Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa311314-6fa6-3101-a7fb-8b6a68a559d3.roa
File:                     fa311314-6fa6-3101-a7fb-8b6a68a559d3.roa (raw, json)
Hash identifier:          Hz9n8vjK5EiKE/vTV9zA0YjlTMyI+jhW8i8kr4EFOpA=
Subject key identifier:   FD:A0:9F:3C:B5:55:17:0C:D5:4F:D2:2F:EF:4B:6D:B5:DE:19:66:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB55BB0785E29952889B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa311314-6fa6-3101-a7fb-8b6a68a559d3.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7725
IP address blocks:        96.124.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:55:bb:07:85:e2:99:52:88:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=94c834b0-71d6-4c86-adc6-9489d3cd7dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:f3:df:fe:02:80:54:d8:7d:35:67:e6:6c:
                    0b:22:ed:fe:b0:34:18:3f:8c:6c:88:18:f8:3a:a2:
                    cb:49:7b:6c:42:40:83:8e:8d:41:8e:72:1b:c2:2b:
                    27:18:d1:32:e2:61:b7:87:a3:27:b3:03:3c:c8:23:
                    ab:08:c9:be:c8:9b:2c:63:83:4f:aa:d0:27:9c:6f:
                    b8:0f:e9:c0:c6:0d:c5:8b:41:d8:23:49:a7:25:62:
                    65:4c:b5:61:c0:fa:de:dd:17:f3:6d:e2:97:dc:cb:
                    aa:d6:95:34:2e:f0:16:e5:fd:22:26:b8:5e:05:02:
                    51:e4:5a:36:7b:8a:79:21:aa:71:29:88:6a:6a:9e:
                    e2:c3:e0:63:b7:42:14:16:b8:c2:c1:47:54:1f:b6:
                    2e:d9:49:be:1d:b8:6d:cb:a4:6f:f8:02:6b:93:b8:
                    5d:e7:1c:22:c8:9b:d4:ce:df:b1:2f:72:e4:e5:a8:
                    45:62:71:e1:c2:88:6c:b4:47:91:a8:c7:4f:43:b3:
                    d3:a3:2c:80:fe:09:2c:6d:73:ca:be:c1:04:17:f7:
                    76:43:62:ae:da:c5:97:40:15:0f:b9:13:53:59:68:
                    84:e5:28:7d:dd:a1:17:6d:be:8a:df:66:3d:e9:6b:
                    9a:74:4b:e7:81:cc:ed:9d:3d:51:cd:3b:79:5a:4a:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A0:9F:3C:B5:55:17:0C:D5:4F:D2:2F:EF:4B:6D:B5:DE:19:66:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa311314-6fa6-3101-a7fb-8b6a68a559d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.124.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b1:6b:48:ed:ee:2d:00:0b:4b:0e:51:ad:2b:3f:20:30:33:
         53:78:bd:d3:ba:03:d1:ae:89:2f:ad:d4:80:0b:d4:ad:5c:73:
         6d:75:85:fe:df:b3:5a:f3:2c:45:40:2d:7f:eb:64:31:f4:90:
         90:e9:71:f8:5e:95:af:d7:4c:08:e2:50:f8:f3:48:e1:80:b5:
         7f:6f:c8:80:2e:31:96:b6:86:c3:76:07:ef:94:70:cf:89:bb:
         f0:12:ec:fb:67:d6:61:e6:4a:dd:e8:b4:7b:c6:2f:42:3c:fc:
         fa:e0:a1:1d:79:53:4f:cc:f7:1f:fd:81:01:8d:5e:db:a4:33:
         ed:f3:b1:9f:bb:da:13:19:ed:ab:a5:8b:ce:40:3d:29:35:c4:
         e1:6c:05:0b:10:ba:a2:6e:fc:ec:9b:ff:76:27:c9:c5:40:f0:
         a1:35:6a:10:7f:9b:77:f7:8e:a5:12:7a:29:27:be:7b:34:e7:
         e1:bc:fb:31:26:f9:d9:05:a0:f5:1f:18:62:47:00:72:e2:32:
         26:40:01:21:b8:82:94:8c:fa:46:07:f7:76:5a:6b:2e:03:6f:
         06:2e:3c:e5:d5:a1:f3:fc:82:37:e6:c4:9a:1e:a3:e2:86:8b:
         5d:84:34:c8:dc:ba:01:7f:a4:6c:19:32:d3:7a:a7:9b:ce:cc:
         28:7a:63:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfq1W7B4XimVKIm0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
OTRjODM0YjAtNzFkNi00Yzg2LWFkYzYtOTQ4OWQzY2Q3ZGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGnz3/4CgFTYfTVn5mwLIu3+sDQYP4xsiBj4
OqLLSXtsQkCDjo1BjnIbwisnGNEy4mG3h6MnswM8yCOrCMm+yJssY4NPqtAnnG+4
D+nAxg3Fi0HYI0mnJWJlTLVhwPre3RfzbeKX3Muq1pU0LvAW5f0iJrheBQJR5Fo2
e4p5IapxKYhqap7iw+Bjt0IUFrjCwUdUH7Yu2Um+Hbhty6Rv+AJrk7hd5xwiyJvU
zt+xL3Lk5ahFYnHhwohstEeRqMdPQ7PToyyA/gksbXPKvsEEF/d2Q2Ku2sWXQBUP
uRNTWWiE5Sh93aEXbb6K32Y96WuadEvngcztnT1RzTt5WkqBwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2gnzy1VRcM1U/SL+9LbbXeGWZ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmEzMTEzMTQtNmZhNi0z
MTAxLWE3ZmItOGI2YTY4YTU1OWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYHwYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByxa0jt7i0AC0sOUa0rPyAwM1N4vdO6A9GuiS+t1IAL1K1cc211hf7f
s1rzLEVALX/rZDH0kJDpcfhela/XTAjiUPjzSOGAtX9vyIAuMZa2hsN2B++UcM+J
u/AS7Ptn1mHmSt3otHvGL0I8/PrgoR15U0/M9x/9gQGNXtukM+3zsZ+72hMZ7aul
i85APSk1xOFsBQsQuqJu/Oyb/3YnycVA8KE1ahB/m3f3jqUSeiknvns05+G8+zEm
+dkFoPUfGGJHAHLiMiZAASG4gpSM+kYH93Zaay4DbwYuPOXVofP8gjfmxJoeo+KG
i12ENMjcugF/pGwZMtN6p5vOzCh6Y08=
-----END CERTIFICATE-----
Generated at Sat May 4 14:59:06 2024 by rpki-client on console-fra.rpki-client.org