Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa
File:                     bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa (raw, json)
Hash identifier:          CTbjSDOnElC4VyTWXtEuQl7KkRnXoMonaRDrqBs0KR0=
Subject key identifier:   23:61:AA:4D:3D:4D:D5:24:91:A6:2B:5C:71:C1:5C:FD:76:C3:B8:1B
Certificate issuer:       /CN=d57d789e-7c0e-4086-93e5-04d300453dae
Certificate serial:       010D0C9F432858465A6A76B5F13A383B4304F3C0
Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa
Signing time:             Thu 27 Jun 2024 19:50:16 +0000
ROA not before:           Thu 27 Jun 2024 19:50:16 +0000
ROA not after:            Wed 25 Sep 2024 19:50:16 +0000
asID:                     16509
IP address blocks:        198.51.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5a:6a:76:b5:f1:3a:38:3b:43:04:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae
        Validity
            Not Before: Jun 27 19:50:16 2024 GMT
            Not After : Sep 25 19:50:16 2024 GMT
        Subject: CN=dfe19ff2-9ef0-4e7a-8866-5e97bc58091b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:ba:d2:19:2f:02:fc:9d:34:2b:e1:65:72:
                    8d:c2:98:01:b4:97:f0:22:56:4a:d1:e8:dc:20:c6:
                    8f:93:d8:c2:2b:b5:12:b0:99:f7:da:b7:f4:c0:50:
                    fc:e4:1b:ff:1c:52:2f:58:08:68:c8:7e:f8:bd:bf:
                    15:81:62:f9:59:2d:8e:a5:88:6e:36:53:a5:38:d0:
                    0e:a9:6a:d3:27:3c:f2:b4:07:29:50:aa:de:0f:f7:
                    d9:f8:73:27:aa:d1:3e:8d:b9:3b:a4:11:13:82:96:
                    23:b0:4f:46:4b:44:64:31:33:6a:01:5b:ff:b2:1a:
                    f2:40:06:f6:10:2b:64:d7:12:c3:05:0b:5e:52:50:
                    f3:0d:01:84:25:de:9a:18:fe:27:9d:b6:99:74:69:
                    ee:ef:45:7c:ab:a7:c2:13:d7:02:32:82:4a:f5:18:
                    56:72:a7:f0:42:f6:ed:1a:36:6c:6c:73:d0:30:44:
                    9c:11:79:cf:5b:59:fc:41:ce:8e:15:bf:42:eb:cd:
                    ad:5b:30:cb:d0:1d:c9:4b:92:73:99:92:dd:f6:ba:
                    a7:52:2a:90:81:d4:cf:fe:35:cf:7d:09:cb:75:bd:
                    c0:b0:77:75:8f:e6:79:5d:f8:2b:32:36:f3:dc:09:
                    36:7b:f1:c1:33:be:3f:93:f9:07:ff:4d:1a:72:b3:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:61:AA:4D:3D:4D:D5:24:91:A6:2B:5C:71:C1:5C:FD:76:C3:B8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/bf97fe63-2007-3ac5-81d2-c3ff041f6c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl

            X509v3 Authority Key Identifier:
                keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.51.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:58:12:b9:b8:e9:4d:00:6b:8a:de:5a:12:0f:d5:59:4a:
         7f:4a:16:ec:1a:e6:94:ba:16:ec:1f:da:f1:96:8c:07:5c:1a:
         98:2e:2b:e0:d3:64:60:af:b5:75:28:49:30:1d:12:8f:93:f1:
         19:ca:b1:86:1b:cf:ec:8b:de:a7:c4:88:78:f4:e2:4e:4c:63:
         3c:6c:c0:34:3d:96:42:6d:33:82:fd:d8:99:79:51:2b:5a:55:
         b1:21:81:0b:f2:fe:48:17:aa:fd:c6:e0:c3:4b:8e:33:a1:2c:
         9a:64:d0:12:e0:43:7c:17:3b:f3:d6:c0:8b:6c:f0:14:ca:0d:
         ee:6c:60:1b:9c:84:48:e6:b0:45:c5:17:dd:4c:c3:16:f4:c7:
         a7:42:e2:44:74:8c:e7:d1:09:a8:cb:e7:c3:ad:b1:d3:d8:3d:
         26:f8:82:a6:e2:5d:b7:69:40:e9:65:f3:18:21:59:0b:2d:60:
         71:6f:8d:39:a6:50:68:89:e4:be:fe:f7:47:de:6c:df:41:27:
         e0:5f:73:1a:d2:4e:b4:c9:4e:93:f0:88:19:cd:73:20:b6:26:
         0f:b6:ad:59:d0:2a:3c:f6:b1:36:d6:e1:e3:97:08:0a:fd:37:
         02:3e:16:28:44:4a:7b:17:a2:82:d1:4e:25:de:08:f9:c7:4b:
         73:fa:7a:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZaana18To4O0ME88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz
ZGFlMB4XDTI0MDYyNzE5NTAxNloXDTI0MDkyNTE5NTAxNlowLzEtMCsGA1UEAxMk
ZGZlMTlmZjItOWVmMC00ZTdhLTg4NjYtNWU5N2JjNTgwOTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN260hkvAvydNCvhZXKNwpgBtJfwIlZK0ejc
IMaPk9jCK7USsJn32rf0wFD85Bv/HFIvWAhoyH74vb8VgWL5WS2OpYhuNlOlONAO
qWrTJzzytAcpUKreD/fZ+HMnqtE+jbk7pBETgpYjsE9GS0RkMTNqAVv/shryQAb2
ECtk1xLDBQteUlDzDQGEJd6aGP4nnbaZdGnu70V8q6fCE9cCMoJK9RhWcqfwQvbt
GjZsbHPQMEScEXnPW1n8Qc6OFb9C682tWzDL0B3JS5JzmZLd9rqnUiqQgdTP/jXP
fQnLdb3AsHd1j+Z5XfgrMjbz3Ak2e/HBM74/k/kH/00acrPdzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNhqk09TdUkkaYrXHHBXP12w7gbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk
Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvYmY5N2ZlNjMtMjAwNy0z
YWM1LTgxZDItYzNmZjA0MWY2YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz
ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1
M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz
MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3IWBK5uOlNAGuK3loSD9VZSn9KFuwa5pS6Fuwf2vGWjAdcGpguK+DT
ZGCvtXUoSTAdEo+T8RnKsYYbz+yL3qfEiHj04k5MYzxswDQ9lkJtM4L92Jl5USta
VbEhgQvy/kgXqv3G4MNLjjOhLJpk0BLgQ3wXO/PWwIts8BTKDe5sYBuchEjmsEXF
F91Mwxb0x6dC4kR0jOfRCajL58OtsdPYPSb4gqbiXbdpQOll8xghWQstYHFvjTmm
UGiJ5L7+90febN9BJ+BfcxrSTrTJTpPwiBnNcyC2Jg+2rVnQKjz2sTbW4eOXCAr9
NwI+FihESnsXooLRTiXeCPnHS3P6em4=
-----END CERTIFICATE-----
Generated at Sun Jun 30 19:58:03 2024 by rpki-client on console-ams.rpki-client.org