Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa
File:                     b7091e43-35d5-3171-a245-3dadb9d48c94.roa (raw, json)
Hash identifier:          bEVxVRr3trxdIRuYb7Yk38Sq2Q4jQKI4UT0r7IrZQgk=
Subject key identifier:   D9:36:DC:7E:C7:B0:1B:F4:9E:FA:07:18:FB:1F:E2:22:A0:BC:79:25
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285847362B49A4345B6950B4136D80
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     20278
IP address blocks:        96.9.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:49:a4:34:5b:69:50:b4:13:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=8b947630-7d91-4532-a7fd-26670526d2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9d:ae:f0:d3:03:75:85:ee:b8:bc:61:10:4c:
                    10:32:75:88:76:ac:18:6e:40:f3:c4:8c:62:7b:0b:
                    99:cf:d4:1f:ff:97:e2:37:ff:eb:72:ac:96:1a:57:
                    ed:49:a7:57:91:f8:87:e5:7a:60:54:09:71:c2:a8:
                    60:52:8c:15:24:65:ed:ab:1c:e9:4c:d2:1f:73:61:
                    26:f4:d2:5e:25:04:72:d7:71:cf:83:43:3c:59:d9:
                    51:51:b3:ec:cd:96:2d:c7:19:c1:f6:01:ab:5c:f9:
                    09:fa:2e:73:1e:78:e9:2a:e1:85:1b:22:dc:3b:15:
                    ba:f5:0e:83:50:96:36:f5:d0:b8:24:af:86:2c:ee:
                    06:7f:f1:b0:db:2d:d0:58:1e:bf:38:dd:d9:4d:96:
                    a8:af:55:75:4e:7e:2a:4e:03:e4:65:40:e2:46:42:
                    b6:b0:8c:fd:73:10:50:36:a7:eb:aa:83:98:60:c1:
                    18:66:a5:06:b7:fe:12:3a:ac:68:c8:10:09:e4:99:
                    b3:cd:b3:27:42:12:45:97:36:8f:76:97:1d:3d:a9:
                    b0:f2:87:83:f5:7c:08:a8:f0:24:81:e0:e4:1f:bb:
                    71:6f:d4:e8:af:a9:85:4f:e9:33:26:a5:5e:bf:f3:
                    64:87:da:a5:27:e7:3f:cc:7c:27:09:fe:1b:e0:02:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:36:DC:7E:C7:B0:1B:F4:9E:FA:07:18:FB:1F:E2:22:A0:BC:79:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a1:68:b9:8f:64:4e:22:f9:f2:95:26:8d:db:56:47:77:81:
         b2:01:d8:24:47:e6:97:8a:e5:08:ca:a9:39:fb:b2:ae:97:a2:
         1f:b0:ed:8b:23:6e:2b:3e:bf:1e:17:e2:68:c7:5c:73:b4:2a:
         89:fe:fd:65:bb:07:a0:f0:80:24:30:c0:e3:fd:93:5e:ee:e3:
         d0:d5:c7:c1:6f:0f:c5:cd:d2:6d:70:1d:4f:99:47:98:3e:33:
         39:31:e8:6d:f2:55:b1:2e:35:b2:0e:92:08:07:69:7d:27:97:
         a1:83:39:1b:7e:6b:90:e6:90:a8:7e:5c:33:37:ab:24:95:ed:
         f8:6c:f8:11:44:4a:3c:ee:c5:34:28:28:67:53:3b:81:bc:9d:
         d6:49:f7:b9:ac:76:e0:f3:23:c1:51:f2:18:b4:94:ca:d3:cf:
         41:4b:5d:3b:45:0a:8b:ee:fe:cd:72:d6:95:dd:45:ae:4d:ee:
         e3:b4:1c:b4:dc:77:e9:71:10:67:7f:dd:0c:aa:fd:5c:b3:b2:
         01:5a:74:3a:17:de:b6:7a:4c:f1:17:f1:b9:aa:c6:5b:b9:fc:
         64:d4:42:68:fc:1c:b8:0a:ed:a3:ea:52:c7:27:dd:8f:75:ae:
         17:60:6f:7b:20:d1:1b:5b:3b:dc:2c:85:c9:21:d4:6e:17:3f:
         9f:c0:5c:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K0mkNFtpULQTbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl
ODkzMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
OGI5NDc2MzAtN2Q5MS00NTMyLWE3ZmQtMjY2NzA1MjZkMmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp2u8NMDdYXuuLxhEEwQMnWIdqwYbkDzxIxi
ewuZz9Qf/5fiN//rcqyWGlftSadXkfiH5XpgVAlxwqhgUowVJGXtqxzpTNIfc2Em
9NJeJQRy13HPg0M8WdlRUbPszZYtxxnB9gGrXPkJ+i5zHnjpKuGFGyLcOxW69Q6D
UJY29dC4JK+GLO4Gf/Gw2y3QWB6/ON3ZTZaor1V1Tn4qTgPkZUDiRkK2sIz9cxBQ
NqfrqoOYYMEYZqUGt/4SOqxoyBAJ5JmzzbMnQhJFlzaPdpcdPamw8oeD9XwIqPAk
geDkH7txb9Tor6mFT+kzJqVev/Nkh9qlJ+c/zHwnCf4b4ALn+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNk23H7HsBv0nvoHGPsf4iKgvHklMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2
MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjcwOTFlNDMtMzVkNS0z
MTcxLWEyNDUtM2RhZGI5ZDQ4Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm
ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj
ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz
MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByhaLmPZE4i+fKVJo3bVkd3gbIB2CRH5peK5QjKqTn7sq6Xoh+w7Ysj
bis+vx4X4mjHXHO0Kon+/WW7B6DwgCQwwOP9k17u49DVx8FvD8XN0m1wHU+ZR5g+
Mzkx6G3yVbEuNbIOkggHaX0nl6GDORt+a5DmkKh+XDM3qySV7fhs+BFESjzuxTQo
KGdTO4G8ndZJ97msduDzI8FR8hi0lMrTz0FLXTtFCovu/s1y1pXdRa5N7uO0HLTc
d+lxEGd/3Qyq/VyzsgFadDoX3rZ6TPEX8bmqxlu5/GTUQmj8HLgK7aPqUscn3Y91
rhdgb3sg0RtbO9wshckh1G4XP5/AXBg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:37:40 2024 by rpki-client on console-fra.rpki-client.org