Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa
File:                     c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa (raw, json)
Hash identifier:          xOLNZsOGeUEV//TVy6JHfyzeYRswqUtpKF2TwsPZwLU=
Subject key identifier:   76:3D:2C:1D:AC:F4:8D:58:61:9A:69:D5:81:54:FD:0F:D2:1B:F3:36
Certificate issuer:       /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
Certificate serial:       010D0C9F43285845BEAE174319EA183A0ED19E40
Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa
Signing time:             Fri 03 May 2024 01:00:24 +0000
ROA not before:           Fri 03 May 2024 01:00:24 +0000
ROA not after:            Thu 01 Aug 2024 01:00:24 +0000
asID:                     11472
IP address blocks:        216.7.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:ae:17:43:19:ea:18:3a:0e:d1:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
        Validity
            Not Before: May  3 01:00:24 2024 GMT
            Not After : Aug  1 01:00:24 2024 GMT
        Subject: CN=8f37a7a7-da06-4850-8491-af78dd97406b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:b6:29:44:f5:4a:c1:01:be:7d:08:3b:6b:
                    4b:22:14:1b:c7:55:04:74:fe:2c:bd:aa:1f:85:7d:
                    0c:f2:91:96:01:37:d0:65:d6:99:f0:a2:91:4a:f8:
                    57:1e:00:e2:30:e2:22:cf:03:31:e1:fc:97:8b:7f:
                    fc:fe:67:b4:11:5c:14:bb:14:33:7a:4b:57:81:ca:
                    f4:71:29:8e:2d:73:50:cb:b7:29:ea:65:ec:62:2e:
                    c1:04:ee:36:60:3c:77:a6:89:8a:91:e9:85:8f:03:
                    93:50:c0:88:1d:bf:42:f3:8e:a1:88:0f:22:9c:d7:
                    16:8c:f2:a1:c8:f1:cc:7e:5f:2e:ce:64:27:f6:33:
                    9c:97:2e:b8:19:83:e7:2c:18:0e:dd:77:02:1c:79:
                    fa:8f:2c:a4:fc:e6:8e:e7:06:cc:d3:60:2d:5e:4b:
                    5b:7e:ca:77:4e:e0:5f:1f:e2:43:85:da:34:d9:32:
                    b2:f9:af:35:56:ca:f0:2f:b8:18:e0:69:34:e6:16:
                    e5:f4:b4:47:a9:ef:a4:31:d6:46:fc:55:12:b9:c7:
                    43:4a:d2:7b:03:a0:3f:61:b5:59:77:70:0a:29:52:
                    a4:33:a3:94:7e:82:20:16:7c:17:fa:b7:0c:51:3b:
                    fb:a2:1a:f3:94:3e:ff:8f:e3:41:f2:33:07:9d:cf:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3D:2C:1D:AC:F4:8D:58:61:9A:69:D5:81:54:FD:0F:D2:1B:F3:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl

            X509v3 Authority Key Identifier:
                keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.7.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:4c:40:10:51:3f:c2:ee:84:0d:d9:c8:88:5b:35:2e:41:
         a8:d1:2e:48:22:97:1e:e3:33:28:5b:b2:74:e6:3f:91:03:76:
         63:a0:c0:1b:3e:8f:c8:c9:3c:1d:16:7e:b2:64:fb:2c:52:26:
         98:cb:3b:ab:f1:08:70:92:8c:a8:a7:9c:7b:0b:55:17:d2:c7:
         cb:7e:3f:10:95:8f:55:35:dd:82:9d:79:9d:d2:32:66:85:c6:
         cf:8c:70:00:50:bf:be:6c:78:3e:d4:3a:a8:d6:58:d1:f4:bd:
         3d:73:9f:28:bd:dc:07:9e:6f:d4:f4:6c:b7:a1:3e:cb:fc:d6:
         88:09:f0:9a:f6:a6:f4:e7:8e:bf:cd:96:1b:91:ca:03:43:eb:
         b0:37:8f:09:78:e5:3c:f0:3e:db:4e:6b:c9:cc:cd:61:53:a2:
         83:6c:74:e9:65:0c:4d:de:34:c5:d3:4f:42:0f:cd:81:f3:52:
         ce:34:c9:1f:cd:e2:e1:e2:7b:9c:f5:ae:59:94:0a:33:8c:86:
         fa:a4:b5:65:eb:6d:bd:25:80:92:85:3c:09:78:b3:a6:6c:e3:
         d4:83:30:b3:72:8b:d0:1b:d0:66:e6:00:62:3c:fb:23:44:6b:
         6f:11:d0:c5:7c:04:a6:3d:c8:49:e6:ac:0e:0f:b1:ab:4a:8d:
         4b:1b:7a:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW+rhdDGeoYOg7RnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE5NGE5ZWQtNjVlMS00ZGYxLTg1YWEtOWEzNWM1NzEy
NTNiMB4XDTI0MDUwMzAxMDAyNFoXDTI0MDgwMTAxMDAyNFowLzEtMCsGA1UEAxMk
OGYzN2E3YTctZGEwNi00ODUwLTg0OTEtYWY3OGRkOTc0MDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07S2KUT1SsEBvn0IO2tLIhQbx1UEdP4svaof
hX0M8pGWATfQZdaZ8KKRSvhXHgDiMOIizwMx4fyXi3/8/me0EVwUuxQzektXgcr0
cSmOLXNQy7cp6mXsYi7BBO42YDx3pomKkemFjwOTUMCIHb9C846hiA8inNcWjPKh
yPHMfl8uzmQn9jOcly64GYPnLBgO3XcCHHn6jyyk/OaO5wbM02AtXktbfsp3TuBf
H+JDhdo02TKy+a81VsrwL7gY4Gk05hbl9LRHqe+kMdZG/FUSucdDStJ7A6A/YbVZ
d3AKKVKkM6OUfoIgFnwX+rcMUTv7ohrzlD7/j+NB8jMHnc8nhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHY9LB2s9I1YYZpp1YFU/Q/SG/M2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0
YTllZC02NWUxLTRkZjEtODVhYS05YTM1YzU3MTI1M2IvYzUxZWQwMTItZjA2ZS0z
M2E2LWE5MzQtYjJlZjdhZDI0NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjE5NGE5ZWQtNjVlMS00ZGYxLTg1
YWEtOWEzNWM1NzEyNTNiL2IxOTRhOWVkLTY1ZTEtNGRmMS04NWFhLTlhMzVjNTcx
MjUzYi5jcmwwHwYDVR0jBBgwFoAUiRTq4jC8zw1lBsAefDSTsaNdzYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0YTllZC02NWUxLTRkZjEtODVhYS05YTM1
YzU3MTI1M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6QTEAQUT/C7oQN2ciIWzUuQajRLkgilx7jMyhbsnTmP5EDdmOgwBs+
j8jJPB0WfrJk+yxSJpjLO6vxCHCSjKinnHsLVRfSx8t+PxCVj1U13YKdeZ3SMmaF
xs+McABQv75seD7UOqjWWNH0vT1znyi93Aeeb9T0bLehPsv81ogJ8Jr2pvTnjr/N
lhuRygND67A3jwl45TzwPttOa8nMzWFTooNsdOllDE3eNMXTT0IPzYHzUs40yR/N
4uHie5z1rlmUCjOMhvqktWXrbb0lgJKFPAl4s6Zs49SDMLNyi9Ab0GbmAGI8+yNE
a28R0MV8BKY9yEnmrA4PsatKjUsbeno=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:09 2024 by rpki-client on console-fra.rpki-client.org