Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa
File:                     abf67299-9e87-34a9-9b48-9475fd549597.roa (raw, json)
Hash identifier:          N4/72jH1GL+bl7l1TLBuE/KAoDnZiA+aces4JW1jDq0=
Subject key identifier:   7F:D7:BF:4F:85:BF:27:F1:81:55:CB:45:E1:91:F1:E7:08:2A:68:2E
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F432858455A2D810221DB711DEB32D368
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     398143
IP address blocks:        96.46.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:81:02:21:db:71:1d:eb:32:d3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=d32fe48b-dc14-4445-aea8-59251af75a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:8c:fa:5f:95:2f:bc:f3:8a:f0:94:e3:eb:
                    57:0a:b6:40:f5:4e:4a:6a:87:80:04:a6:fc:f1:e7:
                    c7:61:7a:17:b8:6a:73:7f:fb:ca:3f:43:ca:53:02:
                    4a:8f:96:7d:2e:e4:69:be:d6:68:5e:b8:f9:f3:bc:
                    60:e4:85:74:23:06:0e:e9:01:0c:8e:37:cb:0d:0c:
                    0e:92:d5:34:e2:27:28:28:82:7d:b0:81:40:91:34:
                    ea:99:d7:8c:67:ea:de:08:15:11:3d:04:64:ce:6e:
                    bb:47:03:4c:30:41:4c:5c:bd:0f:b5:f6:88:cd:4d:
                    16:9c:cf:c3:2d:5c:72:f5:a1:70:bc:6e:c9:44:6d:
                    f1:73:27:37:1e:2d:66:a7:59:31:0e:59:70:40:dd:
                    a1:13:3c:70:e2:0b:71:82:bd:ef:e2:5b:e6:fe:32:
                    1e:e1:d8:58:7d:90:8a:de:a5:29:50:51:4a:dc:cb:
                    35:5e:3d:c8:eb:3d:12:28:bb:24:c1:75:2f:ec:1a:
                    30:4e:3c:5a:d5:7c:46:5b:01:f2:c5:57:ac:8b:90:
                    5a:42:f4:17:94:a0:8a:2a:5a:c9:fc:04:1c:1e:76:
                    f0:99:15:39:7b:8f:ab:cf:36:da:87:e9:05:00:2a:
                    f0:32:c7:3c:9e:e8:de:52:52:ee:2e:f1:6d:a2:83:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D7:BF:4F:85:BF:27:F1:81:55:CB:45:E1:91:F1:E7:08:2A:68:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/abf67299-9e87-34a9-9b48-9475fd549597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.46.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:70:47:73:4b:f4:64:f2:c1:60:5c:33:aa:59:1f:9c:c3:31:
         f1:dc:66:eb:e2:5b:8c:2f:60:64:ac:a4:be:4a:97:0f:0e:41:
         06:fb:01:b7:e7:9b:6e:74:a1:16:22:9d:ae:32:da:22:47:5f:
         0c:47:cb:67:cd:1f:60:1d:0b:14:b1:52:90:04:06:90:52:61:
         df:e0:1f:5f:2a:9d:89:3c:fb:08:e5:ff:84:b1:b8:ff:c5:5d:
         2f:fd:c9:91:81:21:76:5e:15:03:9f:37:e8:0c:14:59:cc:87:
         ce:9d:8f:bc:97:b1:5f:58:3b:e1:ad:97:f1:e8:f5:ed:a1:53:
         c6:e5:5d:25:36:05:84:d9:ad:49:7e:49:08:7a:3d:73:95:2d:
         c7:b0:50:4d:88:6c:7c:47:cf:e7:84:58:9d:0a:02:db:98:f6:
         8e:ca:29:81:11:4e:f5:16:a0:3e:f2:74:c5:02:54:ff:38:53:
         78:92:35:3a:49:1c:b3:90:08:a7:e6:95:d3:95:15:bd:fa:02:
         86:aa:1d:3a:94:9d:08:1c:8e:4c:5f:9e:95:ab:1f:0e:e7:8d:
         f3:e4:16:fe:64:da:3a:c5:0c:2f:67:a8:f8:12:10:38:78:d5:
         64:40:38:8e:54:6b:e5:1b:28:09:db:68:ba:12:7e:40:50:61:
         4a:28:c4:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVaLYECIdtxHesy02gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh
YWQ5MB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk
ZDMyZmU0OGItZGMxNC00NDQ1LWFlYTgtNTkyNTFhZjc1YTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdeM+l+VL7zzivCU4+tXCrZA9U5KaoeABKb8
8efHYXoXuGpzf/vKP0PKUwJKj5Z9LuRpvtZoXrj587xg5IV0IwYO6QEMjjfLDQwO
ktU04icoKIJ9sIFAkTTqmdeMZ+reCBURPQRkzm67RwNMMEFMXL0PtfaIzU0WnM/D
LVxy9aFwvG7JRG3xcyc3Hi1mp1kxDllwQN2hEzxw4gtxgr3v4lvm/jIe4dhYfZCK
3qUpUFFK3Ms1Xj3I6z0SKLskwXUv7BowTjxa1XxGWwHyxVesi5BaQvQXlKCKKlrJ
/AQcHnbwmRU5e4+rzzbah+kFACrwMsc8nujeUlLuLvFtooMamwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/Xv0+FvyfxgVXLReGR8ecIKmguMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy
MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvYWJmNjcyOTktOWU4Ny0z
NGE5LTliNDgtOTQ3NWZkNTQ5NTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy
NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl
YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0
OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhwR3NL9GTywWBcM6pZH5zDMfHcZuviW4wvYGSspL5Klw8OQQb7Abfn
m250oRYina4y2iJHXwxHy2fNH2AdCxSxUpAEBpBSYd/gH18qnYk8+wjl/4SxuP/F
XS/9yZGBIXZeFQOfN+gMFFnMh86dj7yXsV9YO+Gtl/Ho9e2hU8blXSU2BYTZrUl+
SQh6PXOVLcewUE2IbHxHz+eEWJ0KAtuY9o7KKYERTvUWoD7ydMUCVP84U3iSNTpJ
HLOQCKfmldOVFb36AoaqHTqUnQgcjkxfnpWrHw7njfPkFv5k2jrFDC9nqPgSEDh4
1WRAOI5Ua+UbKAnbaLoSfkBQYUooxFA=
-----END CERTIFICATE-----
Generated at Wed May 15 17:50:22 2024 by rpki-client on console-fra.rpki-client.org