Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa
File:                     2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa (raw, json)
Hash identifier:          DA1yHKRuBcuMRZsEJrLkXVgXt39wcWcWvB5eoeosncM=
Subject key identifier:   36:87:B3:93:56:23:31:C2:C3:9B:9F:7B:30:B1:90:37:58:C0:CB:B7
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285845D39E5F96ED8ADBE668A4E740
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     54203
IP address blocks:        216.131.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:5f:96:ed:8a:db:e6:68:a4:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=a6f3714c-5876-4a5b-9a00-381db67c71a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:b4:08:63:13:85:be:78:f9:a8:4e:36:34:
                    a8:5a:a8:ab:f3:2a:c6:69:06:8d:98:2a:28:08:c4:
                    23:63:76:3e:93:f6:2c:15:ee:cf:a4:06:16:c9:57:
                    7e:95:de:73:5f:43:e2:54:a4:33:7b:64:c2:22:0d:
                    ba:28:a0:56:82:de:af:35:35:5c:e8:25:4e:62:aa:
                    37:13:24:8d:54:4c:95:10:7f:a8:28:d7:6d:c4:89:
                    95:49:aa:e2:dc:26:3f:91:09:38:30:ca:1a:37:c2:
                    1a:15:90:3f:a7:24:41:21:e1:67:f7:95:5d:01:68:
                    c1:d6:ba:c5:f8:ef:2a:df:49:84:28:81:ae:09:2f:
                    ea:73:a1:83:b0:95:b4:b6:b4:f6:42:59:7b:ec:ba:
                    3f:1a:8d:38:67:42:7c:de:8c:60:b0:8c:fa:59:43:
                    55:02:12:65:ca:62:5c:b9:47:16:49:4e:36:41:9f:
                    25:ec:af:5c:e9:96:6e:e5:56:6e:13:17:bd:9b:44:
                    6b:1d:6a:19:99:f7:41:28:1a:10:c8:b8:78:8f:ab:
                    63:29:d1:1b:02:3f:2b:aa:bf:d8:12:e4:b6:0a:53:
                    e8:29:68:0a:bf:a8:3a:ee:0e:2a:8f:22:56:65:59:
                    db:11:d0:83:7c:69:8a:38:25:6a:50:2a:ee:04:3d:
                    c9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:87:B3:93:56:23:31:C2:C3:9B:9F:7B:30:B1:90:37:58:C0:CB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:8a:90:01:43:51:a1:cf:17:d9:d8:d9:7e:a9:e8:2b:7b:
         10:95:aa:9b:5d:65:b0:64:b3:40:da:06:4b:4a:a6:55:5c:8e:
         d8:b2:9c:f1:7a:65:13:9e:0d:3c:91:b7:32:0f:0c:cc:60:34:
         69:db:35:94:12:34:f7:2b:0b:92:31:ba:85:7b:06:2e:d6:cc:
         09:52:69:5e:60:3b:43:ff:bb:83:8a:40:70:a7:29:9d:f7:9a:
         8e:6e:fb:14:07:a9:8f:0a:7d:89:9f:5d:b6:e0:7a:f5:3e:82:
         51:f9:04:41:e6:97:cc:bf:63:2f:00:3d:21:90:e1:c4:4f:bb:
         7e:f3:c9:6a:fd:d3:c6:a4:1c:a4:93:de:6b:0f:65:b0:f9:7f:
         68:1d:d7:d3:46:f1:a4:79:d8:60:0a:c3:f5:78:fa:cf:22:dd:
         a6:b5:a6:37:1f:f2:7b:3b:b7:c7:03:8c:bb:a6:fa:84:eb:d9:
         7b:07:69:73:89:5d:3d:b1:51:de:5b:3d:ec:b6:c9:4b:29:df:
         e7:9d:c7:dd:62:9f:b3:57:0b:46:74:0c:7e:b6:32:f4:4f:2d:
         62:23:7c:e4:3f:c0:7f:40:fc:d8:e2:55:25:60:84:97:24:9b:
         87:62:9e:3e:83:fe:2b:4e:98:38:fd:d7:c3:e0:2b:2b:d7:ec:
         1a:e4:12:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXTnl+W7Yrb5mik50AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk
YTZmMzcxNGMtNTg3Ni00YTViLTlhMDAtMzgxZGI2N2M3MWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaO0CGMThb54+ahONjSoWqir8yrGaQaNmCoo
CMQjY3Y+k/YsFe7PpAYWyVd+ld5zX0PiVKQze2TCIg26KKBWgt6vNTVc6CVOYqo3
EySNVEyVEH+oKNdtxImVSari3CY/kQk4MMoaN8IaFZA/pyRBIeFn95VdAWjB1rrF
+O8q30mEKIGuCS/qc6GDsJW0trT2Qll77Lo/Go04Z0J83oxgsIz6WUNVAhJlymJc
uUcWSU42QZ8l7K9c6ZZu5VZuExe9m0RrHWoZmfdBKBoQyLh4j6tjKdEbAj8rqr/Y
EuS2ClPoKWgKv6g67g4qjyJWZVnbEdCDfGmKOCVqUCruBD3J3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDaHs5NWIzHCw5ufezCxkDdYwMu3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjM1NWZhMjEtNzViYi0z
MjM3LWI0YTAtYzYzZGEzYzMxYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2IN0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuqipABQ1GhzxfZ2Nl+qegrexCVqptdZbBks0DaBktKplVcjtiynPF6
ZROeDTyRtzIPDMxgNGnbNZQSNPcrC5IxuoV7Bi7WzAlSaV5gO0P/u4OKQHCnKZ33
mo5u+xQHqY8KfYmfXbbgevU+glH5BEHml8y/Yy8APSGQ4cRPu37zyWr908akHKST
3msPZbD5f2gd19NG8aR52GAKw/V4+s8i3aa1pjcf8ns7t8cDjLum+oTr2XsHaXOJ
XT2xUd5bPey2yUsp3+edx91in7NXC0Z0DH62MvRPLWIjfOQ/wH9A/NjiVSVghJck
m4dinj6D/itOmDj918PgKyvX7BrkEhw=
-----END CERTIFICATE-----
Generated at Sat May 25 01:32:56 2024 by rpki-client on console-fra.rpki-client.org