Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b96c08a-0220-37fe-b69a-907045b640e7.roa
File:                     4b96c08a-0220-37fe-b69a-907045b640e7.roa (raw, json)
Hash identifier:          4qb8iUom4TfHNLnNjgVDo0idai9uNJ9hTKzjPAJ1DG4=
Subject key identifier:   00:93:23:DB:E5:1A:13:7C:01:75:85:B7:66:A6:EE:C4:A5:C3:0F:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845883DDC24495EA678CC8CBA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b96c08a-0220-37fe-b69a-907045b640e7.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     24319
IP address blocks:        104.96.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:dc:24:49:5e:a6:78:cc:8c:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=27591f35-af45-4e1f-a70b-be6e77bcff27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:41:88:35:33:af:1e:e3:4e:1f:eb:67:9f:
                    3e:57:4f:85:12:64:17:ac:f1:a9:41:5c:22:2d:17:
                    e2:2f:a5:31:f9:13:27:b2:40:63:c2:4d:33:cd:6f:
                    bc:5a:86:24:aa:c4:dc:a1:1d:d8:49:4d:90:32:07:
                    52:02:5a:c8:26:51:71:2f:e7:b8:3b:d8:62:44:05:
                    d1:9c:2c:6b:38:da:31:ac:0e:32:21:89:70:65:4d:
                    10:02:fa:ca:47:c1:ff:fa:e0:fd:74:b2:ae:fc:13:
                    a7:27:af:8f:fa:e3:72:4a:3d:90:0a:38:ed:a8:a2:
                    08:af:97:54:f7:85:64:1b:cf:62:d8:05:7f:24:6a:
                    b9:2a:02:79:00:f1:37:27:3c:d7:00:89:f4:bf:3f:
                    d3:9f:9f:44:51:b4:7b:69:05:f7:4a:71:0e:a9:a4:
                    6d:4f:c3:15:64:fa:15:b2:b3:cd:63:49:54:4b:c2:
                    64:94:87:b5:42:f8:d5:5a:18:4d:49:db:6a:9d:77:
                    c0:3c:3b:36:72:89:81:f3:72:62:08:35:25:45:a9:
                    73:5b:7d:fc:b8:18:73:9e:77:29:dc:76:51:7a:3b:
                    a3:95:0f:55:99:12:fd:1f:1c:9e:5f:b2:4f:47:24:
                    4a:05:d6:7a:f9:c0:85:10:e4:ea:88:18:ec:a8:ae:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:93:23:DB:E5:1A:13:7C:01:75:85:B7:66:A6:EE:C4:A5:C3:0F:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b96c08a-0220-37fe-b69a-907045b640e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.96.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9d:e1:01:0b:18:2e:67:ee:61:0c:32:31:81:f0:bf:57:6c:
         8c:09:31:07:fe:66:52:0c:40:b4:0c:a7:ff:73:4d:2f:7f:b1:
         11:e8:35:87:e9:c6:c2:3c:69:b4:c4:93:af:4d:ee:0d:21:c6:
         39:5e:b6:35:b9:95:19:e8:db:7d:fa:78:4f:1f:c2:bb:c8:11:
         bc:1c:40:b7:2f:7f:a3:09:d3:f0:e1:08:8a:e6:8d:26:cb:ba:
         84:8d:8f:c9:79:10:b3:20:5b:04:4f:8a:ea:de:7f:60:c4:9b:
         59:0f:43:2a:6d:f1:5d:c6:93:83:d5:ae:a5:95:c4:ec:92:5d:
         dd:a3:f7:87:27:31:63:82:76:d5:97:dc:94:9e:5b:92:21:bf:
         95:0f:26:dc:c6:46:1f:57:d1:46:1a:18:ca:f2:80:5c:dd:e2:
         41:6c:f0:2b:d0:e5:b2:b0:30:ba:7f:28:14:7c:92:0e:a7:e8:
         ff:1f:82:8f:9b:bc:3e:e2:ff:b6:83:22:48:46:4c:17:c0:31:
         75:8b:90:93:d3:32:fd:98:5d:fd:31:47:77:79:24:bd:e5:fc:
         56:a2:ae:25:a4:1e:1e:88:a8:9d:9f:03:cd:53:27:aa:57:6b:
         7c:1b:40:17:61:ca:b4:91:52:d0:1f:43:a1:eb:f5:13:68:ab:
         b8:b0:48:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWIPdwkSV6meMyMuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQxMzEzMDAzNFoXDTI0MDcxMjEzMDAzNFowLzEtMCsGA1UEAxMk
Mjc1OTFmMzUtYWY0NS00ZTFmLWE3MGItYmU2ZTc3YmNmZjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXZBiDUzrx7jTh/rZ58+V0+FEmQXrPGpQVwi
LRfiL6Ux+RMnskBjwk0zzW+8WoYkqsTcoR3YSU2QMgdSAlrIJlFxL+e4O9hiRAXR
nCxrONoxrA4yIYlwZU0QAvrKR8H/+uD9dLKu/BOnJ6+P+uNySj2QCjjtqKIIr5dU
94VkG89i2AV/JGq5KgJ5APE3JzzXAIn0vz/Tn59EUbR7aQX3SnEOqaRtT8MVZPoV
srPNY0lUS8JklIe1QvjVWhhNSdtqnXfAPDs2comB83JiCDUlRalzW338uBhznncp
3HZRejujlQ9VmRL9HxyeX7JPRyRKBdZ6+cCFEOTqiBjsqK59OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFACTI9vlGhN8AXWFt2am7sSlww8pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGI5NmMwOGEtMDIyMC0z
N2ZlLWI2OWEtOTA3MDQ1YjY0MGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGCqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSd4QELGC5n7mEMMjGB8L9XbIwJMQf+ZlIMQLQMp/9zTS9/sRHoNYfp
xsI8abTEk69N7g0hxjletjW5lRno2336eE8fwrvIEbwcQLcvf6MJ0/DhCIrmjSbL
uoSNj8l5ELMgWwRPiuref2DEm1kPQypt8V3Gk4PVrqWVxOySXd2j94cnMWOCdtWX
3JSeW5Ihv5UPJtzGRh9X0UYaGMrygFzd4kFs8CvQ5bKwMLp/KBR8kg6n6P8fgo+b
vD7i/7aDIkhGTBfAMXWLkJPTMv2YXf0xR3d5JL3l/FairiWkHh6IqJ2fA81TJ6pX
a3wbQBdhyrSRUtAfQ6Hr9RNoq7iwSO4=
-----END CERTIFICATE-----
Generated at Fri May 17 01:57:51 2024 by rpki-client on console-fra.rpki-client.org