Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
File:                     d784b0e5-c75f-36a1-b21e-eade3788cd04.roa (raw, json)
Hash identifier:          2/Hpu5mrNWah+G+5xdSCiZ6Nm01EIUhL8pLZEDuMJSI=
Subject key identifier:   A3:AC:13:03:CF:AA:BF:44:91:0D:5F:5E:D8:A3:76:E5:BD:70:DB:AB
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F43285845AC8A17F05ECBB1E127225DC0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     397373
IP address blocks:        192.158.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:8a:17:f0:5e:cb:b1:e1:27:22:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=8f880d4f-7cd2-4fe9-b128-8399f082d9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:59:44:1c:95:84:87:f5:73:ef:c3:8a:3a:
                    1d:58:af:1f:84:ab:69:5c:51:bf:8a:72:5e:4a:b7:
                    76:19:ee:3d:8a:82:fc:a5:37:75:7d:28:4d:ad:43:
                    d8:53:49:58:cb:42:6f:a7:38:7a:e1:ca:71:d3:00:
                    a8:a5:7c:ca:d5:ab:79:f0:4d:da:c5:38:66:f5:ef:
                    14:61:18:0f:24:44:eb:95:9f:56:1c:a0:a6:85:6e:
                    9a:28:25:d3:82:17:f5:1e:04:1e:d8:28:71:5f:dc:
                    1a:cd:5e:b0:20:c1:4e:f4:5e:1e:c9:1f:b2:dc:b1:
                    78:1a:7b:10:19:a7:12:90:8e:b4:0c:38:25:a6:cf:
                    3c:0b:b2:49:b3:31:2b:20:19:5c:98:1c:6a:b0:ba:
                    ff:e7:c2:31:37:70:5f:8a:c3:da:33:89:d3:a7:c4:
                    18:bc:46:a8:db:3f:35:b0:68:c6:8b:a8:42:bf:3e:
                    6f:95:18:df:28:47:1b:69:01:f9:78:e6:67:9d:7a:
                    f4:b5:c9:a9:f3:59:fc:5e:55:dc:b5:ef:34:96:b3:
                    71:cb:65:35:2d:ac:a4:b2:25:a6:b6:f4:34:30:b0:
                    80:af:37:95:9a:ca:57:89:a6:09:43:f3:8d:cc:61:
                    da:3e:d9:b3:66:da:5c:2f:8d:a7:cf:bf:57:68:69:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AC:13:03:CF:AA:BF:44:91:0D:5F:5E:D8:A3:76:E5:BD:70:DB:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d784b0e5-c75f-36a1-b21e-eade3788cd04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e0:8f:86:d8:33:8c:4c:48:52:f7:fc:6f:eb:53:9d:d9:6c:
         67:e4:d1:59:e3:0e:e8:79:cf:c0:67:41:9b:a0:d7:4b:32:cb:
         c8:5a:fd:88:46:a6:5a:4f:82:06:8d:82:d4:64:86:74:93:76:
         6e:3f:8d:00:67:41:a6:f2:a0:6d:6a:9b:04:05:21:53:08:ca:
         ff:97:a4:9b:82:e9:5e:b2:15:91:8d:6e:bb:fb:d6:44:84:2c:
         eb:d3:12:06:21:b7:83:df:fd:84:c3:ba:45:43:0b:59:a4:31:
         1e:37:eb:23:52:6d:73:6a:a1:43:d9:36:de:a0:47:d6:ae:bc:
         f8:46:5f:2a:b9:63:b0:55:ff:8b:8f:5c:62:fb:07:e4:2b:56:
         6e:a9:99:4a:65:b4:60:da:92:75:fa:e5:40:30:a7:43:92:5b:
         f9:38:8d:f6:23:ad:55:2e:d3:2e:92:f4:67:d6:ab:7a:6f:b0:
         d0:ae:00:7d:5c:2a:b3:6f:3e:07:f4:ba:95:8b:90:00:8c:b8:
         42:9a:97:11:cd:77:ab:fe:61:8c:ec:62:62:3e:4c:14:c1:99:
         8e:d6:70:c7:8a:d0:36:02:e3:a9:48:4a:45:a3:6e:a4:0f:0c:
         2f:66:32:45:93:59:fe:d2:ec:02:55:68:54:3c:a8:7b:a6:86:
         f7:eb:66:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsihfwXsux4SciXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx
ZWViMB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
OGY4ODBkNGYtN2NkMi00ZmU5LWIxMjgtODM5OWYwODJkOWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPpZRByVhIf1c+/DijodWK8fhKtpXFG/inJe
Srd2Ge49ioL8pTd1fShNrUPYU0lYy0Jvpzh64cpx0wCopXzK1at58E3axThm9e8U
YRgPJETrlZ9WHKCmhW6aKCXTghf1HgQe2ChxX9wazV6wIMFO9F4eyR+y3LF4GnsQ
GacSkI60DDglps88C7JJszErIBlcmBxqsLr/58IxN3BfisPaM4nTp8QYvEao2z81
sGjGi6hCvz5vlRjfKEcbaQH5eOZnnXr0tcmp81n8XlXcte80lrNxy2U1LayksiWm
tvQ0MLCArzeVmspXiaYJQ/ONzGHaPtmzZtpcL42nz79XaGnzrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOsEwPPqr9EkQ1fXtijduW9cNurMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj
MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvZDc4NGIwZTUtYzc1Zi0z
NmExLWIyMWUtZWFkZTM3ODhjZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5
YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx
MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl
NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJ7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKvgj4bYM4xMSFL3/G/rU53ZbGfk0VnjDuh5z8BnQZug10syy8ha/YhG
plpPggaNgtRkhnSTdm4/jQBnQabyoG1qmwQFIVMIyv+XpJuC6V6yFZGNbrv71kSE
LOvTEgYht4Pf/YTDukVDC1mkMR436yNSbXNqoUPZNt6gR9auvPhGXyq5Y7BV/4uP
XGL7B+QrVm6pmUpltGDaknX65UAwp0OSW/k4jfYjrVUu0y6S9GfWq3pvsNCuAH1c
KrNvPgf0upWLkACMuEKalxHNd6v+YYzsYmI+TBTBmY7WcMeK0DYC46lISkWjbqQP
DC9mMkWTWf7S7AJVaFQ8qHumhvfrZuk=
-----END CERTIFICATE-----
Generated at Thu May 2 22:30:50 2024 by rpki-client on console-ams.rpki-client.org