Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa
File:                     3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa (raw, json)
Hash identifier:          iZPrQMnVRIcBSYrTjdyQ7hU0BeJifB8nh4l9NXCX0tA=
Subject key identifier:   53:31:AB:C4:60:63:DC:87:89:59:8F:B1:95:4C:2F:9F:EF:4D:9F:1B
Certificate issuer:       /CN=4e534d5e-d592-4f77-b437-24906bd6cceb
Certificate serial:       010D0C9F43285845C5A8F4D03464A7B7002EC5A0
Authority key identifier: 50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     396982
IP address blocks:        148.80.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f4:d0:34:64:a7:b7:00:2e:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e534d5e-d592-4f77-b437-24906bd6cceb
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=f54a8546-a928-483a-9d70-c64f137e051b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:f4:73:96:c1:b0:cd:7c:1f:be:99:f1:f2:
                    63:50:0a:83:e5:62:a3:34:c0:8d:38:cb:db:71:8a:
                    40:15:10:72:f0:d8:f8:58:0b:c8:39:2c:54:dc:99:
                    cc:38:55:b8:9b:f0:58:28:f6:70:6c:d1:73:49:77:
                    55:c4:0c:b0:a8:c1:1c:ca:a0:e7:49:f9:f3:55:f5:
                    e1:d3:68:19:99:17:ab:e8:37:b6:48:a2:6a:b9:8e:
                    23:7c:82:6e:71:92:59:d3:35:e0:2a:f9:9e:2d:70:
                    50:9f:91:d8:ef:d3:93:94:58:e1:a0:14:fe:1a:c0:
                    b9:09:1f:6b:57:69:99:c7:16:23:ff:2b:c8:56:13:
                    ce:7a:f9:40:a2:c0:71:ca:4e:76:34:55:4d:dc:63:
                    5b:60:e4:00:ea:49:29:77:b8:45:9b:d6:7b:3f:be:
                    59:3a:3b:d6:bf:0c:a9:bc:cb:c7:2b:68:41:dd:85:
                    02:90:5c:b7:bc:59:ee:e6:ad:7c:6f:d6:b9:f0:62:
                    b5:9c:d2:f6:59:a5:1e:f5:06:96:34:d9:c0:80:31:
                    31:cc:be:4f:92:75:3b:24:8f:78:05:5e:8e:d0:9e:
                    e1:84:6d:41:c7:85:c3:c9:1d:1c:7c:85:93:66:df:
                    d8:b6:8d:de:f5:3e:71:f9:9c:bb:5b:52:7a:35:fa:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:31:AB:C4:60:63:DC:87:89:59:8F:B1:95:4C:2F:9F:EF:4D:9F:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/3ef713b7-a9da-3cfc-a2c4-1982ed61cafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb/4e534d5e-d592-4f77-b437-24906bd6cceb.crl

            X509v3 Authority Key Identifier:
                keyid:50:1D:9D:5A:DD:6D:09:0A:6A:F3:B0:0D:21:34:5E:4F:FC:14:FB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e534d5e-d592-4f77-b437-24906bd6cceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.80.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e8:92:3b:7b:b5:c7:88:cb:85:38:28:32:38:c4:ab:2e:86:
         8b:5f:e0:c0:b4:eb:93:04:31:fa:eb:0c:67:b4:eb:5d:51:21:
         3e:b4:33:f1:67:67:74:c6:24:ae:ab:85:1d:81:c7:21:5b:d6:
         e4:3e:f1:78:9d:d8:c4:ef:66:50:36:42:63:f1:64:0e:39:45:
         eb:a0:48:b4:5d:5b:f2:63:02:ea:a1:87:fe:7e:0b:68:21:97:
         b0:10:b4:84:f8:a1:21:c9:f7:88:31:84:66:0f:26:cf:60:6e:
         2c:26:c6:1a:fa:5d:ca:86:00:82:ed:1d:cb:0c:df:e3:14:55:
         10:55:d1:05:dc:25:a4:b1:03:72:ea:b9:8e:dd:cb:05:46:87:
         7a:4e:70:1c:f4:b1:36:6e:51:29:ba:a5:24:98:f7:31:53:8b:
         b8:ab:cb:1b:2b:d0:78:2d:d3:01:d3:c7:e4:54:da:a2:c1:03:
         23:54:de:12:e1:6a:9a:21:03:42:ff:2c:b0:f6:be:29:96:bd:
         cc:d0:ef:72:37:af:da:fd:b6:8a:99:4b:c2:62:03:5d:ca:69:
         b8:02:ca:b2:e5:49:7c:24:1b:7f:ac:3e:75:14:f8:ae:d6:05:
         58:51:2a:4d:4d:99:77:b9:cc:b0:16:ef:52:68:36:aa:f7:ec:
         fe:d6:46:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqPTQNGSntwAuxaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU1MzRkNWUtZDU5Mi00Zjc3LWI0MzctMjQ5MDZiZDZj
Y2ViMB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk
ZjU0YTg1NDYtYTkyOC00ODNhLTlkNzAtYzY0ZjEzN2UwNTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/z0c5bBsM18H76Z8fJjUAqD5WKjNMCNOMvb
cYpAFRBy8Nj4WAvIOSxU3JnMOFW4m/BYKPZwbNFzSXdVxAywqMEcyqDnSfnzVfXh
02gZmRer6De2SKJquY4jfIJucZJZ0zXgKvmeLXBQn5HY79OTlFjhoBT+GsC5CR9r
V2mZxxYj/yvIVhPOevlAosBxyk52NFVN3GNbYOQA6kkpd7hFm9Z7P75ZOjvWvwyp
vMvHK2hB3YUCkFy3vFnu5q18b9a58GK1nNL2WaUe9QaWNNnAgDExzL5PknU7JI94
BV6O0J7hhG1Bx4XDyR0cfIWTZt/Yto3e9T5x+Zy7W1J6NfogtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFMxq8RgY9yHiVmPsZVML5/vTZ8bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTUz
NGQ1ZS1kNTkyLTRmNzctYjQzNy0yNDkwNmJkNmNjZWIvM2VmNzEzYjctYTlkYS0z
Y2ZjLWEyYzQtMTk4MmVkNjFjYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGU1MzRkNWUtZDU5Mi00Zjc3LWI0
MzctMjQ5MDZiZDZjY2ViLzRlNTM0ZDVlLWQ1OTItNGY3Ny1iNDM3LTI0OTA2YmQ2
Y2NlYi5jcmwwHwYDVR0jBBgwFoAUUB2dWt1tCQpq87ANITReT/wU+/kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTUzNGQ1ZS1kNTkyLTRmNzctYjQzNy0yNDkw
NmJkNmNjZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClFBEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHokjt7tceIy4U4KDI4xKsuhotf4MC065MEMfrrDGe0611RIT60M/Fn
Z3TGJK6rhR2BxyFb1uQ+8Xid2MTvZlA2QmPxZA45ReugSLRdW/JjAuqhh/5+C2gh
l7AQtIT4oSHJ94gxhGYPJs9gbiwmxhr6XcqGAILtHcsM3+MUVRBV0QXcJaSxA3Lq
uY7dywVGh3pOcBz0sTZuUSm6pSSY9zFTi7iryxsr0Hgt0wHTx+RU2qLBAyNU3hLh
apohA0L/LLD2vimWvczQ73I3r9r9toqZS8JiA13KabgCyrLlSXwkG3+sPnUU+K7W
BVhRKk1NmXe5zLAW71JoNqr37P7WRhE=
-----END CERTIFICATE-----
Generated at Sun May 5 15:30:21 2024 by rpki-client on console-ams.rpki-client.org