Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/d2ea7664-d008-303c-820e-054f1959301d.roa
File:                     d2ea7664-d008-303c-820e-054f1959301d.roa (raw, json)
Hash identifier:          3oVCnuKVqWH6G5Pxu0VtpK/ZjPbJRTIBb3lhQs2CTS4=
Subject key identifier:   8D:8C:51:BB:5C:15:B2:70:2F:BE:E8:42:12:22:22:CA:D1:82:4C:C1
Certificate issuer:       /CN=040ac077-a6b6-4194-a06e-6c9593332536
Certificate serial:       010D0C9F432858450C201E4EE6426C04CEA236A0
Authority key identifier: E4:3D:57:58:2B:D6:AA:FC:53:49:D6:BF:6E:0D:11:86:DE:0D:81:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/d2ea7664-d008-303c-820e-054f1959301d.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     14291
IP address blocks:        192.151.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:1e:4e:e6:42:6c:04:ce:a2:36:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040ac077-a6b6-4194-a06e-6c9593332536
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=5041b88c-29bf-47e5-9f98-cc3746208eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:28:8c:52:7c:dd:e4:7d:fc:28:2b:d8:ad:14:
                    cf:f2:32:8c:fc:1a:45:75:a5:5f:6b:f9:0c:fe:12:
                    ea:7a:2e:f8:ef:71:76:2a:2d:17:93:80:e2:10:46:
                    89:7f:f9:2e:6e:14:b9:cf:de:9a:fd:36:48:b5:86:
                    e8:63:85:48:dc:b7:37:40:57:4e:9e:6b:71:a5:8e:
                    9b:01:09:76:7d:28:22:4b:91:7f:13:42:9b:8a:30:
                    c8:7d:01:81:2b:1a:69:a5:67:d3:90:52:7e:42:a4:
                    61:1a:a7:97:5c:0c:53:6b:34:cd:fa:62:d0:61:d3:
                    56:55:9e:8a:4c:ba:12:01:56:ca:27:09:d0:04:ac:
                    8d:5f:56:89:d3:34:31:09:29:5a:d3:e4:5b:7c:14:
                    96:90:0f:12:04:50:a7:76:e2:40:91:ce:c5:a9:e4:
                    61:33:29:1c:42:27:98:68:b9:95:b4:e0:9e:a9:62:
                    0f:d0:2f:aa:bb:6c:58:d2:43:ec:cc:3f:3d:f7:d2:
                    2c:4e:19:ca:1c:a9:99:94:eb:28:c1:1d:4b:e7:68:
                    ac:62:2b:d4:8b:4a:f8:52:1c:91:75:25:74:a6:4b:
                    95:c8:a5:06:8a:c1:a0:0b:29:55:9d:fa:d2:2f:a3:
                    92:0c:43:a0:1a:89:c7:ee:6e:4c:0d:f5:8f:c6:56:
                    8b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8C:51:BB:5C:15:B2:70:2F:BE:E8:42:12:22:22:CA:D1:82:4C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/d2ea7664-d008-303c-820e-054f1959301d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.crl

            X509v3 Authority Key Identifier:
                keyid:E4:3D:57:58:2B:D6:AA:FC:53:49:D6:BF:6E:0D:11:86:DE:0D:81:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.151.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:f2:09:97:c3:ec:54:c1:b3:b9:5c:2c:96:b4:58:d2:ef:
         31:f1:4c:bf:c4:96:64:47:23:2c:3b:1e:e4:b0:61:d7:90:73:
         50:db:03:4b:db:1a:7d:47:c3:7f:0b:cb:a0:c3:b1:16:c5:4c:
         e3:d7:82:78:65:83:55:bb:af:f7:98:ae:2e:a3:ed:9a:d6:32:
         e5:7f:69:81:73:db:c5:1e:1a:d7:35:dd:74:aa:ab:b9:70:6b:
         fc:5f:fb:88:49:38:aa:17:48:9b:1c:af:6d:f9:9e:0c:62:d6:
         17:a7:ce:ae:3e:ec:c9:11:8f:76:f8:b0:3d:45:99:bc:c5:06:
         6a:cd:69:d9:9b:06:bb:dc:12:a2:03:f8:59:ca:51:67:8f:87:
         d1:10:65:e7:46:b4:77:cd:42:eb:7d:a4:fc:15:a7:e8:1f:02:
         3f:4f:43:66:fe:64:03:59:e2:14:ab:a6:46:4a:77:66:0e:5d:
         4c:4e:54:96:b7:65:b0:1e:f8:d0:a9:5e:c9:ea:90:ac:88:56:
         2a:3e:6b:56:7f:0f:ea:f4:ff:91:58:da:fd:ac:ff:8d:9f:73:
         43:cb:ba:2e:41:f2:5c:df:d5:52:85:e8:9c:44:f0:37:6d:1e:
         5c:5b:7f:75:3b:46:d1:06:75:19:c1:96:d3:fa:29:90:f0:d3:
         bb:c5:90:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUMIB5O5kJsBM6iNqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQwYWMwNzctYTZiNi00MTk0LWEwNmUtNmM5NTkzMzMy
NTM2MB4XDTI0MDIyOTAyMDAyN1oXDTI0MDUyOTAxMDAyN1owLzEtMCsGA1UEAxMk
NTA0MWI4OGMtMjliZi00N2U1LTlmOTgtY2MzNzQ2MjA4ZWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCiMUnzd5H38KCvYrRTP8jKM/BpFdaVfa/kM
/hLqei7473F2Ki0Xk4DiEEaJf/kubhS5z96a/TZItYboY4VI3Lc3QFdOnmtxpY6b
AQl2fSgiS5F/E0KbijDIfQGBKxpppWfTkFJ+QqRhGqeXXAxTazTN+mLQYdNWVZ6K
TLoSAVbKJwnQBKyNX1aJ0zQxCSla0+RbfBSWkA8SBFCnduJAkc7FqeRhMykcQieY
aLmVtOCeqWIP0C+qu2xY0kPszD8999IsThnKHKmZlOsowR1L52isYivUi0r4UhyR
dSV0pkuVyKUGisGgCylVnfrSL6OSDEOgGonH7m5MDfWPxlaL0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2MUbtcFbJwL77oQhIiIsrRgkzBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNDBh
YzA3Ny1hNmI2LTQxOTQtYTA2ZS02Yzk1OTMzMzI1MzYvZDJlYTc2NjQtZDAwOC0z
MDNjLTgyMGUtMDU0ZjE5NTkzMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDQwYWMwNzctYTZiNi00MTk0LWEw
NmUtNmM5NTkzMzMyNTM2LzA0MGFjMDc3LWE2YjYtNDE5NC1hMDZlLTZjOTU5MzMz
MjUzNi5jcmwwHwYDVR0jBBgwFoAU5D1XWCvWqvxTSda/bg0Rht4NgfkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNDBhYzA3Ny1hNmI2LTQxOTQtYTA2ZS02Yzk1
OTMzMzI1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJeiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA568gmXw+xUwbO5XCyWtFjS7zHxTL/ElmRHIyw7HuSwYdeQc1DbA0vb
Gn1Hw38Ly6DDsRbFTOPXgnhlg1W7r/eYri6j7ZrWMuV/aYFz28UeGtc13XSqq7lw
a/xf+4hJOKoXSJscr235ngxi1henzq4+7MkRj3b4sD1FmbzFBmrNadmbBrvcEqID
+FnKUWePh9EQZedGtHfNQut9pPwVp+gfAj9PQ2b+ZANZ4hSrpkZKd2YOXUxOVJa3
ZbAe+NCpXsnqkKyIVio+a1Z/D+r0/5FY2v2s/42fc0PLui5B8lzf1VKF6JxE8Ddt
Hlxbf3U7RtEGdRnBltP6KZDw07vFkJg=
-----END CERTIFICATE-----
Generated at Fri May 17 01:47:54 2024 by rpki-client on console-fra.rpki-client.org