Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa
File:                     02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa (raw, json)
Hash identifier:          ZvcrCdNsnqhJdiUNw7Ov7zRbbRug+R0Hz0auTgVo+Nw=
Subject key identifier:   BB:9A:0A:3B:7D:6B:50:D9:04:79:55:8D:72:90:88:CA:7E:0B:BE:F4
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F43285845AB234CD095BBF780D3BDEE40
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     399629
IP address blocks:        64.95.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:4c:d0:95:bb:f7:80:d3:bd:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=bda4296e-b268-495c-9272-78843866200e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:42:9f:97:d9:8f:c4:c5:fc:82:90:76:f1:
                    1c:d7:59:d3:7c:b0:90:81:57:85:36:92:c6:8d:ba:
                    b3:76:74:be:3f:35:cf:89:af:31:d2:be:53:84:f3:
                    e0:a7:3d:1d:3b:d8:40:4a:3e:74:5e:ff:60:00:4a:
                    b8:6e:3f:d8:7f:7c:a4:5d:d5:af:c2:b7:48:71:68:
                    9f:c4:b5:c9:26:c9:7f:a1:da:87:9d:2a:74:5e:89:
                    cd:5c:b2:5b:10:86:95:1d:37:05:fc:b7:f4:35:91:
                    51:6f:c6:36:a4:8d:5c:8b:a8:3e:ba:e1:27:8c:4e:
                    2c:d1:30:03:03:8c:e1:38:29:49:f5:9d:66:eb:63:
                    e0:64:3f:95:ab:d7:e6:63:7d:d2:77:ab:cf:13:63:
                    3d:53:f0:df:2f:96:a4:43:de:49:9a:7f:82:ca:50:
                    a1:53:5e:7d:02:31:dc:2d:bc:44:17:5a:8a:a5:d6:
                    df:2e:de:9d:73:18:7e:47:2b:bb:cc:5b:1d:26:9a:
                    5e:56:d6:34:22:70:af:32:40:df:53:8a:c5:93:9b:
                    16:1c:68:af:5d:78:2e:71:ef:13:82:3e:cf:ac:5e:
                    60:a4:5c:f6:1c:92:d1:19:2f:98:f5:b9:29:de:3e:
                    c6:16:9f:f4:65:cd:b8:e8:eb:5b:03:1c:93:8c:36:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9A:0A:3B:7D:6B:50:D9:04:79:55:8D:72:90:88:CA:7E:0B:BE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/02e5b5e8-d527-3bdf-9c9c-6de63a082d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.95.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:27:67:b4:2e:30:c3:48:60:60:f0:bf:fb:6d:50:75:83:f2:
         39:ba:f0:56:ed:f9:8f:2a:25:7d:11:5f:a9:06:8a:64:2c:f0:
         e7:a9:56:ec:0c:cc:03:71:a6:f0:33:4d:17:65:55:db:63:84:
         8e:dd:e0:58:1b:51:93:a7:8a:b4:ed:53:dc:86:c1:a6:99:ba:
         b7:af:76:8b:ce:85:8b:26:c4:cc:5f:a6:a0:1a:75:13:e9:8a:
         77:63:24:63:64:59:e6:7e:99:8d:48:d6:f9:c5:b1:bc:46:a9:
         af:4c:9c:ea:87:ef:f0:f1:ef:40:8c:0b:45:7c:87:3e:a6:00:
         17:92:5d:84:22:af:1e:59:e5:5d:a2:b1:e1:b7:55:9e:ca:a4:
         ce:f0:97:f8:d1:5e:cd:23:05:cd:97:21:72:18:14:8e:8f:bd:
         51:db:4f:45:86:cd:0c:94:61:62:76:54:92:67:55:4c:18:74:
         18:1b:ee:78:c8:83:d6:2e:5d:8c:ea:36:25:a5:a9:27:ac:0d:
         86:5d:66:8a:65:b1:dd:45:5d:f9:93:a1:44:ab:94:45:56:38:
         7e:65:d7:3c:f1:bc:51:ad:51:a9:9c:fa:ef:49:31:11:4d:d3:
         1b:3d:e4:f7:5c:88:75:5c:98:1f:6a:83:51:be:86:09:08:85:
         c0:bc:d2:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWrI0zQlbv3gNO97kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI0MDQyNjAxMDAyNVoXDTI0MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
YmRhNDI5NmUtYjI2OC00OTVjLTkyNzItNzg4NDM4NjYyMDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQRCn5fZj8TF/IKQdvEc11nTfLCQgVeFNpLG
jbqzdnS+PzXPia8x0r5ThPPgpz0dO9hASj50Xv9gAEq4bj/Yf3ykXdWvwrdIcWif
xLXJJsl/odqHnSp0XonNXLJbEIaVHTcF/Lf0NZFRb8Y2pI1ci6g+uuEnjE4s0TAD
A4zhOClJ9Z1m62PgZD+Vq9fmY33Sd6vPE2M9U/DfL5akQ95Jmn+CylChU159AjHc
LbxEF1qKpdbfLt6dcxh+Ryu7zFsdJppeVtY0InCvMkDfU4rFk5sWHGivXXguce8T
gj7PrF5gpFz2HJLRGS+Y9bkp3j7GFp/0Zc246OtbAxyTjDZiwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLuaCjt9a1DZBHlVjXKQiMp+C770MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvMDJlNWI1ZTgtZDUyNy0z
YmRmLTljOWMtNmRlNjNhMDgyZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF8KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYnZ7QuMMNIYGDwv/ttUHWD8jm68Fbt+Y8qJX0RX6kGimQs8OepVuwM
zANxpvAzTRdlVdtjhI7d4FgbUZOnirTtU9yGwaaZurevdovOhYsmxMxfpqAadRPp
indjJGNkWeZ+mY1I1vnFsbxGqa9MnOqH7/Dx70CMC0V8hz6mABeSXYQirx5Z5V2i
seG3VZ7KpM7wl/jRXs0jBc2XIXIYFI6PvVHbT0WGzQyUYWJ2VJJnVUwYdBgb7njI
g9YuXYzqNiWlqSesDYZdZoplsd1FXfmToUSrlEVWOH5l1zzxvFGtUamc+u9JMRFN
0xs95PdciHVcmB9qg1G+hgkIhcC80oU=
-----END CERTIFICATE-----
Generated at Sun May 5 15:36:41 2024 by rpki-client on console-fra.rpki-client.org