Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/810f7d17-f387-39f6-8eda-a24c9cd1e86f.roa
File:                     810f7d17-f387-39f6-8eda-a24c9cd1e86f.roa (raw, json)
Hash identifier:          MaNWYMvP6bruZATaauJLSXHs8OuENnB2Kh957LHioSw=
Subject key identifier:   31:75:1C:35:D6:0C:07:5C:9F:A9:B9:6D:1F:62:F7:CF:6A:8C:AC:33
Certificate issuer:       /CN=90867e5c-2c8f-4999-a134-dc9418f84496
Certificate serial:       010D0C9F4328584531B29A185A1F07BE8C56A240
Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/810f7d17-f387-39f6-8eda-a24c9cd1e86f.roa
Signing time:             Wed 13 Mar 2024 13:00:30 +0000
ROA not before:           Wed 13 Mar 2024 13:00:30 +0000
ROA not after:            Tue 11 Jun 2024 13:00:30 +0000
asID:                     2648
IP address blocks:        140.208.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:b2:9a:18:5a:1f:07:be:8c:56:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496
        Validity
            Not Before: Mar 13 13:00:30 2024 GMT
            Not After : Jun 11 13:00:30 2024 GMT
        Subject: CN=d031d21e-0a80-483e-8244-ea6bb09fddb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:49:7f:cb:7b:6c:07:1d:d5:42:af:ed:7c:
                    3e:3e:27:8f:e5:f4:7c:5d:bd:72:a2:d8:93:0a:3f:
                    b1:8c:e4:c9:5f:50:d6:20:bc:44:33:3b:82:0c:5f:
                    97:05:fb:e8:60:cb:2a:ad:ff:85:85:33:43:25:6c:
                    83:f8:75:52:b5:45:7a:24:9a:38:09:8c:a4:a2:c4:
                    f2:c2:6a:f3:cf:21:67:b8:78:c9:4f:78:a6:20:8b:
                    0e:d4:45:bd:46:c2:26:c8:c7:f3:77:5a:1b:b4:bb:
                    52:75:07:09:a8:c9:59:ec:f8:5b:d4:e8:ee:6a:4a:
                    f1:a5:10:68:25:58:e7:09:7f:37:ca:ec:8b:63:4e:
                    24:d5:ee:ef:ff:56:5f:af:89:12:60:db:77:55:28:
                    12:15:cb:43:9e:0d:52:48:e2:3f:86:8d:58:0b:82:
                    de:36:27:4f:1a:f6:36:6d:dd:d2:7b:81:f9:4c:47:
                    ce:74:47:a6:14:f2:73:87:57:58:62:9b:1b:e1:1b:
                    3f:6c:98:34:38:48:1d:b4:81:1b:6f:2e:95:fd:5c:
                    c5:9e:c1:65:bd:a0:1e:e1:56:79:eb:81:44:8a:2a:
                    52:fe:dc:89:fb:b2:b1:61:5e:a1:d8:17:cf:38:ea:
                    a2:6f:bd:5f:3c:a8:a5:f1:60:e6:78:10:6a:1a:24:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:75:1C:35:D6:0C:07:5C:9F:A9:B9:6D:1F:62:F7:CF:6A:8C:AC:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/810f7d17-f387-39f6-8eda-a24c9cd1e86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl

            X509v3 Authority Key Identifier:
                keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.208.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b4:66:4d:ad:54:09:94:18:5c:4a:13:9b:7b:6b:2e:20:6e:
         58:bb:d0:ca:72:24:20:8e:0a:ef:9a:19:2e:66:ca:a7:e0:38:
         4f:65:62:ee:e0:cb:12:00:5c:d4:30:98:0f:ad:74:5a:44:3a:
         e2:ba:2b:76:a9:82:d5:44:5b:aa:a8:2c:8e:38:d4:21:57:76:
         59:6a:34:ef:ad:57:96:e1:6a:c7:9c:34:27:c0:da:5d:a8:c8:
         42:1c:c0:69:b1:32:c5:69:ab:f5:00:31:f3:ba:ca:83:d3:e3:
         8e:45:d6:c8:a9:83:63:6f:16:92:0e:79:e2:7f:79:2d:98:8b:
         fb:b5:49:7d:57:3c:a5:95:3a:f9:a0:7a:00:36:5f:31:e9:4b:
         97:dc:07:42:4c:ee:70:f1:38:dd:76:7f:ef:36:1c:a6:95:80:
         74:6e:0d:9e:43:e1:98:99:4a:34:8a:85:08:94:f6:c3:18:7f:
         f2:e1:cb:24:e1:b9:70:86:9f:0e:61:40:9b:72:f2:b9:51:69:
         e7:93:72:67:a0:bc:8b:9b:f1:c2:d2:a0:b3:3d:e3:5b:14:ab:
         64:f1:5b:a5:16:a7:5c:3e:e1:f5:a2:5b:2e:17:48:9d:61:77:
         0e:cf:33:a0:a7:7c:84:42:f0:42:39:b3:8d:ca:99:cd:20:4c:
         2f:fa:49:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUxspoYWh8HvoxWokAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NjdlNWMtMmM4Zi00OTk5LWExMzQtZGM5NDE4Zjg0
NDk2MB4XDTI0MDMxMzEzMDAzMFoXDTI0MDYxMTEzMDAzMFowLzEtMCsGA1UEAxMk
ZDAzMWQyMWUtMGE4MC00ODNlLTgyNDQtZWE2YmIwOWZkZGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbZJf8t7bAcd1UKv7Xw+PieP5fR8Xb1yotiT
Cj+xjOTJX1DWILxEMzuCDF+XBfvoYMsqrf+FhTNDJWyD+HVStUV6JJo4CYykosTy
wmrzzyFnuHjJT3imIIsO1EW9RsImyMfzd1obtLtSdQcJqMlZ7Phb1OjuakrxpRBo
JVjnCX83yuyLY04k1e7v/1Zfr4kSYNt3VSgSFctDng1SSOI/ho1YC4LeNidPGvY2
bd3Se4H5TEfOdEemFPJzh1dYYpsb4Rs/bJg0OEgdtIEbby6V/VzFnsFlvaAe4VZ5
64FEiipS/tyJ+7KxYV6h2BfPOOqib71fPKil8WDmeBBqGiRVWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDF1HDXWDAdcn6m5bR9i989qjKwzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDg2
N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0MThmODQ0OTYvODEwZjdkMTctZjM4Ny0z
OWY2LThlZGEtYTI0YzljZDFlODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA4NjdlNWMtMmM4Zi00OTk5LWEx
MzQtZGM5NDE4Zjg0NDk2LzkwODY3ZTVjLTJjOGYtNDk5OS1hMTM0LWRjOTQxOGY4
NDQ5Ni5jcmwwHwYDVR0jBBgwFoAUf8xLPpcetQD2ekEynFBvsLdhnSwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85MDg2N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0
MThmODQ0OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjNCgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFm0Zk2tVAmUGFxKE5t7ay4gbli70MpyJCCOCu+aGS5myqfgOE9lYu7g
yxIAXNQwmA+tdFpEOuK6K3apgtVEW6qoLI441CFXdllqNO+tV5bhasecNCfA2l2o
yEIcwGmxMsVpq/UAMfO6yoPT445F1sipg2NvFpIOeeJ/eS2Yi/u1SX1XPKWVOvmg
egA2XzHpS5fcB0JM7nDxON12f+82HKaVgHRuDZ5D4ZiZSjSKhQiU9sMYf/LhyyTh
uXCGnw5hQJty8rlRaeeTcmegvIub8cLSoLM941sUq2TxW6UWp1w+4fWiWy4XSJ1h
dw7PM6CnfIRC8EI5s43Kmc0gTC/6Sac=
-----END CERTIFICATE-----
Generated at Thu May 16 01:33:13 2024 by rpki-client on console-fra.rpki-client.org