Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa
File:                     32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa (raw, json)
Hash identifier:          UBdXOJe5Aunv+kRR0QKITAdwo6wm5SRTw1OgsVTd4SM=
Subject key identifier:   6C:7A:48:A8:74:07:B9:BD:15:C3:82:40:CA:46:E2:B5:39:9A:68:58
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845612849258CE46B2CE694BAC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     36183
IP address blocks:        172.225.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:49:25:8c:e4:6b:2c:e6:94:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=23fd28c0-830f-4204-b382-e7b519e08c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:f2:a6:56:14:ad:27:f2:f6:38:a5:e1:2a:
                    2b:cc:50:ed:5f:61:fd:ae:0a:88:01:28:f7:3f:8c:
                    94:f4:c2:34:28:fc:3a:d9:e0:76:a5:8c:cb:cf:2a:
                    ea:23:01:af:ff:24:44:02:de:61:60:79:2f:4b:4d:
                    58:ad:1f:f0:e0:36:0c:61:c2:27:29:60:41:c4:13:
                    fb:a6:0a:43:6e:93:df:52:fe:db:80:94:5e:21:22:
                    46:1f:98:84:cf:99:21:7f:db:ae:3c:df:07:84:40:
                    28:e0:f5:f5:5d:70:78:d2:70:de:8f:25:07:52:6a:
                    07:6f:32:13:54:e7:24:6c:61:27:8c:d0:c2:b9:95:
                    ed:79:54:d4:a3:ca:2e:4b:3a:97:ab:b2:3e:2e:ac:
                    d8:25:b0:63:00:0c:9c:10:86:fc:ff:f0:0c:3e:03:
                    7b:2b:f3:f4:1d:79:97:e7:bb:98:21:28:7a:53:96:
                    a2:9c:8e:05:e4:ae:44:d3:1d:f5:e3:c1:40:6c:a7:
                    5b:9b:f6:1c:e1:cc:e1:ea:09:dc:d7:0f:0b:2d:bf:
                    00:a0:c6:fc:b9:ee:f1:86:f5:b8:20:8f:b3:57:8c:
                    da:af:d7:11:5a:79:14:a7:b2:40:f0:57:91:1c:59:
                    de:aa:90:8e:76:b1:6a:77:8e:45:31:99:c7:ce:73:
                    3b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7A:48:A8:74:07:B9:BD:15:C3:82:40:CA:46:E2:B5:39:9A:68:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:38:97:10:10:43:67:87:86:5b:87:46:6a:54:e0:cc:26:f9:
         f6:af:01:ce:95:25:e7:8d:c6:6d:2e:92:57:16:c6:6b:8e:7d:
         34:aa:01:68:f1:31:e4:51:c5:51:a5:7c:c3:cd:b2:0a:ac:78:
         49:21:52:7c:37:fb:69:22:0f:0a:3f:6c:da:d5:d3:e5:36:0b:
         20:03:c0:26:e0:ea:47:59:a6:ff:83:bb:53:93:ba:5a:54:06:
         56:60:37:07:82:da:48:be:53:6e:25:31:c5:30:15:58:25:c3:
         d9:80:d3:5e:b2:f6:25:04:66:0d:9d:54:e4:39:a8:d1:25:2c:
         4f:cd:03:eb:dd:7f:e1:ee:50:6c:4e:31:4f:f7:15:dd:e6:ec:
         59:98:55:5a:d0:7d:94:2f:9b:c6:a1:9f:01:8a:90:aa:c0:e8:
         26:6c:8d:bb:42:0d:f3:ad:7c:fe:68:be:d5:72:6f:af:ff:88:
         ef:97:e3:9a:1a:24:e9:d0:64:bb:3b:55:d6:db:fb:a1:f7:40:
         ae:31:e4:ce:c9:fe:3e:bb:43:d8:33:70:e9:ef:0e:42:77:eb:
         25:3c:22:cb:54:44:b0:cb:27:73:6d:8e:fe:c5:63:43:7b:11:
         87:07:33:ea:95:8b:f7:9c:6d:6a:df:68:eb:7a:03:eb:b6:9a:
         48:fa:69:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKEkljORrLOaUusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
MjNmZDI4YzAtODMwZi00MjA0LWIzODItZTdiNTE5ZTA4YzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5TyplYUrSfy9jil4SorzFDtX2H9rgqIASj3
P4yU9MI0KPw62eB2pYzLzyrqIwGv/yREAt5hYHkvS01YrR/w4DYMYcInKWBBxBP7
pgpDbpPfUv7bgJReISJGH5iEz5khf9uuPN8HhEAo4PX1XXB40nDejyUHUmoHbzIT
VOckbGEnjNDCuZXteVTUo8ouSzqXq7I+LqzYJbBjAAycEIb8//AMPgN7K/P0HXmX
57uYISh6U5ainI4F5K5E0x3148FAbKdbm/Yc4czh6gnc1w8LLb8AoMb8ue7xhvW4
II+zV4zar9cRWnkUp7JA8FeRHFneqpCOdrFqd45FMZnHznM7VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGx6SKh0B7m9FcOCQMpG4rU5mmhYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJmZWYyNmMtOWRjMS0z
MTY0LWI4ZTMtNzRiOGM0M2ViMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQ4lxAQQ2eHhluHRmpU4Mwm+favAc6VJeeNxm0uklcWxmuOfTSqAWjx
MeRRxVGlfMPNsgqseEkhUnw3+2kiDwo/bNrV0+U2CyADwCbg6kdZpv+Du1OTulpU
BlZgNweC2ki+U24lMcUwFVglw9mA016y9iUEZg2dVOQ5qNElLE/NA+vdf+HuUGxO
MU/3Fd3m7FmYVVrQfZQvm8ahnwGKkKrA6CZsjbtCDfOtfP5ovtVyb6//iO+X45oa
JOnQZLs7Vdbb+6H3QK4x5M7J/j67Q9gzcOnvDkJ36yU8IstURLDLJ3Ntjv7FY0N7
EYcHM+qVi/ecbWrfaOt6A+u2mkj6aUc=
-----END CERTIFICATE-----
Generated at Fri May 17 20:05:21 2024 by rpki-client on console-ams.rpki-client.org