Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/973a5fa6-0646-3e3d-89b0-9825bbf19f59.roa
File:                     973a5fa6-0646-3e3d-89b0-9825bbf19f59.roa (raw, json)
Hash identifier:          krEnTVm+suMMNK066yCbijWqTK+IvZguSd/Kf20WC2k=
Subject key identifier:   27:12:2A:3A:1E:6E:D6:9D:A1:6F:C7:BC:77:6E:D7:78:83:C5:AB:71
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858471FD5C28294E3B7EEA291B220
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/973a5fa6-0646-3e3d-89b0-9825bbf19f59.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     204670
IP address blocks:        128.242.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:c2:82:94:e3:b7:ee:a2:91:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=072d9669-8f44-4ead-9647-d7aee5568f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8a:dd:09:19:2c:e4:39:11:3d:54:6e:ae:7d:
                    b2:2f:e5:59:42:41:19:c9:d1:76:3c:c5:89:79:01:
                    df:38:2a:fc:4d:f1:88:7a:37:f0:77:c9:e0:24:b8:
                    eb:d3:fd:8a:cd:3a:79:96:16:11:60:d9:17:48:43:
                    dd:df:a2:e5:91:5e:6b:fc:e2:fa:f8:78:f4:6f:d8:
                    1a:08:4c:e0:56:5d:74:0a:8a:32:37:b9:5a:84:c1:
                    20:29:11:80:cb:a9:46:9e:86:00:49:7c:21:39:64:
                    c3:b8:1c:35:99:b8:f8:8d:fb:6a:88:f8:6c:5d:75:
                    ac:d7:57:6f:b9:ca:e2:98:7c:8a:a9:35:f0:55:72:
                    43:58:e5:ca:17:2d:39:45:e4:ab:d0:22:57:2e:46:
                    9e:1f:a9:52:61:99:d9:b2:57:29:7f:b6:76:92:6d:
                    8b:a2:a7:39:f1:3d:11:28:56:99:06:2a:df:bc:5a:
                    61:39:57:79:99:d9:21:1b:ef:d9:81:75:72:41:11:
                    e9:9a:6c:6b:17:09:4b:a4:d1:70:37:70:fd:70:8c:
                    c3:be:c5:08:6d:ad:7b:cc:1d:d5:fd:90:93:4e:87:
                    ca:87:f8:c6:36:0a:40:00:4f:e0:27:93:78:20:b3:
                    60:9d:fb:8b:77:8b:31:86:b1:e2:00:70:70:ff:2a:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:12:2A:3A:1E:6E:D6:9D:A1:6F:C7:BC:77:6E:D7:78:83:C5:AB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/973a5fa6-0646-3e3d-89b0-9825bbf19f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.242.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:60:11:b6:2a:5a:74:a5:7f:c8:9c:61:f4:18:43:d3:db:dd:
         e7:8a:13:ee:38:26:40:f1:87:1d:72:99:bf:46:94:ae:6e:10:
         94:a0:a2:a2:af:20:9e:8b:29:aa:8d:57:5a:bf:db:3d:50:9b:
         2b:b1:f1:f8:e0:4b:30:f3:f3:4d:fa:5a:19:ec:3e:5e:37:6e:
         e1:39:4a:27:35:b5:a0:a9:df:2a:19:18:22:5e:e6:db:f0:ce:
         4b:f5:f3:c2:9c:a3:8f:8e:3b:69:1a:a7:63:28:cb:84:5d:a9:
         2d:80:19:a8:63:53:87:f9:a4:60:e8:f6:2b:9e:1b:61:7e:f9:
         88:9a:a3:71:01:d0:08:5b:e3:9f:6e:07:10:98:59:bd:8f:30:
         b3:5f:f8:40:55:b8:79:a7:71:25:1a:ad:2d:4f:b3:36:a7:d5:
         11:c5:5c:f0:a8:1c:8f:10:fd:d9:dd:51:02:92:8b:59:a0:b7:
         f0:af:65:01:bb:46:35:79:c2:84:b2:67:b9:94:04:9f:77:b7:
         4e:12:c3:93:51:95:d2:d3:f9:2e:8e:22:c3:df:95:dc:d8:e7:
         45:45:2b:1f:17:28:8c:12:00:7d:b6:8b:10:dc:1d:db:15:f3:
         6a:ea:4c:58:fd:66:84:33:16:f8:f9:91:8c:99:59:dc:1b:71:
         dd:c9:3a:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1cKClOO37qKRsiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MDcyZDk2NjktOGY0NC00ZWFkLTk2NDctZDdhZWU1NTY4ZjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoordCRks5DkRPVRurn2yL+VZQkEZydF2PMWJ
eQHfOCr8TfGIejfwd8ngJLjr0/2KzTp5lhYRYNkXSEPd36LlkV5r/OL6+Hj0b9ga
CEzgVl10CooyN7lahMEgKRGAy6lGnoYASXwhOWTDuBw1mbj4jftqiPhsXXWs11dv
ucrimHyKqTXwVXJDWOXKFy05ReSr0CJXLkaeH6lSYZnZslcpf7Z2km2Loqc58T0R
KFaZBirfvFphOVd5mdkhG+/ZgXVyQRHpmmxrFwlLpNFwN3D9cIzDvsUIba17zB3V
/ZCTTofKh/jGNgpAAE/gJ5N4ILNgnfuLd4sxhrHiAHBw/yqS4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCcSKjoebtadoW/HvHdu13iDxatxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTczYTVmYTYtMDY0Ni0z
ZTNkLTg5YjAtOTgyNWJiZjE5ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPJeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxgEbYqWnSlf8icYfQYQ9Pb3eeKE+44JkDxhx1ymb9GlK5uEJSgoqKv
IJ6LKaqNV1q/2z1Qmyux8fjgSzDz8036WhnsPl43buE5Sic1taCp3yoZGCJe5tvw
zkv188Kco4+OO2kap2Moy4RdqS2AGahjU4f5pGDo9iueG2F++Yiao3EB0Ahb459u
BxCYWb2PMLNf+EBVuHmncSUarS1Pszan1RHFXPCoHI8Q/dndUQKSi1mgt/CvZQG7
RjV5woSyZ7mUBJ93t04Sw5NRldLT+S6OIsPfldzY50VFKx8XKIwSAH22ixDcHdsV
82rqTFj9ZoQzFvj5kYyZWdwbcd3JOj8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:05 2024 by rpki-client on console-fra.rpki-client.org