Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/f257f8c2-c6c6-3a21-a9f6-d17741a4663c.roa
File:                     f257f8c2-c6c6-3a21-a9f6-d17741a4663c.roa (raw, json)
Hash identifier:          cDKXugGFq/dev0NFAtlKXXaSk+SQVFayoc3X6WC+DEM=
Subject key identifier:   2A:9F:0B:60:13:1B:CE:F8:45:67:71:7D:73:45:C5:39:81:B9:E1:54
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F43285845E746E0A25E20FF5EE8B86480
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/f257f8c2-c6c6-3a21-a9f6-d17741a4663c.roa
Signing time:             Fri 17 May 2024 14:00:37 +0000
ROA not before:           Fri 17 May 2024 14:00:37 +0000
ROA not after:            Thu 15 Aug 2024 14:00:37 +0000
asID:                     30513
IP address blocks:        204.8.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:46:e0:a2:5e:20:ff:5e:e8:b8:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: May 17 14:00:37 2024 GMT
            Not After : Aug 15 14:00:37 2024 GMT
        Subject: CN=e787c173-6b79-4f83-9a97-e69c130251ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b4:d1:eb:ec:2a:6c:d6:2e:d9:71:07:59:8c:
                    2a:7d:06:f5:38:42:f4:06:1f:56:fa:e6:54:80:e8:
                    9c:cb:91:b2:04:88:d9:90:3c:ea:4a:7e:f9:61:c9:
                    e1:76:f9:6a:22:e2:d2:3e:92:a4:14:93:65:fa:fb:
                    55:c7:33:b3:bb:fe:57:f0:30:41:d8:fb:af:88:4c:
                    73:23:85:12:40:3f:d2:7f:47:1c:d3:68:ce:8b:ef:
                    b9:93:65:f0:48:44:b7:7c:0c:db:e2:b8:a7:5f:68:
                    df:9c:95:25:0b:ea:f6:88:ea:e5:a3:5b:7d:2b:e7:
                    93:73:79:4c:1b:4b:8c:4a:96:68:ec:93:27:7a:e7:
                    ed:83:90:ed:21:b1:bd:dd:53:ac:62:ef:8a:45:98:
                    76:fc:e4:b4:e4:46:a6:1d:d6:e9:87:4f:52:88:2e:
                    f0:fc:13:cc:c8:34:d7:a9:a8:1c:d5:43:4c:21:89:
                    13:e1:fb:6a:3d:8d:ca:85:51:98:d1:8a:e6:8a:d5:
                    15:6b:7b:f7:7c:33:bf:b1:b8:7e:d7:b4:be:4b:63:
                    ec:96:23:3a:05:a0:7f:7b:33:8d:cf:74:39:9c:58:
                    71:2b:15:05:03:b5:39:38:73:45:0e:be:46:00:6e:
                    9a:a1:75:04:c4:cf:a8:42:d6:57:ee:7a:b0:a7:dd:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9F:0B:60:13:1B:CE:F8:45:67:71:7D:73:45:C5:39:81:B9:E1:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/f257f8c2-c6c6-3a21-a9f6-d17741a4663c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:22:63:17:fd:87:fa:a4:7a:cd:2e:3c:46:2c:07:15:d8:bd:
         4d:6e:0e:9f:ec:9c:4a:6b:69:4a:8d:01:71:ce:26:e8:58:d2:
         29:e5:9b:38:a6:27:ef:02:25:d0:50:aa:cc:1d:e9:f9:60:9c:
         02:76:27:36:7e:31:bd:c7:97:dd:54:61:6c:f8:96:7c:81:23:
         0f:04:af:76:44:57:1a:ba:30:5e:15:17:5f:d3:8e:3d:1f:8f:
         3e:3e:6d:b8:35:8c:c9:3f:8a:0f:54:9c:11:25:a0:39:e6:10:
         37:d5:ab:09:1a:12:5f:e4:b2:fc:2a:fa:7b:43:85:80:cb:bb:
         a9:b6:1c:cf:00:09:f0:9b:0f:03:22:fa:a4:bc:f5:b8:b6:f9:
         76:f8:ea:89:f0:0e:05:65:fc:5d:44:53:5a:8e:21:ab:13:32:
         a0:bd:dd:88:b3:8d:e4:d0:6d:bd:33:b7:4f:85:bc:cc:ad:9a:
         18:8f:d3:e3:12:12:d4:5b:24:e0:c8:e4:fb:aa:e6:ac:f6:f0:
         60:85:50:3d:95:9c:ec:87:76:a0:e5:12:22:83:e8:0f:63:ec:
         2f:cc:d3:af:e4:80:d0:95:40:6f:50:f5:b5:c1:50:cd:ad:87:
         d5:01:eb:be:38:ec:ff:95:28:b0:52:39:f4:7c:14:f1:39:01:
         3f:4e:f3:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXnRuCiXiD/Xui4ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODEwYzVmZDktZWU3ZS00YjlhLTk1ODQtYjcwNmYxMWUx
NzViMB4XDTI0MDUxNzE0MDAzN1oXDTI0MDgxNTE0MDAzN1owLzEtMCsGA1UEAxMk
ZTc4N2MxNzMtNmI3OS00ZjgzLTlhOTctZTY5YzEzMDI1MWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrTR6+wqbNYu2XEHWYwqfQb1OEL0Bh9W+uZU
gOicy5GyBIjZkDzqSn75YcnhdvlqIuLSPpKkFJNl+vtVxzOzu/5X8DBB2PuviExz
I4USQD/Sf0cc02jOi++5k2XwSES3fAzb4rinX2jfnJUlC+r2iOrlo1t9K+eTc3lM
G0uMSpZo7JMneuftg5DtIbG93VOsYu+KRZh2/OS05EamHdbph09SiC7w/BPMyDTX
qagc1UNMIYkT4ftqPY3KhVGY0YrmitUVa3v3fDO/sbh+17S+S2PsliM6BaB/ezON
z3Q5nFhxKxUFA7U5OHNFDr5GAG6aoXUExM+oQtZX7nqwp91ipwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqfC2ATG874RWdxfXNFxTmBueFUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84MTBj
NWZkOS1lZTdlLTRiOWEtOTU4NC1iNzA2ZjExZTE3NWIvZjI1N2Y4YzItYzZjNi0z
YTIxLWE5ZjYtZDE3NzQxYTQ2NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODEwYzVmZDktZWU3ZS00YjlhLTk1
ODQtYjcwNmYxMWUxNzViLzgxMGM1ZmQ5LWVlN2UtNGI5YS05NTg0LWI3MDZmMTFl
MTc1Yi5jcmwwHwYDVR0jBBgwFoAUL14dOnvqe3vdDr7fAVIYULDbDyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84MTBjNWZkOS1lZTdlLTRiOWEtOTU4NC1iNzA2
ZjExZTE3NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAgsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEiYxf9h/qkes0uPEYsBxXYvU1uDp/snEpraUqNAXHOJuhY0inlmzim
J+8CJdBQqswd6flgnAJ2JzZ+Mb3Hl91UYWz4lnyBIw8Er3ZEVxq6MF4VF1/Tjj0f
jz4+bbg1jMk/ig9UnBEloDnmEDfVqwkaEl/ksvwq+ntDhYDLu6m2HM8ACfCbDwMi
+qS89bi2+Xb46onwDgVl/F1EU1qOIasTMqC93YizjeTQbb0zt0+FvMytmhiP0+MS
EtRbJODI5Puq5qz28GCFUD2VnOyHdqDlEiKD6A9j7C/M06/kgNCVQG9Q9bXBUM2t
h9UB67447P+VKLBSOfR8FPE5AT9O8xk=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:36:57 2024 by rpki-client on console-fra.rpki-client.org