Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2e040eec-70e3-3761-847a-129348c183fe.roa
File:                     2e040eec-70e3-3761-847a-129348c183fe.roa (raw, json)
Hash identifier:          NhHzR2q8nnmSNekwjoi164DM5tmjmydNQmdQUI1wzqc=
Subject key identifier:   F0:94:79:69:87:96:55:79:F1:F4:B5:AF:0A:F0:F4:49:0A:EE:73:4E
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285845E53E0F07E53EAE128C4A2700
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2e040eec-70e3-3761-847a-129348c183fe.roa
Signing time:             Thu 16 May 2024 20:31:14 +0000
ROA not before:           Thu 16 May 2024 20:31:14 +0000
ROA not after:            Wed 14 Aug 2024 20:31:14 +0000
asID:                     198949
IP address blocks:        163.253.32.0/24 maxlen: 24
                          163.253.34.0/24 maxlen: 24
                          2001:468:2610::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e5:3e:0f:07:e5:3e:ae:12:8c:4a:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May 16 20:31:14 2024 GMT
            Not After : Aug 14 20:31:14 2024 GMT
        Subject: CN=600596f4-8993-4c95-93a1-159e3fcb70f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c9:af:87:fe:f2:47:e6:ee:ed:b6:a2:aa:bf:
                    52:d1:4f:3f:46:cf:c1:46:77:85:73:ab:da:eb:83:
                    f9:19:6a:cc:d3:a4:60:e6:5b:8b:1c:88:52:4b:e7:
                    56:91:19:db:96:6c:92:7e:97:10:ba:47:dc:c7:28:
                    d5:1d:d6:b7:82:08:e2:a2:43:86:4b:31:02:66:8c:
                    b5:39:34:ed:8f:9e:e1:1c:4a:0a:ee:50:07:c3:67:
                    ec:d3:91:1b:a7:fc:23:fe:a2:ea:2d:ae:78:8c:40:
                    43:a3:44:bd:d6:8a:f2:f2:c3:26:c6:8b:f1:6c:22:
                    37:f9:3d:5a:81:a4:91:ff:40:b4:dd:80:82:fa:3f:
                    8b:2b:90:11:27:23:ce:3b:70:bb:50:66:ae:0b:87:
                    ee:5b:91:9a:16:10:88:24:e3:82:22:83:6f:f1:10:
                    e9:7c:a0:5d:c7:4f:a5:27:5c:f6:8a:85:a8:66:aa:
                    45:07:57:f7:f0:37:d6:60:24:f7:ce:fd:65:20:5a:
                    69:57:6d:b2:cd:13:06:ad:4c:21:2d:43:7c:41:62:
                    e1:da:cf:d6:ee:8d:67:af:ca:17:a3:af:a0:f3:97:
                    13:65:c7:10:43:f3:c8:d9:ac:fd:4b:9e:e5:98:8e:
                    2e:0b:b3:fb:5b:c0:8a:e4:99:bf:39:2a:ed:3a:4a:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:94:79:69:87:96:55:79:F1:F4:B5:AF:0A:F0:F4:49:0A:EE:73:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2e040eec-70e3-3761-847a-129348c183fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.32.0/24
                  163.253.34.0/24
                IPv6:
                  2001:468:2610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:54:f9:3c:85:70:df:1e:8e:11:8f:b9:1f:8d:54:08:f2:a0:
         b9:b1:87:32:15:d2:36:f2:e8:dd:e9:15:96:c5:dd:c9:66:c5:
         26:84:f8:ca:57:27:ef:e9:b7:57:90:b4:9a:04:88:91:b4:2c:
         c5:46:6d:77:f0:15:ee:ff:07:d1:23:e8:bb:99:26:5a:f5:e4:
         ad:1d:6f:f1:f6:f1:f8:0c:1e:8f:03:6e:7b:a2:d2:5c:9c:8b:
         b8:ce:3e:d5:09:5a:5e:6b:87:d3:9f:ef:bd:cf:bf:76:56:b3:
         fa:f2:e6:2d:ed:66:7b:2e:27:4d:7d:90:dd:da:46:0a:0e:9d:
         b9:e2:e4:13:f1:d7:f7:3f:24:eb:a5:a1:93:e4:e6:c7:fa:c6:
         9f:de:c1:91:43:7b:5e:55:38:24:84:74:02:76:80:53:3d:58:
         d7:df:d0:75:d8:e3:e4:f6:db:93:3e:c0:08:f3:e2:c9:c3:fb:
         ff:46:49:1e:67:29:10:a9:e3:57:80:9c:01:9d:64:0d:af:0a:
         b1:ce:46:48:11:f5:2e:ad:38:0a:1b:92:3f:24:0a:4d:20:1a:
         a9:4a:cd:73:75:f3:fa:95:8f:80:87:26:91:31:ec:4a:2d:81:
         95:aa:af:1a:71:f5:47:a0:a9:53:35:04:c9:32:c2:5e:3a:0a:
         a5:9f:de:4a
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEXlPg8H5T6uEoxKJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI0MDUxNjIwMzExNFoXDTI0MDgxNDIwMzExNFowLzEtMCsGA1UEAxMk
NjAwNTk2ZjQtODk5My00Yzk1LTkzYTEtMTU5ZTNmY2I3MGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMmvh/7yR+bu7baiqr9S0U8/Rs/BRneFc6va
64P5GWrM06Rg5luLHIhSS+dWkRnblmySfpcQukfcxyjVHda3ggjiokOGSzECZoy1
OTTtj57hHEoK7lAHw2fs05Ebp/wj/qLqLa54jEBDo0S91ory8sMmxovxbCI3+T1a
gaSR/0C03YCC+j+LK5ARJyPOO3C7UGauC4fuW5GaFhCIJOOCIoNv8RDpfKBdx0+l
J1z2ioWoZqpFB1f38DfWYCT3zv1lIFppV22yzRMGrUwhLUN8QWLh2s/W7o1nr8oX
o6+g85cTZccQQ/PI2az9S57lmI4uC7P7W8CK5Jm/OSrtOkrVFQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFPCUeWmHllV58fS1rwrw9EkK7nNOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMmUwNDBlZWMtNzBlMy0z
NzYxLTg0N2EtMTI5MzQ4YzE4M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAo/0gAwQA
o/0iMA8EAgACMAkDBwAgAQRoJhAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAL1T5PIVw3x6OEY+5H41UCPKg
ubGHMhXSNvLo3ekVlsXdyWbFJoT4ylcn7+m3V5C0mgSIkbQsxUZtd/AV7v8H0SPo
u5kmWvXkrR1v8fbx+AwejwNue6LSXJyLuM4+1QlaXmuH05/vvc+/dlaz+vLmLe1m
ey4nTX2Q3dpGCg6dueLkE/HX9z8k66Whk+Tmx/rGn97BkUN7XlU4JIR0AnaAUz1Y
19/Qddjj5Pbbkz7ACPPiycP7/0ZJHmcpEKnjV4CcAZ1kDa8Ksc5GSBH1Lq04ChuS
PyQKTSAaqUrNc3Xz+pWPgIcmkTHsSi2BlaqvGnH1R6CpUzUEyTLCXjoKpZ/eSg==
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:14:51 2024 by rpki-client on console-ams.rpki-client.org