Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa
File:                     36273f28-a723-33e1-a389-9416819cddb6.roa (raw, json)
Hash identifier:          nsUR4vyDoJYdJlFbJSXSv1MJ5xdGMgmGLL2qTabjQsE=
Subject key identifier:   86:2F:6D:F2:0B:A1:12:A5:E2:4B:C9:18:5F:FF:D4:28:A7:46:5B:A1
Certificate issuer:       /CN=cea06048-7bc3-4b65-8443-4c600b73bc11
Certificate serial:       010D0C9F43285845B383656FC06E44E69763C980
Authority key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     21976
IP address blocks:        192.76.179.0/24 maxlen: 24
                          159.91.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:65:6f:c0:6e:44:e6:97:63:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea06048-7bc3-4b65-8443-4c600b73bc11
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=e0bf1dc6-110a-49a0-93be-7d6b1a202624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a4:99:fd:05:14:aa:76:ab:c5:0c:63:b1:fa:
                    fe:87:0f:4a:3d:c9:af:f1:97:d9:8a:ed:6b:2e:f0:
                    93:82:a1:b2:68:d9:81:5d:65:ea:80:70:c3:ab:0e:
                    e3:31:51:85:47:6d:17:7b:3b:59:75:ec:7f:c2:e8:
                    1c:89:f6:ad:5d:13:3c:7a:68:0a:6b:0a:15:b3:d7:
                    f7:c8:09:3f:cc:79:b9:b4:fd:40:fa:83:d4:46:a4:
                    08:f5:a8:54:0e:70:4f:d7:9d:ac:5d:c9:fb:f2:15:
                    ce:78:2f:a0:34:61:e3:43:82:eb:cd:e4:ed:37:b4:
                    53:cc:2d:6e:bc:50:90:34:15:c3:9e:10:82:20:bb:
                    2b:d0:48:32:69:a5:5c:d4:4c:6c:9a:64:cf:9b:75:
                    42:e9:e0:87:47:2a:25:12:21:04:7e:b4:a5:66:e5:
                    19:28:71:94:f6:a7:af:d8:9e:7d:47:f7:65:cc:fa:
                    e5:50:78:11:89:52:83:27:9c:dd:ee:a8:fb:77:af:
                    7c:b7:16:7e:17:f8:22:b4:57:db:75:9d:00:dc:ba:
                    c5:cb:9f:0c:12:13:a6:85:77:42:99:3e:63:9e:84:
                    e0:30:ab:4d:87:b5:61:41:e0:cf:98:98:ad:64:37:
                    4e:fb:6f:be:de:d4:b5:1d:f4:21:2d:75:ba:98:66:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2F:6D:F2:0B:A1:12:A5:E2:4B:C9:18:5F:FF:D4:28:A7:46:5B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl

            X509v3 Authority Key Identifier:
                keyid:72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.91.0.0/16
                  192.76.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:eb:ab:1c:4a:b3:ca:0f:59:54:46:58:96:ca:ae:c1:e7:
         c7:35:8f:2d:58:ca:3d:8c:81:b5:69:5c:c9:99:61:a9:87:36:
         75:0b:d5:85:a9:b7:64:99:5f:0a:cf:2e:4d:6f:7d:37:32:d2:
         13:c6:c4:4f:e0:91:9b:e8:94:34:c4:56:ee:13:a1:12:46:b4:
         a9:92:a7:81:81:71:85:f5:f7:b7:ee:bb:be:d0:24:7a:ff:59:
         00:1b:d2:c1:cb:87:5e:e8:40:27:29:6e:7e:68:42:0f:54:0e:
         27:cf:80:c2:f8:f6:77:95:e8:ba:e1:3f:24:03:0d:fd:a6:e5:
         3d:c1:73:ae:6e:9a:1c:e3:b5:89:6d:ee:b3:d2:a3:37:ca:9e:
         b5:6a:b3:e6:d9:e2:74:e7:50:75:80:e7:d1:7a:ae:f8:1c:02:
         19:3a:4f:4f:d9:28:74:b8:34:9a:0b:c7:51:cf:20:88:9c:88:
         ec:cf:fd:2f:4a:d1:a0:27:90:b4:b5:18:ab:66:df:5b:08:2e:
         ca:bd:1b:66:b5:07:92:12:2a:38:99:db:95:01:9b:cc:bd:9a:
         93:6d:f7:36:1d:61:2b:5d:f4:05:cc:21:2e:2a:47:42:97:1e:
         04:c4:75:a1:0b:d2:e5:bb:74:c6:29:37:58:05:60:1b:90:9c:
         08:a6:e9:f1
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEWzg2VvwG5E5pdjyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VhMDYwNDgtN2JjMy00YjY1LTg0NDMtNGM2MDBiNzNi
YzExMB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk
ZTBiZjFkYzYtMTEwYS00OWEwLTkzYmUtN2Q2YjFhMjAyNjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqSZ/QUUqnarxQxjsfr+hw9KPcmv8ZfZiu1r
LvCTgqGyaNmBXWXqgHDDqw7jMVGFR20XeztZdex/wugcifatXRM8emgKawoVs9f3
yAk/zHm5tP1A+oPURqQI9ahUDnBP152sXcn78hXOeC+gNGHjQ4LrzeTtN7RTzC1u
vFCQNBXDnhCCILsr0EgyaaVc1ExsmmTPm3VC6eCHRyolEiEEfrSlZuUZKHGU9qev
2J59R/dlzPrlUHgRiVKDJ5zd7qj7d698txZ+F/gitFfbdZ0A3LrFy58MEhOmhXdC
mT5jnoTgMKtNh7VhQeDPmJitZDdO+2++3tS1HfQhLXW6mGZDowIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFIYvbfILoRKl4kvJGF//1CinRluhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEw
NjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3M2JjMTEvMzYyNzNmMjgtYTcyMy0z
M2UxLWEzODktOTQxNjgxOWNkZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2VhMDYwNDgtN2JjMy00YjY1LTg0
NDMtNGM2MDBiNzNiYzExL2NlYTA2MDQ4LTdiYzMtNGI2NS04NDQzLTRjNjAwYjcz
YmMxMS5jcmwwHwYDVR0jBBgwFoAUcv59GQtXmt7bYV7V2MtgXR9QrtkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYw
MGI3M2JjMTEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAn1sDBADA
TLMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAC37rqxxKs8oPWVRGWJbKrsHnxzWPLVjKPYyBtWlcyZlhqYc2
dQvVham3ZJlfCs8uTW99NzLSE8bET+CRm+iUNMRW7hOhEka0qZKngYFxhfX3t+67
vtAkev9ZABvSwcuHXuhAJylufmhCD1QOJ8+Awvj2d5XouuE/JAMN/ablPcFzrm6a
HOO1iW3us9KjN8qetWqz5tnidOdQdYDn0Xqu+BwCGTpPT9kodLg0mgvHUc8giJyI
7M/9L0rRoCeQtLUYq2bfWwguyr0bZrUHkhIqOJnblQGbzL2ak233Nh1hK130Bcwh
LipHQpceBMR1oQvS5bt0xik3WAVgG5CcCKbp8Q==
-----END CERTIFICATE-----
Generated at Sat May 18 13:41:09 2024 by rpki-client on console-ams.rpki-client.org