Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07d6f9ec-97f8-302c-9496-b5c1454138f7.roa
File:                     07d6f9ec-97f8-302c-9496-b5c1454138f7.roa (raw, json)
Hash identifier:          1ngRLqVqRTTr6LAMKlJCvOcaurY0cPjBviHEy8v7yU0=
Subject key identifier:   66:48:4D:56:01:0D:2A:4A:3A:04:4C:8E:F4:6D:72:76:04:B8:58:86
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858456F1DB9F7F0F9C8AF25588270
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07d6f9ec-97f8-302c-9496-b5c1454138f7.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     36183
IP address blocks:        172.226.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:b9:f7:f0:f9:c8:af:25:58:82:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=b87d14f0-6c2d-4ec5-8b9d-78131781ffa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:60:d3:51:44:d7:92:22:1d:56:ad:2f:81:
                    6d:ea:27:cd:44:29:ef:48:d3:93:aa:ac:06:87:b2:
                    e1:3a:0f:3c:93:fc:62:27:d8:76:d1:d4:66:31:a6:
                    78:8e:72:3d:48:e8:87:f0:9f:86:0a:fd:4f:9b:b8:
                    58:1b:40:c1:ec:76:00:da:3e:6b:84:34:6d:fc:a5:
                    0a:f4:db:71:f4:c7:16:63:26:33:59:32:de:88:ee:
                    db:93:a8:0c:59:94:71:86:fe:6b:a8:43:5f:f9:d8:
                    bd:0e:ce:78:bf:1e:88:50:e4:ab:ff:a9:17:24:db:
                    1f:d0:33:65:96:df:80:50:82:a2:d9:67:cc:00:46:
                    18:24:58:0d:31:b0:7d:7d:26:0b:fa:bd:9f:19:c5:
                    f6:2f:10:a3:3c:af:7c:9c:1e:43:e7:aa:de:9f:b2:
                    48:ea:73:ef:8d:d4:e1:d9:f0:aa:ba:7b:ad:e6:73:
                    9d:1c:ea:e0:d7:22:01:d3:36:25:e8:19:27:2d:48:
                    3a:f3:c1:2e:2d:ba:07:83:26:8c:91:e2:6c:64:3c:
                    a0:82:8b:96:06:d8:06:e8:80:8c:ef:e4:1a:80:fc:
                    55:12:ec:35:0a:37:09:eb:84:e8:30:55:19:c6:02:
                    66:d4:a4:60:49:ae:c9:d6:15:52:a6:72:c0:e6:36:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:48:4D:56:01:0D:2A:4A:3A:04:4C:8E:F4:6D:72:76:04:B8:58:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07d6f9ec-97f8-302c-9496-b5c1454138f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:73:db:a7:c9:a2:69:00:dd:79:6a:da:0b:07:aa:27:83:25:
         17:b7:aa:6b:c5:0c:96:f0:db:1e:a3:1a:16:64:19:c7:c1:cf:
         9a:2b:47:35:42:e8:1d:14:68:b8:46:21:6f:5b:49:f2:f3:75:
         ce:7f:ab:c2:25:53:3c:6e:71:be:e6:76:92:d1:47:13:85:99:
         da:ee:84:6d:0e:5e:ea:85:71:c7:a0:fb:f0:28:e1:9d:d6:ad:
         d5:66:e0:e2:f4:3a:67:70:3b:bc:98:b5:a1:85:06:6f:80:8a:
         50:11:07:70:b2:d3:73:7e:f6:d0:dc:17:b6:7f:6c:25:4c:51:
         72:5c:49:92:e5:48:1c:d2:ad:b6:30:54:d5:50:08:32:58:4f:
         03:1c:63:ce:ba:46:f8:48:28:9b:20:4e:c4:f9:48:a1:7f:3a:
         80:43:98:d2:cd:0b:b3:fa:d6:91:9f:0d:3a:76:f7:00:1b:86:
         28:d9:cd:1d:86:9c:44:c7:80:c9:b5:97:62:e7:70:6f:a0:48:
         31:cb:3b:1c:e4:a6:14:d1:ca:33:d0:e7:92:0b:b0:6f:38:5c:
         3b:0b:7a:0c:0c:3e:33:16:0f:4d:1c:b1:9f:eb:55:ad:ae:ba:
         76:9a:3a:ec:e1:a0:a0:e5:b5:80:57:e1:21:ca:47:a7:5d:e6:
         22:71:5d:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVvHbn38PnIryVYgnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk
Yjg3ZDE0ZjAtNmMyZC00ZWM1LThiOWQtNzgxMzE3ODFmZmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH9g01FE15IiHVatL4Ft6ifNRCnvSNOTqqwG
h7LhOg88k/xiJ9h20dRmMaZ4jnI9SOiH8J+GCv1Pm7hYG0DB7HYA2j5rhDRt/KUK
9Ntx9McWYyYzWTLeiO7bk6gMWZRxhv5rqENf+di9Ds54vx6IUOSr/6kXJNsf0DNl
lt+AUIKi2WfMAEYYJFgNMbB9fSYL+r2fGcX2LxCjPK98nB5D56ren7JI6nPvjdTh
2fCqunut5nOdHOrg1yIB0zYl6BknLUg688EuLboHgyaMkeJsZDyggouWBtgG6ICM
7+QagPxVEuw1CjcJ64ToMFUZxgJm1KRgSa7J1hVSpnLA5jZSKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZITVYBDSpKOgRMjvRtcnYEuFiGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDdkNmY5ZWMtOTdmOC0z
MDJjLTk0OTYtYjVjMTQ1NDEzOGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERz26fJomkA3Xlq2gsHqieDJRe3qmvFDJbw2x6jGhZkGcfBz5orRzVC
6B0UaLhGIW9bSfLzdc5/q8IlUzxucb7mdpLRRxOFmdruhG0OXuqFcceg+/Ao4Z3W
rdVm4OL0OmdwO7yYtaGFBm+AilARB3Cy03N+9tDcF7Z/bCVMUXJcSZLlSBzSrbYw
VNVQCDJYTwMcY866RvhIKJsgTsT5SKF/OoBDmNLNC7P61pGfDTp29wAbhijZzR2G
nETHgMm1l2LncG+gSDHLOxzkphTRyjPQ55ILsG84XDsLegwMPjMWD00csZ/rVa2u
unaaOuzhoKDltYBX4SHKR6dd5iJxXWI=
-----END CERTIFICATE-----
Generated at Fri May 17 21:09:12 2024 by rpki-client on console-ams.rpki-client.org