Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa
File:                     ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa (raw, json)
Hash identifier:          6N8sNRelJ5yUeJldDfo3xO+WShelFkQkPcWa2kPHjn8=
Subject key identifier:   3A:98:C2:95:71:DC:C9:AB:87:88:99:62:86:26:B9:0E:F5:9E:6D:97
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858462CF4476AA08107BFB5713D00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa
Signing time:             Tue 11 Jun 2024 13:00:33 +0000
ROA not before:           Tue 11 Jun 2024 13:00:33 +0000
ROA not after:            Mon 09 Sep 2024 13:00:33 +0000
asID:                     64267
IP address blocks:        152.44.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2c:f4:47:6a:a0:81:07:bf:b5:71:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 11 13:00:33 2024 GMT
            Not After : Sep  9 13:00:33 2024 GMT
        Subject: CN=42f75c2b-85b5-4724-820f-4a5360e6f21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:36:e4:a3:3f:8d:17:9f:03:0a:dd:1b:86:
                    fc:a7:ee:12:d8:81:27:bf:fd:14:e0:97:d9:8d:98:
                    37:56:13:40:74:e1:cb:c8:22:88:ab:4a:cb:d4:4b:
                    e6:75:01:66:b7:b1:24:70:a6:bc:6b:4f:04:98:24:
                    0b:39:c7:7c:24:04:f1:f2:fd:85:1c:9c:f3:95:5b:
                    21:8f:b2:79:ba:e0:a6:20:5a:0c:cf:00:97:f0:ad:
                    d0:59:49:66:80:38:c5:01:ed:73:24:7c:5d:e6:83:
                    a8:2b:34:cb:d4:63:3f:7e:70:e8:c7:62:c2:35:33:
                    d6:d0:2f:f6:0d:70:6d:c2:34:84:b5:71:ce:89:90:
                    05:e9:bd:85:41:44:97:70:e6:81:41:71:8c:70:36:
                    54:20:ad:84:a7:05:68:c5:58:6a:2d:81:af:93:14:
                    a3:93:80:b3:1f:0b:7b:8c:b7:a4:84:9d:79:f3:b9:
                    fe:50:ee:1a:cc:9f:5d:d6:1d:84:61:16:95:de:d9:
                    38:31:b2:43:a6:0a:82:d9:8d:dd:2b:bc:96:56:50:
                    3a:bb:2a:ad:83:33:9c:fe:12:5c:bc:a8:d4:7f:c2:
                    33:f6:77:b9:be:30:95:93:49:dc:ff:97:74:f2:16:
                    e4:4b:7c:53:65:2d:64:99:7c:2e:b1:71:d9:a9:96:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:98:C2:95:71:DC:C9:AB:87:88:99:62:86:26:B9:0E:F5:9E:6D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ab980b91-e7fa-37f1-ad49-1c72b28f855b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:f4:72:d5:08:ff:92:66:a6:19:cb:a4:23:e7:b5:8b:c3:5c:
         1f:64:d8:1d:1e:1d:f1:92:35:34:d9:ee:b2:54:25:05:da:b8:
         a8:3f:dc:99:72:23:72:65:09:3a:aa:dd:f3:19:2e:ee:e2:1e:
         f5:b7:c6:2b:0e:88:7e:25:ab:67:6f:9f:43:60:1b:e1:4f:b2:
         d1:95:f4:4b:2f:34:cf:0a:ef:63:71:30:38:9d:e4:1c:3d:63:
         bf:1b:97:89:f1:ac:3f:56:35:6e:73:67:2c:33:8d:6f:ba:be:
         e9:8d:4d:62:9a:61:cb:f6:b3:65:c3:d6:c4:51:ef:ae:58:d1:
         10:48:68:19:b1:d4:99:7d:8a:c0:1d:76:47:c4:99:6d:53:00:
         6c:d5:8e:1b:92:5a:4d:72:a0:ea:de:a3:c3:28:7b:2b:0b:d8:
         5a:6e:6d:3d:81:5d:d9:f0:ff:06:04:ee:93:c2:91:a4:c2:b8:
         77:b3:ad:4c:32:f6:4c:94:af:cb:9c:f8:9d:90:82:3a:6d:a3:
         3f:c2:6d:01:28:1d:c8:f8:71:e8:77:c8:ea:cd:c8:37:6c:77:
         e2:7e:af:53:45:d7:3d:4d:c4:f6:e5:bc:5a:47:16:1b:f2:b6:
         cd:34:11:ea:58:e7:58:54:02:72:9a:85:3c:5e:17:ed:c3:00:
         c3:dc:a4:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYs9EdqoIEHv7VxPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MDYxMTEzMDAzM1oXDTI0MDkwOTEzMDAzM1owLzEtMCsGA1UEAxMk
NDJmNzVjMmItODViNS00NzI0LTgyMGYtNGE1MzYwZTZmMjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjU25KM/jRefAwrdG4b8p+4S2IEnv/0U4JfZ
jZg3VhNAdOHLyCKIq0rL1EvmdQFmt7EkcKa8a08EmCQLOcd8JATx8v2FHJzzlVsh
j7J5uuCmIFoMzwCX8K3QWUlmgDjFAe1zJHxd5oOoKzTL1GM/fnDox2LCNTPW0C/2
DXBtwjSEtXHOiZAF6b2FQUSXcOaBQXGMcDZUIK2EpwVoxVhqLYGvkxSjk4CzHwt7
jLekhJ1587n+UO4azJ9d1h2EYRaV3tk4MbJDpgqC2Y3dK7yWVlA6uyqtgzOc/hJc
vKjUf8Iz9ne5vjCVk0nc/5d08hbkS3xTZS1kmXwusXHZqZaYhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqYwpVx3Mmrh4iZYoYmuQ71nm2XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWI5ODBiOTEtZTdmYS0z
N2YxLWFkNDktMWM3MmIyOGY4NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALn0ctUI/5JmphnLpCPntYvDXB9k2B0eHfGSNTTZ7rJUJQXauKg/3Jly
I3JlCTqq3fMZLu7iHvW3xisOiH4lq2dvn0NgG+FPstGV9EsvNM8K72NxMDid5Bw9
Y78bl4nxrD9WNW5zZywzjW+6vumNTWKaYcv2s2XD1sRR765Y0RBIaBmx1Jl9isAd
dkfEmW1TAGzVjhuSWk1yoOreo8MoeysL2FpubT2BXdnw/wYE7pPCkaTCuHezrUwy
9kyUr8uc+J2Qgjptoz/CbQEoHcj4ceh3yOrNyDdsd+J+r1NF1z1NxPblvFpHFhvy
ts00EepY51hUAnKahTxeF+3DAMPcpDY=
-----END CERTIFICATE-----
Generated at Mon Jun 17 15:09:23 2024 by rpki-client on console-ams.rpki-client.org