Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/65187024-0050-3611-9fcf-cfbc1faf15a1.roa
File:                     65187024-0050-3611-9fcf-cfbc1faf15a1.roa (raw, json)
Hash identifier:          YJXRiLi6LJg4c9RkG28XtZQOYFVFifcUXolztOnhqIE=
Subject key identifier:   FD:26:75:B1:7E:0D:E2:4B:98:C3:FB:4D:8F:BB:51:EA:94:AA:D4:38
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F432858454AD2CC12EEEF5DC94D84CC00
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/65187024-0050-3611-9fcf-cfbc1faf15a1.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     393474
IP address blocks:        204.25.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:cc:12:ee:ef:5d:c9:4d:84:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=4b3fdc7d-dcd0-4464-b407-8551ca8b061d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b6:77:9e:23:41:63:bc:78:d8:b1:c5:70:04:
                    b3:58:a3:01:49:18:f7:59:2e:5e:92:ec:9b:8d:a5:
                    ee:9d:14:1d:75:6f:a6:52:ad:ff:60:3b:30:f4:21:
                    d4:23:8c:05:5d:1a:6b:4c:30:62:7b:be:8d:a7:f3:
                    19:b2:dc:70:98:dc:a7:64:2a:1c:d4:cf:ab:52:9f:
                    49:51:de:6c:f2:9f:ad:2d:32:8d:24:bc:90:49:f1:
                    d7:f5:c5:1a:63:5f:3d:26:30:8a:32:cb:ca:fa:e8:
                    63:1e:2f:7e:82:c3:fb:f4:d7:ad:9b:c8:0d:8b:c5:
                    3a:1f:43:4b:4b:89:cb:55:cd:ea:b7:4d:f1:92:0b:
                    c7:ce:6e:ee:0b:4f:c5:98:26:1a:65:c9:fa:6e:ae:
                    7e:8a:1f:ce:ed:27:2c:fd:4a:2b:d1:c6:35:03:99:
                    f5:c9:45:b0:f1:6b:21:a3:c4:ff:b0:0c:49:60:ef:
                    66:c4:e9:63:b6:05:f7:3b:7c:a5:bc:7b:e9:2d:93:
                    89:90:c3:a7:b8:36:b7:e3:72:66:fe:a5:19:02:72:
                    b3:94:22:f2:93:43:dd:ce:b4:dc:17:6e:98:8d:0e:
                    c0:f1:2a:3b:f6:fb:eb:fa:5e:d1:68:04:ac:5f:21:
                    bb:74:70:92:67:1a:1b:65:aa:fc:79:36:d4:76:ce:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:26:75:B1:7E:0D:E2:4B:98:C3:FB:4D:8F:BB:51:EA:94:AA:D4:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/65187024-0050-3611-9fcf-cfbc1faf15a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:96:00:10:48:e7:7f:50:5e:aa:5a:77:38:d9:63:fb:4e:
         63:23:29:cf:dd:b4:c6:0d:16:b8:4c:e8:d1:78:6a:89:79:c0:
         09:12:d2:b0:3c:2d:0e:6b:8d:88:01:72:aa:09:c0:44:a2:71:
         c3:32:02:87:2d:8b:28:4d:b8:8c:ea:a8:9c:63:7b:01:60:b2:
         06:9e:ba:75:95:42:6f:90:95:eb:43:06:a8:2d:3f:67:e1:11:
         22:55:d9:a7:c8:fe:2b:b8:00:c7:6e:60:a9:ea:fc:ff:e6:c9:
         77:a3:c8:46:8a:8a:c3:fc:65:47:63:c6:43:8f:16:bf:80:d1:
         9e:b6:9f:fa:7d:60:a7:21:d7:8b:e7:1c:4d:de:31:0b:0b:61:
         27:fb:a8:85:40:25:17:b0:e2:d0:ee:7f:0b:5b:95:36:15:43:
         59:3f:a1:7c:85:14:fd:ed:70:98:8c:1b:59:46:c0:99:b2:42:
         6f:03:0f:99:ac:f0:50:c9:de:a4:30:48:45:dc:b4:e2:71:03:
         3b:33:8f:0b:d2:05:cc:05:fb:82:17:99:14:69:c4:7a:3d:85:
         89:e6:7d:05:43:33:be:e2:78:aa:27:d6:0d:0f:13:88:80:24:
         48:2e:1e:56:c0:8c:06:a9:63:07:d8:a7:3a:a3:5e:24:86:cb:
         5e:c5:e8:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVK0swS7u9dyU2EzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl
NDIyMB4XDTI0MDMyMjEzMDAzNFoXDTI0MDYyMDEzMDAzNFowLzEtMCsGA1UEAxMk
NGIzZmRjN2QtZGNkMC00NDY0LWI0MDctODU1MWNhOGIwNjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrZ3niNBY7x42LHFcASzWKMBSRj3WS5ekuyb
jaXunRQddW+mUq3/YDsw9CHUI4wFXRprTDBie76Np/MZstxwmNynZCoc1M+rUp9J
Ud5s8p+tLTKNJLyQSfHX9cUaY189JjCKMsvK+uhjHi9+gsP79Netm8gNi8U6H0NL
S4nLVc3qt03xkgvHzm7uC0/FmCYaZcn6bq5+ih/O7Scs/Uor0cY1A5n1yUWw8Wsh
o8T/sAxJYO9mxOljtgX3O3ylvHvpLZOJkMOnuDa343Jm/qUZAnKzlCLyk0PdzrTc
F26YjQ7A8So79vvr+l7RaASsXyG7dHCSZxobZar8eTbUds7UHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP0mdbF+DeJLmMP7TY+7UeqUqtQ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz
ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvNjUxODcwMjQtMDA1MC0z
NjExLTlmY2YtY2ZiYzFmYWYxNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw
ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk
ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi
YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzBnsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDolgAQSOd/UF6qWnc42WP7TmMjKc/dtMYNFrhM6NF4aol5wAkS0rA8
LQ5rjYgBcqoJwESiccMyAoctiyhNuIzqqJxjewFgsgaeunWVQm+QletDBqgtP2fh
ESJV2afI/iu4AMduYKnq/P/myXejyEaKisP8ZUdjxkOPFr+A0Z62n/p9YKch14vn
HE3eMQsLYSf7qIVAJRew4tDufwtblTYVQ1k/oXyFFP3tcJiMG1lGwJmyQm8DD5ms
8FDJ3qQwSEXctOJxAzszjwvSBcwF+4IXmRRpxHo9hYnmfQVDM77ieKon1g0PE4iA
JEguHlbAjAapYwfYpzqjXiSGy17F6OM=
-----END CERTIFICATE-----
Generated at Fri May 17 01:47:57 2024 by rpki-client on console-fra.rpki-client.org