Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8a110ca9-4317-37af-a1ec-02cabe42ead9.roa
File:                     8a110ca9-4317-37af-a1ec-02cabe42ead9.roa (raw, json)
Hash identifier:          deNdzifpk6VuSLLnEeFiqAy3jrmlpAmM8YMnS2Oqsyg=
Subject key identifier:   00:70:DE:98:62:E1:5D:7A:17:27:AD:06:02:7B:8C:C5:3C:34:2E:49
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F432858458042C2619B9F072D43687A40
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8a110ca9-4317-37af-a1ec-02cabe42ead9.roa
Signing time:             Wed 10 Apr 2024 16:24:03 +0000
ROA not before:           Wed 10 Apr 2024 16:24:03 +0000
ROA not after:            Tue 09 Jul 2024 16:24:03 +0000
asID:                     7862
IP address blocks:        146.23.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:80:42:c2:61:9b:9f:07:2d:43:68:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Apr 10 16:24:03 2024 GMT
            Not After : Jul  9 16:24:03 2024 GMT
        Subject: CN=e2d4ce3e-ece0-4fb7-ad6e-d620749d17f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:10:71:98:e0:0e:f9:cb:04:a8:76:89:93:
                    95:a3:7f:bd:95:65:fb:10:dd:a2:6a:dc:99:cc:b5:
                    8c:af:b9:69:75:fb:5e:34:21:79:18:f5:d4:02:41:
                    13:2a:0d:59:74:f1:7b:9b:8b:67:41:bd:60:09:d4:
                    f9:bb:d1:4d:ba:4b:31:28:02:5b:e4:e3:4d:f5:49:
                    e7:76:ad:82:b6:dd:cf:c1:ad:37:81:61:25:1a:a3:
                    e2:c4:04:75:a2:f0:7b:b3:f8:62:16:7d:7a:c6:02:
                    34:5a:58:91:6e:5d:d7:6f:be:6b:a6:73:94:cc:24:
                    f5:02:3f:96:e5:9f:c1:33:ec:47:8c:00:44:75:be:
                    ce:b6:c8:94:13:35:93:86:4c:d6:af:ce:13:b1:a1:
                    f6:8d:ef:72:1b:b7:39:1e:d3:2f:08:17:d8:c6:01:
                    84:0b:95:35:91:cd:4d:2a:1c:a9:dd:7a:09:8e:2a:
                    6a:77:38:1c:e5:ab:22:3a:71:d1:5f:4e:c9:bf:30:
                    f1:3f:4e:db:2d:55:84:54:d0:4e:fb:1b:79:d1:d2:
                    23:e6:9e:22:85:4f:26:53:7e:71:8d:f6:6e:14:9e:
                    7a:f9:4b:1f:0b:c2:4f:bc:6f:b4:13:ec:28:fc:85:
                    57:c3:6e:75:ab:42:1a:24:59:47:1d:52:d2:8d:b6:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:70:DE:98:62:E1:5D:7A:17:27:AD:06:02:7B:8C:C5:3C:34:2E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8a110ca9-4317-37af-a1ec-02cabe42ead9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:97:80:47:4a:2a:a3:27:f4:89:14:4a:a6:d0:68:1d:27:3c:
         e6:4f:57:7e:1b:f0:d7:38:12:3d:01:38:a8:c4:78:8d:b3:de:
         b6:d0:04:24:03:91:7a:e7:d6:da:74:4f:8f:0c:53:a6:f0:28:
         36:a4:54:9e:44:01:5f:e9:f6:a4:5c:ed:fa:fb:83:cd:cc:74:
         78:04:71:0f:34:c6:9a:13:96:10:62:85:60:c7:a5:e5:7e:2f:
         18:7a:68:30:c0:12:b3:c9:82:70:f7:aa:a9:c3:51:57:7e:3b:
         e7:3c:80:61:d1:5f:44:11:93:81:05:77:e7:6a:54:7c:cc:f6:
         f3:ac:23:d3:f1:79:ab:8a:04:54:5d:3d:c8:79:63:e0:84:78:
         94:12:01:f4:8c:ea:a0:df:47:15:6f:f0:03:e7:66:64:8a:04:
         92:0e:dc:99:84:5c:84:4d:3f:5b:99:63:c9:85:95:cf:8f:1e:
         4f:87:24:92:24:ce:f3:ac:ef:4d:a0:f1:a4:11:30:dd:6b:ea:
         4e:18:73:9d:88:93:da:b0:c7:c6:44:b1:26:6b:d0:3d:f0:db:
         78:eb:7e:0b:9f:b4:30:93:31:12:db:28:67:05:c3:47:8c:88:
         13:99:24:d5:2a:66:05:e4:03:be:6e:07:f3:6d:0f:81:72:0a:
         84:af:c9:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWAQsJhm58HLUNoekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTI0MDQxMDE2MjQwM1oXDTI0MDcwOTE2MjQwM1owLzEtMCsGA1UEAxMk
ZTJkNGNlM2UtZWNlMC00ZmI3LWFkNmUtZDYyMDc0OWQxN2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKkQcZjgDvnLBKh2iZOVo3+9lWX7EN2iatyZ
zLWMr7lpdfteNCF5GPXUAkETKg1ZdPF7m4tnQb1gCdT5u9FNuksxKAJb5ONN9Unn
dq2Ctt3Pwa03gWElGqPixAR1ovB7s/hiFn16xgI0WliRbl3Xb75rpnOUzCT1Aj+W
5Z/BM+xHjABEdb7OtsiUEzWThkzWr84TsaH2je9yG7c5HtMvCBfYxgGEC5U1kc1N
Khyp3XoJjipqdzgc5asiOnHRX07JvzDxP07bLVWEVNBO+xt50dIj5p4ihU8mU35x
jfZuFJ56+UsfC8JPvG+0E+wo/IVXw251q0IaJFlHHVLSjba/dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABw3phi4V16FyetBgJ7jMU8NC5JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvOGExMTBjYTktNDMxNy0z
N2FmLWExZWMtMDJjYWJlNDJlYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkhcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2XgEdKKqMn9IkUSqbQaB0nPOZPV34b8Nc4Ej0BOKjEeI2z3rbQBCQD
kXrn1tp0T48MU6bwKDakVJ5EAV/p9qRc7fr7g83MdHgEcQ80xpoTlhBihWDHpeV+
Lxh6aDDAErPJgnD3qqnDUVd+O+c8gGHRX0QRk4EFd+dqVHzM9vOsI9PxeauKBFRd
Pch5Y+CEeJQSAfSM6qDfRxVv8APnZmSKBJIO3JmEXIRNP1uZY8mFlc+PHk+HJJIk
zvOs702g8aQRMN1r6k4Yc52Ik9qwx8ZEsSZr0D3w23jrfguftDCTMRLbKGcFw0eM
iBOZJNUqZgXkA75uB/NtD4FyCoSvyeA=
-----END CERTIFICATE-----
Generated at Sun May 26 08:15:20 2024 by rpki-client on console-ams.rpki-client.org