Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa
File:                     c7a9fdea-664c-38e1-be4a-09e48baa862e.roa (raw, json)
Hash identifier:          b7/sdICFamYZU1ID0P+LATKbku00fK3wTINL5izTOw4=
Subject key identifier:   AB:63:CA:90:BA:0F:13:EA:82:48:9E:7D:7E:FA:20:FA:DA:7A:FA:B1
Certificate issuer:       /CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b
Certificate serial:       010D0C9F43285845EF53AA4E84C84BB0A369FA00
Authority key identifier: 4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa
Signing time:             Mon 20 May 2024 11:12:51 +0000
ROA not before:           Mon 20 May 2024 11:12:51 +0000
ROA not after:            Sun 18 Aug 2024 11:12:51 +0000
asID:                     9009
IP address blocks:        167.253.136.0/24 maxlen: 24
                          167.253.137.0/24 maxlen: 24
                          167.253.138.0/24 maxlen: 24
                          167.253.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Jun 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:53:aa:4e:84:c8:4b:b0:a3:69:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4090525-7aee-4e0d-b577-ad34aaf1da7b
        Validity
            Not Before: May 20 11:12:51 2024 GMT
            Not After : Aug 18 11:12:51 2024 GMT
        Subject: CN=e9b97413-dcfe-41a8-8e2d-224b1047eaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e0:ea:b4:38:c6:69:52:fe:72:ae:be:22:5f:
                    bd:ba:d6:ac:e2:90:71:a6:97:d2:bd:d9:c3:28:c7:
                    63:21:7b:b1:a9:07:51:de:d4:cf:23:05:02:b4:be:
                    ec:e3:72:ae:98:2f:56:9b:99:be:f4:d6:7f:6c:4b:
                    f7:77:09:22:9b:77:5b:71:70:54:93:61:dc:fe:4f:
                    1a:86:3b:30:bf:24:74:bc:36:46:ea:0b:94:2c:61:
                    a1:7d:a9:e9:5b:da:e5:32:de:1a:f3:24:6f:24:94:
                    a2:62:f6:99:41:af:83:4c:a4:f6:32:b8:dc:4e:82:
                    65:e5:40:3a:4d:78:7f:d5:7f:d5:44:6d:4c:1c:55:
                    72:0c:cf:92:8b:37:f2:0f:93:c7:b7:ad:fe:4b:43:
                    83:e8:e9:00:bb:31:7e:a2:de:fb:8d:cc:67:bd:11:
                    d0:9a:61:bd:3c:ea:a7:dc:ee:08:be:a0:63:3e:7c:
                    b4:bc:0e:42:34:00:8b:47:ce:0b:03:89:b7:c9:35:
                    9f:92:cb:5e:a0:46:6d:2f:86:07:0e:62:05:7b:d1:
                    a1:cb:1d:ad:d8:25:63:90:72:a4:0a:09:f6:16:b8:
                    6a:8a:fb:bb:7f:aa:be:92:b1:5f:19:10:ec:51:e1:
                    9c:1d:02:8b:f2:56:2c:f8:1c:b3:a7:83:e3:99:e2:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:63:CA:90:BA:0F:13:EA:82:48:9E:7D:7E:FA:20:FA:DA:7A:FA:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/c7a9fdea-664c-38e1-be4a-09e48baa862e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b/d4090525-7aee-4e0d-b577-ad34aaf1da7b.crl

            X509v3 Authority Key Identifier:
                keyid:4B:44:58:96:26:7B:96:69:81:7F:C9:A6:E0:A9:D0:44:3E:76:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d4090525-7aee-4e0d-b577-ad34aaf1da7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:57:11:e5:e3:e5:11:d0:6a:91:3d:d5:b9:e4:6e:f6:da:83:
         22:b8:ba:b5:fe:45:b9:b8:36:78:60:a2:9a:5a:1b:b6:bd:e6:
         ec:5e:f0:02:9d:c3:07:05:02:8a:7c:fd:9e:4b:43:2f:68:5a:
         f1:f8:c5:3c:33:6b:29:4d:89:a2:c7:d0:71:d2:f6:a8:d3:c2:
         ee:b2:ea:44:55:ff:7c:ae:54:60:52:10:09:4b:b2:ce:97:98:
         dd:7e:6e:31:7a:ab:96:64:82:f9:de:9b:91:2e:98:54:4b:de:
         41:c9:7c:47:e6:ab:c8:cf:dc:df:57:e2:66:b8:bc:50:3f:2e:
         2f:85:e2:a1:f6:31:3f:d9:58:fd:9f:9e:88:fc:20:0a:d6:74:
         80:72:fd:65:cf:09:75:02:d1:4c:5f:91:a0:d0:3b:3b:c2:e7:
         dc:57:77:a8:27:72:ca:8e:f9:84:2f:f0:3c:0c:a4:dd:f7:fb:
         05:ad:3e:b8:43:25:82:ac:c2:62:10:f7:51:81:ca:0b:1f:a3:
         9d:f2:45:01:7c:cc:6f:13:90:9b:f2:b2:04:8a:88:63:af:54:
         26:b4:05:55:3e:00:c1:e8:a9:a6:0e:f4:98:8f:67:00:c0:4b:
         ed:71:9e:cf:0b:6e:fe:17:e1:5d:83:e3:a2:a4:1c:39:67:22:
         7e:52:cf:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXvU6pOhMhLsKNp+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwOTA1MjUtN2FlZS00ZTBkLWI1NzctYWQzNGFhZjFk
YTdiMB4XDTI0MDUyMDExMTI1MVoXDTI0MDgxODExMTI1MVowLzEtMCsGA1UEAxMk
ZTliOTc0MTMtZGNmZS00MWE4LThlMmQtMjI0YjEwNDdlYWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+DqtDjGaVL+cq6+Il+9utas4pBxppfSvdnD
KMdjIXuxqQdR3tTPIwUCtL7s43KumC9Wm5m+9NZ/bEv3dwkim3dbcXBUk2Hc/k8a
hjswvyR0vDZG6guULGGhfanpW9rlMt4a8yRvJJSiYvaZQa+DTKT2MrjcToJl5UA6
TXh/1X/VRG1MHFVyDM+SizfyD5PHt63+S0OD6OkAuzF+ot77jcxnvRHQmmG9POqn
3O4IvqBjPny0vA5CNACLR84LA4m3yTWfksteoEZtL4YHDmIFe9Ghyx2t2CVjkHKk
Cgn2Frhqivu7f6q+krFfGRDsUeGcHQKL8lYs+Byzp4PjmeJUUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtjypC6DxPqgkiefX76IPraevqxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDA5
MDUyNS03YWVlLTRlMGQtYjU3Ny1hZDM0YWFmMWRhN2IvYzdhOWZkZWEtNjY0Yy0z
OGUxLWJlNGEtMDllNDhiYWE4NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQwOTA1MjUtN2FlZS00ZTBkLWI1
NzctYWQzNGFhZjFkYTdiL2Q0MDkwNTI1LTdhZWUtNGUwZC1iNTc3LWFkMzRhYWYx
ZGE3Yi5jcmwwHwYDVR0jBBgwFoAUS0RYliZ7lmmBf8mm4KnQRD52pJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kNDA5MDUyNS03YWVlLTRlMGQtYjU3Ny1hZDM0
YWFmMWRhN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlXEeXj5RHQapE91bnkbvbagyK4urX+Rbm4NnhgoppaG7a95uxe8AKd
wwcFAop8/Z5LQy9oWvH4xTwzaylNiaLH0HHS9qjTwu6y6kRV/3yuVGBSEAlLss6X
mN1+bjF6q5Zkgvnem5EumFRL3kHJfEfmq8jP3N9X4ma4vFA/Li+F4qH2MT/ZWP2f
noj8IArWdIBy/WXPCXUC0UxfkaDQOzvC59xXd6gncsqO+YQv8DwMpN33+wWtPrhD
JYKswmIQ91GBygsfo53yRQF8zG8TkJvysgSKiGOvVCa0BVU+AMHoqaYO9JiPZwDA
S+1xns8Lbv4X4V2D46KkHDlnIn5SzxI=
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:43:02 2024 by rpki-client on console-fra.rpki-client.org