Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa
File:                     7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa (raw, json)
Hash identifier:          op4/zwgRIUflNyDe57k3Ay/T5MeC99Q9be8ApZQLdGQ=
Subject key identifier:   BE:62:69:7A:3F:84:DC:DA:31:3D:7F:AE:D6:FE:34:B7:F5:23:AE:BB
Certificate issuer:       /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial:       010D0C9F43285845A6F362AFDC0E54A4092919A0
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     1448
IP address blocks:        156.146.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:62:af:dc:0e:54:a4:09:29:19:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=2bca8241-def3-48c2-81ff-389b686751d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:37:c1:ea:69:a1:75:b5:73:b3:bd:0a:f7:
                    7c:ee:98:ae:ba:a1:53:94:15:44:8d:28:b3:31:ad:
                    d3:9c:d9:dd:80:6b:ce:09:9a:8a:ae:8b:1f:70:68:
                    20:ec:cf:9a:90:a2:c3:27:bd:8b:b3:48:c6:35:8e:
                    91:86:8a:f2:26:ec:ba:9c:c3:1b:56:c8:50:7f:1f:
                    ca:9b:e2:ad:40:c5:63:0d:81:65:f3:e2:84:08:41:
                    0b:4d:cc:bd:36:5e:82:d6:5b:8d:af:da:d0:14:67:
                    3b:f4:ed:51:65:f4:de:4b:ab:39:4e:58:36:d0:06:
                    87:bb:77:13:bd:3e:3a:75:50:5d:fe:dc:8a:f7:71:
                    45:36:f6:25:a1:9c:75:46:61:cf:40:af:99:09:4b:
                    71:f6:80:8e:6a:a6:64:2a:23:07:32:78:58:c4:6d:
                    52:1a:fc:19:5c:cf:c4:95:bd:0b:6d:44:8a:28:a8:
                    7d:9e:ee:0b:0c:4c:a3:0f:6a:f8:83:21:a8:d8:5a:
                    85:d5:12:3e:a1:ba:68:bf:db:e5:43:05:e9:01:30:
                    c1:5d:10:e5:3c:b7:39:5e:24:4f:21:22:e7:26:2f:
                    e9:f5:1b:df:54:50:13:33:d2:b3:78:e4:61:98:1d:
                    cb:87:9c:5a:ec:e9:43:1c:95:01:c5:78:3c:d6:73:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:62:69:7A:3F:84:DC:DA:31:3D:7F:AE:D6:FE:34:B7:F5:23:AE:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/7e0c136f-58ee-3e77-bfe1-433cde15afb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl

            X509v3 Authority Key Identifier:
                keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.146.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:ac:17:33:4a:ca:79:bf:7a:c6:49:f6:e5:59:7f:68:25:
         b3:64:82:11:06:12:fc:d0:11:bc:7f:c6:d4:5e:f9:d0:d9:d4:
         b0:4c:ed:64:6c:f7:a6:52:97:e4:74:20:2f:0d:dd:a4:a7:6b:
         53:6a:b3:cd:3f:90:6d:e0:e3:08:78:3f:7b:95:9a:43:54:c9:
         4d:b3:89:c2:89:d6:55:3e:54:22:31:45:e0:cc:fd:aa:6e:c0:
         ca:39:b5:87:58:b9:fb:76:cc:68:39:3a:e4:1a:14:84:c8:7c:
         39:b4:d2:19:e8:c8:c1:ac:f4:72:04:8c:f4:14:9e:d6:c5:1a:
         20:14:fa:55:8a:10:cc:50:0d:bd:ff:51:23:1e:04:df:b3:96:
         45:77:bf:8a:86:44:ee:02:39:e6:ac:dd:0a:91:ee:e7:04:c7:
         44:93:d4:16:07:99:46:09:7c:14:3f:95:65:9e:fb:76:58:9b:
         99:6e:2f:17:97:fa:40:a8:ae:df:f1:38:d1:89:63:72:f1:c2:
         61:77:8e:85:16:a9:a7:e7:dd:27:b3:3a:38:87:84:f8:e9:88:
         36:54:25:26:50:30:b3:2f:e6:f7:48:f4:7f:7f:6d:9f:a7:2d:
         5f:5a:36:75:af:8a:10:1b:a3:72:38:dd:e1:b7:64:1c:01:0b:
         f7:15:2e:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm82Kv3A5UpAkpGaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5
Yzk1MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk
MmJjYTgyNDEtZGVmMy00OGMyLTgxZmYtMzg5YjY4Njc1MWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6o3weppoXW1c7O9Cvd87piuuqFTlBVEjSiz
Ma3TnNndgGvOCZqKrosfcGgg7M+akKLDJ72Ls0jGNY6RhoryJuy6nMMbVshQfx/K
m+KtQMVjDYFl8+KECEELTcy9Nl6C1luNr9rQFGc79O1RZfTeS6s5Tlg20AaHu3cT
vT46dVBd/tyK93FFNvYloZx1RmHPQK+ZCUtx9oCOaqZkKiMHMnhYxG1SGvwZXM/E
lb0LbUSKKKh9nu4LDEyjD2r4gyGo2FqF1RI+obpov9vlQwXpATDBXRDlPLc5XiRP
ISLnJi/p9RvfVFATM9KzeORhmB3Lh5xa7OlDHJUBxXg81nNHkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5iaXo/hNzaMT1/rtb+NLf1I667MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3
Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvN2UwYzEzNmYtNThlZS0z
ZTc3LWJmZTEtNDMzY2RlMTVhZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2
NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl
OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj
OTFiZTljOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJLYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWdrBczSsp5v3rGSfblWX9oJbNkghEGEvzQEbx/xtRe+dDZ1LBM7WRs
96ZSl+R0IC8N3aSna1Nqs80/kG3g4wh4P3uVmkNUyU2zicKJ1lU+VCIxReDM/apu
wMo5tYdYuft2zGg5OuQaFITIfDm00hnoyMGs9HIEjPQUntbFGiAU+lWKEMxQDb3/
USMeBN+zlkV3v4qGRO4COeas3QqR7ucEx0ST1BYHmUYJfBQ/lWWe+3ZYm5luLxeX
+kCort/xONGJY3LxwmF3joUWqafn3SezOjiHhPjpiDZUJSZQMLMv5vdI9H9/bZ+n
LV9aNnWvihAbo3I43eG3ZBwBC/cVLpk=
-----END CERTIFICATE-----
Generated at Wed May 22 01:47:05 2024 by rpki-client on console-fra.rpki-client.org