Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0908b6-ab8a-3983-a276-a11a1d256c5e.roa
File:                     ad0908b6-ab8a-3983-a276-a11a1d256c5e.roa (raw, json)
Hash identifier:          aNOKRRu+ntUR2u2O40t5ed0+1VLu+KV48PA5wYHZ2oc=
Subject key identifier:   D9:74:22:74:8A:AA:F0:02:10:9B:D4:CB:CA:0C:9B:3F:4D:A3:A0:5D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454622A0E8F0420E0864E1ED80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0908b6-ab8a-3983-a276-a11a1d256c5e.roa
Signing time:             Wed 20 Mar 2024 20:42:26 +0000
ROA not before:           Wed 20 Mar 2024 20:42:26 +0000
ROA not after:            Tue 18 Jun 2024 20:42:26 +0000
asID:                     15169
IP address blocks:        173.194.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:22:a0:e8:f0:42:0e:08:64:e1:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:42:26 2024 GMT
            Not After : Jun 18 20:42:26 2024 GMT
        Subject: CN=2c6f7a54-6f27-406f-9ed2-0e48ed44ee79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4d:30:47:d5:42:8b:3a:45:c4:b9:ef:63:4d:
                    e8:5f:4b:5f:43:89:3b:db:9f:39:2f:dc:f7:d5:f7:
                    e8:6d:5a:ea:18:04:cd:48:7d:d6:98:2b:7e:a8:19:
                    6f:4a:84:13:6c:15:e4:39:ff:1b:79:3c:de:93:27:
                    48:17:a3:dc:01:72:dc:a2:d8:64:b5:57:6d:d1:ba:
                    c8:8c:52:d6:1b:e8:74:73:f9:57:3e:71:b2:38:e9:
                    93:a3:d2:0a:dc:88:fd:54:d5:5f:91:f4:0f:77:fc:
                    91:e7:ef:5d:96:c3:53:70:e2:29:ea:c4:e2:26:ea:
                    49:46:4e:30:82:9f:85:56:8c:ca:b1:30:7d:4a:a6:
                    85:9e:ad:1c:e5:34:57:fb:e5:3f:50:2a:6a:75:56:
                    90:c3:62:35:75:6b:f3:71:05:a7:71:fe:0c:e5:cb:
                    1d:f2:ad:b4:fb:71:da:ff:fd:29:19:b8:1d:10:c5:
                    8a:a3:3f:44:69:63:69:6c:46:0e:76:51:ee:3b:e8:
                    65:22:be:d4:77:4b:74:f9:07:5c:85:9d:0e:54:67:
                    e5:2b:7c:03:a1:6d:84:00:e9:29:c8:a5:87:d8:a4:
                    fb:55:4c:47:55:c1:55:cf:0d:68:01:a9:bd:0a:77:
                    9b:b0:f8:16:88:de:dd:0f:ff:0e:2d:bc:e3:1d:03:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:74:22:74:8A:AA:F0:02:10:9B:D4:CB:CA:0C:9B:3F:4D:A3:A0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0908b6-ab8a-3983-a276-a11a1d256c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:69:a4:84:87:1a:31:ab:69:29:cf:de:78:80:cb:42:93:d1:
         32:e0:d5:64:8b:d6:b5:8e:d9:27:c4:3c:1d:27:c4:26:ef:84:
         85:3a:fc:65:38:ec:4a:35:32:ba:6b:53:85:09:4d:12:d2:ff:
         7e:20:39:c3:38:00:c2:b7:a7:db:a8:3b:98:6f:0a:6f:31:26:
         11:99:36:c1:cd:b1:24:af:81:1d:fb:33:10:79:a0:dd:7b:df:
         48:97:ff:3d:37:c7:da:1c:c4:dc:a5:19:d8:88:96:ee:60:85:
         23:da:4e:da:84:22:95:17:5e:db:1e:31:ed:d2:aa:3a:4b:43:
         87:c3:ed:2b:2d:d9:85:3f:0f:3e:e0:89:46:f5:5a:e6:e9:84:
         a8:32:56:73:69:35:38:19:d8:16:9c:4f:a6:55:1c:85:6e:fb:
         37:99:2e:53:f0:10:06:42:71:b8:95:b7:d1:57:5d:87:68:37:
         13:70:ef:77:3f:76:86:78:c3:c2:08:79:a8:d0:94:7b:56:7a:
         cb:86:fd:11:38:a4:f9:f0:e6:fe:ae:29:d5:2f:f2:d2:86:ff:
         11:8a:62:cf:a0:8a:fb:13:32:29:2f:d9:be:cf:d3:60:05:7d:
         2a:59:b0:1e:b4:34:ea:fd:8f:2a:ab:c8:6f:bf:91:88:cc:43:
         8d:2a:80:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGIqDo8EIOCGTh7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMyMDIwNDIyNloXDTI0MDYxODIwNDIyNlowLzEtMCsGA1UEAxMk
MmM2ZjdhNTQtNmYyNy00MDZmLTllZDItMGU0OGVkNDRlZTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk0wR9VCizpFxLnvY03oX0tfQ4k72585L9z3
1ffobVrqGATNSH3WmCt+qBlvSoQTbBXkOf8beTzekydIF6PcAXLcothktVdt0brI
jFLWG+h0c/lXPnGyOOmTo9IK3Ij9VNVfkfQPd/yR5+9dlsNTcOIp6sTiJupJRk4w
gp+FVozKsTB9SqaFnq0c5TRX++U/UCpqdVaQw2I1dWvzcQWncf4M5csd8q20+3Ha
//0pGbgdEMWKoz9EaWNpbEYOdlHuO+hlIr7Ud0t0+QdchZ0OVGflK3wDoW2EAOkp
yKWH2KT7VUxHVcFVzw1oAam9CnebsPgWiN7dD/8OLbzjHQNs4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNl0InSKqvACEJvUy8oMmz9No6BdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWQwOTA4YjYtYWI4YS0z
OTgzLWEyNzYtYTExYTFkMjU2YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcImMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtppISHGjGraSnP3niAy0KT0TLg1WSL1rWO2SfEPB0nxCbvhIU6/GU4
7Eo1MrprU4UJTRLS/34gOcM4AMK3p9uoO5hvCm8xJhGZNsHNsSSvgR37MxB5oN17
30iX/z03x9ocxNylGdiIlu5ghSPaTtqEIpUXXtseMe3SqjpLQ4fD7Sst2YU/Dz7g
iUb1WubphKgyVnNpNTgZ2BacT6ZVHIVu+zeZLlPwEAZCcbiVt9FXXYdoNxNw73c/
doZ4w8IIeajQlHtWesuG/RE4pPnw5v6uKdUv8tKG/xGKYs+givsTMikv2b7P02AF
fSpZsB60NOr9jyqryG+/kYjMQ40qgM4=
-----END CERTIFICATE-----
Generated at Fri May 17 22:54:42 2024 by rpki-client on console-fra.rpki-client.org