQDE/9PlseR+KS7nLzBxAAuFhFl
brvf76ldSOtvmTIMnnGaHuymmu05AFyVr9tjVfB6FlosaRXWmm7Sj98QPX4joRsq
4JoQs6vJfdvP9el3VQ5TtnEAcfxvBYRESrlhNRBHMi1zNDP4QxbHFO+XXCAs4yX5
DwypsORIqbGjzBg3uWyWE2oGfvzAXLmN4i4duM9aKtjVPoFMJK9yn7PPwaooM79w
Bpvxx6iBS4mm1a98hFzqBJURxbK0t7Ur1qfCpY44rMdXBQFWCmJmpLJyuASXLyML
bkFgvLAj88g36zYMlzU08ezKunm/1Qw=
-----END CERTIFICATE-----
Generated at Sun May 5 01:18:19 2024 by rpki-client on console-ams.rpki-client.org