Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/e005d7ca-6a93-399e-9639-d08e91c3ba87.roa
File:                     e005d7ca-6a93-399e-9639-d08e91c3ba87.roa (raw, json)
Hash identifier:          HokOPqJGKKfp93SFCM/hUgZxfNy1GarmZV7AfkDyz+w=
Subject key identifier:   2B:41:74:AD:87:30:E6:FA:4B:65:EE:6F:0E:4B:FA:E2:EF:F8:74:B4
Certificate issuer:       /CN=8583e379-1578-4044-8426-ddcb4a4a8192
Certificate serial:       010D0C9F43285845A15E12CDFB87100404792740
Authority key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/e005d7ca-6a93-399e-9639-d08e91c3ba87.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     199856
IP address blocks:        192.154.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:12:cd:fb:87:10:04:04:79:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8583e379-1578-4044-8426-ddcb4a4a8192
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=82eb305c-82ed-4319-a968-f3588d39080f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:4c:c7:d9:58:f0:29:45:3f:d8:27:e1:a7:
                    56:95:04:8e:60:1b:c4:01:ef:1a:9f:b5:1d:89:5d:
                    df:3c:38:aa:ce:b7:3a:2e:9a:39:d8:0e:ed:1b:25:
                    fd:1f:6a:ca:44:71:53:1f:70:de:b1:bf:e0:9f:ea:
                    40:6f:ba:ed:02:f8:b4:0d:70:a0:71:97:ce:33:46:
                    df:27:4c:e2:5c:a6:86:03:4e:91:e8:09:06:03:0b:
                    c2:08:45:34:35:97:d7:49:da:a2:c3:08:82:c6:6a:
                    13:bd:56:8e:40:95:d8:41:58:15:ff:a4:8d:64:4d:
                    92:ee:d2:3e:1b:e1:84:88:3a:75:4c:c4:c7:e3:f3:
                    b6:fa:69:39:ef:c7:50:63:0f:2e:93:2f:6e:21:27:
                    41:75:c1:9d:f4:63:9e:31:75:ba:2b:f9:8d:3a:dc:
                    c1:a4:49:45:4c:05:6f:53:00:13:1e:7a:b9:3d:ce:
                    3d:65:7a:8c:d4:44:e8:7e:b9:2e:ea:93:9d:28:8d:
                    4f:99:39:8d:1c:7a:5c:06:19:cd:9e:a2:3a:fa:14:
                    c3:c3:eb:cf:16:93:ec:7d:66:9a:94:c4:e2:df:96:
                    4e:44:d2:8c:81:0f:76:9a:68:e7:2e:e8:0b:47:94:
                    c0:1e:30:18:b6:b1:79:c3:30:9e:fa:37:08:6e:af:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:41:74:AD:87:30:E6:FA:4B:65:EE:6F:0E:4B:FA:E2:EF:F8:74:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/e005d7ca-6a93-399e-9639-d08e91c3ba87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.crl

            X509v3 Authority Key Identifier:
                keyid:89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:37:55:7f:c9:ce:8d:02:af:e2:fa:6f:8c:41:a4:eb:ff:4a:
         7d:a2:b9:a2:90:ff:7f:df:d1:aa:bd:4b:17:04:30:39:2c:fb:
         5a:e5:4d:8d:16:c3:8a:de:bd:80:34:a3:a7:a2:f3:a9:28:c9:
         81:50:f7:b0:d3:e9:23:08:f1:bc:da:6b:23:46:3b:49:3e:ae:
         6a:e6:8b:48:c7:ee:07:20:bd:52:67:96:9b:2a:95:33:df:e7:
         68:68:4a:ae:40:91:08:a4:40:a6:ff:82:06:53:8f:2b:3f:f0:
         d0:0f:bb:70:02:be:e1:7f:71:64:b8:63:81:13:a9:f9:dd:a4:
         21:81:34:53:3c:61:0d:a2:75:89:a1:68:58:75:00:f2:d8:a8:
         56:5f:01:15:0f:2c:a6:39:f7:02:2b:65:40:39:84:f1:71:77:
         8b:26:d2:38:d3:86:f1:1e:95:90:e0:ce:af:ba:a2:bd:f0:f3:
         1a:10:79:a8:45:18:01:40:1e:5b:c5:25:4c:c4:2d:b9:a9:be:
         4c:4c:f2:fd:b8:07:86:5f:78:1b:9d:04:69:78:94:02:83:c9:
         8a:d6:42:cf:76:a7:60:06:52:c8:a4:ec:90:1a:8b:1b:62:90:
         a3:8f:7d:1b:fd:55:35:8c:8e:75:5d:8d:58:c6:b3:67:76:f0:
         3f:75:10:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXhLN+4cQBAR5J0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODU4M2UzNzktMTU3OC00MDQ0LTg0MjYtZGRjYjRhNGE4
MTkyMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
ODJlYjMwNWMtODJlZC00MzE5LWE5NjgtZjM1ODhkMzkwODBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutlMx9lY8ClFP9gn4adWlQSOYBvEAe8an7Ud
iV3fPDiqzrc6Lpo52A7tGyX9H2rKRHFTH3Desb/gn+pAb7rtAvi0DXCgcZfOM0bf
J0ziXKaGA06R6AkGAwvCCEU0NZfXSdqiwwiCxmoTvVaOQJXYQVgV/6SNZE2S7tI+
G+GEiDp1TMTH4/O2+mk578dQYw8uky9uISdBdcGd9GOeMXW6K/mNOtzBpElFTAVv
UwATHnq5Pc49ZXqM1ETofrku6pOdKI1PmTmNHHpcBhnNnqI6+hTDw+vPFpPsfWaa
lMTi35ZORNKMgQ92mmjnLugLR5TAHjAYtrF5wzCe+jcIbq/FHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtBdK2HMOb6S2Xubw5L+uLv+HS0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NTgz
ZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNiNGE0YTgxOTIvZTAwNWQ3Y2EtNmE5My0z
OTllLTk2MzktZDA4ZTkxYzNiYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODU4M2UzNzktMTU3OC00MDQ0LTg0
MjYtZGRjYjRhNGE4MTkyLzg1ODNlMzc5LTE1NzgtNDA0NC04NDI2LWRkY2I0YTRh
ODE5Mi5jcmwwHwYDVR0jBBgwFoAUicdfP86nXQ3DEPkjLGWSJwxjHWIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NTgzZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNi
NGE0YTgxOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJrJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACI3VX/Jzo0Cr+L6b4xBpOv/Sn2iuaKQ/3/f0aq9SxcEMDks+1rlTY0W
w4revYA0o6ei86koyYFQ97DT6SMI8bzaayNGO0k+rmrmi0jH7gcgvVJnlpsqlTPf
52hoSq5AkQikQKb/ggZTjys/8NAPu3ACvuF/cWS4Y4ETqfndpCGBNFM8YQ2idYmh
aFh1APLYqFZfARUPLKY59wIrZUA5hPFxd4sm0jjThvEelZDgzq+6or3w8xoQeahF
GAFAHlvFJUzELbmpvkxM8v24B4ZfeBudBGl4lAKDyYrWQs92p2AGUsik7JAaixti
kKOPfRv9VTWMjnVdjVjGs2d28D91EGw=
-----END CERTIFICATE-----
Generated at Wed May 29 06:41:52 2024 by rpki-client on console-fra.rpki-client.org