Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa
File:                     61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa (raw, json)
Hash identifier:          sISLtx8ysI/T+0sfts4CKxEhr7fq7rcNG8W94sBxSEs=
Subject key identifier:   C9:A3:A3:1B:30:1A:A8:79:19:68:B4:23:81:3B:56:60:76:AD:F5:62
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285845D39E54FB08CA86B69D168F80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     13347
IP address blocks:        198.145.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:54:fb:08:ca:86:b6:9d:16:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=47ad3db4-9032-47eb-b67c-93d5d588f51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:9b:2a:35:f3:c5:11:c6:e7:ef:af:b0:9f:
                    98:16:fd:7e:b2:48:ca:9c:e9:ae:17:71:7a:65:14:
                    f5:92:f0:fe:db:2c:b5:a1:6e:b3:e5:0a:35:6e:c4:
                    91:0b:6d:6c:6a:47:e2:a8:b9:1c:10:24:2b:ff:f1:
                    b8:4a:54:71:aa:29:8f:af:cd:cc:de:f1:e0:c1:20:
                    db:76:6a:3a:93:8e:94:bc:71:84:b1:3b:77:5e:75:
                    06:c8:b1:0a:b2:9a:33:90:3d:de:0b:2a:c8:40:43:
                    5f:d5:30:2a:a5:02:d3:ab:b0:0d:07:26:ca:dc:da:
                    3a:75:ea:5f:c6:34:69:2f:db:15:0e:83:d6:26:77:
                    af:b1:58:bf:b4:ac:c1:17:5d:52:48:19:34:24:d9:
                    e0:5a:0a:09:9e:b0:71:bd:dc:ed:e5:b2:14:e8:50:
                    d1:3a:61:67:bd:8c:b7:44:f2:c5:cd:8f:94:70:e3:
                    b6:e4:fa:d7:47:23:77:7a:76:21:d1:18:ef:96:27:
                    60:70:ed:90:1d:83:4a:fb:63:7f:75:2c:5d:10:78:
                    6c:20:67:04:ae:40:b3:6f:9d:cb:1c:86:49:ba:dc:
                    c9:b1:77:e5:c1:33:2e:1d:38:42:d5:bd:f3:dd:88:
                    7a:15:50:98:36:4b:e9:1c:70:20:86:fb:26:c4:b0:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A3:A3:1B:30:1A:A8:79:19:68:B4:23:81:3B:56:60:76:AD:F5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/61d2c37e-4c3a-3a02-b5a9-ae7ca008e92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:f3:c6:13:c6:49:97:6d:67:05:93:ef:b9:31:1b:5c:6f:
         db:92:65:25:66:45:d8:26:a5:92:de:b7:eb:a0:06:ef:d2:39:
         5c:86:13:98:2b:cd:b0:ad:02:c2:17:42:22:d6:72:74:16:7f:
         9c:98:c5:22:4f:f8:e1:ab:ae:e5:6e:db:e0:42:9b:1f:e7:b4:
         28:04:0f:64:dd:48:28:5d:f3:7c:83:43:96:d1:14:4f:26:a7:
         fb:75:9e:53:d1:56:f7:d4:a5:92:01:fe:7b:8e:50:aa:e3:78:
         d0:d5:3e:57:34:6c:58:27:c5:b4:33:4a:0d:36:1d:72:6f:9a:
         ef:48:92:ea:db:87:ef:7f:e5:da:3c:1b:2b:0b:3e:e8:39:e6:
         01:88:5a:a0:b9:79:43:d3:6b:25:38:d6:1c:ed:1c:40:d9:45:
         77:e8:59:e5:13:92:9f:6c:4f:7d:28:24:3e:e8:3d:a8:a1:00:
         a1:1e:5b:98:1a:cc:b5:48:70:af:e7:64:3f:36:a7:6d:34:69:
         69:f8:f1:83:f0:55:f9:1f:9d:19:06:28:39:ca:ce:71:af:41:
         10:ce:f4:ae:e8:ad:9a:d2:f8:26:9c:b3:24:d5:22:cd:c1:ea:
         03:f2:fa:cb:52:53:b3:47:69:d8:06:4a:e9:bf:13:43:33:96:
         22:4e:43:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXTnlT7CMqGtp0Wj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk
NDdhZDNkYjQtOTAzMi00N2ViLWI2N2MtOTNkNWQ1ODhmNTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqqbKjXzxRHG5++vsJ+YFv1+skjKnOmuF3F6
ZRT1kvD+2yy1oW6z5Qo1bsSRC21sakfiqLkcECQr//G4SlRxqimPr83M3vHgwSDb
dmo6k46UvHGEsTt3XnUGyLEKspozkD3eCyrIQENf1TAqpQLTq7ANBybK3No6depf
xjRpL9sVDoPWJnevsVi/tKzBF11SSBk0JNngWgoJnrBxvdzt5bIU6FDROmFnvYy3
RPLFzY+UcOO25PrXRyN3enYh0RjvlidgcO2QHYNK+2N/dSxdEHhsIGcErkCzb53L
HIZJutzJsXflwTMuHThC1b3z3Yh6FVCYNkvpHHAghvsmxLCePwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmjoxswGqh5GWi0I4E7VmB2rfViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNjFkMmMzN2UtNGMzYS0z
YTAyLWI1YTktYWU3Y2EwMDhlOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpFmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjn88YTxkmXbWcFk++5MRtcb9uSZSVmRdgmpZLet+ugBu/SOVyGE5gr
zbCtAsIXQiLWcnQWf5yYxSJP+OGrruVu2+BCmx/ntCgED2TdSChd83yDQ5bRFE8m
p/t1nlPRVvfUpZIB/nuOUKrjeNDVPlc0bFgnxbQzSg02HXJvmu9Ikurbh+9/5do8
GysLPug55gGIWqC5eUPTayU41hztHEDZRXfoWeUTkp9sT30oJD7oPaihAKEeW5ga
zLVIcK/nZD82p200aWn48YPwVfkfnRkGKDnKznGvQRDO9K7orZrS+CacsyTVIs3B
6gPy+stSU7NHadgGSum/E0MzliJOQ0M=
-----END CERTIFICATE-----
Generated at Sat May 18 01:43:20 2024 by rpki-client on console-fra.rpki-client.org