Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa
File:                     3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa (raw, json)
Hash identifier:          1BwIG4vsVaOrk4O2nJUoHE50lZUnNDOgfKPd8jguSgo=
Subject key identifier:   46:A5:6E:66:CE:FE:4B:9E:E9:0A:D5:97:55:9F:D2:35:E0:EA:8D:73
Certificate issuer:       /CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
Certificate serial:       010D0C9F43285847888657D632601A9D1650CE00
Authority key identifier: 64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     53869
IP address blocks:        198.62.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:57:d6:32:60:1a:9d:16:50:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=02340abc-796e-4ee7-b03b-c159a753e108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:29:7b:3e:f1:da:4d:4a:f5:be:9b:2c:8e:c2:
                    f6:5f:3c:d5:51:27:ce:0a:e2:85:cf:4f:f4:bf:01:
                    dd:82:a5:35:69:93:21:0e:80:5b:11:b4:9c:bd:12:
                    4c:bd:1d:8b:4b:02:91:db:59:1c:94:1a:86:c7:4e:
                    39:94:af:d3:fd:2a:a3:5c:d8:a5:32:ea:01:9e:32:
                    df:47:c1:fd:51:97:8b:8e:29:3c:11:50:8b:9c:3b:
                    63:d9:bc:13:71:51:54:84:d5:da:9a:14:2b:53:3b:
                    b4:8b:b0:6a:fc:1c:1f:5f:35:07:9f:aa:11:a3:c5:
                    a1:7f:1e:c2:46:9a:79:f5:ef:33:83:80:0e:23:83:
                    7f:4a:4b:b8:4c:f8:cd:95:2f:ec:03:54:29:44:02:
                    0a:d1:67:75:cc:82:e5:ab:22:eb:51:62:7d:1a:54:
                    77:e9:da:b3:6b:27:f2:6a:52:26:20:c8:d1:c9:25:
                    41:04:82:9b:16:18:96:83:a4:ff:50:27:f4:08:ab:
                    d1:f6:57:e8:d6:7f:e2:f9:e9:0d:f3:0e:7f:66:82:
                    1e:58:f7:9c:29:a2:61:48:c3:b4:19:77:49:f7:0e:
                    fc:5b:ab:f1:42:5d:b4:15:64:e4:f5:22:fc:b5:e9:
                    c7:82:92:bf:bc:1a:45:a0:ed:d0:03:6e:42:12:8b:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A5:6E:66:CE:FE:4B:9E:E9:0A:D5:97:55:9F:D2:35:E0:EA:8D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/3da7b0a9-7fa5-3ba0-b6c8-e5a2ac77d272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.crl

            X509v3 Authority Key Identifier:
                keyid:64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:da:cb:0c:b1:16:80:74:c8:8c:99:ab:64:ed:1d:e7:38:c1:
         55:f3:a5:37:3d:a5:f6:3d:d0:ca:bf:5b:84:44:a6:c3:b4:a0:
         1a:90:87:67:79:dd:44:ab:71:eb:e5:92:d4:09:2c:e3:ff:17:
         e1:fd:4f:04:25:5b:ce:aa:34:55:2e:a4:89:58:4f:4c:62:e8:
         38:5b:18:fe:ea:73:aa:75:09:c8:3c:b0:8c:3a:ea:9b:3c:3a:
         ef:93:be:61:3f:2b:2f:05:bd:df:5b:ea:c7:99:46:79:e9:5e:
         04:b4:93:a1:2c:54:e3:93:ee:ac:c6:46:3c:ec:df:92:0f:75:
         34:e0:25:9b:69:cb:ff:55:6e:16:75:38:11:ac:80:8f:16:c6:
         ae:42:7c:1f:fe:7b:b8:9b:6c:30:b6:d9:e2:32:83:dd:08:42:
         83:4a:c2:22:6f:42:c5:54:30:ea:c4:94:68:f7:08:96:b1:af:
         0c:2a:5f:e6:93:9e:17:2b:b6:1c:0b:df:95:71:38:4c:66:5a:
         58:93:c7:7a:c7:01:4e:48:ca:1e:d2:6b:b4:5f:b7:0b:99:00:
         1e:d9:3f:5c:e1:ec:77:57:29:9f:09:8d:9e:c9:41:39:a6:91:
         41:64:bc:05:39:9e:bf:23:7d:80:bc:b6:97:0a:44:6a:db:62:
         88:9b:9c:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeIhlfWMmAanRZQzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTZhYTEyZmQtMjBmNi00ZjM3LWFhYjctYTI3MzkxYWUw
OTZlMB4XDTI0MTAxNDAxMDAzMVoXDTI1MDExMjAyMDAzMVowLzEtMCsGA1UEAxMk
MDIzNDBhYmMtNzk2ZS00ZWU3LWIwM2ItYzE1OWE3NTNlMTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3il7PvHaTUr1vpssjsL2XzzVUSfOCuKFz0/0
vwHdgqU1aZMhDoBbEbScvRJMvR2LSwKR21kclBqGx045lK/T/SqjXNilMuoBnjLf
R8H9UZeLjik8EVCLnDtj2bwTcVFUhNXamhQrUzu0i7Bq/BwfXzUHn6oRo8Whfx7C
Rpp59e8zg4AOI4N/Sku4TPjNlS/sA1QpRAIK0Wd1zILlqyLrUWJ9GlR36dqzayfy
alImIMjRySVBBIKbFhiWg6T/UCf0CKvR9lfo1n/i+ekN8w5/ZoIeWPecKaJhSMO0
GXdJ9w78W6vxQl20FWTk9SL8tenHgpK/vBpFoO3QA25CEotShQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEalbmbO/kue6QrVl1Wf0jXg6o1zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NmFh
MTJmZC0yMGY2LTRmMzctYWFiNy1hMjczOTFhZTA5NmUvM2RhN2IwYTktN2ZhNS0z
YmEwLWI2YzgtZTVhMmFjNzdkMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTZhYTEyZmQtMjBmNi00ZjM3LWFh
YjctYTI3MzkxYWUwOTZlLzk2YWExMmZkLTIwZjYtNGYzNy1hYWI3LWEyNzM5MWFl
MDk2ZS5jcmwwHwYDVR0jBBgwFoAUZC4xncUXG+D2zTCUUdgQmbEdrl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85NmFhMTJmZC0yMGY2LTRmMzctYWFiNy1hMjcz
OTFhZTA5NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxj54MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDaywyxFoB0yIyZq2TtHec4wVXzpTc9pfY90Mq/W4REpsO0oBqQh2d5
3USrcevlktQJLOP/F+H9TwQlW86qNFUupIlYT0xi6DhbGP7qc6p1Ccg8sIw66ps8
Ou+TvmE/Ky8Fvd9b6seZRnnpXgS0k6EsVOOT7qzGRjzs35IPdTTgJZtpy/9VbhZ1
OBGsgI8Wxq5CfB/+e7ibbDC22eIyg90IQoNKwiJvQsVUMOrElGj3CJaxrwwqX+aT
nhcrthwL35VxOExmWliTx3rHAU5Iyh7Sa7RftwuZAB7ZP1zh7HdXKZ8JjZ7JQTmm
kUFkvAU5nr8jfYC8tpcKRGrbYoibnEM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org