Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa
File:                     eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa (raw, json)
Hash identifier:          s8/IjmdIa8lD4KByoPSGJ5A4OAp1VqvaqFDYBo+n3fI=
Subject key identifier:   C6:7C:E8:B6:1E:C5:1B:4E:0B:25:85:C6:14:BF:98:51:9F:B5:CB:BC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584546241C59DA87A47A40169900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa
Signing time:             Wed 20 Mar 2024 20:45:25 +0000
ROA not before:           Wed 20 Mar 2024 20:45:25 +0000
ROA not after:            Tue 18 Jun 2024 20:45:25 +0000
asID:                     15169
IP address blocks:        172.253.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:24:1c:59:da:87:a4:7a:40:16:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:45:25 2024 GMT
            Not After : Jun 18 20:45:25 2024 GMT
        Subject: CN=de49b85a-754f-44c5-81e3-e24bda50b888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:21:9e:35:96:39:3e:dc:c8:a9:02:68:d6:4f:
                    0e:15:bc:2c:70:14:93:79:ba:18:58:e5:8f:20:a6:
                    ab:59:6c:e9:44:dd:39:38:0c:60:9c:9f:d8:52:1a:
                    7f:8d:97:8b:54:3e:1f:98:62:18:5b:ab:78:b4:9e:
                    48:cf:21:78:4d:30:f6:7b:34:ff:bf:d5:2a:dc:3d:
                    9c:32:bf:e8:ce:7e:92:3a:ec:d4:a4:9c:95:02:14:
                    21:f3:58:be:4a:aa:a3:7a:1c:5e:fe:50:c1:b7:5f:
                    5c:5f:e2:62:78:51:a2:7b:78:41:52:a6:38:99:ea:
                    6b:03:3e:12:c3:d8:b8:b0:dd:bc:39:e5:24:84:73:
                    54:e5:c2:02:03:61:6c:c9:e0:e8:b7:38:c6:d2:d1:
                    7b:67:1f:6b:0f:3f:d9:95:b0:0e:83:bc:b1:bd:97:
                    2f:97:e5:6e:b7:69:8d:f4:b0:12:05:b2:c0:62:1d:
                    a6:68:1c:fd:ea:7d:1e:a8:b2:0c:97:5c:36:31:bd:
                    04:27:5f:c4:f3:96:3b:27:2f:32:fe:ee:c8:6a:85:
                    7d:a7:a1:82:43:37:74:a1:fc:7a:df:48:e4:4d:6b:
                    52:95:5e:a0:d6:d5:94:e8:95:fa:93:71:43:3d:8f:
                    a3:1d:06:1a:96:14:32:85:c2:08:4e:1b:16:08:6f:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7C:E8:B6:1E:C5:1B:4E:0B:25:85:C6:14:BF:98:51:9F:B5:CB:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb9b027c-19ef-310b-b4d5-01a335f49bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.253.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:dc:4b:da:fb:6a:0c:49:ea:85:5e:8f:23:66:74:bf:34:6b:
         a8:43:8d:ab:3f:a6:90:02:bd:b0:d3:4c:ec:40:c7:45:01:5b:
         81:36:14:e4:90:9d:1e:8e:a4:73:a9:7b:c9:ad:d1:16:27:b1:
         e6:92:21:44:35:63:df:20:c1:fb:59:2e:7c:ed:43:c2:ba:8c:
         b7:5c:50:62:a5:d9:ac:75:3d:96:d0:1c:bf:72:be:c2:b2:b3:
         86:f1:6c:26:73:7d:45:3d:89:bc:57:ee:c7:44:b2:ac:b7:23:
         5a:bf:46:34:a4:72:c6:e1:d1:3c:5c:96:e0:7c:b0:8d:bb:db:
         bf:f7:49:ac:ee:43:5d:12:c5:68:01:6f:e5:ac:5b:a2:3e:24:
         05:b8:34:e1:35:3d:29:74:d4:34:94:18:48:0c:30:d4:1c:17:
         44:ac:11:ae:c2:8e:db:c9:1d:83:93:53:79:8d:ab:37:ce:ef:
         69:ef:20:1f:e4:b0:da:94:d7:a7:33:ee:95:23:c6:ad:7a:30:
         12:b6:14:19:7b:1b:0b:6a:1d:81:8e:84:78:60:89:cb:42:54:
         87:92:ef:20:4a:02:9c:14:35:9d:a4:9f:cd:a8:4f:ba:11:7a:
         b3:dc:99:3e:fc:a8:7c:50:ba:92:b9:fa:83:aa:96:18:93:04:
         97:b1:56:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGJBxZ2oekekAWmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMyMDIwNDUyNVoXDTI0MDYxODIwNDUyNVowLzEtMCsGA1UEAxMk
ZGU0OWI4NWEtNzU0Zi00NGM1LTgxZTMtZTI0YmRhNTBiODg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSGeNZY5PtzIqQJo1k8OFbwscBSTeboYWOWP
IKarWWzpRN05OAxgnJ/YUhp/jZeLVD4fmGIYW6t4tJ5IzyF4TTD2ezT/v9Uq3D2c
Mr/ozn6SOuzUpJyVAhQh81i+Sqqjehxe/lDBt19cX+JieFGie3hBUqY4meprAz4S
w9i4sN28OeUkhHNU5cICA2FsyeDotzjG0tF7Zx9rDz/ZlbAOg7yxvZcvl+Vut2mN
9LASBbLAYh2maBz96n0eqLIMl1w2Mb0EJ1/E85Y7Jy8y/u7IaoV9p6GCQzd0ofx6
30jkTWtSlV6g1tWU6JX6k3FDPY+jHQYalhQyhcIIThsWCG+LwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZ86LYexRtOCyWFxhS/mFGftcu8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWI5YjAyN2MtMTllZi0z
MTBiLWI0ZDUtMDFhMzM1ZjQ5YmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP1wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbcS9r7agxJ6oVejyNmdL80a6hDjas/ppACvbDTTOxAx0UBW4E2FOSQ
nR6OpHOpe8mt0RYnseaSIUQ1Y98gwftZLnztQ8K6jLdcUGKl2ax1PZbQHL9yvsKy
s4bxbCZzfUU9ibxX7sdEsqy3I1q/RjSkcsbh0TxcluB8sI2727/3SazuQ10SxWgB
b+WsW6I+JAW4NOE1PSl01DSUGEgMMNQcF0SsEa7CjtvJHYOTU3mNqzfO72nvIB/k
sNqU16cz7pUjxq16MBK2FBl7GwtqHYGOhHhgictCVIeS7yBKApwUNZ2kn82oT7oR
erPcmT78qHxQupK5+oOqlhiTBJexVu8=
-----END CERTIFICATE-----
Generated at Fri May 17 15:36:53 2024 by rpki-client on console-ams.rpki-client.org