Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2c60c5-8ec2-3669-998e-80f086d1c276.roa
File:                     6f2c60c5-8ec2-3669-998e-80f086d1c276.roa (raw, json)
Hash identifier:          23Md7jYsXVaZCxxs+16FLUY5pPOcZa5LOUfCri5Q+A4=
Subject key identifier:   A7:E8:39:67:F7:97:D5:9B:3E:58:AC:47:00:DD:EC:F1:BF:0D:0B:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB69FFBCB528C808BD6180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2c60c5-8ec2-3669-998e-80f086d1c276.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        96.108.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:69:ff:bc:b5:28:c8:08:bd:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=508816cd-76ec-4717-9ce3-ef3f6ec3f9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:ae:bf:9c:66:f5:a7:79:58:4c:f1:4e:ed:
                    f9:c2:34:b3:37:e0:b0:cf:4b:dd:82:f7:24:c9:9d:
                    3f:2f:30:ca:fa:fe:ef:1c:5d:a4:84:90:28:d1:aa:
                    cd:d3:55:01:25:95:68:5a:f2:3d:74:36:3f:f7:ef:
                    1f:58:7c:88:f9:ca:17:51:36:b8:c3:eb:1a:88:29:
                    62:04:56:b1:3a:4d:16:9b:1f:ac:90:e4:3c:b1:b4:
                    3e:c2:e2:b5:eb:5e:01:9b:6e:af:5c:ee:77:62:4b:
                    83:f5:70:35:7f:93:14:a0:14:a3:e4:ec:d0:4f:68:
                    fe:c0:ec:a4:17:8e:ec:80:ba:fb:e2:bb:cd:03:4c:
                    9b:27:79:1a:9f:c3:82:ca:23:ef:02:15:d1:12:2b:
                    bd:3a:16:33:fa:3f:cc:e7:99:03:5a:fd:68:8c:9c:
                    10:68:56:2b:a0:8c:2a:37:5b:19:01:53:ee:79:c6:
                    6e:3d:ab:7a:ad:01:97:36:45:46:af:50:7d:be:00:
                    dd:36:a3:2d:fc:25:5b:48:42:2b:d3:1a:37:97:5b:
                    38:ef:28:61:08:77:1f:d5:e7:f6:23:80:7a:51:7d:
                    d4:c0:6e:87:91:12:91:89:f1:ee:e0:8b:13:38:39:
                    2f:6b:c2:0a:07:ef:ae:04:16:de:97:8e:8a:2d:9e:
                    7c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E8:39:67:F7:97:D5:9B:3E:58:AC:47:00:DD:EC:F1:BF:0D:0B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f2c60c5-8ec2-3669-998e-80f086d1c276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0c:65:0e:28:d5:e0:79:32:d7:6d:f8:71:d3:d1:c7:dd:12:
         6c:76:75:c0:ff:ac:32:a4:49:7a:ab:9d:aa:e1:6c:f5:50:64:
         61:1f:7b:ac:7d:45:e9:9e:7d:3f:18:f4:66:eb:39:00:bf:fb:
         08:af:ac:60:bb:04:c2:2e:6b:1f:b0:2f:a5:5c:7a:5b:da:66:
         ed:da:43:ef:91:06:54:08:02:9d:63:6c:ca:90:9e:65:03:2c:
         31:49:f3:9c:f3:63:01:57:78:22:37:1d:bd:9b:07:18:df:df:
         90:aa:52:c6:d9:11:e0:6c:b2:56:2d:62:08:a2:be:ef:5d:88:
         fd:15:e9:9b:34:a3:2a:21:c0:98:c5:3e:b9:4e:2f:b5:55:09:
         9f:81:f9:46:30:2d:12:b7:52:e2:77:c7:42:3b:f7:c1:d8:97:
         fd:25:c4:8f:18:13:c8:7d:d3:c6:8c:ee:a2:3d:26:39:3c:80:
         bd:f8:de:ce:6e:65:f7:60:76:68:31:61:ae:cf:b1:dc:36:80:
         2e:5d:d9:16:1a:22:8c:f7:5d:07:18:30:d0:7f:fa:b4:b3:bc:
         9b:99:72:87:46:56:12:5f:57:20:49:45:3f:21:18:4d:51:6a:
         b4:37:49:9a:c0:df:34:ed:45:b5:01:19:56:d8:38:65:ba:9a:
         cc:d5:d9:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++2n/vLUoyAi9YYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NTA4ODE2Y2QtNzZlYy00NzE3LTljZTMtZWYzZjZlYzNmOWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOmuv5xm9ad5WEzxTu35wjSzN+Cwz0vdgvck
yZ0/LzDK+v7vHF2khJAo0arN01UBJZVoWvI9dDY/9+8fWHyI+coXUTa4w+saiCli
BFaxOk0Wmx+skOQ8sbQ+wuK1614Bm26vXO53YkuD9XA1f5MUoBSj5OzQT2j+wOyk
F47sgLr74rvNA0ybJ3kan8OCyiPvAhXREiu9OhYz+j/M55kDWv1ojJwQaFYroIwq
N1sZAVPuecZuPat6rQGXNkVGr1B9vgDdNqMt/CVbSEIr0xo3l1s47yhhCHcf1ef2
I4B6UX3UwG6HkRKRifHu4IsTODkva8IKB++uBBbel46KLZ58ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfoOWf3l9WbPlisRwDd7PG/DQusMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmYyYzYwYzUtOGVjMi0z
NjY5LTk5OGUtODBmMDg2ZDFjMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYGwKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgMZQ4o1eB5Mtdt+HHT0cfdEmx2dcD/rDKkSXqrnarhbPVQZGEfe6x9
RemefT8Y9GbrOQC/+wivrGC7BMIuax+wL6VcelvaZu3aQ++RBlQIAp1jbMqQnmUD
LDFJ85zzYwFXeCI3Hb2bBxjf35CqUsbZEeBsslYtYgiivu9diP0V6Zs0oyohwJjF
PrlOL7VVCZ+B+UYwLRK3UuJ3x0I798HYl/0lxI8YE8h908aM7qI9Jjk8gL343s5u
ZfdgdmgxYa7Psdw2gC5d2RYaIoz3XQcYMNB/+rSzvJuZcodGVhJfVyBJRT8hGE1R
arQ3SZrA3zTtRbUBGVbYOGW6mszV2TE=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:03:04 2024 by rpki-client on console-ams.rpki-client.org