Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa
File:                     0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa (raw, json)
Hash identifier:          Bx8GYV/Nj20zjZjSJngSPIh12xltj2SAoZ2tpBhZOgU=
Subject key identifier:   36:A3:5C:DD:A7:BC:10:84:BD:55:1F:16:24:74:9E:AF:1E:F7:8C:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584582DAB1C15BC2683209C57B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa
Signing time:             Thu 11 Apr 2024 14:41:48 +0000
ROA not before:           Thu 11 Apr 2024 14:41:48 +0000
ROA not after:            Wed 10 Jul 2024 14:41:48 +0000
asID:                     20940
IP address blocks:        96.7.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:da:b1:c1:5b:c2:68:32:09:c5:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 14:41:48 2024 GMT
            Not After : Jul 10 14:41:48 2024 GMT
        Subject: CN=d168e1b4-2d5c-4a7d-94a1-ab18329eb419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:79:65:7a:47:b3:45:34:55:51:70:fa:93:12:
                    60:61:85:3f:5e:48:d3:cf:07:bf:59:6f:c3:f9:41:
                    bc:ab:0f:1b:db:ab:a0:78:ef:c5:db:98:d6:fa:2b:
                    2d:de:af:1a:1d:57:8f:1a:d1:6e:65:2d:c6:5f:4d:
                    61:e8:34:64:71:dc:6f:17:88:9b:16:89:4e:49:98:
                    a3:41:23:5a:5c:c1:49:96:80:f2:fc:e8:08:0d:cc:
                    09:33:70:73:7a:ef:7b:3b:2f:2a:c1:a0:b4:7c:f8:
                    f9:5e:91:9d:01:82:20:64:f3:ed:6c:17:93:de:ac:
                    d5:a4:aa:59:2a:06:d4:a6:35:00:91:ce:7f:9e:20:
                    8e:4b:b6:d8:16:09:ea:82:3f:62:1e:f8:00:ff:0c:
                    20:33:b1:39:f2:6d:fb:27:3c:da:15:cf:dd:50:25:
                    b7:6c:65:5b:dc:dd:41:0c:b2:b4:63:ed:c7:5d:9e:
                    09:8d:68:e5:c4:3f:0b:cc:0b:92:b7:45:62:d4:93:
                    d5:08:8f:f6:5b:4f:64:04:3d:c2:ea:95:3e:3e:5e:
                    c8:93:22:62:e2:39:1a:20:47:6a:87:40:3f:57:c9:
                    1d:4c:2c:75:0f:e3:de:d6:54:fb:a3:16:29:98:6e:
                    33:6b:4e:d5:87:b0:47:3e:a1:79:76:ec:cf:32:52:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A3:5C:DD:A7:BC:10:84:BD:55:1F:16:24:74:9E:AF:1E:F7:8C:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ca30b78-fe81-3f5c-8ba8-0a560e30e6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:29:27:dc:09:31:9b:75:3f:d3:9b:b9:e3:4d:9d:54:9d:e1:
         55:d4:2f:2c:55:d5:94:27:6e:77:65:f3:ab:35:a8:d4:21:6b:
         18:a5:1e:27:7e:13:4e:89:20:43:3d:36:3b:57:b1:e6:e5:1d:
         8b:a2:6c:fb:37:eb:ec:14:4c:bc:a6:49:8d:01:1e:dd:f7:58:
         3d:7b:52:5e:08:30:21:1b:f3:a2:e8:27:fd:7c:ae:39:5e:18:
         90:2a:69:9e:c2:39:f6:54:7e:72:36:71:dc:39:f8:ce:05:de:
         da:8e:69:9b:39:35:66:ac:61:10:18:49:8c:d4:26:e3:f8:c0:
         b5:f6:b6:49:dd:cb:be:97:26:3d:a4:13:f9:9e:a2:84:ec:cd:
         83:1e:4a:18:0f:d0:e3:10:3c:1d:84:0e:f2:b2:a3:fe:75:77:
         d2:49:57:63:44:33:e5:cf:47:4b:a9:60:7b:89:01:4e:f6:07:
         f9:27:d0:b4:96:b7:e6:a4:d8:c4:d8:c6:5d:04:f7:71:dd:96:
         be:c6:f2:a0:36:94:62:e5:f1:37:db:b8:21:d2:c3:e6:c7:33:
         8d:e4:ec:ba:5e:7b:70:b2:ca:54:40:19:52:d2:6c:3a:6d:b3:
         6b:0a:c6:23:9c:92:fa:e4:15:e4:95:88:49:63:05:0f:d8:88:
         d5:02:a2:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWC2rHBW8JoMgnFe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQxMTE0NDE0OFoXDTI0MDcxMDE0NDE0OFowLzEtMCsGA1UEAxMk
ZDE2OGUxYjQtMmQ1Yy00YTdkLTk0YTEtYWIxODMyOWViNDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XllekezRTRVUXD6kxJgYYU/XkjTzwe/WW/D
+UG8qw8b26ugeO/F25jW+ist3q8aHVePGtFuZS3GX01h6DRkcdxvF4ibFolOSZij
QSNaXMFJloDy/OgIDcwJM3Bzeu97Oy8qwaC0fPj5XpGdAYIgZPPtbBeT3qzVpKpZ
KgbUpjUAkc5/niCOS7bYFgnqgj9iHvgA/wwgM7E58m37JzzaFc/dUCW3bGVb3N1B
DLK0Y+3HXZ4JjWjlxD8LzAuSt0Vi1JPVCI/2W09kBD3C6pU+Pl7IkyJi4jkaIEdq
h0A/V8kdTCx1D+Pe1lT7oxYpmG4za07Vh7BHPqF5duzPMlLW5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDajXN2nvBCEvVUfFiR0nq8e94zgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNhMzBiNzgtZmU4MS0z
ZjVjLThiYTgtMGE1NjBlMzBlNmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAeAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUpJ9wJMZt1P9ObueNNnVSd4VXULyxV1ZQnbndl86s1qNQhaxilHid+
E06JIEM9NjtXseblHYuibPs36+wUTLymSY0BHt33WD17Ul4IMCEb86LoJ/18rjle
GJAqaZ7COfZUfnI2cdw5+M4F3tqOaZs5NWasYRAYSYzUJuP4wLX2tkndy76XJj2k
E/meooTszYMeShgP0OMQPB2EDvKyo/51d9JJV2NEM+XPR0upYHuJAU72B/kn0LSW
t+ak2MTYxl0E93Hdlr7G8qA2lGLl8TfbuCHSw+bHM43k7Lpee3CyylRAGVLSbDpt
s2sKxiOckvrkFeSViEljBQ/YiNUCouk=
-----END CERTIFICATE-----
Generated at Fri May 17 22:02:59 2024 by rpki-client on console-ams.rpki-client.org