Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa
File:                     b945e2a1-3f45-305c-afce-b18a9404721d.roa (raw, json)
Hash identifier:          bpZEd3EwueRRoT9gOYc7PRuFmwZ+LoOTuOATMp7E9xw=
Subject key identifier:   C3:F1:FC:C9:3B:ED:EA:D1:0A:5E:81:5A:3E:59:65:4C:DF:19:4B:27
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F4328584518B04956A91F94ECCFBC7600
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa
Signing time:             Mon 04 Mar 2024 14:00:33 +0000
ROA not before:           Mon 04 Mar 2024 14:00:33 +0000
ROA not after:            Sun 02 Jun 2024 13:00:33 +0000
asID:                     397976
IP address blocks:        195.85.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:18:b0:49:56:a9:1f:94:ec:cf:bc:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Mar  4 14:00:33 2024 GMT
            Not After : Jun  2 13:00:33 2024 GMT
        Subject: CN=a5008bd0-0fbe-445b-ba4b-92b0803f33f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:6d:71:d1:1e:11:d4:49:cb:7e:31:2b:49:
                    34:a8:63:db:0a:f2:7f:ad:0e:3b:21:23:03:fa:6b:
                    67:fb:53:ef:1c:3d:40:29:66:83:3a:b4:7a:a2:a9:
                    59:7e:fc:f7:a6:8a:4d:ad:21:ba:97:d5:7c:d8:57:
                    e7:11:97:85:60:51:0d:32:01:92:f7:3d:16:ec:96:
                    37:a5:ef:52:09:16:1c:91:92:81:25:92:10:b3:9c:
                    b6:36:7b:87:6e:a6:5f:c6:27:5e:66:20:27:e9:03:
                    f4:44:cf:4c:40:8c:f4:5d:e1:05:a1:36:ec:e0:ad:
                    82:2a:bf:74:bd:29:d1:8b:97:b7:56:de:9d:28:e0:
                    5b:d9:b2:1e:bb:6d:71:7f:d0:52:9c:f5:0c:90:5a:
                    dc:c6:69:25:bf:07:60:ec:bd:45:52:30:14:d6:45:
                    57:86:37:da:ab:fa:2f:e6:9e:7f:ac:5d:ab:fa:5f:
                    f3:71:3f:9e:3b:94:b6:c2:b0:49:ba:9e:44:9c:9a:
                    1f:de:a1:bc:7f:d6:ec:a2:41:bb:25:0b:0b:7f:4e:
                    25:64:d7:0d:eb:e8:54:d9:90:60:10:87:11:1c:c4:
                    02:22:bd:17:4e:63:bb:7b:0d:a6:48:9d:2c:e5:97:
                    88:4a:c9:02:19:d9:64:64:7b:bd:64:29:25:6c:5b:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F1:FC:C9:3B:ED:EA:D1:0A:5E:81:5A:3E:59:65:4C:DF:19:4B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:6f:73:ac:b8:84:b0:00:9a:35:65:3c:49:32:fc:74:a0:79:
         27:ab:0f:4c:4e:fa:ae:a8:38:d3:bb:ea:ba:30:36:c5:05:2d:
         5b:d0:95:2c:43:23:50:b5:88:b6:f3:57:e9:3a:1c:05:b0:9f:
         ae:dd:0f:05:7c:d9:cd:5f:0f:82:d4:61:4c:db:f9:a4:4a:d9:
         86:95:85:bd:7f:dd:87:55:3d:41:c3:88:17:12:54:f1:b5:0e:
         f1:92:fc:ed:db:57:b1:ae:e1:1a:d9:74:f4:d5:51:4e:2c:2b:
         0a:7a:0b:98:81:a7:5b:4f:36:46:ec:0c:27:86:34:a0:f9:a7:
         ab:3c:27:2f:d7:22:c6:98:00:4a:f9:c8:a3:ac:5f:89:20:8a:
         06:e1:c2:d6:7c:61:5d:d1:1a:db:25:6b:27:19:4d:42:07:f0:
         cb:d8:69:79:22:f9:78:1a:69:73:53:0d:a2:df:21:d7:9c:0c:
         86:af:e0:f4:ee:3d:52:9a:13:e7:dc:22:3f:eb:b6:9f:75:59:
         d4:18:27:05:27:e4:58:b6:a3:fe:6c:12:3e:66:91:06:dd:59:
         69:a4:56:75:f6:64:51:ce:62:1c:83:ab:bc:fa:da:7c:93:dc:
         cf:a8:4f:4d:f7:5d:eb:5a:5c:a2:37:55:de:2a:c3:1a:be:cb:
         3c:27:82:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUYsElWqR+U7M+8dgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3
ODQyMB4XDTI0MDMwNDE0MDAzM1oXDTI0MDYwMjEzMDAzM1owLzEtMCsGA1UEAxMk
YTUwMDhiZDAtMGZiZS00NDViLWJhNGItOTJiMDgwM2YzM2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi55tcdEeEdRJy34xK0k0qGPbCvJ/rQ47ISMD
+mtn+1PvHD1AKWaDOrR6oqlZfvz3popNrSG6l9V82FfnEZeFYFENMgGS9z0W7JY3
pe9SCRYckZKBJZIQs5y2NnuHbqZfxideZiAn6QP0RM9MQIz0XeEFoTbs4K2CKr90
vSnRi5e3Vt6dKOBb2bIeu21xf9BSnPUMkFrcxmklvwdg7L1FUjAU1kVXhjfaq/ov
5p5/rF2r+l/zcT+eO5S2wrBJup5EnJof3qG8f9bsokG7JQsLf04lZNcN6+hU2ZBg
EIcRHMQCIr0XTmO7ew2mSJ0s5ZeISskCGdlkZHu9ZCklbFvnAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPx/Mk77erRCl6BWj5ZZUzfGUsnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh
YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvYjk0NWUyYTEtM2Y0NS0z
MDVjLWFmY2UtYjE4YTk0MDQ3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx
OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh
Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy
OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1V2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFvc6y4hLAAmjVlPEky/HSgeSerD0xO+q6oONO76rowNsUFLVvQlSxD
I1C1iLbzV+k6HAWwn67dDwV82c1fD4LUYUzb+aRK2YaVhb1/3YdVPUHDiBcSVPG1
DvGS/O3bV7Gu4RrZdPTVUU4sKwp6C5iBp1tPNkbsDCeGNKD5p6s8Jy/XIsaYAEr5
yKOsX4kgigbhwtZ8YV3RGtslaycZTUIH8MvYaXki+XgaaXNTDaLfIdecDIav4PTu
PVKaE+fcIj/rtp91WdQYJwUn5Fi2o/5sEj5mkQbdWWmkVnX2ZFHOYhyDq7z62nyT
3M+oT033XetaXKI3Vd4qwxq+yzwngkk=
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:01 2024 by rpki-client on console-fra.rpki-client.org