Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa
File:                     ec749261-21d5-3145-9684-d93e7631475d.roa (raw, json)
Hash identifier:          wH1aoF5A6s9MLc/M+234dl4hYnyJzRqQLSqIAPcB1Q8=
Subject key identifier:   46:A0:56:FA:19:F7:9F:02:D9:56:14:9F:2A:6C:1E:9A:95:96:F8:8B
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F432858453A12A82107858830B52B3100
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     125
IP address blocks:        199.64.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:a8:21:07:85:88:30:b5:2b:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=d63c8de2-ead8-4874-bebe-dfb49768ed48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:96:15:3d:65:c0:bd:c4:94:08:f9:ec:7c:73:
                    e7:3d:ba:92:ff:0b:f9:4a:de:3d:ab:a3:64:d0:06:
                    c6:ee:fc:7e:82:52:fd:e8:fc:e4:ca:a2:fb:5e:d2:
                    65:02:5b:19:fe:91:39:9e:7c:15:e1:99:a9:53:bc:
                    37:b0:00:fc:c2:12:f9:ea:3f:d0:22:ca:66:5f:d1:
                    a5:b7:0d:2c:08:de:cb:72:4f:83:84:a8:c2:82:32:
                    98:eb:0f:db:64:81:e8:50:f6:03:fa:a0:5d:8c:f7:
                    96:e2:35:8f:36:b0:d6:4a:23:14:77:55:11:49:cf:
                    d6:c5:0e:9c:68:5f:87:89:64:b7:27:82:ab:d1:0c:
                    66:af:0d:be:25:3c:50:c9:7a:22:34:f3:32:02:e8:
                    cd:d3:ca:be:f9:fd:4f:fd:e0:79:3e:ac:e2:d1:76:
                    9e:8b:73:d0:63:ee:9e:b7:30:06:74:96:d2:20:fd:
                    90:6a:82:97:49:6c:9f:0f:0a:8f:97:55:d7:e3:cb:
                    74:da:b1:36:d5:d7:71:ec:0c:9e:05:ae:e3:f6:17:
                    5f:4c:db:48:af:f4:5b:d4:f6:38:3f:b2:d7:ca:47:
                    2a:2a:4e:1d:5b:e8:9e:bd:05:c5:88:06:90:d5:4c:
                    5d:25:6f:0e:67:0c:cf:ee:36:bd:43:fd:63:13:0d:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:56:FA:19:F7:9F:02:D9:56:14:9F:2A:6C:1E:9A:95:96:F8:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/ec749261-21d5-3145-9684-d93e7631475d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:16:ef:7d:64:51:b2:1e:14:b4:0a:1b:0c:49:0e:5f:77:b6:
         0c:a8:47:e4:31:d7:18:ae:04:61:e6:72:d9:57:4a:30:d9:b7:
         7f:5f:27:df:b4:ec:82:0b:e5:2f:80:f6:bd:26:c8:4e:b6:db:
         14:05:5e:cf:dc:b4:04:02:bf:8f:2c:8c:91:49:d1:42:87:0e:
         1d:03:ed:38:62:32:52:16:ea:cd:12:40:f5:8b:18:b5:a3:3b:
         b2:1d:bd:91:11:8f:47:99:66:8d:db:41:14:39:ef:16:28:b0:
         43:69:29:42:c9:92:91:d3:de:8f:53:2e:10:9a:49:29:24:60:
         2c:a1:8d:3b:3b:f4:0b:03:07:c9:6d:7c:84:0d:36:ba:18:15:
         1c:66:67:f4:5d:fb:97:69:d3:80:e0:4e:d4:b5:9a:b3:c0:47:
         a3:cf:55:45:3e:63:f9:f4:4a:ec:69:12:99:12:36:ab:23:52:
         16:2c:74:ed:27:b9:40:e4:cd:c8:cd:c1:71:b5:f6:79:3d:fc:
         49:89:7c:7e:38:3d:d8:e5:99:40:11:60:43:f7:cb:23:f2:ea:
         a3:16:74:4a:0e:21:8d:b3:31:ac:2f:ac:9c:c5:74:5b:87:67:
         32:b3:45:fe:d6:e6:23:13:76:89:80:d9:10:fc:80:1f:f3:92:
         57:4d:71:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU6EqghB4WIMLUrMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh
YjVjMB4XDTI0MDMxNjEzMDAzMVoXDTI0MDYxNDEzMDAzMVowLzEtMCsGA1UEAxMk
ZDYzYzhkZTItZWFkOC00ODc0LWJlYmUtZGZiNDk3NjhlZDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25YVPWXAvcSUCPnsfHPnPbqS/wv5St49q6Nk
0AbG7vx+glL96PzkyqL7XtJlAlsZ/pE5nnwV4ZmpU7w3sAD8whL56j/QIspmX9Gl
tw0sCN7Lck+DhKjCgjKY6w/bZIHoUPYD+qBdjPeW4jWPNrDWSiMUd1URSc/WxQ6c
aF+HiWS3J4Kr0Qxmrw2+JTxQyXoiNPMyAujN08q++f1P/eB5Pqzi0Xaei3PQY+6e
tzAGdJbSIP2QaoKXSWyfDwqPl1XX48t02rE21ddx7AyeBa7j9hdfTNtIr/Rb1PY4
P7LXykcqKk4dW+ievQXFiAaQ1UxdJW8OZwzP7ja9Q/1jEw1WGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEagVvoZ958C2VYUnypsHpqVlviLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx
MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvZWM3NDkyNjEtMjFkNS0z
MTQ1LTk2ODQtZDkzZTc2MzE0NzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj
ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy
YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw
YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0AiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAW731kUbIeFLQKGwxJDl93tgyoR+Qx1xiuBGHmctlXSjDZt39fJ9+0
7IIL5S+A9r0myE622xQFXs/ctAQCv48sjJFJ0UKHDh0D7ThiMlIW6s0SQPWLGLWj
O7IdvZERj0eZZo3bQRQ57xYosENpKULJkpHT3o9TLhCaSSkkYCyhjTs79AsDB8lt
fIQNNroYFRxmZ/Rd+5dp04DgTtS1mrPAR6PPVUU+Y/n0SuxpEpkSNqsjUhYsdO0n
uUDkzcjNwXG19nk9/EmJfH44PdjlmUARYEP3yyPy6qMWdEoOIY2zMawvrJzFdFuH
ZzKzRf7W5iMTdomA2RD8gB/zkldNcQY=
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:29 2024 by rpki-client on console-fra.rpki-client.org