Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/7601eda0-dbe4-3a50-a77d-16cdac328e8e.roa
File:                     7601eda0-dbe4-3a50-a77d-16cdac328e8e.roa (raw, json)
Hash identifier:          UxxsfxhHxQr5zySjSBULymkVi/YIn+/jpDwfPPZ+BcE=
Subject key identifier:   91:EB:2C:17:D6:CE:52:8B:06:63:4D:EE:8D:96:55:87:4C:64:09:53
Certificate issuer:       /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Certificate serial:       010D0C9F43285845909DEF6BC1636DD656201E00
Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/7601eda0-dbe4-3a50-a77d-16cdac328e8e.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     53855
IP address blocks:        185.224.64.0/22 maxlen: 24
                          2602:814:a000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:ef:6b:c1:63:6d:d6:56:20:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=a6f4dd66-4a6d-442f-9b84-8702a27efbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:da:35:4d:6c:f6:c6:52:03:75:23:47:c0:
                    c4:ea:22:f0:fe:8a:5d:97:1e:d8:f4:7b:41:43:3b:
                    9d:1e:04:c3:b3:2a:01:67:90:93:d8:22:7f:83:36:
                    64:e2:68:f7:28:41:72:26:d5:ec:19:7d:be:fe:69:
                    05:23:75:f1:0d:78:28:62:bb:14:89:7a:8d:b0:da:
                    ec:d3:df:ca:b9:5c:6a:68:6c:42:af:65:19:a1:77:
                    02:e1:f5:5d:88:b1:73:be:af:2a:66:08:7b:c1:ee:
                    3b:8b:25:c1:a3:3a:1c:de:17:69:1e:2d:b2:b6:fa:
                    78:05:41:b8:2d:af:a7:67:9d:43:01:18:b3:e3:6a:
                    e6:a2:1a:52:03:fb:fb:11:60:6a:b6:63:5b:ed:2d:
                    85:0c:6f:54:c0:e7:8b:34:c9:23:7f:7b:68:b8:21:
                    f9:cd:8f:27:15:7d:e5:16:3a:51:fb:90:a8:9a:c6:
                    ee:0b:27:b2:9e:ab:cd:f8:23:fa:ae:9d:a1:68:9e:
                    c4:b5:f7:80:cc:66:b5:29:ab:38:8e:21:c6:61:67:
                    20:4f:48:6e:86:d9:4c:01:f6:43:3c:09:51:12:05:
                    a5:d8:45:e4:2b:36:a9:2b:e4:bb:bc:72:eb:ca:0e:
                    e1:c2:35:07:5c:98:44:48:0d:c9:80:47:d5:89:2d:
                    6a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EB:2C:17:D6:CE:52:8B:06:63:4D:EE:8D:96:55:87:4C:64:09:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/7601eda0-dbe4-3a50-a77d-16cdac328e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl

            X509v3 Authority Key Identifier:
                keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.64.0/22
                IPv6:
                  2602:814:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:78:0a:fc:b5:d8:88:c4:1e:35:fb:da:ee:83:5b:93:fd:
         bd:a0:3a:16:22:f5:49:e3:50:aa:74:94:28:a7:64:8e:dd:79:
         03:69:d1:c4:02:1f:33:b4:67:95:ba:e4:39:dd:dc:5e:70:7b:
         39:28:08:5c:6e:2f:4c:f5:ee:a7:33:e9:21:d2:6e:75:94:83:
         1a:8d:15:76:0f:bd:2a:10:16:e8:77:4f:45:95:99:21:31:aa:
         cc:f8:9c:12:5e:ec:1b:17:88:92:ef:60:fc:c7:e4:71:ed:0c:
         44:7e:2f:0c:8c:6d:88:6b:1e:6b:3d:50:62:42:3f:24:12:5d:
         ec:9c:da:4f:46:b8:11:b5:a0:00:65:47:e6:96:2c:93:17:5a:
         b0:5b:ca:91:3b:cd:9c:28:62:09:c3:5f:7f:91:ea:e6:46:85:
         19:18:17:f6:a7:12:24:9f:1a:14:4b:d3:32:a4:b2:f1:d3:1d:
         7c:92:21:e4:a9:f4:00:66:c4:da:52:28:d7:45:59:6d:8d:5c:
         34:c2:c8:05:30:87:7c:43:fc:0e:aa:32:ed:cc:d8:63:f5:15:
         10:d4:88:1e:ca:9e:39:de:b8:04:12:02:c1:cd:62:36:71:5c:
         60:cf:73:48:78:03:db:73:d2:1f:52:53:d3:42:93:85:01:d5:
         16:e6:a8:fc
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEWQne9rwWNt1lYgHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ1OGU5MjAtYTU1OS00OWI1LWJiNmUtNGMyYmI4OTk0
M2EzMB4XDTI0MDQxNjEzMDAzM1oXDTI0MDcxNTEzMDAzM1owLzEtMCsGA1UEAxMk
YTZmNGRkNjYtNGE2ZC00NDJmLTliODQtODcwMmEyN2VmYmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNbaNU1s9sZSA3UjR8DE6iLw/opdlx7Y9HtB
QzudHgTDsyoBZ5CT2CJ/gzZk4mj3KEFyJtXsGX2+/mkFI3XxDXgoYrsUiXqNsNrs
09/KuVxqaGxCr2UZoXcC4fVdiLFzvq8qZgh7we47iyXBozoc3hdpHi2ytvp4BUG4
La+nZ51DARiz42rmohpSA/v7EWBqtmNb7S2FDG9UwOeLNMkjf3touCH5zY8nFX3l
FjpR+5ComsbuCyeynqvN+CP6rp2haJ7EtfeAzGa1Kas4jiHGYWcgT0huhtlMAfZD
PAlREgWl2EXkKzapK+S7vHLryg7hwjUHXJhESA3JgEfViS1q2QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFJHrLBfWzlKLBmNN7o2WVYdMZAlTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4
ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5OTQzYTMvNzYwMWVkYTAtZGJlNC0z
YTUwLWE3N2QtMTZjZGFjMzI4ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1OGU5MjAtYTU1OS00OWI1LWJi
NmUtNGMyYmI4OTk0M2EzLzY0NThlOTIwLWE1NTktNDliNS1iYjZlLTRjMmJiODk5
NDNhMy5jcmwwHwYDVR0jBBgwFoAU15LEqYpxiqpObFvygchiSxHeBD4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJi
Yjg5OTQzYTMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCueBAMA8E
AgACMAkDBwQmAggUoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFMR4Cvy12IjEHjX72u6DW5P9vaA6FiL1
SeNQqnSUKKdkjt15A2nRxAIfM7RnlbrkOd3cXnB7OSgIXG4vTPXupzPpIdJudZSD
Go0Vdg+9KhAW6HdPRZWZITGqzPicEl7sGxeIku9g/Mfkce0MRH4vDIxtiGseaz1Q
YkI/JBJd7JzaT0a4EbWgAGVH5pYskxdasFvKkTvNnChiCcNff5Hq5kaFGRgX9qcS
JJ8aFEvTMqSy8dMdfJIh5Kn0AGbE2lIo10VZbY1cNMLIBTCHfEP8Dqoy7czYY/UV
ENSIHsqeOd64BBICwc1iNnFcYM9zSHgD23PSH1JT00KThQHVFuao/A==
-----END CERTIFICATE-----
Generated at Sun Jun 2 17:05:44 2024 by rpki-client on console-fra.rpki-client.org