Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa
File:                     a68996cc-64bd-36b9-b93b-500d1edd511f.roa (raw, json)
Hash identifier:          QOxf5eKYh45aMZArGhcXdxWQ2vinL38Q+5015Ez0/e4=
Subject key identifier:   94:0B:06:F9:C8:C2:B6:5D:78:CE:BD:BF:46:85:EB:B1:29:F0:26:6B
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285845777DC3C3E598EF42F72D4C00
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     20278
IP address blocks:        172.93.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c3:c3:e5:98:ef:42:f7:2d:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=27346442-29f2-4f03-93b5-c286d42eada8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d7:f1:e8:3a:56:92:4d:1a:51:f4:00:b5:fd:
                    ed:c3:22:95:92:de:9c:f3:32:c3:e5:3c:02:0c:e7:
                    17:bf:15:4d:e4:75:64:02:1d:0c:3a:ea:9a:a1:51:
                    0d:48:25:9d:af:a8:4b:8a:16:4c:9d:7f:a9:0a:08:
                    74:18:20:9e:b1:66:6c:f9:c5:bb:9a:a7:87:95:e5:
                    44:2d:97:40:d5:4f:5c:93:c4:31:9f:7b:c4:c2:a1:
                    29:6d:07:9f:aa:f2:3f:1e:85:02:0e:0e:1f:e3:59:
                    31:f8:42:6a:49:60:e2:9d:d6:59:4d:07:b3:29:ac:
                    d3:80:0d:41:c9:3b:d9:cc:19:d3:bf:69:33:02:13:
                    f1:e6:5b:d8:df:15:4d:4a:b9:f5:d0:7a:5e:f5:97:
                    3f:18:7d:75:c6:7d:41:0e:a9:89:f3:fe:32:5f:a5:
                    d3:2b:61:a2:d4:2d:c6:96:0f:db:c5:80:53:54:71:
                    c1:8d:5e:4a:2e:49:13:49:16:d6:a8:ce:ad:9c:a1:
                    c5:f1:71:ed:03:9a:24:b7:f4:2f:c6:66:72:77:28:
                    fe:b7:09:ea:2f:9a:6e:46:9f:5f:d9:59:a4:75:e3:
                    92:4c:00:a2:af:61:74:d1:da:4f:92:95:f9:35:ba:
                    27:fd:5f:4c:9c:db:71:8a:7b:cd:de:1c:19:2e:fd:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0B:06:F9:C8:C2:B6:5D:78:CE:BD:BF:46:85:EB:B1:29:F0:26:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a68996cc-64bd-36b9-b93b-500d1edd511f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:60:e6:e8:9e:1a:87:21:6b:f6:f1:5a:09:c2:2b:df:5a:24:
         32:99:e5:8d:c9:cd:23:66:f5:59:04:7e:5d:fe:28:06:26:c0:
         d7:f1:ac:d3:e4:f3:8b:e5:7c:ea:1b:01:4d:da:d2:d9:0c:37:
         7c:8f:b5:35:fd:a6:bf:0f:fb:22:b8:df:1b:e5:2f:c8:0f:fb:
         b8:a4:db:16:21:f9:c9:86:6e:8d:bc:b8:d1:fd:e9:92:3d:96:
         c2:aa:f4:e1:34:16:dc:7a:85:db:bc:7d:0c:35:b4:3f:79:c4:
         35:52:ea:7c:e9:c0:34:58:8e:49:28:0f:c5:85:00:cc:d0:97:
         3e:35:78:24:fb:23:4e:c7:13:56:eb:34:b4:0f:43:0d:32:b0:
         3d:c5:bb:50:90:62:f3:8c:21:9a:bf:46:d9:18:d0:b1:38:f9:
         53:98:35:9e:e6:d3:17:73:0b:e6:10:8f:18:d7:d0:69:ff:a0:
         c1:8d:d5:ea:dd:30:f9:5a:7f:fc:85:23:57:ec:33:05:17:92:
         76:77:d5:cf:76:4a:37:da:da:1f:6d:2a:7d:f4:da:3b:5d:e1:
         6d:30:2d:b8:6b:ea:a3:ab:d0:d6:db:69:56:11:0c:f5:d8:ce:
         c1:65:bd:b0:2e:70:ac:69:b9:b4:f5:ed:00:17:89:dd:eb:44:
         fe:ac:c2:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fcPD5ZjvQvctTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl
ODkzMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
MjczNDY0NDItMjlmMi00ZjAzLTkzYjUtYzI4NmQ0MmVhZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNfx6DpWkk0aUfQAtf3twyKVkt6c8zLD5TwC
DOcXvxVN5HVkAh0MOuqaoVENSCWdr6hLihZMnX+pCgh0GCCesWZs+cW7mqeHleVE
LZdA1U9ck8Qxn3vEwqEpbQefqvI/HoUCDg4f41kx+EJqSWDindZZTQezKazTgA1B
yTvZzBnTv2kzAhPx5lvY3xVNSrn10Hpe9Zc/GH11xn1BDqmJ8/4yX6XTK2Gi1C3G
lg/bxYBTVHHBjV5KLkkTSRbWqM6tnKHF8XHtA5okt/QvxmZydyj+twnqL5puRp9f
2VmkdeOSTACir2F00dpPkpX5Nbon/V9MnNtxinvN3hwZLv0PgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJQLBvnIwrZdeM69v0aF67Ep8CZrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2
MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYTY4OTk2Y2MtNjRiZC0z
NmI5LWI5M2ItNTAwZDFlZGQ1MTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm
ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj
ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz
MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrF2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFg5uieGocha/bxWgnCK99aJDKZ5Y3JzSNm9VkEfl3+KAYmwNfxrNPk
84vlfOobAU3a0tkMN3yPtTX9pr8P+yK43xvlL8gP+7ik2xYh+cmGbo28uNH96ZI9
lsKq9OE0Ftx6hdu8fQw1tD95xDVS6nzpwDRYjkkoD8WFAMzQlz41eCT7I07HE1br
NLQPQw0ysD3Fu1CQYvOMIZq/RtkY0LE4+VOYNZ7m0xdzC+YQjxjX0Gn/oMGN1erd
MPlaf/yFI1fsMwUXknZ31c92Sjfa2h9tKn302jtd4W0wLbhr6qOr0NbbaVYRDPXY
zsFlvbAucKxpubT17QAXid3rRP6swsk=
-----END CERTIFICATE-----
Generated at Fri May 3 01:53:35 2024 by rpki-client on console-fra.rpki-client.org