Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/0b778cd5-7092-3214-a281-dfd9a6074907.roa
File:                     0b778cd5-7092-3214-a281-dfd9a6074907.roa (raw, json)
Hash identifier:          CLfiRUnaK8xvgmDe0J84FJt5ScBfKt9Qfw27e9gE/XY=
Subject key identifier:   F5:2E:95:26:F7:5C:0E:FE:3D:F8:EC:3D:B3:1D:75:7D:15:DD:F4:EB
Certificate issuer:       /CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
Certificate serial:       010D0C9F43285845453D6A369FA61F2384C2E200
Authority key identifier: 16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/0b778cd5-7092-3214-a281-dfd9a6074907.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     6651
IP address blocks:        162.217.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:6a:36:9f:a6:1f:23:84:c2:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd319be-2876-403e-ba86-24d27aaa8fc0
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=2876909c-b253-4a1a-b83c-b797509546f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:09:4c:39:8c:14:e0:87:82:a3:20:25:a9:
                    af:f2:16:21:e6:0d:38:8d:96:ee:1b:93:b7:a1:3a:
                    bb:5f:82:47:7f:d6:69:85:72:8d:ca:81:b3:cb:5f:
                    b1:0b:d7:24:26:27:71:0a:20:de:dd:99:db:33:76:
                    0a:fa:a4:36:65:e5:9f:36:e5:3f:df:83:1a:3c:23:
                    03:dc:7d:ad:6a:b3:58:23:00:81:4a:70:07:1b:7a:
                    3a:c0:db:3f:20:5b:5d:09:18:c4:00:1d:51:00:85:
                    5e:63:14:21:23:42:94:a7:c6:e8:ab:15:f6:e4:14:
                    13:e2:1a:e3:4a:3a:9a:bb:86:32:95:a8:aa:93:75:
                    2f:e5:6d:73:01:5e:6d:84:06:c9:83:41:f2:3a:6c:
                    c5:87:69:12:96:d2:4d:11:f7:fc:db:ad:70:87:a7:
                    03:66:33:21:90:85:02:26:25:3f:b0:f5:d4:51:de:
                    13:cf:8d:d9:b2:d4:f5:1b:da:df:2b:5e:c1:8b:c4:
                    8f:d8:d2:2b:26:f3:4a:5d:22:ee:2d:b0:85:e1:b1:
                    24:99:59:09:d4:fd:17:72:b0:57:f1:39:f6:18:db:
                    e1:66:33:c9:c0:21:4c:ab:21:b2:42:5c:f5:55:bd:
                    b7:25:a9:9f:92:a9:24:37:bc:19:54:f7:a6:4b:07:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2E:95:26:F7:5C:0E:FE:3D:F8:EC:3D:B3:1D:75:7D:15:DD:F4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/0b778cd5-7092-3214-a281-dfd9a6074907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl

            X509v3 Authority Key Identifier:
                keyid:16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:83:33:30:fa:aa:9e:4d:89:cf:62:44:f4:62:e8:ba:20:39:
         9a:0f:97:ff:db:dc:b2:25:36:39:1d:75:cc:5d:14:2c:e7:1e:
         cf:bd:6b:8b:fc:64:30:38:56:50:89:51:27:0f:cc:42:02:24:
         a2:9a:24:e3:eb:99:c4:92:a8:88:67:d3:44:f3:4f:73:c5:88:
         37:6d:4a:91:40:a5:df:c1:86:d6:3d:d3:89:01:37:ea:b0:90:
         e3:f8:5a:cd:77:5d:bf:24:15:d9:e7:85:5b:a1:ab:bd:98:f8:
         5b:38:c8:52:79:08:b3:c8:45:ae:0e:f1:03:db:aa:f9:64:2b:
         3f:81:67:7d:98:c4:75:a0:c0:c6:9c:db:dd:08:b6:79:bd:01:
         95:97:02:e0:59:c9:b8:7a:7c:a4:28:09:9c:c2:47:98:e5:51:
         e3:7a:ac:4b:c6:a9:b7:ad:53:c3:be:3d:af:e1:ae:2b:3e:26:
         a2:43:6e:40:64:74:6c:72:ee:76:be:0c:54:0e:7f:4a:49:28:
         bb:b6:8f:cb:20:d1:bd:18:84:94:23:29:5a:b3:05:a9:dc:63:
         95:52:b2:24:64:e0:3f:4a:65:fe:cd:88:7a:37:a9:65:41:39:
         84:2b:d8:4b:58:a2:89:5b:9e:a9:b0:00:cb:35:92:b1:58:c0:
         c2:35:b9:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPWo2n6YfI4TC4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RkMzE5YmUtMjg3Ni00MDNlLWJhODYtMjRkMjdhYWE4
ZmMwMB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
Mjg3NjkwOWMtYjI1My00YTFhLWI4M2MtYjc5NzUwOTU0NmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfkJTDmMFOCHgqMgJamv8hYh5g04jZbuG5O3
oTq7X4JHf9ZphXKNyoGzy1+xC9ckJidxCiDe3ZnbM3YK+qQ2ZeWfNuU/34MaPCMD
3H2tarNYIwCBSnAHG3o6wNs/IFtdCRjEAB1RAIVeYxQhI0KUp8boqxX25BQT4hrj
Sjqau4Yylaiqk3Uv5W1zAV5thAbJg0HyOmzFh2kSltJNEff8261wh6cDZjMhkIUC
JiU/sPXUUd4Tz43ZstT1G9rfK17Bi8SP2NIrJvNKXSLuLbCF4bEkmVkJ1P0XcrBX
8Tn2GNvhZjPJwCFMqyGyQlz1Vb23JamfkqkkN7wZVPemSwcqPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUulSb3XA7+PfjsPbMddX0V3fTrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ZGQz
MTliZS0yODc2LTQwM2UtYmE4Ni0yNGQyN2FhYThmYzAvMGI3NzhjZDUtNzA5Mi0z
MjE0LWEyODEtZGZkOWE2MDc0OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2RkMzE5YmUtMjg3Ni00MDNlLWJh
ODYtMjRkMjdhYWE4ZmMwLzdkZDMxOWJlLTI4NzYtNDAzZS1iYTg2LTI0ZDI3YWFh
OGZjMC5jcmwwHwYDVR0jBBgwFoAUFqpMiZHY8up04nAcQ2H02dlqIMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83ZGQzMTliZS0yODc2LTQwM2UtYmE4Ni0yNGQy
N2FhYThmYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotl1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWDMzD6qp5Nic9iRPRi6LogOZoPl//b3LIlNjkddcxdFCznHs+9a4v8
ZDA4VlCJUScPzEICJKKaJOPrmcSSqIhn00TzT3PFiDdtSpFApd/BhtY904kBN+qw
kOP4Ws13Xb8kFdnnhVuhq72Y+Fs4yFJ5CLPIRa4O8QPbqvlkKz+BZ32YxHWgwMac
290Itnm9AZWXAuBZybh6fKQoCZzCR5jlUeN6rEvGqbetU8O+Pa/hris+JqJDbkBk
dGxy7na+DFQOf0pJKLu2j8sg0b0YhJQjKVqzBancY5VSsiRk4D9KZf7NiHo3qWVB
OYQr2EtYoolbnqmwAMs1krFYwMI1uRw=
-----END CERTIFICATE-----
Generated at Wed May 15 17:50:33 2024 by rpki-client on console-fra.rpki-client.org