Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa
File:                     feab4e24-c427-3262-ae07-c36619833029.roa (raw, json)
Hash identifier:          BWtMdSM6fIZvZFUzPzRQITd8oDqtfgCX1xFRnNFM4bY=
Subject key identifier:   2B:D7:84:66:B6:59:02:C7:04:DB:94:23:7F:1B:32:80:6F:8D:D1:5B
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F43285845E7291844A4DD68742BAF5520
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     46841
IP address blocks:        162.218.240.0/21 maxlen: 24
                          162.251.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:18:44:a4:dd:68:74:2b:af:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=6fca79d5-2aee-47ff-b681-8878169c449b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:f8:be:ee:4b:18:b3:57:01:7b:4f:29:f0:
                    66:7a:fd:cc:f9:6c:2d:30:a0:13:27:d1:7b:d8:d8:
                    5b:77:52:8e:57:77:11:bc:7f:65:92:87:4d:22:96:
                    4e:25:3e:ed:0b:24:19:0c:a5:cd:f4:6f:6c:ea:e6:
                    24:eb:e1:1b:c9:27:dc:e4:b9:28:c8:71:99:a2:21:
                    31:2d:38:8e:92:fa:87:ab:0f:61:0a:c9:24:af:e3:
                    ef:41:6b:5d:ec:28:a7:02:24:0e:04:a9:6f:dd:23:
                    f3:84:18:c1:dd:6f:4e:09:25:c5:c1:0f:cb:16:dc:
                    68:ab:8e:79:0c:3c:37:f6:56:b6:fe:a2:b8:35:70:
                    e4:ef:c4:42:e6:08:32:6f:f0:aa:d9:62:7f:73:33:
                    ef:ba:2a:fa:6c:6c:e8:37:91:07:71:12:91:83:f4:
                    e2:ae:82:97:44:bd:a5:2e:ac:dc:d5:46:9b:de:98:
                    ca:54:27:71:9f:67:b5:70:63:c7:fb:56:61:62:e3:
                    a7:d6:6d:cc:05:8e:73:99:81:60:07:62:11:c1:be:
                    86:bc:64:58:7c:c2:e9:98:55:bd:13:8e:1e:be:a9:
                    13:96:c0:bb:6c:35:92:01:87:bc:dc:d5:2b:86:22:
                    44:0b:40:d8:3d:c8:f7:b5:04:25:08:95:a5:18:e9:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D7:84:66:B6:59:02:C7:04:DB:94:23:7F:1B:32:80:6F:8D:D1:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.240.0/21
                  162.251.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:5c:e2:44:0c:ec:b6:65:c5:ff:c1:d5:e9:84:1c:ac:ac:0f:
         73:71:a3:f5:cf:d2:35:56:a7:5f:2a:fe:d6:8a:9f:94:0f:95:
         0c:6d:da:de:6f:73:83:8e:b8:4e:4a:6c:2d:ad:3f:52:5c:59:
         85:be:32:1d:ff:19:67:c1:bf:4e:64:9f:1b:c3:72:d3:2e:77:
         20:d4:c4:98:ff:0f:3a:cc:aa:53:26:e4:8d:d4:a8:44:70:f9:
         3c:37:18:7d:60:68:f4:58:b9:b5:c6:e4:96:ea:44:c9:4b:05:
         48:a6:64:f9:af:37:28:97:1e:00:a5:f0:78:26:1d:42:73:13:
         01:4a:95:34:60:df:65:00:81:1b:c9:0f:c8:c8:9d:2f:70:29:
         24:92:7d:46:19:7d:a2:99:b8:68:df:f2:0b:0f:2c:e4:45:73:
         cd:65:a2:a0:10:60:26:da:ed:8b:1a:c2:80:67:54:e2:2f:c0:
         d7:a6:d3:6e:62:ab:06:de:c5:19:77:fe:a4:c0:e8:89:54:19:
         42:40:0c:5a:03:d0:84:00:35:81:e3:15:29:35:82:d5:f6:9a:
         bb:22:fd:bd:d4:89:3d:ac:3f:65:25:ae:d8:7d:b1:7a:b3:98:
         ea:d8:48:d8:ca:a4:80:e9:85:9c:4a:d7:30:e5:d9:f0:53:ba:
         15:60:85:5c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEXnKRhEpN1odCuvVSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4
YTUzMB4XDTI0MDUxNzEzMDAzNFoXDTI0MDgxNTEzMDAzNFowLzEtMCsGA1UEAxMk
NmZjYTc5ZDUtMmFlZS00N2ZmLWI2ODEtODg3ODE2OWM0NDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6v4vu5LGLNXAXtPKfBmev3M+WwtMKATJ9F7
2Nhbd1KOV3cRvH9lkodNIpZOJT7tCyQZDKXN9G9s6uYk6+EbySfc5LkoyHGZoiEx
LTiOkvqHqw9hCskkr+PvQWtd7CinAiQOBKlv3SPzhBjB3W9OCSXFwQ/LFtxoq455
DDw39la2/qK4NXDk78RC5ggyb/Cq2WJ/czPvuir6bGzoN5EHcRKRg/TiroKXRL2l
Lqzc1Uab3pjKVCdxn2e1cGPH+1ZhYuOn1m3MBY5zmYFgB2IRwb6GvGRYfMLpmFW9
E44evqkTlsC7bDWSAYe83NUrhiJEC0DYPcj3tQQlCJWlGOlaBQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCvXhGa2WQLHBNuUI38bMoBvjdFbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0
MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvZmVhYjRlMjQtYzQyNy0z
MjYyLWFlMDctYzM2NjE5ODMzMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi
YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl
OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2
ZDE4ZThhNTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDotrwAwQD
ovsAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFlc4kQM7LZlxf/B1emEHKysD3Nxo/XP0jVWp18q/taKn5QP
lQxt2t5vc4OOuE5KbC2tP1JcWYW+Mh3/GWfBv05knxvDctMudyDUxJj/DzrMqlMm
5I3UqERw+Tw3GH1gaPRYubXG5JbqRMlLBUimZPmvNyiXHgCl8HgmHUJzEwFKlTRg
32UAgRvJD8jInS9wKSSSfUYZfaKZuGjf8gsPLORFc81loqAQYCba7YsawoBnVOIv
wNem025iqwbexRl3/qTA6IlUGUJADFoD0IQANYHjFSk1gtX2mrsi/b3UiT2sP2Ul
rth9sXqzmOrYSNjKpIDphZxK1zDl2fBTuhVghVw=
-----END CERTIFICATE-----
Generated at Sat May 18 13:39:50 2024 by rpki-client on console-ams.rpki-client.org