Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
File:                     5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa (raw, json)
Hash identifier:          bpAfaOmYZYB2orYYt6HSD8Dcbhaaq4s3g/XR77/Ptlk=
Subject key identifier:   1A:80:D4:4A:8F:09:A0:5A:16:59:FA:22:3E:44:3B:64:96:2C:66:A0
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F432858457D131CEC28F6BB21566C0CC0
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     393398
IP address blocks:        96.47.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:1c:ec:28:f6:bb:21:56:6c:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=105c6d44-688c-41cc-9ff3-6a1c476e6bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:30:aa:72:0a:94:d9:17:0e:b3:3f:5f:1b:
                    2a:52:5b:3a:c8:67:33:6f:82:30:b0:75:8f:bf:b1:
                    34:fa:85:ab:b8:9c:83:52:12:f2:5f:49:ce:97:64:
                    1a:9e:5a:9d:18:67:2a:e3:1e:cd:60:03:5d:ce:b7:
                    30:0f:87:c4:4a:03:37:75:99:07:dc:ca:70:8d:0b:
                    97:2d:76:d4:05:8c:0e:6b:26:08:c5:ea:d4:8b:92:
                    b3:16:a1:79:d8:dc:15:ca:34:fa:e7:7c:ba:ec:f4:
                    c4:33:d0:c5:24:79:84:18:5d:dc:62:fa:0e:ff:5c:
                    2d:1d:73:97:5b:5f:3b:12:74:32:7e:f6:82:b2:9c:
                    48:a9:f8:e6:74:bc:28:3e:6e:cc:73:04:a0:b1:5d:
                    24:1d:cb:1d:9c:0d:b3:ef:fc:e7:21:0c:5e:af:91:
                    eb:56:e3:91:6a:67:19:e3:18:4e:da:41:64:77:5f:
                    a1:cd:d7:c4:4f:29:7d:9c:05:62:30:f8:74:ef:e8:
                    4f:6b:16:11:82:1e:bf:28:88:6e:37:e6:d9:f6:be:
                    10:eb:81:13:0a:ba:df:c3:a5:cc:66:a5:86:5b:93:
                    84:ff:03:98:0f:f1:d3:b4:10:76:c2:ee:36:5f:f4:
                    3d:fa:1c:3e:db:9a:90:2e:01:dd:ba:5b:05:b0:c4:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:80:D4:4A:8F:09:A0:5A:16:59:FA:22:3E:44:3B:64:96:2C:66:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:07:1d:c1:41:f5:4a:17:eb:82:87:24:ab:df:f5:b4:49:30:
         5b:0f:d1:89:94:93:82:0b:db:f8:88:92:72:a2:38:b3:0c:c7:
         ce:08:c2:5e:32:f1:6a:98:f3:65:3c:8e:85:2a:14:5b:42:dd:
         d5:dc:0f:06:88:49:05:8a:cd:d4:f9:5f:75:6d:54:eb:b1:13:
         2e:56:a1:b4:3c:5e:29:13:d3:90:ea:51:64:73:52:a8:0b:28:
         2c:ce:75:74:36:d9:e1:57:60:44:04:69:a6:df:1c:d0:f2:e3:
         4a:e4:0e:49:2c:19:9e:93:7c:ee:d6:d6:bb:9d:49:89:c2:0d:
         3e:b8:61:77:5d:14:46:85:39:18:01:cb:62:59:a4:cc:60:3c:
         bb:1a:5a:ae:af:46:fd:0c:1c:ef:57:07:2a:00:0f:35:17:8f:
         5f:f2:16:a4:f2:95:4e:5b:e2:2f:23:e1:09:ed:c0:48:55:6c:
         6c:1f:45:a9:29:60:1c:f5:41:cd:98:45:78:0e:9c:c1:56:c2:
         82:9c:b9:79:83:5b:d7:d4:7f:da:8d:46:fa:4d:68:d5:59:39:
         92:74:1e:5a:66:68:42:a6:06:34:49:23:81:7c:07:13:21:f7:
         03:67:4a:c6:ae:89:5d:6b:a9:2d:c6:b8:d7:cf:a6:df:cb:26:
         99:60:0d:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9ExzsKPa7IVZsDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz
ZmU0MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
MTA1YzZkNDQtNjg4Yy00MWNjLTlmZjMtNmExYzQ3NmU2YmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeowqnIKlNkXDrM/XxsqUls6yGczb4IwsHWP
v7E0+oWruJyDUhLyX0nOl2QanlqdGGcq4x7NYANdzrcwD4fESgM3dZkH3MpwjQuX
LXbUBYwOayYIxerUi5KzFqF52NwVyjT653y67PTEM9DFJHmEGF3cYvoO/1wtHXOX
W187EnQyfvaCspxIqfjmdLwoPm7McwSgsV0kHcsdnA2z7/znIQxer5HrVuORamcZ
4xhO2kFkd1+hzdfETyl9nAViMPh07+hPaxYRgh6/KIhuN+bZ9r4Q64ETCrrfw6XM
ZqWGW5OE/wOYD/HTtBB2wu42X/Q9+hw+25qQLgHdulsFsMT8rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqA1EqPCaBaFln6Ij5EO2SWLGagMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3
OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvNWZmM2EyOTMtYjdmZS0z
NWMzLTk1MmUtMmI0N2NhYmJiMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw
MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0
M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm
NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkHHcFB9UoX64KHJKvf9bRJMFsP0YmUk4IL2/iIknKiOLMMx84Iwl4y
8WqY82U8joUqFFtC3dXcDwaISQWKzdT5X3VtVOuxEy5WobQ8XikT05DqUWRzUqgL
KCzOdXQ22eFXYEQEaabfHNDy40rkDkksGZ6TfO7W1rudSYnCDT64YXddFEaFORgB
y2JZpMxgPLsaWq6vRv0MHO9XByoADzUXj1/yFqTylU5b4i8j4QntwEhVbGwfRakp
YBz1Qc2YRXgOnMFWwoKcuXmDW9fUf9qNRvpNaNVZOZJ0HlpmaEKmBjRJI4F8BxMh
9wNnSsauiV1rqS3GuNfPpt/LJplgDWc=
-----END CERTIFICATE-----
Generated at Sun May 5 21:21:08 2024 by rpki-client on console-ams.rpki-client.org