Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa
File:                     7876d134-3637-313a-9343-6955464c6af6.roa (raw, json)
Hash identifier:          f1byrJGqMzK/+MdVbvNHnbjSyJeqjRoac8sZz+MxNes=
Subject key identifier:   E4:85:0F:55:C2:53:98:CC:0F:BD:35:8E:88:0D:DA:24:DE:7F:30:0F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845C44378727F07472B61FEF880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa
Signing time:             Sun 05 May 2024 01:00:25 +0000
ROA not before:           Sun 05 May 2024 01:00:25 +0000
ROA not after:            Sat 03 Aug 2024 01:00:25 +0000
asID:                     852
IP address blocks:        96.1.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c4:43:78:72:7f:07:47:2b:61:fe:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May  5 01:00:25 2024 GMT
            Not After : Aug  3 01:00:25 2024 GMT
        Subject: CN=52046449-8009-4bbd-8c4a-6ece560b997e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:fa:f7:75:33:0c:de:3c:12:fd:ed:80:29:
                    7e:6c:70:da:27:3d:3e:0e:23:25:d1:ca:bd:8f:e5:
                    e0:45:1a:e3:d6:20:c4:3a:42:3f:98:e7:72:d4:af:
                    d4:fe:37:a4:57:1e:77:da:2e:67:ae:c0:a0:1a:96:
                    b2:7b:18:94:98:8a:6c:59:b3:e7:e1:98:e1:67:ee:
                    67:27:fe:01:f6:bd:23:b0:9e:18:8f:d7:f6:d0:64:
                    23:97:c7:1f:44:b9:b2:e8:47:24:b7:80:6f:ae:58:
                    92:97:45:15:85:e7:f1:d1:bd:4a:61:b0:86:99:2f:
                    2a:4b:61:6d:10:8e:a4:28:da:41:81:8f:12:11:47:
                    0f:85:39:ab:61:6b:36:81:c3:f4:c2:71:c4:f3:7b:
                    a0:b2:3f:7b:a2:2f:0b:33:63:55:32:56:c9:54:0a:
                    b1:ae:1e:69:eb:fa:ce:0b:71:a5:b2:c4:3a:01:3c:
                    93:a6:de:04:71:0f:9f:83:3f:3c:2e:bc:07:85:df:
                    89:5c:f6:f7:c5:42:c3:f1:96:2a:85:d4:00:1c:c5:
                    03:47:7f:b4:68:ca:5a:68:31:ee:f2:b9:c4:96:a1:
                    39:bb:44:bd:6d:e4:dc:48:85:f1:35:ba:90:e4:d3:
                    5e:10:d7:34:59:da:33:53:7b:0d:1e:4e:c6:14:1e:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:85:0F:55:C2:53:98:CC:0F:BD:35:8E:88:0D:DA:24:DE:7F:30:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.1.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9a:af:6b:d8:94:be:15:a3:b0:af:a4:68:ca:52:6e:14:65:
         02:36:08:d6:2a:7c:7b:34:96:81:52:8e:25:e5:c7:f0:e8:4e:
         bb:8b:85:20:c6:06:59:bc:f3:0c:f5:59:bf:0c:34:ed:cc:e5:
         33:70:5d:58:1b:27:8f:e9:a3:2d:64:bd:07:3f:0f:39:7f:fd:
         a4:f5:7a:e9:29:84:c3:e0:1e:7a:06:fa:65:e6:ce:12:20:d4:
         16:6d:f8:0d:c7:2a:be:e6:eb:6c:4c:35:21:86:be:0f:59:0d:
         d2:a2:96:bf:46:e4:a6:76:a4:bd:47:bd:84:34:d6:38:36:86:
         41:2a:02:c3:d2:17:0a:85:e4:71:83:57:a5:f2:b8:c7:a7:ce:
         33:f7:71:b1:6c:93:30:dd:5e:bf:55:54:ba:f4:f0:2a:f8:29:
         bb:ef:eb:f1:58:f4:f6:f6:aa:4e:e4:d2:26:8a:18:d4:7a:df:
         a4:ee:c9:f0:bf:b7:a1:cf:79:b2:ed:6d:0f:38:ba:e5:3b:b9:
         d3:6c:9c:f5:23:45:3f:36:6e:8e:a9:5d:f0:6b:71:56:52:7b:
         f3:22:1f:86:0d:af:24:3a:fb:5c:10:67:9c:8e:12:6a:2d:53:
         63:dd:2a:9b:2b:6b:22:3a:d8:e1:ae:d4:fd:94:20:43:f9:ec:
         86:cd:97:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXEQ3hyfwdHK2H++IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDUwNTAxMDAyNVoXDTI0MDgwMzAxMDAyNVowLzEtMCsGA1UEAxMk
NTIwNDY0NDktODAwOS00YmJkLThjNGEtNmVjZTU2MGI5OTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYL693UzDN48Ev3tgCl+bHDaJz0+DiMl0cq9
j+XgRRrj1iDEOkI/mOdy1K/U/jekVx532i5nrsCgGpayexiUmIpsWbPn4ZjhZ+5n
J/4B9r0jsJ4Yj9f20GQjl8cfRLmy6Eckt4BvrliSl0UVhefx0b1KYbCGmS8qS2Ft
EI6kKNpBgY8SEUcPhTmrYWs2gcP0wnHE83ugsj97oi8LM2NVMlbJVAqxrh5p6/rO
C3GlssQ6ATyTpt4EcQ+fgz88LrwHhd+JXPb3xULD8ZYqhdQAHMUDR3+0aMpaaDHu
8rnElqE5u0S9beTcSIXxNbqQ5NNeENc0WdozU3sNHk7GFB5gZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSFD1XCU5jMD701jogN2iTefzAPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzg3NmQxMzQtMzYzNy0z
MTNhLTkzNDMtNjk1NTQ2NGM2YWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAESMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJGar2vYlL4Vo7CvpGjKUm4UZQI2CNYqfHs0loFSjiXlx/DoTruLhSDG
Blm88wz1Wb8MNO3M5TNwXVgbJ4/poy1kvQc/Dzl//aT1eukphMPgHnoG+mXmzhIg
1BZt+A3HKr7m62xMNSGGvg9ZDdKilr9G5KZ2pL1HvYQ01jg2hkEqAsPSFwqF5HGD
V6XyuMenzjP3cbFskzDdXr9VVLr08Cr4Kbvv6/FY9Pb2qk7k0iaKGNR636TuyfC/
t6HPebLtbQ84uuU7udNsnPUjRT82bo6pXfBrcVZSe/MiH4YNryQ6+1wQZ5yOEmot
U2PdKpsrayI62OGu1P2UIEP57IbNl9I=
-----END CERTIFICATE-----
Generated at Sat May 18 15:36:28 2024 by rpki-client on console-fra.rpki-client.org