Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/f43d9b43-74bd-351f-9cc5-176635c66eae.roa
File:                     f43d9b43-74bd-351f-9cc5-176635c66eae.roa (raw, json)
Hash identifier:          9GtH6ofxZV6PLGyaF2rS8Ug6geOoIy3k5FlnIsrmpJQ=
Subject key identifier:   FE:88:C1:A7:DB:4D:91:04:56:C3:0F:1A:03:4B:94:B1:91:19:56:DF
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F4328584568D2CD342CA9E79E9BDB2780
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/f43d9b43-74bd-351f-9cc5-176635c66eae.roa
Signing time:             Tue 02 Apr 2024 06:54:53 +0000
ROA not before:           Tue 02 Apr 2024 06:54:53 +0000
ROA not after:            Mon 01 Jul 2024 06:54:53 +0000
asID:                     60117
IP address blocks:        162.218.240.0/24 maxlen: 24
                          162.251.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:d2:cd:34:2c:a9:e7:9e:9b:db:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: Apr  2 06:54:53 2024 GMT
            Not After : Jul  1 06:54:53 2024 GMT
        Subject: CN=55452326-09ab-41a3-9f10-62e51fbe22b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:72:28:65:93:d7:d9:4b:e9:12:83:bb:e8:
                    93:a4:4b:43:08:99:b3:8b:7c:73:ec:3c:77:77:35:
                    0c:32:60:0d:f7:cc:d4:b7:7a:7a:94:38:9b:0f:ec:
                    ba:7b:24:4a:03:62:7a:58:98:82:6d:37:93:77:c1:
                    90:d4:cb:b0:9c:7c:cb:e2:0f:44:00:89:c9:98:e7:
                    a8:bb:77:4f:d4:89:54:3d:f8:0d:ea:9f:f9:9d:7b:
                    35:ae:55:19:ec:9f:85:cd:61:ae:24:5b:4c:64:7c:
                    c7:b5:80:39:6a:87:05:e1:9e:10:bd:85:ac:41:df:
                    25:d1:46:d6:9a:11:e4:45:36:a1:58:21:20:f1:7a:
                    69:01:d6:40:1e:d7:4d:5b:05:b9:5f:ca:5f:3c:24:
                    08:ec:04:52:b5:c2:32:17:67:9e:ac:14:ea:46:13:
                    2c:a2:81:73:83:84:3e:d2:53:52:54:37:ee:18:27:
                    89:b3:9d:c4:16:45:9f:c6:ff:e1:9e:04:d3:d8:fb:
                    5a:49:2e:0c:6d:c8:61:5d:ef:fe:4b:fd:86:f1:f3:
                    b2:41:3a:c9:2e:fe:1d:5a:60:d0:db:b7:73:09:19:
                    ea:b9:9b:4d:88:b9:df:51:b0:b3:93:26:6d:de:52:
                    a9:82:6f:9a:44:a8:78:51:1a:bd:37:62:c4:36:54:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:88:C1:A7:DB:4D:91:04:56:C3:0F:1A:03:4B:94:B1:91:19:56:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/f43d9b43-74bd-351f-9cc5-176635c66eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.240.0/24
                  162.251.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2e:d4:17:53:38:d9:ab:66:47:ed:e1:d8:dc:40:25:63:ad:
         ce:83:f4:fc:da:17:97:5f:c4:b9:be:91:e1:d9:19:84:ba:84:
         30:22:17:42:0c:7d:70:0f:e5:b5:2d:eb:58:54:8e:15:ed:9e:
         65:91:36:03:d3:4e:ee:b1:8d:2d:77:6d:bc:4d:1d:85:15:e7:
         c0:ca:00:7f:52:23:10:3d:61:3d:fc:13:37:f2:65:32:55:b5:
         32:33:5f:8f:80:42:4d:e9:c1:27:c6:ca:63:9c:74:fe:89:4d:
         a1:c3:91:f7:62:8d:b9:9d:d8:6b:9a:57:51:64:fa:cd:4e:d2:
         3f:be:12:71:2a:aa:98:23:04:fa:bc:b5:84:5c:30:e3:22:44:
         c3:85:63:5b:55:46:69:c9:bb:b3:05:a1:82:57:06:17:a3:06:
         ea:40:fe:99:92:e1:7e:43:f8:6d:c9:0a:9e:70:af:ae:bd:f5:
         ca:12:91:3f:14:a1:dc:6e:db:d1:5a:2e:04:39:e3:5b:9e:15:
         8b:64:4e:67:61:f4:3b:04:af:c4:00:78:77:27:2f:d9:77:14:
         b8:4f:d7:66:c3:9d:e1:7c:0a:ca:2c:33:f8:f8:48:73:4c:f2:
         9c:a0:34:d1:e2:46:e0:77:66:c0:30:6d:bb:56:5d:8a:0b:58:
         55:68:7f:e7
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVo0s00LKnnnpvbJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4
YTUzMB4XDTI0MDQwMjA2NTQ1M1oXDTI0MDcwMTA2NTQ1M1owLzEtMCsGA1UEAxMk
NTU0NTIzMjYtMDlhYi00MWEzLTlmMTAtNjJlNTFmYmUyMmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRVyKGWT19lL6RKDu+iTpEtDCJmzi3xz7Dx3
dzUMMmAN98zUt3p6lDibD+y6eyRKA2J6WJiCbTeTd8GQ1MuwnHzL4g9EAInJmOeo
u3dP1IlUPfgN6p/5nXs1rlUZ7J+FzWGuJFtMZHzHtYA5aocF4Z4QvYWsQd8l0UbW
mhHkRTahWCEg8XppAdZAHtdNWwW5X8pfPCQI7ARStcIyF2eerBTqRhMsooFzg4Q+
0lNSVDfuGCeJs53EFkWfxv/hngTT2PtaSS4MbchhXe/+S/2G8fOyQTrJLv4dWmDQ
27dzCRnquZtNiLnfUbCzkyZt3lKpgm+aRKh4URq9N2LENlQYMQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFP6IwafbTZEEVsMPGgNLlLGRGVbfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0
MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvZjQzZDliNDMtNzRiZC0z
NTFmLTljYzUtMTc2NjM1YzY2ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi
YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl
OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2
ZDE4ZThhNTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAotrwAwQA
ovsAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAF0u1BdTONmrZkft4djcQCVjrc6D9PzaF5dfxLm+keHZGYS6
hDAiF0IMfXAP5bUt61hUjhXtnmWRNgPTTu6xjS13bbxNHYUV58DKAH9SIxA9YT38
EzfyZTJVtTIzX4+AQk3pwSfGymOcdP6JTaHDkfdijbmd2GuaV1Fk+s1O0j++EnEq
qpgjBPq8tYRcMOMiRMOFY1tVRmnJu7MFoYJXBhejBupA/pmS4X5D+G3JCp5wr669
9coSkT8Uodxu29FaLgQ541ueFYtkTmdh9DsEr8QAeHcnL9l3FLhP12bDneF8Csos
M/j4SHNM8pygNNHiRuB3ZsAwbbtWXYoLWFVof+c=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:14 2024 by rpki-client on console-fra.rpki-client.org