Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa
File:                     2f12a581-2028-3c4a-af0c-35b5904553d4.roa (raw, json)
Hash identifier:          nFvzFN+hj/GN2PHQZ60GZQJE4lNg+qPdeRbg/ROC3PM=
Subject key identifier:   78:CF:70:59:D6:07:72:7D:DB:EE:60:53:03:95:1B:FE:87:08:2B:40
Certificate issuer:       /CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f
Certificate serial:       010D0C9F43285845AF53727031C52E736C202300
Authority key identifier: 38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa
Signing time:             Sat 27 Apr 2024 13:00:34 +0000
ROA not before:           Sat 27 Apr 2024 13:00:34 +0000
ROA not after:            Fri 26 Jul 2024 13:00:34 +0000
asID:                     393316
IP address blocks:        198.169.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:af:53:72:70:31:c5:2e:73:6c:20:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f
        Validity
            Not Before: Apr 27 13:00:34 2024 GMT
            Not After : Jul 26 13:00:34 2024 GMT
        Subject: CN=a4a250e0-3be0-47f2-b19e-9568bb167573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:ec:b5:b6:c9:01:e4:d7:23:af:13:d8:ee:
                    45:23:ea:24:de:48:36:38:fa:68:b4:a4:51:20:4b:
                    a0:33:46:a5:19:a5:be:44:85:d6:7b:ba:dc:de:17:
                    1e:20:14:2c:b1:01:3d:ef:86:0a:c2:65:0c:2d:f3:
                    a7:df:e0:d7:95:a0:9f:7f:b9:7d:16:60:98:99:bd:
                    d6:8c:4c:d2:af:c7:6a:f3:dd:a6:cc:eb:d6:fb:2b:
                    d9:3e:93:30:67:2e:56:6d:54:35:a4:79:60:10:2c:
                    bf:90:cf:dc:c4:e6:e1:c6:f7:10:17:ef:2f:01:ff:
                    0a:5c:53:a7:e7:30:de:b6:3b:1f:99:64:14:09:a8:
                    16:e3:2c:44:6f:21:31:d0:62:a6:d9:bd:9e:25:ba:
                    82:ee:4a:82:75:bd:09:37:5d:3a:ab:81:33:a5:b5:
                    88:29:f0:5f:2b:c9:d4:c9:d4:df:04:0c:5b:d1:45:
                    27:96:4f:21:3b:2c:10:6b:22:56:10:04:31:e6:b3:
                    79:88:46:a1:43:0a:c9:f0:91:b0:bc:cc:2b:df:4a:
                    8f:39:ee:ab:23:e0:39:81:3d:ce:c7:3f:7b:1c:57:
                    0e:4b:ad:60:44:88:50:77:94:fd:94:1f:58:a4:18:
                    48:8d:bb:e3:ff:8d:a8:cf:84:91:29:d9:20:68:61:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CF:70:59:D6:07:72:7D:DB:EE:60:53:03:95:1B:FE:87:08:2B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/2f12a581-2028-3c4a-af0c-35b5904553d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl

            X509v3 Authority Key Identifier:
                keyid:38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3e:ab:ae:2c:69:a9:23:c4:29:97:90:c7:0f:03:40:4e:0d:
         8c:1b:59:68:0f:a7:5e:c8:da:90:ea:3c:c1:9d:8f:5f:27:08:
         fc:4a:63:cb:c7:a5:c5:12:2c:3e:95:78:a8:41:2b:47:2c:94:
         0d:b6:d2:33:a4:a6:d0:b2:be:48:74:66:1e:13:df:15:38:1e:
         bb:ad:c9:a1:6e:9b:00:86:7f:7f:0e:f8:a1:ee:c7:91:c6:1b:
         d6:f0:b7:9f:f1:2b:c5:09:07:19:2e:b8:5f:a4:14:94:a0:4e:
         0e:45:0e:0b:51:63:f9:23:c4:c3:19:f8:15:ca:a8:20:e5:4a:
         7a:99:3e:46:cc:a3:f2:38:09:8a:08:32:53:f4:50:f3:75:e7:
         86:7b:8c:8e:07:7e:20:ab:50:44:f1:0f:33:ec:2f:5f:30:a7:
         cf:04:26:18:18:1a:43:d3:78:62:fd:e7:66:79:df:30:d0:2e:
         4d:d0:13:a1:3c:7f:dd:3a:e9:7c:67:37:87:71:e0:b1:e8:c7:
         c0:ac:bd:e7:c1:08:1d:12:dc:34:3f:8a:ee:e9:1c:37:72:bb:
         d6:b4:d5:dd:d2:1e:4a:ef:1b:bf:90:95:44:05:27:69:ea:4a:
         0b:d1:87:f1:d4:13:77:d2:ce:15:1f:2a:8b:8a:84:df:6e:9f:
         80:9f:42:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWvU3JwMcUuc2wgIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOTdlYzgtYzg4MS00NWFhLWFjNDktMjVlZTIxYTkz
YTVmMB4XDTI0MDQyNzEzMDAzNFoXDTI0MDcyNjEzMDAzNFowLzEtMCsGA1UEAxMk
YTRhMjUwZTAtM2JlMC00N2YyLWIxOWUtOTU2OGJiMTY3NTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu3stbbJAeTXI68T2O5FI+ok3kg2OPpotKRR
IEugM0alGaW+RIXWe7rc3hceIBQssQE974YKwmUMLfOn3+DXlaCff7l9FmCYmb3W
jEzSr8dq892mzOvW+yvZPpMwZy5WbVQ1pHlgECy/kM/cxObhxvcQF+8vAf8KXFOn
5zDetjsfmWQUCagW4yxEbyEx0GKm2b2eJbqC7kqCdb0JN106q4EzpbWIKfBfK8nU
ydTfBAxb0UUnlk8hOywQayJWEAQx5rN5iEahQwrJ8JGwvMwr30qPOe6rI+A5gT3O
xz97HFcOS61gRIhQd5T9lB9YpBhIjbvj/42oz4SRKdkgaGGU5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjPcFnWB3J92+5gUwOVG/6HCCtAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMGU5
N2VjOC1jODgxLTQ1YWEtYWM0OS0yNWVlMjFhOTNhNWYvMmYxMmE1ODEtMjAyOC0z
YzRhLWFmMGMtMzViNTkwNDU1M2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDBlOTdlYzgtYzg4MS00NWFhLWFj
NDktMjVlZTIxYTkzYTVmL2QwZTk3ZWM4LWM4ODEtNDVhYS1hYzQ5LTI1ZWUyMWE5
M2E1Zi5jcmwwHwYDVR0jBBgwFoAUOHsSt98MP59S/msN47XbcN6/l0MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMGU5N2VjOC1jODgxLTQ1YWEtYWM0OS0yNWVl
MjFhOTNhNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqnsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQ+q64saakjxCmXkMcPA0BODYwbWWgPp17I2pDqPMGdj18nCPxKY8vH
pcUSLD6VeKhBK0cslA220jOkptCyvkh0Zh4T3xU4HrutyaFumwCGf38O+KHux5HG
G9bwt5/xK8UJBxkuuF+kFJSgTg5FDgtRY/kjxMMZ+BXKqCDlSnqZPkbMo/I4CYoI
MlP0UPN154Z7jI4HfiCrUETxDzPsL18wp88EJhgYGkPTeGL952Z53zDQLk3QE6E8
f9066XxnN4dx4LHox8CsvefBCB0S3DQ/iu7pHDdyu9a01d3SHkrvG7+QlUQFJ2nq
SgvRh/HUE3fSzhUfKouKhN9un4CfQjQ=
-----END CERTIFICATE-----
Generated at Sat May 18 01:55:14 2024 by rpki-client on console-ams.rpki-client.org