Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa
File:                     888ee824-8672-3b73-977c-adf62630d235.roa (raw, json)
Hash identifier:          t1RBaa+oQN8B3dBjt0CVE9Ri4siXdDUQEwIpbChjKGo=
Subject key identifier:   8C:A4:FB:3A:90:11:54:52:B2:F7:15:6B:F7:88:BF:44:D1:5C:5F:B0
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F4328584543D7FD92891DBE1BDB897B80
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa
Signing time:             Wed 20 Mar 2024 01:00:24 +0000
ROA not before:           Wed 20 Mar 2024 01:00:24 +0000
ROA not after:            Tue 18 Jun 2024 01:00:24 +0000
asID:                     1100
IP address blocks:        2605:8900:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:d7:fd:92:89:1d:be:1b:db:89:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Mar 20 01:00:24 2024 GMT
            Not After : Jun 18 01:00:24 2024 GMT
        Subject: CN=849b5751-6c1b-483e-8be7-60e81f45cab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:3f:b4:c3:cc:8d:e6:34:68:c6:f4:0a:b1:
                    dd:83:3f:4e:3b:f8:84:e4:d5:32:fc:33:15:a5:b3:
                    56:83:5e:9b:6c:a7:b1:cc:1e:02:e9:3a:46:e8:de:
                    51:fc:42:1b:28:f6:a5:d0:a5:c2:8f:90:64:72:76:
                    f6:73:1d:e4:f2:fc:a6:a3:35:73:89:c6:1a:db:73:
                    7c:f6:f4:a5:52:d1:fd:63:fd:cc:1b:3c:b7:9c:ff:
                    7e:d8:38:8e:67:57:ad:e0:8e:d4:6c:65:72:7b:b4:
                    71:3c:98:fa:3a:5b:fb:42:8b:c0:c8:9f:86:b2:5e:
                    d2:8a:76:b2:7a:a1:ab:39:eb:8c:83:b0:86:33:33:
                    e3:d2:d4:d0:0d:88:f8:cc:93:1b:49:31:d6:14:cc:
                    38:4a:9d:57:bc:3c:fa:87:fe:85:b7:ce:76:26:65:
                    9e:bf:c9:f3:70:eb:4d:a7:4c:d6:b7:14:23:39:d8:
                    b9:44:a1:97:72:51:7e:d6:9a:83:e7:92:33:8c:ba:
                    95:b3:e3:8f:76:af:c6:af:17:84:d0:83:49:dd:89:
                    2e:d1:e7:fe:c7:d7:6d:87:d6:3f:d2:d3:67:c1:13:
                    38:11:b3:00:d3:fb:e5:60:b9:c8:28:75:b7:ea:d2:
                    96:3c:71:af:34:b4:6c:b7:e4:7b:07:d0:23:3e:92:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A4:FB:3A:90:11:54:52:B2:F7:15:6B:F7:88:BF:44:D1:5C:5F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/888ee824-8672-3b73-977c-adf62630d235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:6a:55:6b:49:cd:78:3a:f8:ab:29:0f:b0:6e:a4:44:15:
         c6:5d:5e:e2:a4:3f:cd:24:e3:fb:c1:a1:36:59:9b:6d:5b:e9:
         5d:7a:2a:6e:74:9e:85:9e:2d:32:f3:14:19:e2:20:73:09:7f:
         60:d4:11:cd:ad:12:99:89:05:a2:00:79:ed:d7:20:9f:bb:ae:
         2b:01:21:eb:d6:7c:49:76:dd:5e:2d:fe:67:36:62:c9:28:bf:
         3e:b6:80:1b:69:c9:80:44:e5:d6:0e:d6:aa:76:df:03:75:eb:
         64:00:f0:92:7a:9e:98:9b:1c:50:52:e1:1e:79:91:11:ff:8c:
         68:ec:b9:81:d1:69:07:06:e4:50:82:7c:5d:e4:31:dd:07:15:
         f3:b3:b3:7a:06:ef:54:88:b1:20:2b:38:9b:33:37:2a:9a:c9:
         8b:5b:60:a7:84:c9:2a:cc:dd:db:ca:86:b6:30:e4:43:56:4a:
         4c:c6:e6:9a:9b:9c:7e:51:fb:4b:2c:8e:90:61:b4:4e:62:62:
         b3:59:3e:4e:cd:2c:1b:cb:f8:62:72:87:c8:dc:b6:6f:63:67:
         5e:1f:fa:36:20:ab:e9:47:b9:ec:fa:42:6d:d0:0d:64:b6:37:
         ab:c4:c7:74:fe:9c:9f:27:66:23:58:e3:88:ec:1c:1c:a8:75:
         4e:9a:1c:e0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEVD1/2SiR2+G9uJe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTI0MDMyMDAxMDAyNFoXDTI0MDYxODAxMDAyNFowLzEtMCsGA1UEAxMk
ODQ5YjU3NTEtNmMxYi00ODNlLThiZTctNjBlODFmNDVjYWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD4/tMPMjeY0aMb0CrHdgz9OO/iE5NUy/DMV
pbNWg16bbKexzB4C6TpG6N5R/EIbKPal0KXCj5Bkcnb2cx3k8vymozVzicYa23N8
9vSlUtH9Y/3MGzy3nP9+2DiOZ1et4I7UbGVye7RxPJj6Olv7QovAyJ+Gsl7Sinay
eqGrOeuMg7CGMzPj0tTQDYj4zJMbSTHWFMw4Sp1XvDz6h/6Ft852JmWev8nzcOtN
p0zWtxQjOdi5RKGXclF+1pqD55IzjLqVs+OPdq/GrxeE0INJ3Yku0ef+x9dth9Y/
0tNnwRM4EbMA0/vlYLnIKHW36tKWPHGvNLRst+R7B9AjPpIj3wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIyk+zqQEVRSsvcVa/eIv0TRXF+wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvODg4ZWU4MjQtODY3Mi0z
YjczLTk3N2MtYWRmNjI2MzBkMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgWJAPAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADqFqVWtJzXg6+KspD7BupEQVxl1e4qQ/zSTj+8GhNlmbbVvpXXoq
bnSehZ4tMvMUGeIgcwl/YNQRza0SmYkFogB57dcgn7uuKwEh69Z8SXbdXi3+ZzZi
ySi/PraAG2nJgETl1g7WqnbfA3XrZADwknqemJscUFLhHnmREf+MaOy5gdFpBwbk
UIJ8XeQx3QcV87OzegbvVIixICs4mzM3KprJi1tgp4TJKszd28qGtjDkQ1ZKTMbm
mpucflH7SyyOkGG0TmJis1k+Ts0sG8v4YnKHyNy2b2NnXh/6NiCr6Ue57PpCbdAN
ZLY3q8THdP6cnydmI1jjiOwcHKh1Tpoc4A==
-----END CERTIFICATE-----
Generated at Sat Apr 27 21:42:34 2024 by rpki-client on console-ams.rpki-client.org