Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa
File:                     49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (raw, json)
Hash identifier:          IKkxLoOXor7//5XwqtvHkqhTXxh3xGdXNXVUY9ksDEI=
Subject key identifier:   E1:32:CD:A6:73:37:CA:80:1C:C4:D3:BD:24:BA:C6:02:20:86:DD:5B
Certificate issuer:       /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial:       010D0C9F43285845AC88CAB52A20689E36503F00
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     35860
IP address blocks:        63.133.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:ca:b5:2a:20:68:9e:36:50:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=a47c8d62-b080-4135-8ce9-c763a2fa6849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:a5:89:98:ed:c8:a0:5e:c1:ef:c9:33:6c:
                    f8:83:ec:ad:5c:86:5a:ef:96:dc:48:90:59:3a:a3:
                    09:45:c0:f5:41:4a:cf:65:e1:46:75:63:34:96:25:
                    d3:4d:08:8b:b8:51:a5:dc:25:f8:71:9c:27:06:f7:
                    de:bb:30:1d:78:79:a7:80:80:37:6c:73:bc:8e:a7:
                    be:3f:91:70:6f:5a:4e:23:28:ed:49:e9:d0:ff:a1:
                    86:45:f6:fa:40:05:0c:3a:9e:48:4e:1f:61:81:69:
                    f0:be:9e:c1:20:82:fe:0e:5b:2d:8f:40:b5:4a:bc:
                    a5:5b:69:62:19:00:62:c0:f8:0b:6d:24:85:19:68:
                    95:b2:1e:03:23:04:8a:3d:62:09:53:3d:fe:00:c2:
                    53:81:77:b3:4d:22:90:c5:19:86:0e:b8:d8:3c:b9:
                    13:c8:01:e5:33:d3:f4:45:05:8f:e4:c6:71:91:a3:
                    52:cc:18:2a:6e:c1:88:bb:c1:f9:d7:60:01:34:81:
                    d5:a6:21:79:54:ae:1f:c7:da:a5:0b:54:b3:77:4c:
                    68:28:03:89:4b:ec:b2:1a:a0:5d:99:4b:93:50:ee:
                    5e:85:23:1a:3f:72:24:a4:ee:6f:61:f6:ee:ca:f3:
                    4a:fb:6f:cd:45:f6:51:e9:91:51:08:b9:ae:d7:a9:
                    7c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:32:CD:A6:73:37:CA:80:1C:C4:D3:BD:24:BA:C6:02:20:86:DD:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:90:ca:5d:39:a4:ae:9d:66:a3:3a:63:3e:58:96:d4:cc:46:
         3c:cc:21:c1:ab:34:87:10:e7:87:9f:4e:74:4c:3e:5e:b4:8e:
         af:d2:81:c9:e2:e5:83:a0:6b:af:37:da:06:c5:e9:64:dd:56:
         e1:d6:5a:b7:ce:b0:4c:50:b1:c5:3e:9c:7b:5e:e1:c3:d6:d0:
         b1:d5:5e:94:8b:ef:a7:ab:03:51:a9:af:b2:ad:43:fa:ff:99:
         f0:87:8d:79:76:45:55:2d:e2:83:e0:d9:68:18:00:e2:85:d8:
         ea:8b:4b:e5:49:11:c8:eb:8f:89:52:23:60:ec:6b:5d:67:1e:
         4f:a0:5a:c0:e8:f6:47:25:d1:2e:30:8b:73:04:fc:a2:a0:39:
         2d:e7:10:81:66:d6:32:ce:f7:78:fe:13:0f:03:69:53:58:f9:
         fc:57:c3:e4:b3:31:5d:fe:66:39:3f:ae:0b:e7:c5:a2:e0:10:
         53:26:43:f3:2f:38:78:d8:80:43:af:4f:ed:68:6c:5b:90:1d:
         32:d2:fb:53:b1:f0:16:6a:db:13:60:42:da:44:70:b7:0e:e6:
         70:1c:8d:91:6c:d7:8d:c6:6c:0b:6e:f4:9b:9f:9d:17:30:7e:
         ed:d1:5b:49:fd:83:93:fc:13:f6:b3:23:57:f8:32:27:cc:27:
         c6:68:b4:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiMq1KiBonjZQPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2
ZDA5MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
YTQ3YzhkNjItYjA4MC00MTM1LThjZTktYzc2M2EyZmE2ODQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtuliZjtyKBewe/JM2z4g+ytXIZa75bcSJBZ
OqMJRcD1QUrPZeFGdWM0liXTTQiLuFGl3CX4cZwnBvfeuzAdeHmngIA3bHO8jqe+
P5Fwb1pOIyjtSenQ/6GGRfb6QAUMOp5ITh9hgWnwvp7BIIL+Dlstj0C1SrylW2li
GQBiwPgLbSSFGWiVsh4DIwSKPWIJUz3+AMJTgXezTSKQxRmGDrjYPLkTyAHlM9P0
RQWP5MZxkaNSzBgqbsGIu8H512ABNIHVpiF5VK4fx9qlC1Szd0xoKAOJS+yyGqBd
mUuTUO5ehSMaP3IkpO5vYfbuyvNK+2/NRfZR6ZFRCLmu16l8ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOEyzaZzN8qAHMTTvSS6xgIght1bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy
MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvNDljMzA5MmMtMTdmZS0z
YTgxLWIzZWQtMTRmNTU2MjBkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky
ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj
NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl
MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP4XQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABiQyl05pK6dZqM6Yz5YltTMRjzMIcGrNIcQ54efTnRMPl60jq/Sgcni
5YOga6832gbF6WTdVuHWWrfOsExQscU+nHte4cPW0LHVXpSL76erA1Gpr7KtQ/r/
mfCHjXl2RVUt4oPg2WgYAOKF2OqLS+VJEcjrj4lSI2Dsa11nHk+gWsDo9kcl0S4w
i3ME/KKgOS3nEIFm1jLO93j+Ew8DaVNY+fxXw+SzMV3+Zjk/rgvnxaLgEFMmQ/Mv
OHjYgEOvT+1obFuQHTLS+1Ox8BZq2xNgQtpEcLcO5nAcjZFs143GbAtu9JufnRcw
fu3RW0n9g5P8E/azI1f4MifMJ8ZotKU=
-----END CERTIFICATE-----
Generated at Fri May 17 22:00:40 2024 by rpki-client on console-ams.rpki-client.org