Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a289d75-f029-3bd1-9dc9-e630caecdd2c.roa
File:                     5a289d75-f029-3bd1-9dc9-e630caecdd2c.roa (raw, json)
Hash identifier:          9z7AiF79BJhdTchKQh505W+kCPvDA4I8w0J37bnJjJY=
Subject key identifier:   34:A6:F7:41:28:BE:28:2B:3A:7A:A1:F0:03:5A:5E:A0:90:A4:FA:9B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584582DAD0FEFC5A538C5D720980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a289d75-f029-3bd1-9dc9-e630caecdd2c.roa
Signing time:             Thu 11 Apr 2024 14:42:03 +0000
ROA not before:           Thu 11 Apr 2024 14:42:03 +0000
ROA not after:            Wed 10 Jul 2024 14:42:03 +0000
asID:                     24319
IP address blocks:        96.7.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:da:d0:fe:fc:5a:53:8c:5d:72:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 14:42:03 2024 GMT
            Not After : Jul 10 14:42:03 2024 GMT
        Subject: CN=f45e4130-c0f6-43b2-a378-59a8fdf67470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:d0:db:a3:4c:c5:e9:91:df:3a:df:94:85:
                    cb:76:09:7d:83:cf:64:7f:f6:21:4f:f6:dc:47:d5:
                    64:3d:89:91:05:19:0f:53:ee:13:49:cb:a4:c1:51:
                    89:d7:3a:f6:de:d8:db:8c:8a:c1:10:9a:22:ca:f7:
                    99:f0:d0:2e:17:fd:41:61:55:83:bb:21:ea:c1:49:
                    9b:9e:68:95:e7:a8:6b:95:0f:8a:90:d3:01:83:2b:
                    24:67:e9:52:8c:69:37:d6:20:b2:d0:59:27:c3:7b:
                    a3:63:e2:85:0a:c9:1f:6b:b9:b8:af:eb:6e:fd:21:
                    78:da:86:15:e3:16:eb:42:4a:42:58:85:2a:d8:5a:
                    2a:02:fe:0a:7f:7d:70:96:f5:c4:33:c3:a5:0e:40:
                    a9:7d:84:11:1d:c1:b4:bb:d1:f7:77:21:ba:c0:ab:
                    09:48:16:f3:3f:34:6c:29:c8:9e:d1:f2:92:48:65:
                    83:7e:4a:3c:6f:3f:79:80:7f:55:e5:c6:06:46:90:
                    dd:9e:f2:5c:4b:e3:31:69:fe:b9:38:94:8f:d6:a2:
                    93:bc:03:85:b0:9b:f3:e8:2f:68:9a:e0:2f:05:c6:
                    b2:34:51:ef:8e:48:8f:28:97:ac:66:29:ae:da:7d:
                    ac:9d:53:fc:0d:62:3b:eb:75:b3:72:40:2e:76:21:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A6:F7:41:28:BE:28:2B:3A:7A:A1:F0:03:5A:5E:A0:90:A4:FA:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a289d75-f029-3bd1-9dc9-e630caecdd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:21:a1:ce:78:cc:54:31:c3:0e:40:b9:eb:75:8b:b6:6a:00:
         67:f8:21:91:af:3c:c6:cf:6b:5f:ab:10:cf:f6:68:4a:27:2b:
         4b:eb:6e:18:90:b0:4c:db:6d:0b:2e:6b:2a:78:d4:ad:98:b3:
         37:93:15:40:ad:b1:c9:14:22:19:96:8a:fe:79:55:c2:ca:72:
         38:f7:36:45:51:d8:bf:88:9d:43:ff:c0:f4:38:2d:84:fa:e6:
         30:37:45:32:35:b1:c5:00:f1:52:92:aa:60:28:97:82:61:d3:
         04:fb:ae:14:58:1e:f3:4c:e2:48:00:f0:e8:40:36:52:e5:4f:
         77:15:d6:46:31:f9:2a:63:62:1c:f6:51:cd:88:83:0d:4a:ef:
         76:b8:30:87:89:28:2e:ba:97:66:d8:9d:7c:97:19:ce:d4:51:
         a4:38:13:0a:af:fc:52:e4:4b:c7:3f:00:a2:6b:40:74:86:64:
         f0:a1:0a:d7:20:e3:ec:82:b7:41:d5:af:8a:20:15:1c:5d:f4:
         02:bc:2e:c6:05:bf:b7:7e:23:5e:44:6a:7e:bc:63:ee:c0:bd:
         61:5b:c7:3a:b3:a2:fc:8c:a3:42:9e:48:59:bf:d3:a4:48:6e:
         30:e9:0a:bf:78:93:bc:e8:2b:e0:0c:b4:cb:bd:56:8e:68:06:
         39:be:81:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWC2tD+/FpTjF1yCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQxMTE0NDIwM1oXDTI0MDcxMDE0NDIwM1owLzEtMCsGA1UEAxMk
ZjQ1ZTQxMzAtYzBmNi00M2IyLWEzNzgtNTlhOGZkZjY3NDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0nQ26NMxemR3zrflIXLdgl9g89kf/YhT/bc
R9VkPYmRBRkPU+4TScukwVGJ1zr23tjbjIrBEJoiyveZ8NAuF/1BYVWDuyHqwUmb
nmiV56hrlQ+KkNMBgyskZ+lSjGk31iCy0Fknw3ujY+KFCskfa7m4r+tu/SF42oYV
4xbrQkpCWIUq2FoqAv4Kf31wlvXEM8OlDkCpfYQRHcG0u9H3dyG6wKsJSBbzPzRs
Kcie0fKSSGWDfko8bz95gH9V5cYGRpDdnvJcS+Mxaf65OJSP1qKTvAOFsJvz6C9o
muAvBcayNFHvjkiPKJesZimu2n2snVP8DWI763WzckAudiG9DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSm90EovigrOnqh8ANaXqCQpPqbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWEyODlkNzUtZjAyOS0z
YmQxLTlkYzktZTYzMGNhZWNkZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYAfzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAchoc54zFQxww5Auet1i7ZqAGf4IZGvPMbPa1+rEM/2aEonK0vrbhiQ
sEzbbQsuayp41K2YszeTFUCtsckUIhmWiv55VcLKcjj3NkVR2L+InUP/wPQ4LYT6
5jA3RTI1scUA8VKSqmAol4Jh0wT7rhRYHvNM4kgA8OhANlLlT3cV1kYx+SpjYhz2
Uc2Igw1K73a4MIeJKC66l2bYnXyXGc7UUaQ4Ewqv/FLkS8c/AKJrQHSGZPChCtcg
4+yCt0HVr4ogFRxd9AK8LsYFv7d+I15Ean68Y+7AvWFbxzqzovyMo0KeSFm/06RI
bjDpCr94k7zoK+AMtMu9Vo5oBjm+gXQ=
-----END CERTIFICATE-----
Generated at Sat May 18 01:43:58 2024 by rpki-client on console-fra.rpki-client.org