Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/ed049015-1502-376d-ba5b-853b2a90294c.roa
File:                     ed049015-1502-376d-ba5b-853b2a90294c.roa (raw, json)
Hash identifier:          p4v8pNaA2NK/s9CyJTfji2/sETMzlkp/eZCTx+h4+rU=
Subject key identifier:   6C:2A:21:80:50:2D:37:AE:7F:91:53:6E:AE:AB:96:43:93:19:B4:92
Certificate issuer:       /CN=e7b5edc2-8809-41fc-a3b8-3d01525cdb86
Certificate serial:       010D0C9F432858455E5D9D6742313A606F4C6480
Authority key identifier: F8:8C:34:34:A0:6C:B6:46:FC:27:7B:AC:6C:E0:7C:32:53:4D:88:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/ed049015-1502-376d-ba5b-853b2a90294c.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     36352
IP address blocks:        45.41.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/e7b5edc2-8809-41fc-a3b8-3d01525cdb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/e7b5edc2-8809-41fc-a3b8-3d01525cdb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:9d:67:42:31:3a:60:6f:4c:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b5edc2-8809-41fc-a3b8-3d01525cdb86
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=aeda5bfa-2dbb-49e6-bff8-3273cfbf3fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:26:e2:77:25:51:6b:87:03:36:4f:d3:71:
                    cf:6a:9f:cf:bc:78:a8:3a:f0:a3:99:61:8c:fa:67:
                    b6:cf:28:f7:1d:d7:38:ac:07:44:95:ac:00:5f:e6:
                    59:11:8f:f4:3c:95:79:89:4b:99:66:83:6f:07:cf:
                    d0:1d:03:28:a3:2e:d6:d1:8c:6c:bc:dd:87:93:be:
                    46:55:cd:75:26:92:cf:f9:2c:cd:17:7a:8a:76:b0:
                    26:13:a2:b3:fe:de:9b:c2:9d:c6:44:a2:86:00:d7:
                    d5:0c:0e:98:ee:ad:94:5b:77:17:0d:d6:b3:45:35:
                    61:d0:1c:d4:71:ac:36:33:61:de:bd:4f:8f:50:ac:
                    78:4f:17:12:fd:4e:de:1e:fd:76:52:46:66:52:e2:
                    bd:24:f5:a4:57:13:3a:32:b1:6e:fb:1b:80:ed:42:
                    9d:57:74:33:d5:72:38:6f:e9:37:7b:19:72:5b:8a:
                    23:4e:d9:02:2c:3b:78:3a:97:45:31:f0:d1:5d:d2:
                    bf:71:3e:e2:45:32:88:be:98:2f:dd:95:e5:24:64:
                    52:d8:55:c2:f3:aa:2e:03:2b:b4:58:35:24:40:cf:
                    8f:14:71:05:88:68:a3:39:b2:6d:bf:b1:67:67:c8:
                    ca:f7:89:22:5e:b8:ed:fc:e7:28:41:e1:12:97:c5:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2A:21:80:50:2D:37:AE:7F:91:53:6E:AE:AB:96:43:93:19:B4:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/ed049015-1502-376d-ba5b-853b2a90294c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86/e7b5edc2-8809-41fc-a3b8-3d01525cdb86.crl

            X509v3 Authority Key Identifier:
                keyid:F8:8C:34:34:A0:6C:B6:46:FC:27:7B:AC:6C:E0:7C:32:53:4D:88:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e7b5edc2-8809-41fc-a3b8-3d01525cdb86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:be:f6:b6:e6:c6:0d:67:50:9c:a2:3d:06:ed:49:75:8c:56:
         85:55:58:4b:1a:c6:04:6a:3b:d8:74:e7:50:dc:84:25:5f:c4:
         2d:b8:a2:14:76:35:28:38:d8:dc:d2:6e:39:f1:35:bd:43:87:
         f4:e8:9b:c8:b6:ac:be:e4:5f:cd:15:36:b9:a0:bf:0d:39:63:
         28:21:ae:80:a9:e1:f1:a5:ca:10:11:0b:e0:62:ab:e4:e5:41:
         e3:7b:f5:f4:a5:93:af:e0:fb:bc:83:8c:ba:5c:94:14:30:e9:
         53:dd:8c:61:37:d2:fc:7b:73:b3:11:61:6a:aa:1a:7e:d7:92:
         86:0d:a5:1d:5f:d6:a7:a2:aa:ae:2b:f3:12:29:67:01:a7:5f:
         43:ac:92:5a:29:39:8d:be:87:5e:9a:54:d8:4c:0f:4f:33:1c:
         fe:09:74:d2:73:d3:01:0c:2c:81:55:19:c5:8b:05:6f:3d:24:
         cc:c0:a0:8d:43:74:75:41:54:2f:5c:36:af:7c:38:c1:c7:cd:
         4c:b1:7e:3c:93:24:c5:2f:98:67:ed:51:38:73:1f:51:3c:54:
         c4:4f:1f:bb:96:1b:d6:68:09:2c:24:8b:39:74:14:54:e7:7d:
         df:2e:45:6b:b4:ce:5f:b1:38:f7:ce:d2:9a:fd:9a:7f:9e:a6:
         01:37:de:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVeXZ1nQjE6YG9MZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNWVkYzItODgwOS00MWZjLWEzYjgtM2QwMTUyNWNk
Yjg2MB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk
YWVkYTViZmEtMmRiYi00OWU2LWJmZjgtMzI3M2NmYmYzZmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9sm4nclUWuHAzZP03HPap/PvHioOvCjmWGM
+me2zyj3Hdc4rAdElawAX+ZZEY/0PJV5iUuZZoNvB8/QHQMooy7W0YxsvN2Hk75G
Vc11JpLP+SzNF3qKdrAmE6Kz/t6bwp3GRKKGANfVDA6Y7q2UW3cXDdazRTVh0BzU
caw2M2HevU+PUKx4TxcS/U7eHv12UkZmUuK9JPWkVxM6MrFu+xuA7UKdV3Qz1XI4
b+k3exlyW4ojTtkCLDt4OpdFMfDRXdK/cT7iRTKIvpgv3ZXlJGRS2FXC86ouAyu0
WDUkQM+PFHEFiGijObJtv7FnZ8jK94kiXrjt/OcoQeESl8UnZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwqIYBQLTeuf5FTbq6rlkOTGbSSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lN2I1
ZWRjMi04ODA5LTQxZmMtYTNiOC0zZDAxNTI1Y2RiODYvZWQwNDkwMTUtMTUwMi0z
NzZkLWJhNWItODUzYjJhOTAyOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTdiNWVkYzItODgwOS00MWZjLWEz
YjgtM2QwMTUyNWNkYjg2L2U3YjVlZGMyLTg4MDktNDFmYy1hM2I4LTNkMDE1MjVj
ZGI4Ni5jcmwwHwYDVR0jBBgwFoAU+Iw0NKBstkb8J3usbOB8MlNNiIgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lN2I1ZWRjMi04ODA5LTQxZmMtYTNiOC0zZDAx
NTI1Y2RiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLSnEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGC+9rbmxg1nUJyiPQbtSXWMVoVVWEsaxgRqO9h051DchCVfxC24ohR2
NSg42NzSbjnxNb1Dh/Tom8i2rL7kX80VNrmgvw05YyghroCp4fGlyhARC+Biq+Tl
QeN79fSlk6/g+7yDjLpclBQw6VPdjGE30vx7c7MRYWqqGn7XkoYNpR1f1qeiqq4r
8xIpZwGnX0OsklopOY2+h16aVNhMD08zHP4JdNJz0wEMLIFVGcWLBW89JMzAoI1D
dHVBVC9cNq98OMHHzUyxfjyTJMUvmGftUThzH1E8VMRPH7uWG9ZoCSwkizl0FFTn
fd8uRWu0zl+xOPfO0pr9mn+epgE33ig=
-----END CERTIFICATE-----
Generated at Mon May 6 15:06:05 2024 by rpki-client on console-ams.rpki-client.org