Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/86f93181-bd05-3575-8aa4-a212bd3e92ab.roa
File:                     86f93181-bd05-3575-8aa4-a212bd3e92ab.roa (raw, json)
Hash identifier:          h3yqTopVi8z6OFBIwcWEz6Xr5Edi4mVPzFWnmBAGQeI=
Subject key identifier:   1C:CA:CC:C8:1E:A9:ED:73:F8:2C:A6:ED:F5:B2:A5:52:B5:31:87:B3
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584547E35190C38F156DD10370B0
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/86f93181-bd05-3575-8aa4-a212bd3e92ab.roa
Signing time:             Thu 21 Mar 2024 11:46:29 +0000
ROA not before:           Thu 21 Mar 2024 11:46:29 +0000
ROA not after:            Wed 19 Jun 2024 11:46:29 +0000
asID:                     28753
IP address blocks:        172.84.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:47:e3:51:90:c3:8f:15:6d:d1:03:70:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Mar 21 11:46:29 2024 GMT
            Not After : Jun 19 11:46:29 2024 GMT
        Subject: CN=f6fed389-b8f9-4560-930c-15c0d49c90ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:51:e1:ae:d3:fd:cd:ce:a1:fe:c6:91:f7:77:
                    9b:4d:fe:6c:2e:d1:bf:34:ed:79:18:32:b8:e0:bc:
                    6f:80:7b:a5:9c:59:0b:c1:1b:65:f9:2a:f4:58:08:
                    c6:db:28:4f:08:82:3a:ce:12:c9:10:08:df:95:6b:
                    62:d6:56:8c:85:d4:28:5c:9b:d1:f5:03:6d:5f:ab:
                    17:f4:fd:c1:2e:24:54:15:85:5d:ca:2f:8d:19:aa:
                    05:71:68:51:b1:5e:a9:9f:8c:9f:c0:4a:93:f8:e9:
                    fb:00:1b:ba:59:96:b8:f3:3c:81:48:1a:68:43:42:
                    1a:ad:95:b3:32:32:84:9e:ab:46:fb:11:20:a6:4f:
                    b1:63:9a:b1:bb:9d:63:d3:06:ab:71:23:94:ad:18:
                    39:8b:92:2f:54:92:c3:14:81:d5:c6:6e:b1:0b:37:
                    e5:5e:f2:af:11:43:26:c7:e1:c7:1a:3a:90:95:ec:
                    44:81:04:e5:e3:3c:ad:33:1e:36:27:3f:e9:44:e0:
                    b5:b2:24:49:3f:88:ba:93:6e:de:5b:70:a6:2e:2d:
                    3d:a1:db:36:f9:32:ff:37:e8:b3:50:02:94:6f:d5:
                    23:be:8b:bf:31:02:71:5d:1d:37:5b:df:80:d6:76:
                    6b:5c:bc:46:34:c5:79:bb:3f:2e:bf:45:68:c1:41:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CA:CC:C8:1E:A9:ED:73:F8:2C:A6:ED:F5:B2:A5:52:B5:31:87:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/86f93181-bd05-3575-8aa4-a212bd3e92ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:09:29:e3:af:ba:77:5a:49:dd:71:84:be:87:5c:3d:2f:70:
         c7:8e:67:e9:3d:5c:67:f0:c1:d4:63:e7:f5:36:72:18:1e:79:
         13:85:48:eb:d4:ed:da:0d:41:81:92:2b:17:df:ee:19:1a:d4:
         00:d9:e1:d1:30:13:b8:1d:77:55:a4:a2:48:2f:5b:b0:73:32:
         fe:b1:a0:ea:cc:ac:f1:ec:ed:24:46:d2:75:37:95:86:a6:e1:
         5d:3c:56:89:4f:f7:27:6c:2e:32:47:eb:cc:c8:ed:78:ea:7a:
         83:2c:28:f5:d6:32:43:bb:d8:b6:3a:a1:1a:81:24:74:ae:f5:
         20:65:12:61:ff:e7:92:4c:c6:8b:65:2c:fc:b5:eb:dc:4f:d6:
         be:10:94:8a:34:f5:94:3d:5b:9d:a5:d5:14:36:cb:d3:93:36:
         1f:06:9d:95:fc:f7:15:38:ca:16:f0:f4:8d:4d:e1:c8:61:98:
         30:64:fa:e8:07:5a:26:78:56:96:1a:4d:62:5d:12:87:8b:17:
         a0:2d:5d:26:5c:d7:a5:74:66:5b:16:ef:fa:4b:95:bb:6a:65:
         06:35:78:04:9e:c7:83:60:6a:ad:06:27:96:01:2e:71:29:4d:
         5a:48:c1:c7:46:00:a1:4a:a2:64:ba:62:20:bd:a2:38:28:11:
         35:31:95:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVH41GQw48VbdEDcLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw
ZDcwMB4XDTI0MDMyMTExNDYyOVoXDTI0MDYxOTExNDYyOVowLzEtMCsGA1UEAxMk
ZjZmZWQzODktYjhmOS00NTYwLTkzMGMtMTVjMGQ0OWM5MGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lHhrtP9zc6h/saR93ebTf5sLtG/NO15GDK4
4LxvgHulnFkLwRtl+Sr0WAjG2yhPCII6zhLJEAjflWti1laMhdQoXJvR9QNtX6sX
9P3BLiRUFYVdyi+NGaoFcWhRsV6pn4yfwEqT+On7ABu6WZa48zyBSBpoQ0IarZWz
MjKEnqtG+xEgpk+xY5qxu51j0warcSOUrRg5i5IvVJLDFIHVxm6xCzflXvKvEUMm
x+HHGjqQlexEgQTl4zytMx42Jz/pROC1siRJP4i6k27eW3CmLi09ods2+TL/N+iz
UAKUb9Ujvou/MQJxXR03W9+A1nZrXLxGNMV5uz8uv0VowUHImwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBzKzMgeqe1z+Cym7fWypVK1MYezMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0
OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvODZmOTMxODEtYmQwNS0z
NTc1LThhYTQtYTIxMmJkM2U5MmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl
MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1
MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk
YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFSzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkJKeOvundaSd1xhL6HXD0vcMeOZ+k9XGfwwdRj5/U2chgeeROFSOvU
7doNQYGSKxff7hka1ADZ4dEwE7gdd1WkokgvW7BzMv6xoOrMrPHs7SRG0nU3lYam
4V08VolP9ydsLjJH68zI7XjqeoMsKPXWMkO72LY6oRqBJHSu9SBlEmH/55JMxotl
LPy169xP1r4QlIo09ZQ9W52l1RQ2y9OTNh8GnZX89xU4yhbw9I1N4chhmDBk+ugH
WiZ4VpYaTWJdEoeLF6AtXSZc16V0ZlsW7/pLlbtqZQY1eASex4Ngaq0GJ5YBLnEp
TVpIwcdGAKFKomS6YiC9ojgoETUxleI=
-----END CERTIFICATE-----
Generated at Thu May 2 05:28:24 2024 by rpki-client on console-fra.rpki-client.org