Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa
File:                     a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa (raw, json)
Hash identifier:          wsbz9exB7YKAVZyhHeLbxBCywSyoBYvAW12Ylg4M8/g=
Subject key identifier:   55:39:F2:E5:E6:14:A8:18:B8:71:A9:E9:04:16:62:52:49:56:A4:E0
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F432858460B7418BA549ADB2DC87DA180
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa
Signing time:             Thu 30 May 2024 13:00:34 +0000
ROA not before:           Thu 30 May 2024 13:00:34 +0000
ROA not after:            Wed 28 Aug 2024 13:00:34 +0000
asID:                     36850
IP address blocks:        152.19.0.0/16 maxlen: 16
                          152.23.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0b:74:18:ba:54:9a:db:2d:c8:7d:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: May 30 13:00:34 2024 GMT
            Not After : Aug 28 13:00:34 2024 GMT
        Subject: CN=5c85f7ac-c514-4581-b68d-80b72d38a264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0e:d6:24:8c:68:a3:dc:d5:f1:bd:c5:7c:ff:
                    d3:e0:2d:97:df:1b:3f:94:e9:4a:bf:c2:7f:06:7f:
                    9d:4f:45:f1:fb:c6:e7:29:e6:f3:30:f3:34:dd:bc:
                    4d:5d:1e:af:ca:7a:67:7e:ae:fc:1a:fb:7b:f9:98:
                    e6:11:72:bb:bb:8b:cc:03:15:42:74:92:10:c6:1a:
                    e7:db:78:38:e2:e2:b1:8b:75:f9:2f:fa:f8:07:55:
                    94:6c:14:67:f8:ab:57:8f:0d:37:77:4f:5a:fe:77:
                    36:2d:65:db:2c:ac:17:98:28:8f:2e:2a:60:34:61:
                    9a:58:15:7c:83:54:24:9c:97:55:50:f0:f8:25:40:
                    d0:a6:0f:da:e4:ed:b4:c6:cd:2d:ad:66:59:2c:2e:
                    bb:44:f6:89:a4:30:38:f6:8e:c0:99:45:d6:57:d6:
                    d9:8f:01:2b:09:ef:50:69:43:b8:02:d5:e0:2c:af:
                    3e:f3:b6:6e:bb:82:3b:7e:d7:37:6d:d0:31:c6:38:
                    e4:0a:72:e0:62:ab:cf:30:36:bf:ad:a1:fe:35:32:
                    4e:b2:73:7f:6c:0c:4c:87:72:7d:3d:0e:d2:40:2a:
                    12:92:ce:97:03:9d:11:78:67:20:41:5d:93:7f:a4:
                    71:b9:52:40:12:cf:53:3f:cd:09:2c:45:d4:06:ce:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:39:F2:E5:E6:14:A8:18:B8:71:A9:E9:04:16:62:52:49:56:A4:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/a58e14d5-547f-3d71-aeb8-fd4b06e87618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.19.0.0/16
                  152.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:92:cd:b5:f5:45:e7:f9:e9:8c:cc:b3:21:bd:44:31:9e:6d:
         b3:f4:1e:a7:56:0b:6b:cd:e1:f1:54:ae:a1:10:c8:d9:f7:8f:
         30:27:1a:80:06:d9:6c:6d:e3:4f:37:18:54:8f:a5:77:3b:99:
         b1:28:3a:a3:2c:01:5c:55:d0:97:49:84:82:10:d8:b4:dc:ed:
         28:ec:ad:f1:42:cf:50:7e:15:e0:21:bb:32:89:ec:09:3e:61:
         97:a9:94:5e:1c:c8:47:f9:3f:f1:ce:a8:62:d4:6c:00:27:98:
         61:65:d6:00:da:69:5c:a9:37:9d:89:06:a8:a4:39:a0:11:82:
         f1:df:87:8c:2f:e9:48:df:3c:0d:b7:d8:10:12:89:a0:12:c5:
         fd:c8:04:c8:54:2d:be:42:a8:c2:c0:37:44:a1:6a:88:dd:5a:
         07:b1:ff:a9:45:65:87:cb:91:ca:32:6f:a6:00:c9:ed:24:fb:
         68:cc:c5:92:82:3f:a2:5c:64:aa:07:86:22:d3:f0:61:f0:68:
         6b:39:12:7b:51:ba:fd:60:1a:d3:7c:34:01:b3:a4:22:76:cd:
         de:52:7a:32:d4:1d:e5:50:9d:45:be:4c:c9:3c:81:ce:c0:b9:
         8d:8d:29:4c:14:4d:a3:5f:91:57:d4:45:65:9e:b6:c1:4e:e6:
         8d:e4:8f:e0
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEYLdBi6VJrbLch9oYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVkOWZjN2EtZjM2Ni00ODVmLWEyYzgtNThjNGI0NzAz
NjFhMB4XDTI0MDUzMDEzMDAzNFoXDTI0MDgyODEzMDAzNFowLzEtMCsGA1UEAxMk
NWM4NWY3YWMtYzUxNC00NTgxLWI2OGQtODBiNzJkMzhhMjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w7WJIxoo9zV8b3FfP/T4C2X3xs/lOlKv8J/
Bn+dT0Xx+8bnKebzMPM03bxNXR6vynpnfq78Gvt7+ZjmEXK7u4vMAxVCdJIQxhrn
23g44uKxi3X5L/r4B1WUbBRn+KtXjw03d09a/nc2LWXbLKwXmCiPLipgNGGaWBV8
g1QknJdVUPD4JUDQpg/a5O20xs0trWZZLC67RPaJpDA49o7AmUXWV9bZjwErCe9Q
aUO4AtXgLK8+87Zuu4I7ftc3bdAxxjjkCnLgYqvPMDa/raH+NTJOsnN/bAxMh3J9
PQ7SQCoSks6XA50ReGcgQV2Tf6RxuVJAEs9TP80JLEXUBs6R6wIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFFU58uXmFKgYuHGp6QQWYlJJVqTgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5
ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0YjQ3MDM2MWEvYTU4ZTE0ZDUtNTQ3Zi0z
ZDcxLWFlYjgtZmQ0YjA2ZTg3NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkOWZjN2EtZjM2Ni00ODVmLWEy
YzgtNThjNGI0NzAzNjFhLzQ1ZDlmYzdhLWYzNjYtNDg1Zi1hMmM4LTU4YzRiNDcw
MzYxYS5jcmwwHwYDVR0jBBgwFoAUlhKw563ZcfLlH1BW53pwJQ2Yt7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0
YjQ3MDM2MWEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAmBMDAwCY
FzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQAQks219UXn+emMzLMhvUQxnm2z9B6nVgtrzeHxVK6hEMjZ948w
JxqABtlsbeNPNxhUj6V3O5mxKDqjLAFcVdCXSYSCENi03O0o7K3xQs9QfhXgIbsy
iewJPmGXqZReHMhH+T/xzqhi1GwAJ5hhZdYA2mlcqTediQaopDmgEYLx34eML+lI
3zwNt9gQEomgEsX9yATIVC2+QqjCwDdEoWqI3VoHsf+pRWWHy5HKMm+mAMntJPto
zMWSgj+iXGSqB4Yi0/Bh8GhrORJ7Ubr9YBrTfDQBs6Qids3eUnoy1B3lUJ1FvkzJ
PIHOwLmNjSlMFE2jX5FX1EVlnrbBTuaN5I/g
-----END CERTIFICATE-----
Generated at Wed Jun 26 03:06:35 2024 by rpki-client on console-fra.rpki-client.org