Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/a43753c7-82e9-3f9b-a08e-bafa55597a98.roa
File:                     a43753c7-82e9-3f9b-a08e-bafa55597a98.roa (raw, json)
Hash identifier:          Nf9jniz8qhJdjVv3y7h0LS81qzjOUcLbF9RFmJEJiCE=
Subject key identifier:   CA:0E:8B:F2:96:C0:77:B1:6D:71:F4:07:40:D0:5E:72:BB:05:4B:3D
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F432858453A12A5C1D9C66E4E86DD0100
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/a43753c7-82e9-3f9b-a08e-bafa55597a98.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     125
IP address blocks:        199.64.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:a5:c1:d9:c6:6e:4e:86:dd:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=9da1a8d4-6c2b-4602-95a4-329837fa7f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:b7:12:39:bb:7d:45:6a:54:b8:65:6c:bb:
                    14:2b:c7:c7:50:1c:34:74:91:11:7e:97:b0:6c:3c:
                    c1:ab:07:b6:0b:e6:68:02:ca:15:56:7f:42:fa:6f:
                    a9:df:8f:0b:94:4a:4d:6d:c3:3b:ce:61:af:99:26:
                    89:0c:e4:f1:18:2d:44:16:62:ca:14:e5:cf:eb:28:
                    86:5b:0d:d5:70:33:50:f7:7f:d5:33:9e:f8:73:83:
                    c2:7d:5d:39:6e:4e:a9:d9:21:50:5f:05:ec:66:62:
                    a8:53:e7:c1:26:2a:5d:d4:36:54:3b:bc:f9:32:55:
                    22:83:65:1a:b2:94:f4:14:61:e0:45:e1:49:a4:dc:
                    44:81:b0:37:a1:89:3e:be:57:37:6a:dc:2d:0f:bf:
                    b4:72:b1:6c:8c:08:a5:71:11:ac:89:76:24:81:7a:
                    40:e7:f3:95:a1:32:90:f1:04:a6:2a:fe:d1:48:73:
                    5d:11:66:98:f5:6c:d5:d9:16:db:94:6d:07:08:68:
                    fe:1d:ba:19:ce:5f:10:ef:17:a5:f8:55:c3:e7:35:
                    8b:aa:32:1a:13:43:eb:7b:ee:4d:64:5f:4a:e1:49:
                    cd:e5:74:bb:50:37:1c:81:16:5a:e6:b0:5a:ba:e7:
                    18:63:3c:68:c0:fd:d3:58:2c:bc:0c:3e:27:53:51:
                    c3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0E:8B:F2:96:C0:77:B1:6D:71:F4:07:40:D0:5E:72:BB:05:4B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/a43753c7-82e9-3f9b-a08e-bafa55597a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:8c:c7:fb:66:77:df:82:e0:d8:fe:ad:5b:00:e5:f7:05:
         fa:db:56:a3:77:22:4b:71:4b:0f:ed:f7:12:27:0c:e5:10:46:
         b0:bb:d0:54:0e:a0:0c:63:a3:17:3b:05:e1:46:47:3b:14:c8:
         9d:04:e3:1a:f2:4a:75:e9:f4:eb:be:0e:29:d3:3b:6c:df:be:
         d1:d2:8a:9b:c7:9a:18:73:03:fe:75:23:be:fa:88:ca:4e:18:
         4b:7f:cb:1e:93:f4:38:5f:b6:0a:1f:cc:1d:53:49:59:fd:87:
         04:4b:95:f7:de:09:9a:35:e0:1f:fb:6e:b1:6b:6b:20:b6:c5:
         04:59:74:43:84:f0:12:cf:73:70:e3:ca:f3:81:04:6d:b5:c0:
         fd:a1:cf:9a:30:2d:97:bb:78:96:fd:fb:5e:ce:3c:2c:96:c2:
         67:9b:f5:4c:b2:51:fa:89:e8:da:f8:e2:71:a7:43:61:a0:eb:
         ff:22:ba:2f:43:d8:c1:4b:34:63:95:eb:55:89:0f:2b:cc:93:
         e0:79:fb:82:ec:28:1a:58:d5:11:f9:7d:96:00:20:d5:ec:2f:
         b2:a2:89:3f:49:73:1c:0f:b4:6d:63:d9:e6:7d:0f:18:8e:c0:
         7a:ad:32:bd:5e:3c:25:7e:b8:09:a1:61:ab:e5:ce:c6:7d:5c:
         14:26:fa:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU6EqXB2cZuTobdAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh
YjVjMB4XDTI0MDMxNjEzMDAzMVoXDTI0MDYxNDEzMDAzMVowLzEtMCsGA1UEAxMk
OWRhMWE4ZDQtNmMyYi00NjAyLTk1YTQtMzI5ODM3ZmE3ZjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ63Ejm7fUVqVLhlbLsUK8fHUBw0dJERfpew
bDzBqwe2C+ZoAsoVVn9C+m+p348LlEpNbcM7zmGvmSaJDOTxGC1EFmLKFOXP6yiG
Ww3VcDNQ93/VM574c4PCfV05bk6p2SFQXwXsZmKoU+fBJipd1DZUO7z5MlUig2Ua
spT0FGHgReFJpNxEgbA3oYk+vlc3atwtD7+0crFsjAilcRGsiXYkgXpA5/OVoTKQ
8QSmKv7RSHNdEWaY9WzV2RbblG0HCGj+HboZzl8Q7xel+FXD5zWLqjIaE0Pre+5N
ZF9K4UnN5XS7UDccgRZa5rBauucYYzxowP3TWCy8DD4nU1HDVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMoOi/KWwHexbXH0B0DQXnK7BUs9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx
MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvYTQzNzUzYzctODJlOS0z
ZjliLWEwOGUtYmFmYTU1NTk3YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj
ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy
YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw
YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0A0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpSjMf7ZnffguDY/q1bAOX3BfrbVqN3IktxSw/t9xInDOUQRrC70FQO
oAxjoxc7BeFGRzsUyJ0E4xrySnXp9Ou+DinTO2zfvtHSipvHmhhzA/51I776iMpO
GEt/yx6T9DhftgofzB1TSVn9hwRLlffeCZo14B/7brFrayC2xQRZdEOE8BLPc3Dj
yvOBBG21wP2hz5owLZe7eJb9+17OPCyWwmeb9UyyUfqJ6Nr44nGnQ2Gg6/8iui9D
2MFLNGOV61WJDyvMk+B5+4LsKBpY1RH5fZYAINXsL7KiiT9JcxwPtG1j2eZ9DxiO
wHqtMr1ePCV+uAmhYavlzsZ9XBQm+t4=
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:29 2024 by rpki-client on console-fra.rpki-client.org