Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa
File:                     677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa (raw, json)
Hash identifier:          7aDwUeh608IvqjVKFJt8u70BJg1rHSdTau0XIignNGE=
Subject key identifier:   8A:0A:3D:4C:A3:63:A6:00:2C:07:41:6B:95:2A:D4:FD:37:BB:59:A9
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F43285845C87395CC1CD3121AF7BC0600
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     23154
IP address blocks:        148.164.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:95:cc:1c:d3:12:1a:f7:bc:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=23e66e39-8b95-4b3d-b881-7810f6a2df11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:a4:18:22:58:f8:9b:06:2c:97:4e:b5:66:
                    63:2d:39:57:7c:38:6e:38:ab:b7:75:fb:09:0b:f1:
                    cb:12:47:e1:a7:10:f8:55:81:70:9c:8a:8f:68:72:
                    f8:a8:f3:0a:98:23:0c:49:88:55:fa:15:a2:ba:a8:
                    1c:da:86:99:3f:88:44:90:bb:3e:03:40:df:5a:38:
                    c4:07:33:98:df:f8:08:ea:f4:ac:ea:98:3b:c8:45:
                    4b:13:46:38:77:75:01:46:ca:bc:26:98:9c:b8:39:
                    42:9a:ba:bc:87:6f:d3:31:72:f6:68:64:f3:92:51:
                    62:b4:f3:c3:1c:2f:07:b0:a4:88:7b:6d:53:2f:7c:
                    a0:66:ea:e8:96:b7:2c:17:85:0b:07:50:9b:17:99:
                    d9:12:9c:cd:4b:93:af:e8:b9:99:87:25:a0:72:a7:
                    0a:e3:dc:e7:0d:7c:c9:24:38:51:d9:96:0f:0d:e3:
                    06:fe:a3:f2:83:bf:6e:28:e5:5f:ac:af:c7:18:51:
                    db:c8:5c:af:ec:11:79:ed:02:85:9b:91:fa:42:3d:
                    33:02:4d:0f:17:0a:4c:4c:2c:aa:77:32:c3:a6:47:
                    12:da:ee:0d:df:ed:db:21:62:bb:b0:ca:98:62:44:
                    38:d9:1e:fd:f3:fa:a3:9f:90:2f:a6:56:14:6a:a1:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0A:3D:4C:A3:63:A6:00:2C:07:41:6B:95:2A:D4:FD:37:BB:59:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/677ab2f7-dfeb-3937-b28f-3bb3c0ade0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:81:2c:6e:19:c6:d8:2b:09:d9:0d:54:7c:36:47:fc:fb:91:
         15:df:d5:43:2d:78:7a:ad:0f:a6:c5:1f:4d:5c:b4:c2:08:12:
         0f:4d:b5:2b:b7:0a:0c:db:7a:0b:8c:38:2f:19:98:34:d1:04:
         bf:2f:26:70:ad:4d:a7:cc:e6:11:a1:e7:1c:89:38:3b:3d:27:
         42:f1:38:d7:ae:b1:df:ad:57:3a:f2:4c:47:ea:a4:0a:9c:2f:
         9a:c3:09:a9:82:2b:0a:87:cc:15:ad:69:f5:3a:dc:34:b1:fb:
         fd:01:01:e9:fa:bc:ff:75:d3:81:6e:7e:2e:f6:82:61:0b:bb:
         07:38:4a:95:49:67:5e:24:f5:ca:cf:91:7b:b1:19:35:e1:f4:
         06:95:49:14:05:db:04:ce:57:62:35:cd:44:29:fd:43:7f:ac:
         76:63:7b:35:cd:b9:07:49:b2:2e:c5:de:5b:ac:48:b7:95:70:
         57:d1:17:8a:ac:e9:14:a2:3a:e0:9a:3f:51:1a:20:c6:7a:82:
         95:69:a8:22:7f:70:a4:29:e6:14:fb:0a:29:00:af:fd:d3:8d:
         35:bb:3b:36:b3:de:7f:bd:b3:58:5e:2b:32:e9:64:53:b8:0d:
         83:71:d8:0c:38:96:f5:7f:fb:3f:9f:2c:e1:26:d2:af:6d:ad:
         d8:e1:5a:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXIc5XMHNMSGve8BgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi
YmFhMB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk
MjNlNjZlMzktOGI5NS00YjNkLWI4ODEtNzgxMGY2YTJkZjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvukGCJY+JsGLJdOtWZjLTlXfDhuOKu3dfsJ
C/HLEkfhpxD4VYFwnIqPaHL4qPMKmCMMSYhV+hWiuqgc2oaZP4hEkLs+A0DfWjjE
BzOY3/gI6vSs6pg7yEVLE0Y4d3UBRsq8JpicuDlCmrq8h2/TMXL2aGTzklFitPPD
HC8HsKSIe21TL3ygZurolrcsF4ULB1CbF5nZEpzNS5Ov6LmZhyWgcqcK49znDXzJ
JDhR2ZYPDeMG/qPyg79uKOVfrK/HGFHbyFyv7BF57QKFm5H6Qj0zAk0PFwpMTCyq
dzLDpkcS2u4N3+3bIWK7sMqYYkQ42R798/qjn5AvplYUaqGwywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoKPUyjY6YALAdBa5Uq1P03u1mpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh
ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvNjc3YWIyZjctZGZlYi0z
OTM3LWIyOGYtM2JiM2MwYWRlMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2
YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj
YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw
Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaBLG4ZxtgrCdkNVHw2R/z7kRXf1UMteHqtD6bFH01ctMIIEg9NtSu3
CgzbeguMOC8ZmDTRBL8vJnCtTafM5hGh5xyJODs9J0LxONeusd+tVzryTEfqpAqc
L5rDCamCKwqHzBWtafU63DSx+/0BAen6vP9104Fufi72gmELuwc4SpVJZ14k9crP
kXuxGTXh9AaVSRQF2wTOV2I1zUQp/UN/rHZjezXNuQdJsi7F3lusSLeVcFfRF4qs
6RSiOuCaP1EaIMZ6gpVpqCJ/cKQp5hT7CikAr/3TjTW7Ozaz3n+9s1heKzLpZFO4
DYNx2Aw4lvV/+z+fLOEm0q9trdjhWoE=
-----END CERTIFICATE-----
Generated at Sat May 18 01:45:43 2024 by rpki-client on console-ams.rpki-client.org