Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa
File:                     a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa (raw, json)
Hash identifier:          Kra9IHPacjRL/Nkes1sm1oKteFf71DBIS4VofRGgFMo=
Subject key identifier:   5A:7F:43:8D:5F:CF:DD:DE:44:30:15:0F:7C:8A:C0:A9:83:98:F3:0C
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285845068AC78F0359DC3A7E3CB700
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     5769
IP address blocks:        144.172.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c7:8f:03:59:dc:3a:7e:3c:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=4e948a42-b50f-4a1b-9253-df40516f59c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:16:fb:d4:04:4e:92:28:42:e9:1f:97:07:8f:
                    a9:15:04:90:a1:50:3c:8a:0b:59:e2:83:58:e8:a0:
                    a7:9d:db:d8:70:3e:dc:a4:4b:54:e9:b3:7a:ae:08:
                    ce:48:4a:be:b5:4f:10:74:07:63:98:22:1d:51:ee:
                    a5:7c:18:d6:46:65:b5:7b:26:d3:88:1d:dd:7b:24:
                    4b:31:14:57:7b:6d:bc:d2:b3:ab:4d:77:b4:b4:02:
                    15:28:1e:5c:06:ed:b5:45:0f:a9:11:ef:ba:b0:5e:
                    da:44:9e:34:e8:83:f9:e0:db:d4:29:66:15:9d:46:
                    6d:b9:8f:3e:0f:40:0b:cb:15:6e:64:da:7b:8c:ee:
                    df:1f:53:4e:18:b5:dc:d5:81:73:14:89:4a:bf:0d:
                    3f:74:eb:61:f6:6a:8b:f6:e0:49:d3:83:9d:54:a8:
                    8f:83:ec:3d:ce:ab:e3:0a:e4:11:55:7e:f0:49:57:
                    34:e9:d0:cb:dc:ec:75:89:2c:49:6c:1e:f0:3d:89:
                    d8:a0:b9:fc:b0:14:26:60:93:a1:a4:05:de:80:93:
                    fd:91:fd:80:84:10:d8:01:dd:e2:dc:78:99:4c:7c:
                    be:bf:03:02:0b:1b:52:41:77:b1:a9:4f:dc:0d:25:
                    e8:fc:2c:cc:33:67:a7:5c:65:18:b3:3d:44:28:64:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7F:43:8D:5F:CF:DD:DE:44:30:15:0F:7C:8A:C0:A9:83:98:F3:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/a9cbbfd4-d388-33d1-bc42-86d60dd2eb62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:db:4f:36:ae:8d:41:4c:2f:ff:4b:b8:56:a8:17:85:cf:bc:
         80:b6:02:f3:1b:22:42:50:9d:2a:c8:36:6d:4b:16:d3:67:ad:
         3d:e9:e9:b5:f1:f3:ea:8f:79:0e:de:da:7d:12:1a:1a:18:2f:
         be:3c:2f:38:56:2f:e3:aa:d9:71:d5:67:23:d0:c6:c9:9a:ba:
         7c:8c:f8:b4:00:0a:d6:cf:84:40:6f:a1:f0:3f:e0:8b:f6:db:
         6b:cd:9a:1f:aa:83:47:90:34:e8:21:85:3b:b8:52:59:b2:a6:
         93:04:47:b2:a8:1d:62:20:9d:08:e9:ee:12:d0:70:e2:d1:a4:
         ac:00:5f:8e:5e:c9:50:03:95:e2:ac:f8:fe:89:5f:c6:ee:cc:
         8a:1b:2a:16:5a:88:76:a2:7d:e6:7c:7a:d3:ae:a6:18:3b:36:
         ea:43:98:72:a7:fb:87:08:5a:fb:eb:71:01:49:31:19:10:20:
         b2:00:24:c8:7d:d8:91:00:5e:dc:be:64:4d:40:28:2d:49:a9:
         7c:70:b6:81:be:0a:54:81:02:4f:09:c5:cf:d6:44:4a:4e:14:
         dc:80:09:ff:6f:83:6e:76:9f:a9:5e:7f:0f:ea:37:c3:65:c7:
         fd:c5:2a:12:30:c7:33:39:7a:53:e9:95:00:c3:e4:ed:c0:60:
         24:9b:32:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUGisePA1ncOn48twAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk
NGU5NDhhNDItYjUwZi00YTFiLTkyNTMtZGY0MDUxNmY1OWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBb71AROkihC6R+XB4+pFQSQoVA8igtZ4oNY
6KCnndvYcD7cpEtU6bN6rgjOSEq+tU8QdAdjmCIdUe6lfBjWRmW1eybTiB3deyRL
MRRXe2280rOrTXe0tAIVKB5cBu21RQ+pEe+6sF7aRJ406IP54NvUKWYVnUZtuY8+
D0ALyxVuZNp7jO7fH1NOGLXc1YFzFIlKvw0/dOth9mqL9uBJ04OdVKiPg+w9zqvj
CuQRVX7wSVc06dDL3Ox1iSxJbB7wPYnYoLn8sBQmYJOhpAXegJP9kf2AhBDYAd3i
3HiZTHy+vwMCCxtSQXexqU/cDSXo/CzMM2enXGUYsz1EKGQGFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFp/Q41fz93eRDAVD3yKwKmDmPMMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYTljYmJmZDQtZDM4OC0z
M2QxLWJjNDItODZkNjBkZDJlYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkKyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/bTzaujUFML/9LuFaoF4XPvIC2AvMbIkJQnSrINm1LFtNnrT3p6bXx
8+qPeQ7e2n0SGhoYL748LzhWL+Oq2XHVZyPQxsmaunyM+LQACtbPhEBvofA/4Iv2
22vNmh+qg0eQNOghhTu4UlmyppMER7KoHWIgnQjp7hLQcOLRpKwAX45eyVADleKs
+P6JX8buzIobKhZaiHaifeZ8etOuphg7NupDmHKn+4cIWvvrcQFJMRkQILIAJMh9
2JEAXty+ZE1AKC1JqXxwtoG+ClSBAk8Jxc/WREpOFNyACf9vg252n6lefw/qN8Nl
x/3FKhIwxzM5elPplQDD5O3AYCSbMlg=
-----END CERTIFICATE-----
Generated at Fri May 17 01:47:57 2024 by rpki-client on console-fra.rpki-client.org