Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
File:                     12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa (raw, json)
Hash identifier:          TlAR2PPYzME4FCdtW9g30JIBH62H4l9m7qrnVB3wxcM=
Subject key identifier:   55:14:3F:DC:15:5F:FE:76:54:6D:6A:9C:59:98:1F:87:50:33:06:E1
Certificate issuer:       /CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Certificate serial:       010D0C9F43285844F73005361C881D5B7C682080
Authority key identifier: 51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     7018
IP address blocks:        199.83.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:05:36:1c:88:1d:5b:7c:68:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=3df86707-e8b2-4804-b97a-4e3c43c6c7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:06:0a:b9:02:cd:96:b0:32:74:84:12:60:41:
                    95:88:f8:2e:93:a8:8d:74:b5:fd:0c:a5:ec:87:b8:
                    47:71:8e:07:af:58:d7:3a:b6:fe:34:b4:8f:92:6c:
                    85:a5:9b:fe:a9:ef:01:1f:d5:8f:14:83:05:fd:39:
                    1d:69:09:2f:0a:79:e2:9a:88:1f:0e:dd:a0:26:af:
                    1e:0a:66:f3:58:e2:ca:cf:f8:a4:a8:0a:fd:47:7e:
                    ea:ad:16:83:92:2e:b9:6d:11:e1:d3:ac:da:b5:a4:
                    06:a2:65:18:98:c5:be:dc:16:d9:d0:c4:9a:6a:46:
                    7c:bc:a0:a1:c9:bb:14:a0:ba:33:5b:b8:b8:ac:ae:
                    68:fc:52:55:c3:81:6b:3b:3e:c3:20:d9:57:ca:a8:
                    61:33:cb:1a:9c:ab:ac:e5:ce:2d:ff:81:d5:db:f4:
                    73:42:62:6e:fc:42:3d:37:9b:e1:76:e2:83:fc:b7:
                    03:1a:d3:67:94:e3:bf:0e:12:28:7e:b4:6b:60:4a:
                    d4:93:26:1a:78:35:bc:54:9c:8b:ca:4b:a3:b8:2e:
                    a4:16:d3:1e:67:83:ed:3a:33:4a:35:b7:1b:ff:ef:
                    0c:13:9e:3c:5c:4a:cc:90:23:c3:11:57:b4:e9:72:
                    bd:f0:14:90:b9:f1:33:a1:d9:cf:ad:b6:eb:73:6d:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:14:3F:DC:15:5F:FE:76:54:6D:6A:9C:59:98:1F:87:50:33:06:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl

            X509v3 Authority Key Identifier:
                keyid:51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:91:bd:d4:51:6d:40:38:6e:da:11:c1:f7:19:6b:46:63:
         99:63:4f:ae:7a:29:35:d6:6c:bc:ce:f8:0b:d5:a6:bc:a7:76:
         33:f7:ce:11:ca:53:37:d6:48:b7:58:e0:6a:9d:4a:f3:90:1b:
         b3:0f:b4:4d:1d:85:26:b3:75:92:f0:a2:f8:a2:5e:4d:9d:3d:
         af:b9:6b:71:c3:01:41:f4:ff:f4:9d:0b:27:e7:0e:f0:b8:f0:
         4c:70:f2:50:f6:fc:6f:ae:05:d2:82:c1:54:08:cb:99:75:e8:
         62:dc:16:71:ec:af:30:fa:15:29:6c:86:aa:5b:ae:5b:2f:2d:
         0e:94:3d:7a:dd:e2:eb:ac:a4:e3:f1:78:21:74:74:83:51:af:
         63:d2:8d:f7:b2:89:b6:a4:72:30:8a:3e:e9:a3:1a:d7:36:0a:
         b4:96:71:11:0f:ad:35:bf:67:5f:e4:81:15:46:f8:16:ee:07:
         35:04:6e:6d:84:77:92:1e:69:cb:86:51:a9:a0:12:dc:1a:3e:
         f1:6a:41:55:d5:1d:9a:c8:5a:71:a7:18:a3:1a:d3:69:56:f1:
         31:bd:e3:f0:81:5f:ad:a3:79:88:c2:5e:8f:68:e3:24:ce:37:
         cd:b9:38:ea:4c:3a:a7:7a:3c:58:03:d2:f4:9f:8c:28:a5:40:
         09:80:67:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET3MAU2HIgdW3xoIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEwMDZkNDgtYjIyZi00ZDliLTgxMzgtYzBkZTYyZDEw
ZTExMB4XDTI0MDIyMTE0MDAzMloXDTI0MDUyMTEzMDAzMlowLzEtMCsGA1UEAxMk
M2RmODY3MDctZThiMi00ODA0LWI5N2EtNGUzYzQzYzZjN2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wYKuQLNlrAydIQSYEGViPguk6iNdLX9DKXs
h7hHcY4Hr1jXOrb+NLSPkmyFpZv+qe8BH9WPFIMF/TkdaQkvCnnimogfDt2gJq8e
CmbzWOLKz/ikqAr9R37qrRaDki65bRHh06zataQGomUYmMW+3BbZ0MSaakZ8vKCh
ybsUoLozW7i4rK5o/FJVw4FrOz7DINlXyqhhM8sanKus5c4t/4HV2/RzQmJu/EI9
N5vhduKD/LcDGtNnlOO/DhIofrRrYErUkyYaeDW8VJyLykujuC6kFtMeZ4PtOjNK
Nbcb/+8ME548XErMkCPDEVe06XK98BSQufEzodnPrbbrc230TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUUP9wVX/52VG1qnFmYH4dQMwbhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYTAw
NmQ0OC1iMjJmLTRkOWItODEzOC1jMGRlNjJkMTBlMTEvMTJlOWFiZmYtZmZlOC0z
M2FhLWIxYmYtNzVmZWIxNjQ3YWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmEwMDZkNDgtYjIyZi00ZDliLTgx
MzgtYzBkZTYyZDEwZTExLzJhMDA2ZDQ4LWIyMmYtNGQ5Yi04MTM4LWMwZGU2MmQx
MGUxMS5jcmwwHwYDVR0jBBgwFoAUUYYvW8beapdmcip2tP8GsLmBJW0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYTAwNmQ0OC1iMjJmLTRkOWItODEzOC1jMGRl
NjJkMTBlMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1OQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJ9kb3UUW1AOG7aEcH3GWtGY5ljT656KTXWbLzO+AvVpryndjP3zhHK
UzfWSLdY4GqdSvOQG7MPtE0dhSazdZLwoviiXk2dPa+5a3HDAUH0//SdCyfnDvC4
8Exw8lD2/G+uBdKCwVQIy5l16GLcFnHsrzD6FSlshqpbrlsvLQ6UPXrd4uuspOPx
eCF0dINRr2PSjfeyibakcjCKPumjGtc2CrSWcREPrTW/Z1/kgRVG+BbuBzUEbm2E
d5IeacuGUamgEtwaPvFqQVXVHZrIWnGnGKMa02lW8TG94/CBX62jeYjCXo9o4yTO
N825OOpMOqd6PFgD0vSfjCilQAmAZ/k=
-----END CERTIFICATE-----
Generated at Wed May 8 21:05:06 2024 by rpki-client on console-fra.rpki-client.org