Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a9ee133-a144-3302-b77e-9f981e68d4a7.roa
File:                     6a9ee133-a144-3302-b77e-9f981e68d4a7.roa (raw, json)
Hash identifier:          gcq2uW57QmY0eHbBkUqA9NP37xBWJMVfVpCLlFCpkOM=
Subject key identifier:   B9:B1:9E:91:CF:A9:56:9F:58:F9:7B:89:20:B7:9B:78:AF:E6:D0:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858458C6DDBDAA6A2443F87CA5380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a9ee133-a144-3302-b77e-9f981e68d4a7.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     701
IP address blocks:        96.236.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:db:da:a6:a2:44:3f:87:ca:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=0466ee93-8c1f-44ea-8978-b9cebf1381c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a5:7d:5f:4f:4f:3a:79:6d:94:b1:9f:a8:3d:
                    c7:57:f6:6e:fd:60:55:c0:d8:5f:98:b1:b6:ce:5a:
                    f1:94:c2:b1:46:8b:12:e1:89:49:11:9a:cf:f1:14:
                    3d:5b:2b:76:96:1a:c5:a0:3a:d6:fb:ae:55:bc:0a:
                    fa:6b:9a:94:04:8f:77:9f:a4:fd:f9:d5:3d:f4:72:
                    92:b7:58:ff:76:7d:fc:01:4c:3c:a1:5b:14:62:e0:
                    61:75:e3:93:fc:f2:ed:aa:10:4e:1e:73:ba:6f:61:
                    7d:19:ab:0e:ac:65:fe:07:fd:8d:18:46:44:d6:b7:
                    5e:37:6e:ac:b2:ee:c9:df:16:51:0d:f2:ba:e9:b7:
                    47:f0:d7:d1:96:0f:c3:41:0a:04:db:48:10:c1:6f:
                    5b:a0:c4:64:71:b5:34:09:b0:24:5a:ff:27:b8:f5:
                    8d:23:17:c5:db:b7:6d:4a:78:cc:47:52:75:fe:3d:
                    77:85:86:fe:d9:45:e3:cf:6d:7a:2b:16:72:4c:15:
                    a3:3d:93:50:6d:12:c6:bb:e6:f4:9d:53:cd:46:a2:
                    45:be:6e:eb:bd:3b:36:2f:7e:a3:81:72:9e:f5:bc:
                    c2:f1:55:b4:2d:51:e2:57:37:54:13:d9:b5:27:64:
                    dc:d3:08:90:4c:e5:1b:f6:ff:5f:4f:35:13:e9:b2:
                    bc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B1:9E:91:CF:A9:56:9F:58:F9:7B:89:20:B7:9B:78:AF:E6:D0:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a9ee133-a144-3302-b77e-9f981e68d4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.236.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:07:92:81:85:b2:74:eb:e9:75:34:58:15:47:b0:4d:60:ac:
         1a:4a:2d:68:23:35:eb:bc:c3:6f:ef:01:95:41:b1:c3:d2:6a:
         a6:fb:bf:f0:0d:71:23:2a:82:c3:fe:87:e5:43:15:bc:5f:ce:
         3b:61:d1:b8:9f:6a:ac:15:b7:99:73:b6:29:60:6c:f6:15:30:
         88:25:4c:1d:b2:a5:7a:93:8d:dd:26:ce:5f:65:5a:33:55:11:
         93:4a:61:bc:10:b3:c6:95:c6:af:78:91:d3:e9:11:5d:9f:6b:
         82:d4:8c:69:64:28:8c:2b:47:f3:b6:46:b0:a8:c2:a9:a5:3b:
         a1:fe:66:d7:4e:71:5d:9e:46:aa:be:09:9d:a1:af:d0:40:f1:
         f6:8f:49:3d:9b:d5:31:37:fa:c7:b1:87:84:e8:38:f8:64:c4:
         ea:a8:70:1e:58:66:1b:b9:18:a8:2e:42:cc:55:c5:f2:a7:d1:
         22:fe:69:18:26:3c:23:90:dc:55:47:2f:c2:5d:4c:3f:d2:0a:
         20:1d:0a:be:57:2c:b1:b5:0b:d1:cb:93:04:d7:ac:9e:f0:4c:
         62:5a:12:47:8c:68:e0:4f:79:57:49:8a:82:7f:9f:3b:57:dc:
         ee:56:7b:52:68:4e:2e:b7:7e:fa:05:ed:54:86:78:34:ad:4a:
         80:d7:00:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWMbdvapqJEP4fKU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQxNTAxMDAyNloXDTI0MDcxNDAxMDAyNlowLzEtMCsGA1UEAxMk
MDQ2NmVlOTMtOGMxZi00NGVhLTg5NzgtYjljZWJmMTM4MWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36V9X09POnltlLGfqD3HV/Zu/WBVwNhfmLG2
zlrxlMKxRosS4YlJEZrP8RQ9Wyt2lhrFoDrW+65VvAr6a5qUBI93n6T9+dU99HKS
t1j/dn38AUw8oVsUYuBhdeOT/PLtqhBOHnO6b2F9GasOrGX+B/2NGEZE1rdeN26s
su7J3xZRDfK66bdH8NfRlg/DQQoE20gQwW9boMRkcbU0CbAkWv8nuPWNIxfF27dt
SnjMR1J1/j13hYb+2UXjz216KxZyTBWjPZNQbRLGu+b0nVPNRqJFvm7rvTs2L36j
gXKe9bzC8VW0LVHiVzdUE9m1J2Tc0wiQTOUb9v9fTzUT6bK8RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmxnpHPqVafWPl7iSC3m3iv5tAaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmE5ZWUxMzMtYTE0NC0z
MzAyLWI3N2UtOWY5ODFlNjhkNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYOxwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUHkoGFsnTr6XU0WBVHsE1grBpKLWgjNeu8w2/vAZVBscPSaqb7v/AN
cSMqgsP+h+VDFbxfzjth0bifaqwVt5lztilgbPYVMIglTB2ypXqTjd0mzl9lWjNV
EZNKYbwQs8aVxq94kdPpEV2fa4LUjGlkKIwrR/O2RrCowqmlO6H+ZtdOcV2eRqq+
CZ2hr9BA8faPST2b1TE3+sexh4ToOPhkxOqocB5YZhu5GKguQsxVxfKn0SL+aRgm
PCOQ3FVHL8JdTD/SCiAdCr5XLLG1C9HLkwTXrJ7wTGJaEkeMaOBPeVdJioJ/nztX
3O5We1JoTi63fvoF7VSGeDStSoDXAGU=
-----END CERTIFICATE-----
Generated at Thu May 9 01:33:24 2024 by rpki-client on console-fra.rpki-client.org