Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
File:                     eff20afa-d256-340d-8b13-7a8f9e404a25.roa (raw, json)
Hash identifier:          15NMMZ30Cp/y1sstbNlrUX6nB/d6wl292loULU4Nig8=
Subject key identifier:   8C:EE:77:EC:38:65:F7:63:A7:33:4A:EB:F0:74:3B:27:18:FA:8D:6D
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285845D39E640953BA4591C2DABD50
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     21559
IP address blocks:        104.238.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:64:09:53:ba:45:91:c2:da:bd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=da5b9192-afd7-495f-8d60-1ea3e3f9044e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:ee:82:0a:03:cd:17:3a:2a:9f:37:f3:e6:
                    bf:15:22:fe:56:0c:97:78:6f:e1:cd:ef:3a:cb:03:
                    75:da:72:30:d4:78:77:b8:01:44:bf:77:c0:79:4a:
                    2b:22:b5:5b:0e:a8:91:ed:48:14:e2:34:db:25:ec:
                    a1:ca:60:2a:b0:04:9f:7f:f6:22:27:63:2e:57:2b:
                    42:91:ee:9f:4d:a0:72:76:ce:d3:1a:e3:92:9a:99:
                    59:de:23:a3:6b:33:9c:cd:1f:a8:2e:f0:7b:56:92:
                    95:aa:aa:5f:c1:c3:c5:5e:37:5d:cb:05:82:03:d9:
                    20:ea:c5:5a:04:a5:5b:3d:4b:6d:8c:28:8e:ad:22:
                    30:e6:5e:5f:06:8a:94:88:e4:5d:0a:92:3a:ac:86:
                    54:6b:23:2b:7b:04:6a:e8:cd:88:92:d2:e8:d0:6d:
                    2f:dd:ab:f8:51:52:4f:71:9b:2c:89:50:fa:77:d4:
                    cf:5e:2b:91:7b:c0:9e:fa:58:08:01:c7:c9:be:3f:
                    0b:41:a0:1b:65:3a:58:42:1f:c8:87:db:73:2e:46:
                    d0:06:5f:25:91:91:20:c7:c0:e2:26:be:31:e3:bd:
                    91:5c:9a:08:1d:26:af:8a:cf:57:c6:d8:d0:8f:0f:
                    6c:56:8a:a5:e9:44:f2:bd:17:f8:67:fc:ae:f7:74:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EE:77:EC:38:65:F7:63:A7:33:4A:EB:F0:74:3B:27:18:FA:8D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/eff20afa-d256-340d-8b13-7a8f9e404a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:27:63:38:8c:88:03:9b:7e:ad:55:d7:6f:ab:7b:3e:ad:55:
         b0:90:6e:18:1a:bd:37:ed:79:b9:07:95:97:76:be:dd:97:40:
         6e:cf:8b:62:ce:51:96:6e:d3:a0:b9:ba:1f:bc:a5:24:ee:04:
         32:d1:34:57:34:5b:08:93:d5:b5:b6:44:88:94:e7:94:9c:bf:
         d1:e4:f5:92:62:a1:26:08:17:23:cd:a0:2b:fe:a0:c1:b5:af:
         f1:33:d6:69:37:25:12:5c:34:80:88:32:7c:ad:27:f4:97:e4:
         f3:5b:4b:42:56:88:f7:ca:f0:95:9f:a3:1c:33:68:28:16:ac:
         04:62:43:70:75:7d:8e:1e:4e:ec:de:3e:e9:9d:97:0f:7d:d2:
         12:f0:db:e6:29:16:a6:17:36:33:76:04:02:a5:1f:20:00:eb:
         01:42:21:8d:5c:5f:7d:a7:47:b8:5f:67:22:27:6a:37:21:16:
         34:45:e4:5c:cf:65:75:53:c6:8c:fd:cb:95:34:fe:a7:5b:a5:
         9a:6c:fb:d1:f0:6f:84:b9:f4:1b:e4:64:e5:bd:3f:0b:f9:0e:
         a6:3e:52:49:df:02:ab:b9:2e:0d:7f:28:60:2e:b0:55:37:3e:
         dc:12:30:6f:d3:44:b0:e9:2c:ec:ce:ba:11:e8:34:91:b8:46:
         bd:93:cc:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXTnmQJU7pFkcLavVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh
YTNjMB4XDTI0MDUxMDEzMDAzNloXDTI0MDgwODEzMDAzNlowLzEtMCsGA1UEAxMk
ZGE1YjkxOTItYWZkNy00OTVmLThkNjAtMWVhM2UzZjkwNDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1TuggoDzRc6Kp838+a/FSL+VgyXeG/hze86
ywN12nIw1Hh3uAFEv3fAeUorIrVbDqiR7UgU4jTbJeyhymAqsASff/YiJ2MuVytC
ke6fTaByds7TGuOSmplZ3iOjazOczR+oLvB7VpKVqqpfwcPFXjddywWCA9kg6sVa
BKVbPUttjCiOrSIw5l5fBoqUiORdCpI6rIZUayMrewRq6M2IktLo0G0v3av4UVJP
cZssiVD6d9TPXiuRe8Ce+lgIAcfJvj8LQaAbZTpYQh/Ih9tzLkbQBl8lkZEgx8Di
Jr4x472RXJoIHSavis9XxtjQjw9sVoql6UTyvRf4Z/yu93SjHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzud+w4ZfdjpzNK6/B0OycY+o1tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx
YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWZmMjBhZmEtZDI1Ni0z
NDBkLThiMTMtN2E4ZjllNDA0YTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh
ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw
YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2
YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO7oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQnYziMiAObfq1V12+rez6tVbCQbhgavTftebkHlZd2vt2XQG7Pi2LO
UZZu06C5uh+8pSTuBDLRNFc0WwiT1bW2RIiU55Scv9Hk9ZJioSYIFyPNoCv+oMG1
r/Ez1mk3JRJcNICIMnytJ/SX5PNbS0JWiPfK8JWfoxwzaCgWrARiQ3B1fY4eTuze
Pumdlw990hLw2+YpFqYXNjN2BAKlHyAA6wFCIY1cX32nR7hfZyInajchFjRF5FzP
ZXVTxoz9y5U0/qdbpZps+9Hwb4S59BvkZOW9Pwv5DqY+UknfAqu5Lg1/KGAusFU3
PtwSMG/TRLDpLOzOuhHoNJG4Rr2TzNc=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:10 2024 by rpki-client on console-fra.rpki-client.org