Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa
File:                     7e20aedc-cecf-313d-b417-d44a44035c5e.roa (raw, json)
Hash identifier:          rU+Ct3CrI6CRI0zYgsxgtw1rOXCNq3G6q80BQtjzKpQ=
Subject key identifier:   B4:4C:75:08:9F:E9:CD:BC:3F:E4:53:B9:14:22:45:49:CC:80:ED:B6
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858457A4879E04CF05052E6FEA300
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     394089
IP address blocks:        165.85.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:79:e0:4c:f0:50:52:e6:fe:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=d3087cc1-0289-4e09-9afd-968efb59ab9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:2b:e4:d8:80:60:11:63:fe:d9:95:c7:18:
                    77:c4:f6:32:9b:30:70:c4:63:08:fd:06:9a:9d:33:
                    28:a9:22:12:df:62:f0:ed:8b:2d:80:bc:e5:51:12:
                    41:f0:27:88:ec:28:ac:cb:5c:86:2f:b4:10:ab:fd:
                    9c:58:a6:6d:c3:90:57:17:18:3f:86:d0:0b:50:b4:
                    90:d5:14:18:ac:ad:66:eb:66:a6:9d:6f:5c:b4:a4:
                    63:f9:40:10:98:f1:22:4d:c1:af:ea:3e:0e:5f:33:
                    9a:6c:27:49:f8:69:eb:f2:e7:75:ed:88:96:21:f4:
                    c7:e9:ca:fb:35:68:a5:a1:18:71:ef:24:e4:49:9f:
                    e9:e5:a3:57:ed:24:8a:e4:7b:95:cf:9b:5a:fc:11:
                    dc:eb:c5:23:00:e1:4d:f9:63:3d:e1:24:e0:0b:a6:
                    b1:9f:b2:ce:61:eb:6b:b7:2f:24:93:ed:bb:b7:bf:
                    a9:1c:45:5d:42:ff:55:45:1b:d6:40:b0:8b:84:43:
                    1e:b2:51:c5:29:4f:8b:df:fb:05:9f:aa:7b:dd:f1:
                    be:78:23:68:21:bd:89:e7:b7:25:af:b4:c2:cc:bc:
                    a5:e9:3a:82:6b:67:21:40:3c:04:d2:9b:26:32:e8:
                    de:9d:13:41:40:8b:bb:9c:3a:b8:07:29:17:45:51:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4C:75:08:9F:E9:CD:BC:3F:E4:53:B9:14:22:45:49:CC:80:ED:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c2:43:b6:62:cf:5b:5a:f7:ca:d0:30:f3:3f:dd:1f:41:cd:
         0c:48:fc:88:89:75:d1:20:4f:89:0e:65:60:4a:67:0a:c3:b3:
         a5:04:df:5b:7c:59:39:71:3f:02:77:c6:17:dc:52:51:f0:c7:
         6a:db:1a:d6:09:23:37:43:37:c8:92:c4:6c:bc:e1:5e:e5:68:
         4b:fd:22:58:f1:80:6c:00:20:b8:b5:78:2a:28:3e:01:89:8b:
         9f:8b:6a:76:d9:1d:15:b6:b4:9c:bf:c5:c4:99:6b:3f:dc:c1:
         ed:92:0b:78:65:98:5e:4c:c3:75:4f:3d:81:7f:48:04:9b:02:
         c4:04:c4:d4:1d:79:c0:80:16:9b:a8:2f:a9:b2:51:b8:ee:b3:
         b3:43:38:25:20:58:35:c9:c9:b1:d9:c5:36:1d:4c:6e:6b:9b:
         0e:7d:c1:49:cd:3b:40:83:5f:31:b1:32:da:d1:63:c1:dc:40:
         8c:64:af:d6:67:b6:cd:73:1a:f4:87:c1:f9:38:c3:a9:13:2f:
         19:84:75:24:c5:c4:69:94:46:aa:87:42:b6:f4:fd:07:27:7c:
         80:5f:a1:4e:a9:28:40:0a:ad:f5:39:f8:24:df:41:49:d1:5d:
         e1:dd:82:1b:22:e5:b4:1c:6d:16:2b:73:f7:ad:cb:2f:7a:c3:
         5b:4d:8b:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SHngTPBQUub+owAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
ZDMwODdjYzEtMDI4OS00ZTA5LTlhZmQtOTY4ZWZiNTlhYjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ekr5NiAYBFj/tmVxxh3xPYymzBwxGMI/Qaa
nTMoqSIS32Lw7YstgLzlURJB8CeI7Cisy1yGL7QQq/2cWKZtw5BXFxg/htALULSQ
1RQYrK1m62amnW9ctKRj+UAQmPEiTcGv6j4OXzOabCdJ+Gnr8ud17YiWIfTH6cr7
NWiloRhx7yTkSZ/p5aNX7SSK5HuVz5ta/BHc68UjAOFN+WM94STgC6axn7LOYetr
ty8kk+27t7+pHEVdQv9VRRvWQLCLhEMeslHFKU+L3/sFn6p73fG+eCNoIb2J57cl
r7TCzLyl6TqCa2chQDwE0psmMujenRNBQIu7nDq4BykXRVEh3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRMdQif6c28P+RTuRQiRUnMgO22MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvN2UyMGFlZGMtY2VjZi0z
MTNkLWI0MTctZDQ0YTQ0MDM1YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApVX9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjCQ7Ziz1ta98rQMPM/3R9BzQxI/IiJddEgT4kOZWBKZwrDs6UE31t8
WTlxPwJ3xhfcUlHwx2rbGtYJIzdDN8iSxGy84V7laEv9IljxgGwAILi1eCooPgGJ
i5+LanbZHRW2tJy/xcSZaz/cwe2SC3hlmF5Mw3VPPYF/SASbAsQExNQdecCAFpuo
L6myUbjus7NDOCUgWDXJybHZxTYdTG5rmw59wUnNO0CDXzGxMtrRY8HcQIxkr9Zn
ts1zGvSHwfk4w6kTLxmEdSTFxGmURqqHQrb0/QcnfIBfoU6pKEAKrfU5+CTfQUnR
XeHdghsi5bQcbRYrc/etyy96w1tNi1E=
-----END CERTIFICATE-----
Generated at Fri May 10 14:20:08 2024 by rpki-client on console-fra.rpki-client.org