Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25953b38-f414-313d-8116-238b15a20456.roa
File:                     25953b38-f414-313d-8116-238b15a20456.roa (raw, json)
Hash identifier:          xo3UN/hwQ2f1dpPvhmOw5yDmxFay3N5IrTpZycxRxYg=
Subject key identifier:   54:85:94:9D:64:12:BD:6C:8D:36:CC:D8:D0:34:4E:B0:6E:A6:CA:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474C80CA1BD10A955491D08E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25953b38-f414-313d-8116-238b15a20456.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     701
IP address blocks:        96.228.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:ca:1b:d1:0a:95:54:91:d0:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=8103274e-7d04-43ab-866f-4ad32dbebd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:7a:88:2e:b1:00:94:37:97:2b:b4:19:37:
                    bd:d2:93:c7:a9:04:02:2b:7e:3a:25:ea:14:f0:d9:
                    99:80:1f:b7:7f:84:58:80:a5:94:db:65:2c:8b:dc:
                    e9:e3:b8:ea:f7:42:a1:ad:4c:f8:c0:2a:3f:ef:15:
                    7c:65:76:32:ed:e2:ba:49:f9:6d:35:40:70:2f:f6:
                    e4:c0:d2:9a:d1:b2:ca:45:f8:c4:44:6d:2f:76:ef:
                    9f:a1:e3:7c:a6:fa:21:85:4c:c0:2d:34:7f:fb:a7:
                    bd:fe:25:b6:12:4f:c8:85:81:e0:ec:04:43:8a:37:
                    a0:2e:8f:40:3b:54:ad:87:79:e2:81:38:fb:df:95:
                    6f:84:1e:11:77:b0:e7:7c:3b:8d:1d:4e:93:b1:86:
                    d6:1a:d2:1a:4b:ce:d5:a4:d8:82:86:09:65:d0:cf:
                    c0:1a:a2:a4:90:e9:67:fe:1d:59:f0:63:48:1b:06:
                    37:43:f1:0b:07:1f:55:a0:e0:06:2e:d9:12:43:87:
                    41:ca:36:38:96:d4:ad:30:d6:fc:32:b8:8a:c3:4c:
                    9c:49:21:b8:a1:2a:4a:9b:82:3c:8e:91:13:ab:08:
                    95:a5:66:0a:2b:8e:bb:e1:a8:8c:a0:48:fa:49:63:
                    3a:93:d6:db:51:ca:d1:ca:7b:7b:b8:84:7d:01:49:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:85:94:9D:64:12:BD:6C:8D:36:CC:D8:D0:34:4E:B0:6E:A6:CA:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25953b38-f414-313d-8116-238b15a20456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.228.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f9:37:52:f2:55:0f:d5:00:ef:bd:ae:56:29:f1:6d:bc:00:
         54:4b:c5:19:b6:e3:bc:77:e1:16:c0:23:37:66:78:c2:8b:da:
         3e:5e:13:b4:4e:e1:d0:6d:c1:0e:47:f2:7c:bb:f5:d8:41:4d:
         ae:75:47:79:77:96:2b:a0:6e:7b:64:bd:b4:77:a8:20:d3:c2:
         71:3c:d9:2b:93:01:f3:da:ef:b2:74:c8:ce:d6:6d:0e:e3:3f:
         01:0b:d8:b1:43:b9:dd:44:ec:cd:b9:6e:5f:6e:5c:dc:2d:d1:
         54:4f:60:52:00:df:5e:54:64:16:25:2c:c4:a6:8f:e8:5f:cf:
         4c:18:81:af:e7:1a:9e:fb:8e:f3:ab:5b:33:32:31:1a:99:f8:
         bb:1c:79:74:2a:51:b7:cb:4c:36:29:89:d1:de:b6:61:1e:0f:
         01:d2:9e:8d:ab:53:e8:a6:14:fe:c9:8b:33:44:e4:df:20:be:
         a9:29:2c:c1:a0:21:12:2e:dd:af:0c:40:08:85:63:27:47:49:
         f6:51:f3:0b:ae:63:46:2c:03:6c:eb:5f:df:c8:42:38:9a:a1:
         f4:e6:fa:6c:d8:a3:6c:b3:1a:cd:5a:c2:a5:d2:22:d9:c7:06:
         7d:b3:af:39:b1:95:f7:1b:c3:37:9c:95:c0:e0:e7:a9:a0:19:
         8a:c3:85:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgMob0QqVVJHQjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
ODEwMzI3NGUtN2QwNC00M2FiLTg2NmYtNGFkMzJkYmViZDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9B6iC6xAJQ3lyu0GTe90pPHqQQCK346JeoU
8NmZgB+3f4RYgKWU22Usi9zp47jq90KhrUz4wCo/7xV8ZXYy7eK6SfltNUBwL/bk
wNKa0bLKRfjERG0vdu+foeN8pvohhUzALTR/+6e9/iW2Ek/IhYHg7ARDijegLo9A
O1Sth3nigTj735VvhB4Rd7DnfDuNHU6TsYbWGtIaS87VpNiChgll0M/AGqKkkOln
/h1Z8GNIGwY3Q/ELBx9VoOAGLtkSQ4dByjY4ltStMNb8MriKw0ycSSG4oSpKm4I8
jpETqwiVpWYKK4674aiMoEj6SWM6k9bbUcrRynt7uIR9AUm7rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSFlJ1kEr1sjTbM2NA0TrBupsrkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjU5NTNiMzgtZjQxNC0z
MTNkLTgxMTYtMjM4YjE1YTIwNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYOQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGL5N1LyVQ/VAO+9rlYp8W28AFRLxRm247x34RbAIzdmeMKL2j5eE7RO
4dBtwQ5H8ny79dhBTa51R3l3liugbntkvbR3qCDTwnE82SuTAfPa77J0yM7WbQ7j
PwEL2LFDud1E7M25bl9uXNwt0VRPYFIA315UZBYlLMSmj+hfz0wYga/nGp77jvOr
WzMyMRqZ+LsceXQqUbfLTDYpidHetmEeDwHSno2rU+imFP7JizNE5N8gvqkpLMGg
IRIu3a8MQAiFYydHSfZR8wuuY0YsA2zrX9/IQjiaofTm+mzYo2yzGs1awqXSItnH
Bn2zrzmxlfcbwzeclcDg56mgGYrDhaM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:16 2024 by rpki-client on console-ams.rpki-client.org