Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa
File:                     f55d329b-e206-3311-9383-9e5491a7f00f.roa (raw, json)
Hash identifier:          0LZ7CYtTLjP/hGZ4uu7U8HbCH3xTKP5+cXhKG2Wc0W8=
Subject key identifier:   F6:22:A3:26:57:A3:40:83:37:5C:66:F1:BB:A0:8E:9D:76:C4:5B:17
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F4328584593689D78EB087405B0232380
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     15404
IP address blocks:        170.200.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:9d:78:eb:08:74:05:b0:23:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=7b32a3f1-a560-4ea1-b262-a474d7d5184c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:29:0b:70:b4:bb:af:a5:b2:00:f3:79:59:
                    7d:2a:1f:7d:d6:5b:df:27:0b:58:d7:8b:bc:4f:f9:
                    c9:84:8e:44:78:d8:86:ad:c4:38:df:b2:16:f9:f0:
                    42:2d:9f:60:25:77:42:da:10:8c:e3:d4:8e:01:e9:
                    d4:71:bc:1a:d6:31:51:39:2a:60:ea:e5:e0:54:32:
                    3f:6d:6f:ac:00:f3:f5:11:30:4e:5d:74:a6:98:bb:
                    2c:1c:23:7e:5c:c3:6e:ee:e0:4f:6b:3b:90:aa:59:
                    9b:81:fe:d3:53:9d:d2:c5:e8:32:0b:e3:06:b8:c2:
                    93:a2:51:4f:0c:99:5e:f5:17:92:d1:81:32:11:ff:
                    c7:12:02:69:27:3a:0c:dc:1e:21:fc:b9:d8:ad:14:
                    50:e1:7d:87:56:33:66:c6:b0:a2:6f:30:b1:cc:a8:
                    48:5d:5c:71:4a:c1:c4:d6:b3:46:d6:69:b6:57:e4:
                    98:d1:eb:f7:76:eb:d0:1b:ee:b9:42:46:a4:e0:6f:
                    ab:40:e9:58:49:a0:a9:26:c0:89:a3:94:73:9a:33:
                    6c:28:73:34:1c:9f:b0:06:0d:09:40:0c:76:8d:cc:
                    41:30:8e:e2:2a:33:79:e1:aa:b0:11:e5:85:26:4b:
                    b5:03:23:e8:3b:0e:76:91:e3:31:64:30:cd:1b:25:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:22:A3:26:57:A3:40:83:37:5C:66:F1:BB:A0:8E:9D:76:C4:5B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/f55d329b-e206-3311-9383-9e5491a7f00f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:99:eb:1d:9d:19:a5:24:12:af:05:52:97:5e:de:6b:a0:12:
         b9:93:79:d6:c4:44:85:d2:76:9c:01:77:b2:69:a8:d6:97:69:
         ac:1c:f4:e7:a6:b0:f1:df:53:5c:1c:9e:6d:c2:63:36:6a:ce:
         f9:31:5c:66:e7:76:18:f2:c3:ee:0f:ec:f3:42:04:38:df:d9:
         9f:7b:2b:f2:9d:e3:7e:94:83:54:9b:99:da:7f:24:67:7b:07:
         31:61:23:a7:f5:a9:97:78:79:cd:57:6c:a4:cf:f5:04:da:bb:
         eb:66:31:ee:01:1a:a8:e3:aa:81:94:84:9d:b4:f6:13:ca:69:
         5e:0d:d4:6e:94:c9:6c:ff:7a:fd:e9:e8:57:d6:12:2b:55:b3:
         e4:ff:f1:54:57:e2:9a:2f:98:8e:f0:bc:96:92:17:49:85:7f:
         ca:a6:3d:40:2d:0e:5b:66:2a:fd:d6:2e:da:23:e1:1f:bc:96:
         77:a0:99:fd:06:cc:2a:a3:09:b3:58:f6:b6:99:3d:78:ad:65:
         41:da:9a:70:d1:c8:9e:8d:fa:7b:6c:50:87:69:dd:44:26:62:
         20:32:ab:74:03:60:21:e7:a1:14:3f:cc:05:2f:d9:19:5f:71:
         7f:d6:6c:a5:0b:8e:0d:aa:62:e6:5d:13:e0:56:f6:a9:cd:0a:
         3a:fe:cc:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaJ146wh0BbAjI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk
MGJkMB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
N2IzMmEzZjEtYTU2MC00ZWExLWIyNjItYTQ3NGQ3ZDUxODRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeEpC3C0u6+lsgDzeVl9Kh991lvfJwtY14u8
T/nJhI5EeNiGrcQ437IW+fBCLZ9gJXdC2hCM49SOAenUcbwa1jFROSpg6uXgVDI/
bW+sAPP1ETBOXXSmmLssHCN+XMNu7uBPazuQqlmbgf7TU53SxegyC+MGuMKTolFP
DJle9ReS0YEyEf/HEgJpJzoM3B4h/LnYrRRQ4X2HVjNmxrCibzCxzKhIXVxxSsHE
1rNG1mm2V+SY0ev3duvQG+65Qkak4G+rQOlYSaCpJsCJo5RzmjNsKHM0HJ+wBg0J
QAx2jcxBMI7iKjN54aqwEeWFJku1AyPoOw52keMxZDDNGyWSSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPYioyZXo0CDN1xm8bugjp12xFsXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk
NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvZjU1ZDMyOWItZTIwNi0z
MzExLTkzODMtOWU1NDkxYTdmMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw
Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi
ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj
NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeZ6x2dGaUkEq8FUpde3mugErmTedbERIXSdpwBd7JpqNaXaawc9Oem
sPHfU1wcnm3CYzZqzvkxXGbndhjyw+4P7PNCBDjf2Z97K/Kd436Ug1Sbmdp/JGd7
BzFhI6f1qZd4ec1XbKTP9QTau+tmMe4BGqjjqoGUhJ209hPKaV4N1G6UyWz/ev3p
6FfWEitVs+T/8VRX4povmI7wvJaSF0mFf8qmPUAtDltmKv3WLtoj4R+8lnegmf0G
zCqjCbNY9raZPXitZUHamnDRyJ6N+ntsUIdp3UQmYiAyq3QDYCHnoRQ/zAUv2Rlf
cX/WbKULjg2qYuZdE+BW9qnNCjr+zBY=
-----END CERTIFICATE-----
Generated at Tue May 21 20:53:00 2024 by rpki-client on console-fra.rpki-client.org