Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa
File:                     70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa (raw, json)
Hash identifier:          YCP8e8bKUog3dQxQSOJPZ2bOsXjszVrEMwe4H0DV4n0=
Subject key identifier:   D1:B9:D8:1F:57:4C:58:E8:7B:C7:BD:27:57:D2:B3:8B:DA:97:A3:B3
Certificate issuer:       /CN=b6e29f76-f782-45f9-8ad8-791d08e6d174
Certificate serial:       010D0C9F432858458DD34F2AE5C4B2358DF69C00
Authority key identifier: 58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     30192
IP address blocks:        167.88.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4f:2a:e5:c4:b2:35:8d:f6:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e29f76-f782-45f9-8ad8-791d08e6d174
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=21018c5d-090a-42da-8884-136259ea2448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:39:5c:8d:8b:2f:df:99:29:79:03:b3:28:
                    ba:e3:59:84:c1:5c:d0:34:00:93:40:9a:7b:de:08:
                    28:81:4c:75:f1:ef:79:e1:63:a5:3a:5b:4f:58:67:
                    bb:7d:54:89:94:bf:c8:32:99:f8:84:eb:73:77:32:
                    aa:46:2f:f5:71:d8:fd:2c:31:a3:61:a8:3e:4a:ef:
                    17:1e:4e:73:9e:05:47:03:f7:ac:3b:94:59:a3:60:
                    be:21:34:03:1f:e6:61:70:16:91:c8:c6:ab:d3:f5:
                    4f:03:bc:55:5d:02:20:33:fc:14:8e:6e:79:47:75:
                    ef:7d:21:36:4f:c0:95:16:c1:f8:6a:ef:cd:4f:7a:
                    a5:2b:48:1f:e1:e2:11:0a:c2:a4:02:bd:ef:8b:c9:
                    47:4d:8b:5d:35:8e:a7:c4:52:55:20:52:bd:8f:6c:
                    80:26:ce:41:25:2e:96:c6:70:a9:05:0d:6e:c5:05:
                    81:70:1f:8a:66:23:c0:aa:26:52:4b:62:9b:37:11:
                    de:c5:49:cf:41:84:ae:ba:71:86:10:4c:7f:3e:fe:
                    8a:ac:ce:a0:81:03:29:7e:fd:db:1e:8f:96:68:3a:
                    17:01:94:2f:e2:f1:d9:fd:a4:e7:5f:f3:41:1c:1a:
                    24:fb:8c:f9:cf:20:ab:8f:e4:fd:01:04:e5:40:b6:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B9:D8:1F:57:4C:58:E8:7B:C7:BD:27:57:D2:B3:8B:DA:97:A3:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/70241c07-0a3c-3ec1-8944-e73dcac7dd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174/b6e29f76-f782-45f9-8ad8-791d08e6d174.crl

            X509v3 Authority Key Identifier:
                keyid:58:B0:7A:20:A8:11:53:07:D0:43:5A:E0:05:03:20:53:A3:74:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b6e29f76-f782-45f9-8ad8-791d08e6d174.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:1a:9a:33:d8:cc:99:84:93:9b:dd:4f:bb:35:15:87:14:
         77:9c:89:09:a9:0a:cf:cf:b7:91:2c:84:3e:69:26:d7:5d:6a:
         6e:83:c2:6e:c2:dd:eb:be:33:58:8d:7b:97:45:a9:cf:f2:28:
         de:d4:1b:d2:56:95:6b:c4:15:67:37:c6:e6:b1:1d:0c:fb:df:
         a4:58:a5:2f:21:b6:94:66:5a:6e:81:27:1e:b9:9b:51:a8:0e:
         ba:58:28:a6:43:7f:99:94:a9:70:f4:7a:c7:ab:ec:43:61:e6:
         d5:c7:fa:63:97:33:52:db:76:dc:e4:54:35:3a:3f:37:71:bb:
         80:5e:07:01:da:9d:3b:ee:1e:a2:bd:65:98:90:16:9d:3a:81:
         9f:c6:1c:06:11:5c:af:fe:d1:75:86:d1:eb:61:33:ed:94:9b:
         cb:fb:95:e5:69:1d:b1:4b:5c:89:19:89:2e:01:56:c5:9c:6c:
         36:5b:13:50:7c:cb:26:9f:fa:91:52:2c:7d:a8:94:d4:00:ea:
         d3:5c:0f:a3:26:b4:51:00:c0:6b:0c:ce:32:8a:0c:53:cf:f3:
         16:4a:90:47:28:5e:5f:59:11:ed:9d:3f:c8:c7:bd:06:18:93:
         84:58:1f:c5:29:e9:27:bf:77:42:56:0b:be:7d:9c:57:8e:68:
         89:ba:8a:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWN008q5cSyNY32nAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjZlMjlmNzYtZjc4Mi00NWY5LThhZDgtNzkxZDA4ZTZk
MTc0MB4XDTI0MDQxNTEzMDAzNVoXDTI0MDcxNDEzMDAzNVowLzEtMCsGA1UEAxMk
MjEwMThjNWQtMDkwYS00MmRhLTg4ODQtMTM2MjU5ZWEyNDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyM5XI2LL9+ZKXkDsyi641mEwVzQNACTQJp7
3ggogUx18e954WOlOltPWGe7fVSJlL/IMpn4hOtzdzKqRi/1cdj9LDGjYag+Su8X
Hk5zngVHA/esO5RZo2C+ITQDH+ZhcBaRyMar0/VPA7xVXQIgM/wUjm55R3XvfSE2
T8CVFsH4au/NT3qlK0gf4eIRCsKkAr3vi8lHTYtdNY6nxFJVIFK9j2yAJs5BJS6W
xnCpBQ1uxQWBcB+KZiPAqiZSS2KbNxHexUnPQYSuunGGEEx/Pv6KrM6ggQMpfv3b
Ho+WaDoXAZQv4vHZ/aTnX/NBHBok+4z5zyCrj+T9AQTlQLYFDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNG52B9XTFjoe8e9J1fSs4val6OzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNmUy
OWY3Ni1mNzgyLTQ1ZjktOGFkOC03OTFkMDhlNmQxNzQvNzAyNDFjMDctMGEzYy0z
ZWMxLTg5NDQtZTczZGNhYzdkZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjZlMjlmNzYtZjc4Mi00NWY5LThh
ZDgtNzkxZDA4ZTZkMTc0L2I2ZTI5Zjc2LWY3ODItNDVmOS04YWQ4LTc5MWQwOGU2
ZDE3NC5jcmwwHwYDVR0jBBgwFoAUWLB6IKgRUwfQQ1rgBQMgU6N0nwEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iNmUyOWY3Ni1mNzgyLTQ1ZjktOGFkOC03OTFk
MDhlNmQxNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1g7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIG5Gpoz2MyZhJOb3U+7NRWHFHeciQmpCs/Pt5EshD5pJtddam6Dwm7C
3eu+M1iNe5dFqc/yKN7UG9JWlWvEFWc3xuaxHQz736RYpS8htpRmWm6BJx65m1Go
DrpYKKZDf5mUqXD0eser7ENh5tXH+mOXM1LbdtzkVDU6Pzdxu4BeBwHanTvuHqK9
ZZiQFp06gZ/GHAYRXK/+0XWG0ethM+2Um8v7leVpHbFLXIkZiS4BVsWcbDZbE1B8
yyaf+pFSLH2olNQA6tNcD6MmtFEAwGsMzjKKDFPP8xZKkEcoXl9ZEe2dP8jHvQYY
k4RYH8Up6Se/d0JWC759nFeOaIm6ivo=
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:46 2024 by rpki-client on console-fra.rpki-client.org