Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/48126347-d776-326f-bd3e-ec4ad0962c3c.roa
File:                     48126347-d776-326f-bd3e-ec4ad0962c3c.roa (raw, json)
Hash identifier:          qD92Ef/louHWjKOcNXFqeB7UnI/9d2Il1tAj5OX5IIg=
Subject key identifier:   E8:46:58:C5:F4:8F:4B:0F:F1:63:BC:08:2A:33:DD:6D:D2:0E:86:B2
Certificate issuer:       /CN=adf336cd-e30b-4fd4-a132-8eede3026803
Certificate serial:       010D0C9F432858451FAAE8150BD1340E139E1400
Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/48126347-d776-326f-bd3e-ec4ad0962c3c.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     11094
IP address blocks:        192.26.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:aa:e8:15:0b:d1:34:0e:13:9e:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=35e4817c-a2ad-44ca-bdb5-8a883dbad655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:75:7a:7b:d6:d2:48:16:ef:a5:68:67:7f:b0:
                    8f:f6:ec:dd:a9:e7:fa:3b:bc:89:73:62:64:11:bc:
                    a2:67:d5:2e:9f:59:31:97:c7:9d:5b:85:1f:5e:40:
                    c1:ea:27:72:ce:f3:df:82:6c:66:e9:c5:93:4b:91:
                    64:f8:f4:c5:22:88:b1:ca:7d:8b:0c:43:12:44:d2:
                    b3:95:cb:ee:a8:61:92:6a:91:35:fb:14:28:dc:6c:
                    0a:39:3b:94:c6:dd:fe:c9:4c:38:08:8d:92:2d:44:
                    56:0e:6b:2e:93:f5:b3:27:7f:20:84:38:3e:da:f0:
                    f6:44:68:90:7d:2c:c8:54:ff:76:ab:55:ec:32:1a:
                    1d:1d:8e:71:28:ab:4e:c1:82:d7:bd:95:ed:a8:ce:
                    ff:ed:e4:a7:f6:07:cb:9b:ac:fd:0a:6e:05:e6:c9:
                    92:10:16:54:51:cd:3b:a7:85:78:5d:06:06:fe:44:
                    7e:98:f2:39:31:ee:5a:6e:8e:73:a7:0d:2f:14:9d:
                    22:96:b4:53:d9:c9:6c:b1:42:c4:91:25:e6:8c:dd:
                    67:7e:73:6a:b4:2d:2f:12:9b:d4:63:8d:1b:a7:50:
                    17:0f:87:f4:f1:51:17:6f:cf:c0:8d:a0:e6:e8:82:
                    d4:91:d9:9a:62:3b:e1:29:36:2d:21:0e:5e:1c:d9:
                    9e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:58:C5:F4:8F:4B:0F:F1:63:BC:08:2A:33:DD:6D:D2:0E:86:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/48126347-d776-326f-bd3e-ec4ad0962c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl

            X509v3 Authority Key Identifier:
                keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:29:c4:31:87:cf:fb:af:35:c1:1e:30:1e:4b:49:37:34:d6:
         0f:a4:b2:6b:84:16:7b:d5:be:dc:a4:4d:b6:08:c8:0a:d1:df:
         eb:ce:8b:83:4f:fb:9c:c3:60:81:76:36:5d:d4:c4:a1:28:ef:
         ae:96:b6:d2:7b:b4:51:76:ed:2b:c0:01:5b:74:8f:49:fd:88:
         c6:f1:e5:aa:4c:74:66:fc:c3:52:85:83:e5:70:92:71:a6:27:
         83:80:87:84:5a:12:2e:53:35:c1:f9:5a:28:2f:ef:07:54:16:
         7f:77:a0:95:a4:1f:30:dd:fe:f6:8d:30:4f:7f:4e:e5:ad:7a:
         79:f7:a6:63:7f:82:ca:c5:fb:a4:cc:06:c0:b9:13:71:98:e7:
         24:3a:05:f6:cd:b5:75:41:b3:e4:88:b1:7d:18:a3:58:33:9c:
         2d:b7:5a:04:b4:13:31:9b:87:ff:1d:e9:81:d5:03:d6:8e:b5:
         98:e3:2c:24:4b:bd:66:e1:88:c6:af:08:b6:63:c7:ec:bc:73:
         a7:ce:a4:ca:f6:4f:80:19:96:22:cf:8e:04:df:11:67:68:59:
         de:1d:87:46:f2:f3:5f:02:95:1b:9f:9e:e0:e2:a7:07:46:a2:
         22:e1:34:79:13:80:b3:21:67:eb:a8:ae:d7:f6:ce:bd:cd:e4:
         38:42:64:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqugVC9E0DhOeFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRmMzM2Y2QtZTMwYi00ZmQ0LWExMzItOGVlZGUzMDI2
ODAzMB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MzVlNDgxN2MtYTJhZC00NGNhLWJkYjUtOGE4ODNkYmFkNjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXV6e9bSSBbvpWhnf7CP9uzdqef6O7yJc2Jk
EbyiZ9Uun1kxl8edW4UfXkDB6idyzvPfgmxm6cWTS5Fk+PTFIoixyn2LDEMSRNKz
lcvuqGGSapE1+xQo3GwKOTuUxt3+yUw4CI2SLURWDmsuk/WzJ38ghDg+2vD2RGiQ
fSzIVP92q1XsMhodHY5xKKtOwYLXvZXtqM7/7eSn9gfLm6z9Cm4F5smSEBZUUc07
p4V4XQYG/kR+mPI5Me5abo5zpw0vFJ0ilrRT2clssULEkSXmjN1nfnNqtC0vEpvU
Y40bp1AXD4f08VEXb8/AjaDm6ILUkdmaYjvhKTYtIQ5eHNmeNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOhGWMX0j0sP8WO8CCoz3W3SDoayMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGYz
MzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVkZTMwMjY4MDMvNDgxMjYzNDctZDc3Ni0z
MjZmLWJkM2UtZWM0YWQwOTYyYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRmMzM2Y2QtZTMwYi00ZmQ0LWEx
MzItOGVlZGUzMDI2ODAzL2FkZjMzNmNkLWUzMGItNGZkNC1hMTMyLThlZWRlMzAy
NjgwMy5jcmwwHwYDVR0jBBgwFoAUQxPH+lFmkdv8n/tv5ccXECFKVo0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hZGYzMzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVk
ZTMwMjY4MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBqUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8pxDGHz/uvNcEeMB5LSTc01g+ksmuEFnvVvtykTbYIyArR3+vOi4NP
+5zDYIF2Nl3UxKEo766WttJ7tFF27SvAAVt0j0n9iMbx5apMdGb8w1KFg+VwknGm
J4OAh4RaEi5TNcH5Wigv7wdUFn93oJWkHzDd/vaNME9/TuWtenn3pmN/gsrF+6TM
BsC5E3GY5yQ6BfbNtXVBs+SIsX0Yo1gznC23WgS0EzGbh/8d6YHVA9aOtZjjLCRL
vWbhiMavCLZjx+y8c6fOpMr2T4AZliLPjgTfEWdoWd4dh0by818ClRufnuDipwdG
oiLhNHkTgLMhZ+uortf2zr3N5DhCZB4=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:08 2024 by rpki-client on console-fra.rpki-client.org