Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/7c98cffe-afc0-3813-9e46-148a31d7263a.roa
File:                     7c98cffe-afc0-3813-9e46-148a31d7263a.roa (raw, json)
Hash identifier:          xR/rP68/5fc/H9jkT/FxDuEw+a3qAc7rqRLDV/RHqsI=
Subject key identifier:   D7:78:7C:0F:72:2D:B2:CD:65:7B:1F:25:34:4D:D3:AE:D2:AA:0A:2B
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584574B31177CC3036E3F46B2500
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/7c98cffe-afc0-3813-9e46-148a31d7263a.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     36351
IP address blocks:        67.212.224.0/24 maxlen: 24
                          208.131.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:11:77:cc:30:36:e3:f4:6b:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=ca5ceb38-793d-4a04-bf52-094e9dac1f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b4:ed:71:77:3f:4e:0e:5f:08:fa:16:31:41:
                    e7:f1:1b:6f:15:7e:22:ea:e1:63:35:ea:2a:d2:df:
                    25:01:66:17:5f:77:5c:41:04:be:9a:d8:15:48:fe:
                    28:21:d8:9e:b7:11:27:a2:3b:40:7d:40:33:db:c1:
                    6a:ea:15:36:d5:0a:af:de:3c:0b:ce:2d:a3:a9:87:
                    51:29:a1:4f:5e:29:b2:e9:bd:6c:db:45:cb:80:f1:
                    ad:eb:cc:73:7b:57:13:3c:8e:d0:62:ee:5c:c7:f2:
                    31:ef:3f:a7:81:2c:81:5d:23:7b:bf:70:3b:9b:ab:
                    16:60:e3:0d:5b:20:a5:60:0c:10:29:45:b6:35:b8:
                    46:7b:bd:9a:76:03:27:7c:9b:b7:88:66:d8:b1:42:
                    9b:c5:11:90:7e:7e:d8:a6:14:ba:bb:cb:0c:4c:91:
                    94:dc:75:3f:d1:a3:ff:72:f3:af:a5:44:b9:b2:19:
                    a6:c5:69:a7:a3:b0:12:cd:d7:89:b0:d6:64:dd:7d:
                    f0:cf:59:e3:79:ed:7a:7c:96:fb:c9:6c:3a:ea:68:
                    e7:89:c9:19:0d:2e:44:95:af:15:a2:db:11:d9:e8:
                    67:dc:ec:ad:a2:96:74:c5:c0:24:aa:76:7f:b4:d9:
                    94:d0:7a:d9:3b:87:fc:fa:fd:f3:2c:03:ab:c4:51:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:78:7C:0F:72:2D:B2:CD:65:7B:1F:25:34:4D:D3:AE:D2:AA:0A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/7c98cffe-afc0-3813-9e46-148a31d7263a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.224.0/24
                  208.131.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:af:f9:71:52:bd:9f:8e:b0:0d:83:5d:fa:01:18:72:38:
         26:4a:4b:b0:c0:40:79:75:86:d7:93:f2:d1:ef:59:5c:05:4c:
         f5:ea:61:a4:c1:43:37:3d:57:3a:d7:15:ea:3e:ee:38:cc:51:
         cf:00:58:05:55:a1:10:aa:02:3a:75:b5:37:d1:b7:7d:51:81:
         39:92:ff:25:33:75:be:13:38:41:e7:a1:55:f0:8f:e2:3b:1f:
         f5:c7:e0:cb:52:90:d5:8a:ea:62:51:c9:4a:5d:51:94:51:94:
         73:5f:ec:9a:f1:9d:a2:10:44:98:c2:fc:4d:b5:15:ba:19:ab:
         2c:ba:aa:a6:31:28:77:5d:f2:64:be:97:d2:db:2e:56:91:83:
         96:15:a6:f6:2a:af:39:23:ad:f3:7e:c0:a0:fb:9b:c3:25:c4:
         fd:5c:a0:93:5d:3e:d9:8a:f0:75:6a:4d:4f:5d:aa:f0:d7:5a:
         1f:0c:c5:e2:5f:8f:64:92:e0:e4:86:03:4a:c2:6e:23:09:b7:
         a9:74:d9:8a:22:f2:b0:89:5d:a4:a7:63:09:e6:e8:bc:81:f3:
         84:ec:0a:81:12:de:15:eb:db:2f:2c:19:58:a9:8c:d5:0e:9f:
         ac:20:0f:04:b4:78:0d:8e:ac:30:0a:02:2b:6a:c3:bb:de:45:
         d9:f0:7c:76
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEV0sxF3zDA24/RrJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5
YWFlMB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk
Y2E1Y2ViMzgtNzkzZC00YTA0LWJmNTItMDk0ZTlkYWMxZjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7TtcXc/Tg5fCPoWMUHn8RtvFX4i6uFjNeoq
0t8lAWYXX3dcQQS+mtgVSP4oIdietxEnojtAfUAz28Fq6hU21Qqv3jwLzi2jqYdR
KaFPXimy6b1s20XLgPGt68xze1cTPI7QYu5cx/Ix7z+ngSyBXSN7v3A7m6sWYOMN
WyClYAwQKUW2NbhGe72adgMnfJu3iGbYsUKbxRGQfn7YphS6u8sMTJGU3HU/0aP/
cvOvpUS5shmmxWmno7ASzdeJsNZk3X3wz1njee16fJb7yWw66mjnickZDS5Ela8V
otsR2ehn3OytopZ0xcAkqnZ/tNmU0HrZO4f8+v3zLAOrxFFM6wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFNd4fA9yLbLNZXsfJTRN067SqgorMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh
OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvN2M5OGNmZmUtYWZjMC0z
ODEzLTllNDYtMTQ4YTMxZDcyNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh
OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl
OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh
ZGI3ZTlhYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQ9TgAwQA
0IOZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFYar/lxUr2fjrANg136ARhyOCZKS7DAQHl1hteT8tHvWVwF
TPXqYaTBQzc9VzrXFeo+7jjMUc8AWAVVoRCqAjp1tTfRt31RgTmS/yUzdb4TOEHn
oVXwj+I7H/XH4MtSkNWK6mJRyUpdUZRRlHNf7JrxnaIQRJjC/E21FboZqyy6qqYx
KHdd8mS+l9LbLlaRg5YVpvYqrzkjrfN+wKD7m8MlxP1coJNdPtmK8HVqTU9dqvDX
Wh8MxeJfj2SS4OSGA0rCbiMJt6l02Yoi8rCJXaSnYwnm6LyB84TsCoES3hXr2y8s
GVipjNUOn6wgDwS0eA2OrDAKAitqw7veRdnwfHY=
-----END CERTIFICATE-----
Generated at Thu Apr 25 07:23:23 2024 by rpki-client on console-ams.rpki-client.org