Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa
File:                     308feeb8-70f9-3009-aff2-80c008242007.roa (raw, json)
Hash identifier:          Luqz+e8mCLSCsLBtSzMgJw5fAdd9TDuC3FwdU023obk=
Subject key identifier:   24:DF:D8:57:25:B8:FD:97:3E:1E:41:2B:99:64:8D:36:C2:62:8B:00
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285845561AE8756D6AE5D76CCBFA80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa
Signing time:             Tue 26 Mar 2024 13:59:49 +0000
ROA not before:           Tue 26 Mar 2024 13:59:49 +0000
ROA not after:            Mon 24 Jun 2024 13:59:49 +0000
asID:                     28753
IP address blocks:        172.98.180.0/24 maxlen: 24
                          172.98.168.0/24 maxlen: 24
                          141.193.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:1a:e8:75:6d:6a:e5:d7:6c:cb:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Mar 26 13:59:49 2024 GMT
            Not After : Jun 24 13:59:49 2024 GMT
        Subject: CN=e9e7662d-353a-4816-b58b-535fe8bdb738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:22:b2:bc:f3:69:b2:5d:e5:e0:50:c1:e5:
                    6c:9e:d4:74:c0:82:e2:6b:65:6d:4b:be:42:ae:c2:
                    fe:ab:d6:ca:23:e2:36:b9:18:a0:52:3a:e0:4f:ff:
                    bf:f5:72:b7:77:46:7b:a1:06:f4:e1:fb:b9:5b:b2:
                    51:f1:55:d7:3f:e2:58:64:ff:14:6f:2a:52:11:e9:
                    41:3a:b5:17:52:8f:66:e5:72:e3:cb:9b:a7:47:d3:
                    f0:f4:d1:f7:4b:de:91:8b:63:5c:74:f7:c5:35:63:
                    fa:1d:33:80:8f:d7:eb:93:0e:8a:31:11:3b:52:59:
                    a1:3f:2d:84:0e:ee:e4:dc:3a:f8:67:6e:11:3d:ab:
                    42:20:70:00:ed:59:9b:b5:89:f0:3f:0a:1b:7b:78:
                    f2:42:4e:88:a2:24:fe:b4:ec:e4:5a:ef:21:36:81:
                    33:57:ca:05:f9:49:56:92:07:72:00:73:aa:cc:1f:
                    b0:29:98:2c:8b:f6:cf:3a:7a:d7:24:46:54:a5:06:
                    c0:c1:02:58:a5:74:f1:07:cc:fc:54:e9:d3:ae:15:
                    c8:20:3a:4f:03:95:5a:fd:67:3b:b0:bf:bf:d8:84:
                    da:5a:cd:bb:6a:fc:59:79:dc:75:48:c2:5a:ce:36:
                    ca:8e:e8:24:18:67:fc:22:75:fb:d2:13:a1:2b:37:
                    ff:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DF:D8:57:25:B8:FD:97:3E:1E:41:2B:99:64:8D:36:C2:62:8B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/308feeb8-70f9-3009-aff2-80c008242007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.99.0/24
                  172.98.168.0/24
                  172.98.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:15:78:59:13:c9:3f:f2:a1:30:f0:d8:2f:df:5f:65:dc:8a:
         62:d2:42:37:81:e2:c2:14:20:b7:3f:81:a3:3e:96:5a:e1:82:
         3c:78:2f:5e:35:57:87:5c:9a:39:b8:5c:86:66:16:46:73:e3:
         ad:6e:f5:a7:47:b8:49:aa:68:43:2a:ce:7f:d4:cb:a9:c9:c8:
         5c:62:f4:95:e5:b2:6b:19:fc:eb:99:fb:c9:d2:c3:b9:7d:34:
         98:63:95:d2:7f:9f:b0:25:11:77:f0:ee:f6:d6:d9:6b:89:2a:
         53:48:75:48:b2:fe:3b:73:a3:eb:5e:09:a7:b0:2c:bd:b2:07:
         70:d7:22:5a:5b:04:8a:92:9f:1d:51:01:d9:21:39:a4:9e:1b:
         0a:4b:bf:2f:20:ae:8f:83:23:c6:c3:f2:98:cb:fe:26:96:1f:
         9d:a7:78:6f:72:10:9d:dd:c7:7a:6c:bd:48:d4:80:26:80:05:
         1c:cf:ff:b8:46:71:e9:d8:e5:ef:7b:2b:2c:e4:16:6d:cd:2c:
         6d:9b:21:81:ec:a9:b3:5c:66:40:9a:0e:2e:dd:a0:b0:d8:4f:
         e3:ce:a3:99:13:12:54:ec:d3:b4:f7:14:cb:fe:1a:1d:a5:a4:
         06:f3:d3:9d:f1:93:5a:9b:62:f0:08:f3:27:f6:19:29:d0:f0:
         98:72:cb:80
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEVWGuh1bWrl12zL+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI0MDMyNjEzNTk0OVoXDTI0MDYyNDEzNTk0OVowLzEtMCsGA1UEAxMk
ZTllNzY2MmQtMzUzYS00ODE2LWI1OGItNTM1ZmU4YmRiNzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdIisrzzabJd5eBQweVsntR0wILia2VtS75C
rsL+q9bKI+I2uRigUjrgT/+/9XK3d0Z7oQb04fu5W7JR8VXXP+JYZP8UbypSEelB
OrUXUo9m5XLjy5unR9Pw9NH3S96Ri2NcdPfFNWP6HTOAj9frkw6KMRE7UlmhPy2E
Du7k3Dr4Z24RPatCIHAA7VmbtYnwPwobe3jyQk6IoiT+tOzkWu8hNoEzV8oF+UlW
kgdyAHOqzB+wKZgsi/bPOnrXJEZUpQbAwQJYpXTxB8z8VOnTrhXIIDpPA5Va/Wc7
sL+/2ITaWs27avxZedx1SMJazjbKjugkGGf8InX70hOhKzf/CQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCTf2FcluP2XPh5BK5lkjTbCYosAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMzA4ZmVlYjgtNzBmOS0z
MDA5LWFmZjItODBjMDA4MjQyMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjcFjAwQA
rGKoAwQArGK0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAHQVeFkTyT/yoTDw2C/fX2XcimLSQjeB4sIUILc/
gaM+llrhgjx4L141V4dcmjm4XIZmFkZz461u9adHuEmqaEMqzn/Uy6nJyFxi9JXl
smsZ/OuZ+8nSw7l9NJhjldJ/n7AlEXfw7vbW2WuJKlNIdUiy/jtzo+teCaewLL2y
B3DXIlpbBIqSnx1RAdkhOaSeGwpLvy8gro+DI8bD8pjL/iaWH52neG9yEJ3dx3ps
vUjUgCaABRzP/7hGcenY5e97KyzkFm3NLG2bIYHsqbNcZkCaDi7doLDYT+POo5kT
ElTs07T3FMv+Gh2lpAbz053xk1qbYvAI8yf2GSnQ8Jhyy4A=
-----END CERTIFICATE-----
Generated at Thu May 2 12:36:56 2024 by rpki-client on console-ams.rpki-client.org