Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7aced7d7-c382-376c-972a-1af5b443821b.roa
File:                     7aced7d7-c382-376c-972a-1af5b443821b.roa (raw, json)
Hash identifier:          6Mt5NK6qNd8YHy/3OdnlKR5mEXP5fmWKJTQfVKzross=
Subject key identifier:   2B:83:47:3B:F3:BD:8E:3F:60:8E:D5:CA:24:86:0B:AF:8B:F0:78:1A
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584514802F66606C1F55E7AABD00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7aced7d7-c382-376c-972a-1af5b443821b.roa
Signing time:             Sun 03 Mar 2024 02:00:27 +0000
ROA not before:           Sun 03 Mar 2024 02:00:27 +0000
ROA not after:            Sat 01 Jun 2024 01:00:27 +0000
asID:                     6621
IP address blocks:        184.52.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:80:2f:66:60:6c:1f:55:e7:aa:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Mar  3 02:00:27 2024 GMT
            Not After : Jun  1 01:00:27 2024 GMT
        Subject: CN=38d793ad-22c4-413a-8d4c-5c6c7b04712d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:9b:16:e4:64:10:bf:6c:a0:6e:c4:04:0a:
                    4f:a5:d5:c9:2f:a2:64:d2:3b:0b:a1:49:72:8b:34:
                    51:1b:05:39:c5:de:3b:d0:09:b0:6c:b6:f5:d6:c9:
                    33:c1:c7:f1:d6:f8:fe:b0:03:c2:13:a5:2d:0a:6f:
                    59:b3:6a:68:b6:2a:46:ba:f3:db:4c:6c:cd:01:ed:
                    be:f7:09:96:62:bc:97:62:81:fd:86:5e:a7:7e:58:
                    ac:f1:de:1c:56:2b:e8:e9:09:c4:59:13:c4:3e:72:
                    0b:ec:f8:e5:73:6f:b8:88:5b:5a:54:c9:a2:5a:ba:
                    28:4f:3b:7d:dd:46:a2:60:5a:3a:4a:ef:37:68:01:
                    02:03:62:d1:fb:3f:ca:fb:b6:2c:4b:da:9b:fd:cb:
                    75:6a:87:97:6c:9d:93:80:65:bb:19:2e:65:3d:55:
                    88:da:53:9c:77:19:e7:df:1a:25:1d:11:df:67:46:
                    b2:4c:7a:0c:9c:cb:ec:77:6e:e1:a0:01:27:72:bd:
                    f7:3e:79:5c:e2:e8:7d:4e:67:fa:3f:04:86:39:93:
                    46:f1:f4:d1:7c:9d:da:11:01:96:81:d4:91:03:ac:
                    a0:86:63:46:5a:a5:fe:38:c1:61:99:98:f7:61:87:
                    1c:0a:0c:55:b6:5b:62:8d:5f:f8:b7:52:b3:52:b3:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:83:47:3B:F3:BD:8E:3F:60:8E:D5:CA:24:86:0B:AF:8B:F0:78:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7aced7d7-c382-376c-972a-1af5b443821b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.52.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:43:cc:31:ab:0e:ab:4e:51:ad:cb:ca:8e:ed:32:04:3c:c1:
         8f:1f:58:b0:a1:dd:08:0d:f9:ea:5c:42:e1:47:92:9d:3c:ac:
         73:31:23:bd:08:7c:eb:a2:e6:c9:12:8c:38:b8:e2:58:a1:6b:
         82:6b:cc:d3:63:3c:1e:8b:e0:84:cf:a8:4a:a3:2c:3d:88:87:
         50:6b:de:7f:2a:af:0c:93:5c:a7:1b:a5:96:d2:e1:cb:db:f3:
         91:e0:99:3c:6b:4e:ec:67:9b:d0:53:47:2e:08:6f:f9:18:65:
         7e:03:23:20:9d:10:a7:ac:48:bb:1b:a0:d8:48:48:19:00:a3:
         6e:53:b5:d4:22:af:8e:39:9e:70:7b:b4:93:99:6f:6d:b0:5a:
         6b:f2:f1:ee:58:ff:be:72:48:aa:a7:8b:3a:ec:37:22:73:bb:
         fb:49:9a:ee:cf:18:c0:42:30:69:ea:1b:52:a7:40:95:9e:75:
         5c:58:a6:2a:1a:ec:ae:b2:30:50:22:5b:a7:ba:7a:15:28:df:
         05:17:1e:b4:58:e2:31:0b:9f:ac:68:32:9d:a1:b2:80:b4:1f:
         a8:ad:36:1c:cc:af:fa:32:16:30:b0:9f:fe:f6:11:99:eb:d6:
         ed:ad:cb:06:13:04:e0:05:b4:83:00:fe:99:b5:5c:c7:34:2a:
         a0:8a:a2:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUUgC9mYGwfVeeqvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI0MDMwMzAyMDAyN1oXDTI0MDYwMTAxMDAyN1owLzEtMCsGA1UEAxMk
MzhkNzkzYWQtMjJjNC00MTNhLThkNGMtNWM2YzdiMDQ3MTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqembFuRkEL9soG7EBApPpdXJL6Jk0jsLoUly
izRRGwU5xd470AmwbLb11skzwcfx1vj+sAPCE6UtCm9Zs2potipGuvPbTGzNAe2+
9wmWYryXYoH9hl6nflis8d4cVivo6QnEWRPEPnIL7Pjlc2+4iFtaVMmiWrooTzt9
3UaiYFo6Su83aAECA2LR+z/K+7YsS9qb/ct1aoeXbJ2TgGW7GS5lPVWI2lOcdxnn
3xolHRHfZ0ayTHoMnMvsd27hoAEncr33Pnlc4uh9Tmf6PwSGOZNG8fTRfJ3aEQGW
gdSRA6yghmNGWqX+OMFhmZj3YYccCgxVtltijV/4t1KzUrMkiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuDRzvzvY4/YI7VyiSGC6+L8HgaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvN2FjZWQ3ZDctYzM4Mi0z
NzZjLTk3MmEtMWFmNWI0NDM4MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuDRnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJDzDGrDqtOUa3Lyo7tMgQ8wY8fWLCh3QgN+epcQuFHkp08rHMxI70I
fOui5skSjDi44liha4JrzNNjPB6L4ITPqEqjLD2Ih1Br3n8qrwyTXKcbpZbS4cvb
85HgmTxrTuxnm9BTRy4Ib/kYZX4DIyCdEKesSLsboNhISBkAo25TtdQir445nnB7
tJOZb22wWmvy8e5Y/75ySKqnizrsNyJzu/tJmu7PGMBCMGnqG1KnQJWedVxYpioa
7K6yMFAiW6e6ehUo3wUXHrRY4jELn6xoMp2hsoC0H6itNhzMr/oyFjCwn/72EZnr
1u2tywYTBOAFtIMA/pm1XMc0KqCKol4=
-----END CERTIFICATE-----
Generated at Fri May 17 20:57:25 2024 by rpki-client on console-fra.rpki-client.org