Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa
File:                     aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa (raw, json)
Hash identifier:          1rATZkYGVo8N1aFIZ4rmUItjr8MYaidVTDsjWIbmQvE=
Subject key identifier:   D9:43:E6:7B:D3:5F:06:6E:E8:8A:22:F5:51:76:FE:46:FF:63:0E:23
Certificate issuer:       /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a
Certificate serial:       010D0C9F43285845909DE4F423508050C3648B00
Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     92
IP address blocks:        128.153.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e4:f4:23:50:80:50:c3:64:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=cc35d33a-c093-4d5a-9f7f-1284c5bd2551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ad:df:90:6b:92:17:8a:06:c0:dc:65:f2:2b:
                    cc:3c:36:6d:e8:3c:d7:fc:26:3b:19:6c:2d:ce:85:
                    88:eb:87:b1:bf:58:0a:2e:39:21:34:8f:7a:fa:71:
                    d5:15:dd:0f:6b:ed:fd:36:0e:5e:a2:d6:53:07:27:
                    f4:cb:74:20:93:22:1b:75:61:aa:c2:cb:81:92:25:
                    30:74:f3:27:a9:8e:95:8e:0e:73:60:76:74:f1:5b:
                    70:be:93:4a:dd:af:6a:e9:c5:88:7e:db:29:a5:92:
                    7a:d1:32:92:eb:b5:88:17:be:0a:99:51:ac:7d:08:
                    03:6c:30:d6:77:ed:fc:63:e3:0f:a4:5c:5c:39:9f:
                    56:8b:b0:8c:2b:b0:7e:70:4c:67:d8:d7:81:b0:7b:
                    50:b1:a1:17:e1:f2:70:e9:5d:95:8b:17:42:6c:3f:
                    72:d3:20:e8:bc:da:68:64:90:ed:cf:9e:19:65:86:
                    8c:b9:21:4f:6e:37:82:63:6f:71:96:68:ed:b7:39:
                    04:cc:0d:bc:4f:af:bc:fd:77:8a:18:52:c0:b5:ef:
                    93:10:84:a5:41:fd:48:d6:c7:e9:3d:e0:2f:7f:08:
                    5d:36:95:cf:12:be:16:f9:70:84:e2:3d:5e:45:8a:
                    4e:1d:f0:35:1a:1a:de:d5:e6:d0:6c:08:28:7f:ae:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:E6:7B:D3:5F:06:6E:E8:8A:22:F5:51:76:FE:46:FF:63:0E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/aeeb7edb-b78c-363d-9dfc-26132cb5d3da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl

            X509v3 Authority Key Identifier:
                keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.153.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a6:de:9f:d4:2a:05:ba:50:5d:a0:ac:97:c4:18:3d:2c:16:
         64:df:ee:b7:73:8e:9b:03:3b:5f:fa:6e:89:13:df:51:58:19:
         06:c2:8f:b9:4c:33:cb:8e:95:75:15:6f:f9:98:95:be:e0:07:
         0a:6d:29:81:af:20:cd:9e:b6:a1:76:32:de:65:ed:b3:5e:dc:
         2c:dc:94:3e:67:c9:9a:82:b5:cb:d6:85:96:a9:d4:90:10:b9:
         41:7f:1e:53:90:55:44:13:17:f3:b1:95:a5:c3:56:39:33:da:
         79:c8:b9:b6:ea:e1:ab:c3:be:1a:70:38:77:55:b2:4a:92:aa:
         a1:50:73:b5:c8:7b:d0:12:b9:31:3d:4f:e0:f8:8d:73:26:99:
         ae:fc:33:bc:94:c0:0d:81:07:5b:04:2a:49:8b:51:54:e5:9c:
         7c:ef:05:74:2d:04:5b:6d:cb:0f:de:1b:45:82:09:12:f7:10:
         93:c2:56:68:10:51:dc:de:c0:7c:7c:87:0e:6c:e6:12:2a:8e:
         05:58:75:eb:56:d1:e8:45:8a:c5:6f:6f:00:54:8b:99:0c:45:
         4d:26:9d:20:ee:68:bd:f1:34:86:34:64:80:60:5d:e0:2d:d4:
         25:21:c1:62:9b:05:bb:4c:d6:6b:ba:3f:5e:30:38:5a:d4:35:
         36:0e:61:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWQneT0I1CAUMNkiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl
YjdhMB4XDTI0MDQxNjEzMDAzM1oXDTI0MDcxNTEzMDAzM1owLzEtMCsGA1UEAxMk
Y2MzNWQzM2EtYzA5My00ZDVhLTlmN2YtMTI4NGM1YmQyNTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a3fkGuSF4oGwNxl8ivMPDZt6DzX/CY7GWwt
zoWI64exv1gKLjkhNI96+nHVFd0Pa+39Ng5eotZTByf0y3QgkyIbdWGqwsuBkiUw
dPMnqY6Vjg5zYHZ08VtwvpNK3a9q6cWIftsppZJ60TKS67WIF74KmVGsfQgDbDDW
d+38Y+MPpFxcOZ9Wi7CMK7B+cExn2NeBsHtQsaEX4fJw6V2VixdCbD9y0yDovNpo
ZJDtz54ZZYaMuSFPbjeCY29xlmjttzkEzA28T6+8/XeKGFLAte+TEISlQf1I1sfp
PeAvfwhdNpXPEr4W+XCE4j1eRYpOHfA1Ghre1ebQbAgof65n1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNlD5nvTXwZu6Ioi9VF2/kb/Yw4jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4
YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvYWVlYjdlZGItYjc4Yy0z
NjNkLTlkZmMtMjYxMzJjYjVkM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3
MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx
ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0
MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJnAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGm3p/UKgW6UF2grJfEGD0sFmTf7rdzjpsDO1/6bokT31FYGQbCj7lM
M8uOlXUVb/mYlb7gBwptKYGvIM2etqF2Mt5l7bNe3CzclD5nyZqCtcvWhZap1JAQ
uUF/HlOQVUQTF/OxlaXDVjkz2nnIubbq4avDvhpwOHdVskqSqqFQc7XIe9ASuTE9
T+D4jXMmma78M7yUwA2BB1sEKkmLUVTlnHzvBXQtBFttyw/eG0WCCRL3EJPCVmgQ
UdzewHx8hw5s5hIqjgVYdetW0ehFisVvbwBUi5kMRU0mnSDuaL3xNIY0ZIBgXeAt
1CUhwWKbBbtM1mu6P14wOFrUNTYOYQY=
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:26 2024 by rpki-client on console-fra.rpki-client.org