Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
File:                     dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa (raw, json)
Hash identifier:          fFu+ZvQMkVh6j9Vh+xrvfE8C7wbncGwtHoqTtD63r+U=
Subject key identifier:   4B:8D:D8:72:0D:94:FB:2D:6B:BD:A5:4A:50:80:5E:B3:DD:69:39:82
Certificate issuer:       /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial:       010D0C9F432858472C65E52C8125B045F8FD4F80
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     46632
IP address blocks:        96.45.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e5:2c:81:25:b0:45:f8:fd:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=87a5f30c-30f8-4a0e-8587-62f6a4f1e593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:70:22:0f:5a:9f:df:3b:fe:c2:47:2c:60:
                    eb:fc:60:f7:58:7e:b2:7e:3a:9f:71:2c:18:7d:8b:
                    05:7d:79:e4:4e:3b:4c:61:3b:38:da:87:2f:86:b6:
                    3f:7a:8d:88:ba:32:f4:1a:69:f2:c9:52:e6:bb:00:
                    91:91:64:48:91:41:95:c5:5a:e5:d8:59:62:2b:91:
                    e1:55:8a:65:69:e6:1b:3d:17:97:a3:0c:57:75:39:
                    5a:55:6d:e3:aa:12:52:82:f8:e7:c6:0f:0d:95:28:
                    33:cc:b8:4c:36:72:dc:6f:e8:71:32:5f:98:96:b4:
                    34:ab:ec:0c:dc:cf:54:0b:af:31:6e:20:ca:b8:d7:
                    f8:c1:cc:69:4f:4d:43:f0:b9:db:e1:16:66:5b:66:
                    74:13:07:72:e1:e5:80:55:01:69:da:d0:0b:fc:67:
                    14:cf:b0:6f:af:0e:d1:3d:62:1f:6a:f9:d9:9f:e0:
                    7e:de:b4:cd:b6:b0:a2:4a:54:b7:aa:a6:fc:95:8a:
                    a6:21:a4:9f:b4:e2:ab:0e:48:2b:6a:6e:cb:38:6b:
                    88:7d:4f:d9:93:8e:d1:c6:45:ba:ca:ed:75:90:99:
                    3d:ad:57:5b:cd:56:c1:d4:f8:bc:56:04:22:d1:60:
                    c2:57:15:8a:7a:b3:49:9f:79:26:8e:b4:ae:35:de:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8D:D8:72:0D:94:FB:2D:6B:BD:A5:4A:50:80:5E:B3:DD:69:39:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:d3:96:1e:15:6a:d2:c2:9a:db:9e:07:b7:dd:32:2f:43:
         bd:db:7f:7b:42:c2:0d:a2:d3:4c:d6:34:e6:f7:8a:ca:c1:3e:
         73:ff:94:a5:d0:4e:06:52:c9:5c:2a:05:d9:e1:17:b9:f6:f6:
         4f:7d:68:72:c2:2d:79:f8:e1:6a:61:d9:42:90:f0:58:37:5e:
         1a:c9:74:aa:66:ae:b4:f5:2f:b1:de:97:fe:83:ac:e9:ce:d7:
         f5:3d:30:fa:3b:38:da:b7:70:3a:d9:02:cf:31:74:85:4e:33:
         a1:86:a4:59:fb:31:3f:6f:b6:5c:c2:5c:aa:1b:2c:90:0a:c1:
         42:0d:d2:f0:84:ed:fc:12:32:19:ed:51:4b:f3:8f:29:6a:40:
         33:ce:ff:28:41:a5:1b:36:3a:51:e0:13:4b:0d:3b:d2:87:85:
         45:e9:63:9c:ba:34:48:40:98:4d:f8:5a:dc:89:dd:53:c3:4e:
         1c:fa:4b:6e:13:34:dd:ff:65:c7:55:c2:d5:98:a8:71:9e:9d:
         51:12:14:bb:5d:e5:d1:18:d9:f4:07:14:d2:bf:54:b5:3f:46:
         84:57:b6:62:f8:da:1a:c9:34:8c:3b:41:54:e4:bb:5f:db:36:
         63:ee:4b:35:49:23:cc:7f:70:78:5c:5e:ce:b1:83:0b:0b:6d:
         d9:a4:8a:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZeUsgSWwRfj9T4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw
OTZkMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk
ODdhNWYzMGMtMzBmOC00YTBlLTg1ODctNjJmNmE0ZjFlNTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ZwIg9an987/sJHLGDr/GD3WH6yfjqfcSwY
fYsFfXnkTjtMYTs42ocvhrY/eo2IujL0GmnyyVLmuwCRkWRIkUGVxVrl2FliK5Hh
VYplaeYbPReXowxXdTlaVW3jqhJSgvjnxg8NlSgzzLhMNnLcb+hxMl+YlrQ0q+wM
3M9UC68xbiDKuNf4wcxpT01D8Lnb4RZmW2Z0Ewdy4eWAVQFp2tAL/GcUz7Bvrw7R
PWIfavnZn+B+3rTNtrCiSlS3qqb8lYqmIaSftOKrDkgram7LOGuIfU/Zk47RxkW6
yu11kJk9rVdbzVbB1Pi8VgQi0WDCVxWKerNJn3kmjrSuNd5XvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuN2HINlPsta72lSlCAXrPdaTmCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5
NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvZGZmNmMzNTItNWEyZS0z
YzlkLTkxMDYtZTU2NmQxNGI5OWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl
ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3
MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw
YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYC3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/H05YeFWrSwprbnge33TIvQ73bf3tCwg2i00zWNOb3isrBPnP/lKXQ
TgZSyVwqBdnhF7n29k99aHLCLXn44Wph2UKQ8Fg3XhrJdKpmrrT1L7Hel/6DrOnO
1/U9MPo7ONq3cDrZAs8xdIVOM6GGpFn7MT9vtlzCXKobLJAKwUIN0vCE7fwSMhnt
UUvzjylqQDPO/yhBpRs2OlHgE0sNO9KHhUXpY5y6NEhAmE34WtyJ3VPDThz6S24T
NN3/ZcdVwtWYqHGenVESFLtd5dEY2fQHFNK/VLU/RoRXtmL42hrJNIw7QVTku1/b
NmPuSzVJI8x/cHhcXs6xgwsLbdmkihw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:17 2024 by rpki-client on console-ams.rpki-client.org