Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa
File:                     035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa (raw, json)
Hash identifier:          Kv8dnundorFWXv0nLsrEXkZOr+5DBFE80mIu//orOs8=
Subject key identifier:   23:C5:AC:0F:03:01:3E:14:D0:4A:C3:22:9B:BA:E8:E0:97:FC:E7:41
Certificate issuer:       /CN=e45201d6-ab25-40c8-a762-17e529ce9d0a
Certificate serial:       010D0C9F432858454B274DC966B08459230D4780
Authority key identifier: 25:6D:BC:60:18:2B:41:E2:AB:CC:3B:C0:E5:EA:BF:51:94:0C:5F:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa
Signing time:             Fri 22 Mar 2024 15:50:54 +0000
ROA not before:           Fri 22 Mar 2024 15:50:54 +0000
ROA not after:            Thu 20 Jun 2024 15:50:54 +0000
asID:                     36780
IP address blocks:        63.246.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4b:27:4d:c9:66:b0:84:59:23:0d:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45201d6-ab25-40c8-a762-17e529ce9d0a
        Validity
            Not Before: Mar 22 15:50:54 2024 GMT
            Not After : Jun 20 15:50:54 2024 GMT
        Subject: CN=0d3b47a8-2feb-425c-8d72-4de4f162fd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:c4:d1:31:eb:56:36:1f:ab:05:1e:5e:76:
                    fd:a6:0c:81:8e:15:ce:53:72:5e:a0:9e:cc:82:45:
                    de:e1:6b:4e:ee:1f:1d:2a:6c:38:9f:46:08:09:a8:
                    e4:3a:13:4e:cf:df:8a:f9:4d:99:85:c9:30:ab:04:
                    f0:e1:25:84:9a:a3:b7:c6:7b:b1:84:31:98:5d:d2:
                    a0:5c:72:8a:b4:4c:6f:7e:8e:a3:84:f1:88:77:16:
                    35:de:32:88:29:ec:73:a8:4e:1c:03:f7:60:24:93:
                    90:95:1e:6a:ff:3d:19:0f:f1:85:3c:2b:bf:f8:24:
                    ff:16:13:50:98:7f:f6:65:66:83:55:01:b3:18:73:
                    dc:6a:1d:2b:86:3d:43:b2:44:26:1a:8c:53:ab:1a:
                    45:03:ba:40:6d:29:63:ad:6a:95:0a:b8:39:fd:c7:
                    f3:17:5d:b0:3b:c8:40:f3:09:d6:aa:55:5b:d7:f4:
                    cc:fb:b9:97:fd:7c:7e:53:31:4e:a1:3a:3f:70:1e:
                    6a:7c:25:99:eb:f5:e3:3b:5b:ed:6f:85:47:7a:79:
                    07:04:43:ed:ea:79:27:51:e6:7c:a7:cd:68:2b:9c:
                    43:e4:32:c2:31:51:f8:9d:52:74:16:aa:75:2c:01:
                    97:86:67:e1:34:0d:89:66:f4:4d:96:98:38:04:fd:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:AC:0F:03:01:3E:14:D0:4A:C3:22:9B:BA:E8:E0:97:FC:E7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.crl

            X509v3 Authority Key Identifier:
                keyid:25:6D:BC:60:18:2B:41:E2:AB:CC:3B:C0:E5:EA:BF:51:94:0C:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e3:6b:e9:1e:4e:15:c8:4d:b1:43:d5:a3:94:fe:e6:be:03:
         67:bf:7e:3c:c5:a6:9f:40:c3:b3:72:c4:07:a2:ac:ab:00:2a:
         d5:9e:68:6f:dc:9c:f1:a1:f3:34:ed:7a:3a:71:07:78:38:3f:
         7f:e9:2d:51:fd:43:df:24:54:77:53:76:2f:06:3a:cd:ea:b4:
         71:3b:6a:32:e9:b1:07:1b:d5:36:a9:f2:1f:be:79:29:94:cb:
         95:8c:d4:c2:62:48:0b:60:e1:72:5c:93:5f:bd:ee:5d:65:46:
         24:7f:b8:45:9f:fc:1b:1d:d1:34:eb:8c:64:95:2a:c4:36:f0:
         ac:d7:1d:21:0a:f9:9a:a6:f2:71:5c:35:e6:7d:a2:95:c9:9a:
         3c:85:5e:8c:31:d7:cc:82:05:b3:fa:5c:ac:b3:aa:f8:d6:83:
         af:99:b7:22:88:3b:c0:cf:e3:da:f3:e9:2e:02:2d:b1:13:91:
         cc:b2:3d:75:94:a2:9c:84:b6:40:c5:6a:f4:d0:35:a2:84:57:
         8e:59:34:5f:4c:0b:e4:9d:28:47:6f:5f:cf:68:e5:56:a5:a6:
         85:f8:ef:a2:ba:89:59:11:61:57:82:5f:03:00:18:68:b1:3d:
         ff:56:de:5d:8e:81:41:eb:a6:98:d8:2d:a4:60:84:00:53:14:
         f7:7b:7a:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVLJ03JZrCEWSMNR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ1MjAxZDYtYWIyNS00MGM4LWE3NjItMTdlNTI5Y2U5
ZDBhMB4XDTI0MDMyMjE1NTA1NFoXDTI0MDYyMDE1NTA1NFowLzEtMCsGA1UEAxMk
MGQzYjQ3YTgtMmZlYi00MjVjLThkNzItNGRlNGYxNjJmZDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/bE0THrVjYfqwUeXnb9pgyBjhXOU3JeoJ7M
gkXe4WtO7h8dKmw4n0YICajkOhNOz9+K+U2ZhckwqwTw4SWEmqO3xnuxhDGYXdKg
XHKKtExvfo6jhPGIdxY13jKIKexzqE4cA/dgJJOQlR5q/z0ZD/GFPCu/+CT/FhNQ
mH/2ZWaDVQGzGHPcah0rhj1DskQmGoxTqxpFA7pAbSljrWqVCrg5/cfzF12wO8hA
8wnWqlVb1/TM+7mX/Xx+UzFOoTo/cB5qfCWZ6/XjO1vtb4VHenkHBEPt6nknUeZ8
p81oK5xD5DLCMVH4nVJ0Fqp1LAGXhmfhNA2JZvRNlpg4BP0QDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPFrA8DAT4U0ErDIpu66OCX/OdBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lNDUy
MDFkNi1hYjI1LTQwYzgtYTc2Mi0xN2U1MjljZTlkMGEvMDM1MDI1YjMtMzUxMi0z
YWUwLWI4OTYtYmYxZjVmYTJjZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTQ1MjAxZDYtYWIyNS00MGM4LWE3
NjItMTdlNTI5Y2U5ZDBhL2U0NTIwMWQ2LWFiMjUtNDBjOC1hNzYyLTE3ZTUyOWNl
OWQwYS5jcmwwHwYDVR0jBBgwFoAUJW28YBgrQeKrzDvA5eq/UZQMX4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lNDUyMDFkNi1hYjI1LTQwYzgtYTc2Mi0xN2U1
MjljZTlkMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/aaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzja+keThXITbFD1aOU/ua+A2e/fjzFpp9Aw7NyxAeirKsAKtWeaG/c
nPGh8zTtejpxB3g4P3/pLVH9Q98kVHdTdi8GOs3qtHE7ajLpsQcb1Tap8h++eSmU
y5WM1MJiSAtg4XJck1+97l1lRiR/uEWf/Bsd0TTrjGSVKsQ28KzXHSEK+Zqm8nFc
NeZ9opXJmjyFXowx18yCBbP6XKyzqvjWg6+ZtyKIO8DP49rz6S4CLbETkcyyPXWU
opyEtkDFavTQNaKEV45ZNF9MC+SdKEdvX89o5ValpoX476K6iVkRYVeCXwMAGGix
Pf9W3l2OgUHrppjYLaRghABTFPd7ei8=
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:25:07 2024 by rpki-client on console-ams.rpki-client.org