Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa
File:                     b7091e43-35d5-3171-a245-3dadb9d48c94.roa (raw, json)
Hash identifier:          IC14h1Bpdg6RMkflpdisMBq+h45Y4/kX4TjUQCkm+CU=
Subject key identifier:   57:B1:A9:16:05:A6:B6:B0:85:DC:AB:BE:66:0D:8F:1D:15:2B:0E:7E
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285845777DBF36E54B7F0E696E4F00
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     20278
IP address blocks:        96.9.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:bf:36:e5:4b:7f:0e:69:6e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=27dba1ce-59ff-4136-8a73-4d29c67c2cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a2:2d:0b:4c:4e:c5:c0:8f:81:ce:b2:e5:e1:
                    22:36:07:5f:8b:18:8d:5c:01:ef:14:ff:0f:20:2f:
                    1d:1d:b5:d6:6f:f4:58:f3:8f:9b:5e:d4:03:d0:5e:
                    54:ca:32:fe:02:3d:0c:c1:98:be:56:b6:bf:03:f0:
                    0b:11:13:ed:b8:63:c1:ff:07:c7:d9:47:f2:9e:8f:
                    40:3c:26:b3:8f:7b:8e:2e:7a:77:b3:18:bf:4d:4e:
                    8d:36:a1:eb:99:5f:29:32:d0:2c:20:7c:59:ba:3e:
                    0d:e7:51:34:a9:66:20:61:ca:0d:74:c9:9b:f7:ae:
                    20:24:73:e0:dc:c1:f2:6b:98:cf:6e:30:f0:e7:80:
                    21:de:b4:69:7a:82:8c:f2:2f:19:3f:74:4e:9d:a7:
                    d1:0c:20:c6:a1:f7:2b:97:40:2f:1b:67:d3:ae:0e:
                    04:be:13:e7:70:f9:6b:bb:c6:67:17:07:93:5b:e6:
                    97:73:fe:8c:d5:f1:0e:f0:70:0b:2d:95:d6:85:23:
                    5b:56:dd:c8:08:fd:ca:5a:9b:b9:03:24:6f:bf:13:
                    59:e6:ec:b0:79:55:61:ea:32:7b:87:a5:b6:ff:c0:
                    89:bb:c2:99:5d:03:ff:dc:29:9e:eb:0f:ed:f1:1a:
                    de:14:61:ac:15:0d:5d:cc:8f:03:e1:a3:2d:5d:fd:
                    da:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B1:A9:16:05:A6:B6:B0:85:DC:AB:BE:66:0D:8F:1D:15:2B:0E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b7091e43-35d5-3171-a245-3dadb9d48c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:90:71:18:32:bd:d4:8b:01:a7:90:a9:0c:78:f6:17:ef:53:
         19:27:e1:4e:70:bb:60:05:16:39:15:16:42:8c:ba:fa:e8:65:
         88:99:df:48:2b:7b:a8:2a:42:43:b3:b5:b5:cf:a6:e5:6c:92:
         fb:e8:70:7a:24:49:a6:c7:81:9c:f3:13:35:dd:4d:cd:97:2e:
         bb:4a:f9:32:59:3b:86:5d:a3:73:76:ef:c7:68:82:6b:49:3f:
         78:18:a5:bd:b1:b4:d4:2c:bc:e9:90:15:05:26:c4:a5:8c:88:
         cd:51:d8:9d:b4:fb:ac:64:83:45:ac:dc:9e:01:68:4a:c4:8c:
         88:5d:83:c5:e5:29:3e:41:e2:29:1f:80:7d:a5:57:03:4f:b4:
         43:80:8f:f4:3a:ff:54:19:70:fd:5e:68:30:7f:69:25:93:a7:
         aa:9e:3c:04:f6:c3:e6:fd:75:59:e1:f2:3c:d3:e7:dc:90:55:
         02:c7:e9:4e:ad:d6:6c:7b:9c:a1:b5:a4:c9:63:ce:bf:59:6f:
         b7:72:dc:9a:8f:13:87:2d:28:ae:a6:97:af:84:92:eb:13:bb:
         3f:fd:3d:50:2e:68:25:fe:c5:f7:64:12:6c:50:fc:28:5c:1b:
         60:6b:55:fe:b8:28:31:64:70:de:0d:b0:7f:c1:f6:46:6e:ec:
         15:e5:c7:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fb825Ut/DmluTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl
ODkzMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
MjdkYmExY2UtNTlmZi00MTM2LThhNzMtNGQyOWM2N2MyY2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqItC0xOxcCPgc6y5eEiNgdfixiNXAHvFP8P
IC8dHbXWb/RY84+bXtQD0F5UyjL+Aj0MwZi+Vra/A/ALERPtuGPB/wfH2Ufyno9A
PCazj3uOLnp3sxi/TU6NNqHrmV8pMtAsIHxZuj4N51E0qWYgYcoNdMmb964gJHPg
3MHya5jPbjDw54Ah3rRpeoKM8i8ZP3ROnafRDCDGofcrl0AvG2fTrg4EvhPncPlr
u8ZnFweTW+aXc/6M1fEO8HALLZXWhSNbVt3ICP3KWpu5AyRvvxNZ5uyweVVh6jJ7
h6W2/8CJu8KZXQP/3Cme6w/t8RreFGGsFQ1dzI8D4aMtXf3aMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFexqRYFprawhdyrvmYNjx0VKw5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2
MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjcwOTFlNDMtMzVkNS0z
MTcxLWEyNDUtM2RhZGI5ZDQ4Yzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm
ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj
ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz
MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYAnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqQcRgyvdSLAaeQqQx49hfvUxkn4U5wu2AFFjkVFkKMuvroZYiZ30gr
e6gqQkOztbXPpuVskvvocHokSabHgZzzEzXdTc2XLrtK+TJZO4Zdo3N278dogmtJ
P3gYpb2xtNQsvOmQFQUmxKWMiM1R2J20+6xkg0Ws3J4BaErEjIhdg8XlKT5B4ikf
gH2lVwNPtEOAj/Q6/1QZcP1eaDB/aSWTp6qePAT2w+b9dVnh8jzT59yQVQLH6U6t
1mx7nKG1pMljzr9Zb7dy3JqPE4ctKK6ml6+EkusTuz/9PVAuaCX+xfdkEmxQ/Chc
G2BrVf64KDFkcN4NsH/B9kZu7BXlx28=
-----END CERTIFICATE-----
Generated at Fri May 3 01:53:35 2024 by rpki-client on console-fra.rpki-client.org