Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/fa0d3697-364c-3350-9d30-9feddf64d888.roa
File:                     fa0d3697-364c-3350-9d30-9feddf64d888.roa (raw, json)
Hash identifier:          mtlatYIWEwjRpA5pe1LrAJ4JL9AH6OJGI/WqXN075CY=
Subject key identifier:   C2:CC:4E:32:76:20:A2:96:07:B5:C1:C7:60:4D:B6:F9:19:B1:66:94
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F43285845DBFE628C6BD50603DDC25800
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/fa0d3697-364c-3350-9d30-9feddf64d888.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     6461
IP address blocks:        204.227.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:62:8c:6b:d5:06:03:dd:c2:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=743711cd-1031-45f3-8101-88b9e458d2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:13:df:be:f4:7e:02:25:fc:11:4d:ca:5f:
                    55:d2:30:4d:9d:92:4d:81:eb:2a:8f:14:85:ab:ae:
                    7e:c3:f5:0e:0c:b6:09:37:a6:38:b1:07:fb:d2:d4:
                    72:03:8e:65:5b:7e:cd:44:b5:2b:fa:3f:5e:ca:de:
                    72:01:f9:89:a6:f2:3b:ee:5c:89:a9:07:f7:f6:c8:
                    48:57:c6:b4:ac:7e:92:aa:65:a3:cc:0b:b9:52:de:
                    f4:80:2f:07:69:9b:d7:b3:99:a0:47:99:40:ce:54:
                    f0:d2:7a:4e:c0:fe:2e:f3:83:c9:b7:1a:66:9e:e0:
                    b2:50:73:9f:e6:42:de:f5:a7:96:0e:c3:7d:d4:d8:
                    0d:54:27:49:f6:72:99:34:28:21:1f:aa:e0:3d:15:
                    2d:f7:88:32:6f:02:3c:41:6f:df:69:9e:1e:1e:99:
                    89:95:eb:80:9b:bb:e1:78:1c:47:30:67:b9:b5:5a:
                    65:fa:50:97:00:40:03:2c:50:a9:86:96:01:b7:f0:
                    c4:f2:14:34:de:4c:8d:7e:40:10:be:51:87:a5:ef:
                    b6:9b:32:ab:7b:c5:b6:f7:51:8e:17:c8:96:24:b9:
                    2b:67:da:87:be:80:d6:77:16:be:11:f1:02:7e:61:
                    0f:c2:e8:71:93:70:a4:8a:e5:30:11:09:bc:bc:56:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:4E:32:76:20:A2:96:07:B5:C1:C7:60:4D:B6:F9:19:B1:66:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/fa0d3697-364c-3350-9d30-9feddf64d888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.227.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:41:44:b8:0e:d9:3f:a7:45:dc:39:31:20:7c:a0:39:9d:
         67:4a:e1:bd:be:6e:c4:23:80:55:2e:85:f1:ae:41:fe:55:1a:
         2a:c8:d1:ed:fd:1a:72:40:57:00:61:45:91:a6:f9:1c:69:3b:
         3a:85:d9:38:e1:90:6d:2c:bc:09:1a:83:45:37:0f:5a:c6:ce:
         4f:37:7b:24:fb:3c:92:f8:e1:65:cc:ad:37:c6:46:f1:16:5c:
         4b:0c:e1:80:2f:ed:8c:b1:3a:de:d1:85:eb:db:e3:76:d8:17:
         99:a9:7d:f3:30:2e:80:d8:f7:73:33:2d:78:55:ae:86:11:95:
         39:c6:29:94:3a:29:a9:fb:fc:7e:a5:45:b9:6d:e9:e1:ba:db:
         ee:77:c9:6b:4b:14:cb:8c:bb:30:08:78:22:3a:47:c1:ec:7d:
         b8:6d:f5:37:4c:9b:58:94:6a:e5:d6:9b:41:83:92:d4:a2:26:
         33:62:34:02:a3:83:45:f6:80:0d:f8:d6:f8:ed:46:c3:8d:1e:
         91:84:69:04:d2:89:f6:97:ae:9c:c3:ff:22:1d:5f:a0:c1:f7:
         97:bf:72:02:1e:53:a0:07:44:85:7a:23:1f:5c:63:5e:81:11:
         5a:cd:23:96:7e:e2:f8:b5:4e:f6:fa:ad:e0:e6:da:03:41:05:
         8e:aa:5a:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb/mKMa9UGA93CWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWM3MDUzYWItMDczNi00M2JiLWJkZmMtMDE2OWFlOTBi
ODBkMB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk
NzQzNzExY2QtMTAzMS00NWYzLTgxMDEtODhiOWU0NThkMmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2MT3770fgIl/BFNyl9V0jBNnZJNgesqjxSF
q65+w/UODLYJN6Y4sQf70tRyA45lW37NRLUr+j9eyt5yAfmJpvI77lyJqQf39shI
V8a0rH6SqmWjzAu5Ut70gC8HaZvXs5mgR5lAzlTw0npOwP4u84PJtxpmnuCyUHOf
5kLe9aeWDsN91NgNVCdJ9nKZNCghH6rgPRUt94gybwI8QW/faZ4eHpmJleuAm7vh
eBxHMGe5tVpl+lCXAEADLFCphpYBt/DE8hQ03kyNfkAQvlGHpe+2mzKre8W291GO
F8iWJLkrZ9qHvoDWdxa+EfECfmEPwuhxk3CkiuUwEQm8vFauLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLMTjJ2IKKWB7XBx2BNtvkZsWaUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcw
NTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5YWU5MGI4MGQvZmEwZDM2OTctMzY0Yy0z
MzUwLTlkMzAtOWZlZGRmNjRkODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWM3MDUzYWItMDczNi00M2JiLWJk
ZmMtMDE2OWFlOTBiODBkL2VjNzA1M2FiLTA3MzYtNDNiYi1iZGZjLTAxNjlhZTkw
YjgwZC5jcmwwHwYDVR0jBBgwFoAU3pcubt/PvchrC3xOqzpSG2XulSwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcwNTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5
YWU5MGI4MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzOMcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvaQUS4Dtk/p0XcOTEgfKA5nWdK4b2+bsQjgFUuhfGuQf5VGirI0e39
GnJAVwBhRZGm+RxpOzqF2TjhkG0svAkag0U3D1rGzk83eyT7PJL44WXMrTfGRvEW
XEsM4YAv7YyxOt7Rhevb43bYF5mpffMwLoDY93MzLXhVroYRlTnGKZQ6Kan7/H6l
Rblt6eG62+53yWtLFMuMuzAIeCI6R8Hsfbht9TdMm1iUauXWm0GDktSiJjNiNAKj
g0X2gA341vjtRsONHpGEaQTSifaXrpzD/yIdX6DB95e/cgIeU6AHRIV6Ix9cY16B
EVrNI5Z+4vi1Tvb6reDm2gNBBY6qWvU=
-----END CERTIFICATE-----
Generated at Sat May 18 01:45:59 2024 by rpki-client on console-ams.rpki-client.org