Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa
File:                     d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa (raw, json)
Hash identifier:          gcfYgajsYVgIKBvhbetw7gBjSIDMGkAveihpAJDr7xg=
Subject key identifier:   3B:AC:07:3B:50:90:7B:B6:DC:E1:42:33:EB:B4:89:01:72:07:66:89
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F432858459368CFEEA19D1173576CF680
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     63199
IP address blocks:        148.153.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:cf:ee:a1:9d:11:73:57:6c:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=60b3359f-9446-483b-a8e3-3a10688031f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:12:6d:99:e4:f1:34:c0:88:7e:1e:4e:33:
                    5c:b8:27:24:60:0f:bd:e5:cf:ec:fd:bb:04:fe:63:
                    35:b1:3b:97:c0:45:af:15:f9:3e:93:03:f9:24:3f:
                    e6:e5:c5:cb:c3:12:fe:5b:26:34:50:22:c7:36:ac:
                    78:63:38:3b:3d:bb:4e:4d:f7:5c:2f:af:61:37:1a:
                    a3:6e:37:fb:89:25:26:fd:65:78:72:ac:2f:20:34:
                    30:a3:1f:31:17:8b:1e:3d:54:07:94:a9:42:b5:eb:
                    fe:13:e7:cf:a3:8f:dc:ec:05:bf:37:2f:76:0b:57:
                    c8:e4:24:bb:b3:fb:51:46:96:73:62:f7:d2:63:fa:
                    09:38:43:dd:f9:58:f4:31:9f:0f:fa:32:f6:4c:47:
                    f7:e3:ef:62:f2:da:7f:2c:77:13:d4:36:f3:55:1e:
                    ed:68:f0:80:ce:33:6d:df:a0:0e:80:da:68:f2:85:
                    77:00:1c:9d:28:8c:6f:d5:24:ce:42:ea:d3:88:71:
                    5e:04:d2:01:07:f4:cc:1f:bf:9c:40:42:25:76:29:
                    70:9f:f0:2c:f6:d7:8d:64:d6:be:f1:99:1b:c5:36:
                    67:ed:72:81:f3:6c:75:04:52:19:03:09:b1:96:d4:
                    a5:10:7f:fb:f8:a0:1c:ca:36:f7:1e:0d:17:fc:b4:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AC:07:3B:50:90:7B:B6:DC:E1:42:33:EB:B4:89:01:72:07:66:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:9e:17:ac:58:2e:4a:a7:3f:6c:1b:40:d9:df:ba:a8:7c:21:
         ad:81:54:e3:56:bc:f3:55:14:9c:31:d9:88:20:f0:e0:62:db:
         f2:dd:f0:df:66:0f:d7:55:fb:5c:37:a6:0e:57:f4:38:ce:42:
         1e:ef:57:b2:e4:79:f9:9a:89:d7:55:da:95:bc:f3:85:33:7f:
         5b:6b:78:cf:42:38:92:e3:c5:1c:6e:f6:fb:08:a1:00:80:5c:
         33:63:34:49:d4:0d:0b:8d:5a:76:fe:ad:97:40:13:c6:c3:92:
         35:96:5a:81:4b:df:6d:3d:ab:d3:78:51:41:70:13:72:d2:24:
         f7:22:71:97:c1:30:b3:bc:17:e4:e0:0a:72:cd:15:ab:e7:62:
         82:d7:03:4e:7d:d3:e8:5f:01:0a:68:a2:b0:51:51:34:6e:9c:
         08:a3:f4:d1:ae:ea:18:7d:37:83:75:9b:5d:ba:b5:7f:83:d5:
         da:bd:41:ac:37:1c:3f:dc:eb:f8:75:0b:c1:f3:00:9c:a4:0d:
         51:68:16:90:85:cf:9e:26:01:80:73:1e:59:ab:50:e8:cd:66:
         52:f5:59:1b:94:59:79:84:ac:9d:7f:4d:a8:87:ee:19:ad:f2:
         50:d6:e0:58:68:b5:e1:64:07:96:27:4e:a5:ee:d3:5d:03:5b:
         8d:67:f8:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaM/uoZ0Rc1ds9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
NjBiMzM1OWYtOTQ0Ni00ODNiLWE4ZTMtM2ExMDY4ODAzMWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA128SbZnk8TTAiH4eTjNcuCckYA+95c/s/bsE
/mM1sTuXwEWvFfk+kwP5JD/m5cXLwxL+WyY0UCLHNqx4Yzg7PbtOTfdcL69hNxqj
bjf7iSUm/WV4cqwvIDQwox8xF4sePVQHlKlCtev+E+fPo4/c7AW/Ny92C1fI5CS7
s/tRRpZzYvfSY/oJOEPd+Vj0MZ8P+jL2TEf34+9i8tp/LHcT1DbzVR7taPCAzjNt
36AOgNpo8oV3ABydKIxv1STOQurTiHFeBNIBB/TMH7+cQEIldilwn/As9teNZNa+
8ZkbxTZn7XKB82x1BFIZAwmxltSlEH/7+KAcyjb3Hg0X/LQ3CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDusBztQkHu23OFCM+u0iQFyB2aJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZDhjM2I3YzUtZDYyYy0z
ODJjLWE4ZTEtYmVlZjI3YjE2NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISeF6xYLkqnP2wbQNnfuqh8Ia2BVONWvPNVFJwx2Ygg8OBi2/Ld8N9m
D9dV+1w3pg5X9DjOQh7vV7LkefmaiddV2pW884Uzf1treM9COJLjxRxu9vsIoQCA
XDNjNEnUDQuNWnb+rZdAE8bDkjWWWoFL3209q9N4UUFwE3LSJPcicZfBMLO8F+Tg
CnLNFavnYoLXA0590+hfAQpoorBRUTRunAij9NGu6hh9N4N1m126tX+D1dq9Qaw3
HD/c6/h1C8HzAJykDVFoFpCFz54mAYBzHlmrUOjNZlL1WRuUWXmErJ1/TaiH7hmt
8lDW4FhoteFkB5YnTqXu010DW41n+Cc=
-----END CERTIFICATE-----
Generated at Fri May 17 20:57:24 2024 by rpki-client on console-fra.rpki-client.org