Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/5b96ec1a-69a1-31b7-a4d0-3e47c6f0c54f.roa
File:                     5b96ec1a-69a1-31b7-a4d0-3e47c6f0c54f.roa (raw, json)
Hash identifier:          ugieq1Im4r6inxCJ7ilNGwqrJojhSySG8T8GKSk+bq4=
Subject key identifier:   3C:2B:F0:A4:B1:5D:2A:23:E5:62:1C:D0:79:A4:76:30:CD:7C:3E:E2
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584484BA0622CA8528B5AD47C4A0
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/5b96ec1a-69a1-31b7-a4d0-3e47c6f0c54f.roa
Signing time:             Thu 11 Jan 2024 14:00:29 +0000
ROA not before:           Thu 11 Jan 2024 14:00:29 +0000
ROA not after:            Wed 10 Apr 2024 13:00:29 +0000
asID:                     14618
IP address blocks:        173.240.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:84:ba:06:22:ca:85:28:b5:ad:47:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Jan 11 14:00:29 2024 GMT
            Not After : Apr 10 13:00:29 2024 GMT
        Subject: CN=05ed1cb7-181a-428f-9bca-15dabb26ffa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:b7:b0:3f:e4:52:d1:d6:b2:a3:31:6b:17:
                    f6:dd:fb:f2:77:52:1b:d4:f7:07:b9:55:b0:24:0b:
                    f6:0a:62:ca:74:94:db:3d:a8:d9:a7:75:d5:7d:8e:
                    92:10:1c:98:e8:70:b1:ba:86:a4:f9:29:62:62:b7:
                    78:d6:45:27:51:bd:b2:b6:fa:3f:4b:a0:de:98:47:
                    5c:c9:d4:2e:c3:93:de:77:dc:d9:e9:93:65:e8:0b:
                    58:36:2f:f8:40:55:64:46:80:e8:d1:01:01:8b:48:
                    b4:37:30:5d:d3:35:ba:6d:c8:63:01:75:0f:8c:43:
                    25:69:3d:bd:bc:57:59:67:6a:3b:a5:9f:d7:0b:80:
                    60:66:86:99:f2:27:e3:39:45:4a:0f:06:49:7a:71:
                    81:05:e9:03:b5:18:d3:ae:a4:cc:72:ba:e5:e5:8a:
                    b0:a7:9a:41:ba:bc:76:be:04:02:04:f3:34:18:d6:
                    63:63:ed:b6:9c:5b:8e:50:b7:3a:34:22:2a:54:7b:
                    ff:a6:e4:aa:82:ea:f2:90:d6:01:af:df:cd:d8:04:
                    60:32:20:d4:98:df:86:8a:53:f5:17:01:f2:b9:6b:
                    10:07:ba:fa:d0:58:f5:66:16:27:a1:d6:45:75:7f:
                    d7:0b:40:ad:78:e8:f2:75:de:7a:ef:30:5b:f1:8d:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2B:F0:A4:B1:5D:2A:23:E5:62:1C:D0:79:A4:76:30:CD:7C:3E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/5b96ec1a-69a1-31b7-a4d0-3e47c6f0c54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:05:8e:45:40:0c:7a:3f:32:9b:98:c4:1c:d6:05:e3:29:
         07:49:29:2c:3f:58:55:b4:b7:83:73:35:f2:d6:ce:51:bd:a6:
         e5:8b:49:64:8d:4a:35:6e:41:ea:86:b6:fd:f9:cf:b4:f2:81:
         64:05:80:00:ee:95:d2:6f:71:92:76:94:9b:b4:18:c8:82:78:
         4b:e7:c8:9a:8a:31:29:1a:ca:cb:cf:5b:2e:aa:78:2c:ae:6b:
         e3:e0:2c:4a:f7:11:89:9f:f4:90:06:57:80:01:f6:66:14:85:
         d4:48:5d:dd:54:53:16:bc:a5:a1:73:ae:d8:de:68:83:97:37:
         2f:55:67:53:77:9a:1e:e8:c8:aa:83:09:73:28:01:e4:33:a1:
         ca:cd:19:ab:1c:ee:15:34:68:a7:9e:7a:05:c1:40:2a:c7:34:
         e3:2a:69:35:c2:63:0b:31:62:9d:b0:8b:9f:7c:ba:16:fa:3a:
         32:b5:e7:db:05:29:af:ba:76:72:32:fc:7a:1e:08:4d:a9:e7:
         5d:b2:6f:26:cb:cc:a7:de:0f:a5:d6:8a:11:f1:f2:21:cd:81:
         49:9f:b3:09:5d:06:a1:b2:69:d1:55:95:c4:d2:0c:f0:dc:34:
         4d:22:75:91:a0:29:4f:74:bb:2f:5a:15:fc:91:d6:55:d6:fa:
         0f:43:5d:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESEugYiyoUota1HxKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0
MGRmMB4XDTI0MDExMTE0MDAyOVoXDTI0MDQxMDEzMDAyOVowLzEtMCsGA1UEAxMk
MDVlZDFjYjctMTgxYS00MjhmLTliY2EtMTVkYWJiMjZmZmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihu3sD/kUtHWsqMxaxf23fvyd1Ib1PcHuVWw
JAv2CmLKdJTbPajZp3XVfY6SEByY6HCxuoak+SliYrd41kUnUb2ytvo/S6DemEdc
ydQuw5Ped9zZ6ZNl6AtYNi/4QFVkRoDo0QEBi0i0NzBd0zW6bchjAXUPjEMlaT29
vFdZZ2o7pZ/XC4BgZoaZ8ifjOUVKDwZJenGBBekDtRjTrqTMcrrl5Yqwp5pBurx2
vgQCBPM0GNZjY+22nFuOULc6NCIqVHv/puSqgurykNYBr9/N2ARgMiDUmN+GilP1
FwHyuWsQB7r60Fj1ZhYnodZFdX/XC0CteOjydd567zBb8Y3aqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDwr8KSxXSoj5WIc0HmkdjDNfD7iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh
OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvNWI5NmVjMWEtNjlhMS0z
MWI3LWE0ZDAtM2U0N2M2ZjBjNTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk
YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh
NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk
ODI2YTQwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfClMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9YBY5FQAx6PzKbmMQc1gXjKQdJKSw/WFW0t4NzNfLWzlG9puWLSWSN
SjVuQeqGtv35z7TygWQFgADuldJvcZJ2lJu0GMiCeEvnyJqKMSkaysvPWy6qeCyu
a+PgLEr3EYmf9JAGV4AB9mYUhdRIXd1UUxa8paFzrtjeaIOXNy9VZ1N3mh7oyKqD
CXMoAeQzocrNGasc7hU0aKeeegXBQCrHNOMqaTXCYwsxYp2wi598uhb6OjK159sF
Ka+6dnIy/HoeCE2p512ybybLzKfeD6XWihHx8iHNgUmfswldBqGyadFVlcTSDPDc
NE0idZGgKU90uy9aFfyR1lXW+g9DXY0=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:49:22 2024 by rpki-client on console-fra.rpki-client.org