Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa
File:                     ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa (raw, json)
Hash identifier:          rVKUBSVdd1fk4qaTXKQYjxvB/j9gFfyB1uhcwTqif7g=
Subject key identifier:   47:7C:25:A2:C3:57:84:6E:2E:B0:C5:41:80:DB:F0:6D:12:23:A1:7B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454629271542B11ABA4B57F000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa
Signing time:             Wed 20 Mar 2024 20:55:35 +0000
ROA not before:           Wed 20 Mar 2024 20:55:35 +0000
ROA not after:            Tue 18 Jun 2024 20:55:35 +0000
asID:                     15169
IP address blocks:        216.58.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:29:27:15:42:b1:1a:ba:4b:57:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:55:35 2024 GMT
            Not After : Jun 18 20:55:35 2024 GMT
        Subject: CN=e5dd4074-34f8-4af0-b4b0-9b8a04edc1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:04:b1:96:01:11:17:e8:87:fc:26:49:90:
                    5b:fe:73:9e:9a:2d:4d:8d:2f:b1:59:14:7f:d4:d2:
                    81:eb:bc:dc:fc:8b:65:56:c2:0f:df:7c:6b:99:3a:
                    51:6a:5a:37:95:ba:da:92:ad:b8:10:21:1d:82:45:
                    58:c4:3c:46:7a:7a:26:91:00:dc:ff:b6:d3:61:bf:
                    39:9c:de:05:e5:b7:0d:99:ec:31:ba:26:a0:a0:08:
                    78:a6:86:9c:21:87:1d:4a:aa:65:de:ea:2a:b6:ee:
                    9d:f5:b8:27:48:37:13:4e:8e:af:4b:a0:a5:8a:2f:
                    9c:73:79:5c:23:3d:5a:f7:05:88:2e:ad:b6:a1:71:
                    a6:e0:45:f5:85:43:3b:94:3b:f1:f7:ad:a9:c8:05:
                    af:92:53:74:7e:49:ba:92:67:6f:e0:d6:7f:58:3b:
                    bf:3a:90:29:14:0c:52:4b:55:ba:3c:3e:b6:15:ea:
                    90:fc:c1:d5:ef:66:f4:73:47:30:30:34:a8:d3:d8:
                    61:ba:c7:d7:ac:c2:30:4b:08:ed:a8:a9:66:26:6b:
                    dd:a6:43:e6:d2:95:05:4d:8b:95:e4:2e:a6:df:49:
                    a7:7f:97:89:4d:22:af:a5:41:f7:80:54:4b:13:05:
                    19:2e:e4:d1:33:c5:ec:ee:6d:94:f2:dd:71:0e:05:
                    98:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7C:25:A2:C3:57:84:6E:2E:B0:C5:41:80:DB:F0:6D:12:23:A1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9ca7f9-205a-3466-bc98-ca4e44dd9077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:a3:cc:f9:5e:74:39:1a:9f:a3:10:a9:b2:8c:50:c5:e4:0b:
         93:ff:ca:8a:01:e5:dd:e3:14:a3:47:8d:0b:ba:f0:4b:9e:cc:
         19:6b:da:f0:f1:cf:77:2d:a0:38:bc:9c:9a:c8:d1:b6:48:73:
         9f:2d:a8:db:03:40:4f:4f:fb:b1:b4:2a:85:f3:50:05:54:26:
         bc:55:45:2f:34:54:35:67:53:0e:c2:fd:87:6c:7a:2d:4b:a1:
         87:d1:eb:8c:a7:ac:f3:be:98:1c:58:04:85:e7:a4:86:f8:3d:
         d7:b5:2f:52:8f:5e:ec:1f:c2:4c:62:6f:14:53:b3:cd:d2:83:
         d8:b4:7b:d5:b7:4c:aa:9c:bd:12:39:dd:01:94:ef:4e:15:c9:
         12:13:8d:24:7f:d4:69:6e:e9:c9:a6:fe:74:a7:4d:71:42:d9:
         15:d4:60:7f:87:db:2c:de:f7:9e:60:1c:63:fd:ea:60:8a:df:
         ed:0d:b3:72:1e:57:43:bb:3b:e7:e6:ce:d3:ea:94:91:66:f2:
         93:7d:c3:84:bf:c9:03:7f:27:e3:d6:3f:8c:f4:b6:83:b6:99:
         4f:f8:03:e1:95:51:32:aa:cd:44:c7:63:9f:ab:df:5a:92:14:
         0a:22:5e:08:b9:75:51:c0:86:39:3c:b9:54:b7:1a:c9:0a:80:
         80:19:5b:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKScVQrEauktX8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDMyMDIwNTUzNVoXDTI0MDYxODIwNTUzNVowLzEtMCsGA1UEAxMk
ZTVkZDQwNzQtMzRmOC00YWYwLWI0YjAtOWI4YTA0ZWRjMWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOMEsZYBERfoh/wmSZBb/nOemi1NjS+xWRR/
1NKB67zc/ItlVsIP33xrmTpRalo3lbrakq24ECEdgkVYxDxGenomkQDc/7bTYb85
nN4F5bcNmewxuiagoAh4poacIYcdSqpl3uoqtu6d9bgnSDcTTo6vS6Clii+cc3lc
Iz1a9wWILq22oXGm4EX1hUM7lDvx962pyAWvklN0fkm6kmdv4NZ/WDu/OpApFAxS
S1W6PD62FeqQ/MHV72b0c0cwMDSo09hhusfXrMIwSwjtqKlmJmvdpkPm0pUFTYuV
5C6m30mnf5eJTSKvpUH3gFRLEwUZLuTRM8Xs7m2U8t1xDgWY6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEd8JaLDV4RuLrDFQYDb8G0SI6F7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWY5Y2E3ZjktMjA1YS0z
NDY2LWJjOTgtY2E0ZTQ0ZGQ5MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKqjzPledDkan6MQqbKMUMXkC5P/yooB5d3jFKNHjQu68EuezBlr2vDx
z3ctoDi8nJrI0bZIc58tqNsDQE9P+7G0KoXzUAVUJrxVRS80VDVnUw7C/Ydsei1L
oYfR64ynrPO+mBxYBIXnpIb4Pde1L1KPXuwfwkxibxRTs83Sg9i0e9W3TKqcvRI5
3QGU704VyRITjSR/1Glu6cmm/nSnTXFC2RXUYH+H2yze955gHGP96mCK3+0Ns3Ie
V0O7O+fmztPqlJFm8pN9w4S/yQN/J+PWP4z0toO2mU/4A+GVUTKqzUTHY5+r31qS
FAoiXgi5dVHAhjk8uVS3GskKgIAZWzo=
-----END CERTIFICATE-----
Generated at Fri May 17 22:03:28 2024 by rpki-client on console-ams.rpki-client.org