Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/8bfbe947-6130-3027-9160-9675c543f8da.roa
File:                     8bfbe947-6130-3027-9160-9675c543f8da.roa (raw, json)
Hash identifier:          PX2xnkiOP/9vhM3tQvZxCiVThSCdP4boWyNyVgSfuZ4=
Subject key identifier:   29:6F:C9:0B:E9:66:8A:99:32:F1:E0:E2:AE:41:EE:CD:2C:0B:7B:E5
Certificate issuer:       /CN=7770be2f-95a3-43e4-a139-53984564db4a
Certificate serial:       010D0C9F4328584507F024A219BAE8CA3B2C4600
Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/8bfbe947-6130-3027-9160-9675c543f8da.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     53706
IP address blocks:        162.213.204.0/24 maxlen: 24
                          162.213.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:24:a2:19:ba:e8:ca:3b:2c:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=077c52b3-78ec-444f-a09a-53ab4bc2b9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:86:a2:20:c1:e7:fd:d3:89:ed:5d:ee:4d:
                    06:8c:43:64:e2:cb:6c:82:3f:fd:ea:b5:1f:79:f1:
                    bf:09:c4:8d:94:c3:33:d0:4b:4a:a1:9d:53:06:3d:
                    73:b2:74:ad:44:ef:4d:cd:2b:8a:35:0e:c6:34:32:
                    aa:24:30:06:0c:12:57:0b:2f:f8:69:1d:14:c2:9e:
                    52:05:f6:c6:8b:72:ed:ad:d6:0f:21:a2:dc:f6:70:
                    36:dc:e6:14:ed:d4:33:ba:d1:9e:83:3f:35:f5:59:
                    24:f9:cc:b4:8d:95:e7:3a:3f:f2:55:2e:bf:5e:23:
                    01:95:81:3e:af:44:4a:aa:f8:e4:cc:b2:00:13:3d:
                    3a:c9:7a:4f:5e:55:dc:9a:1c:04:3a:cc:fc:b0:69:
                    c4:b1:8f:dd:30:7d:d4:3e:8b:3d:db:a6:c7:10:d3:
                    41:08:5a:df:54:88:a8:e3:20:92:2c:38:dd:ca:3a:
                    ff:ef:1a:aa:b2:52:b4:27:d1:e3:d6:79:b8:e9:38:
                    f5:38:43:15:e9:59:07:3a:02:0e:b0:2b:83:7d:6e:
                    28:57:ef:f2:4f:d5:be:df:b4:ba:3a:ae:ce:b7:1d:
                    d4:6b:a5:28:bd:5c:83:77:25:8a:4f:71:76:c1:d1:
                    3a:b5:1c:06:00:93:f5:70:44:7e:fd:05:03:eb:84:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6F:C9:0B:E9:66:8A:99:32:F1:E0:E2:AE:41:EE:CD:2C:0B:7B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/8bfbe947-6130-3027-9160-9675c543f8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:06:71:ed:e3:71:92:af:09:09:64:6c:b4:b3:bc:ac:17:22:
         16:72:a7:80:ce:50:23:43:92:ff:ab:22:07:82:03:b4:f6:93:
         1d:d3:1b:43:1b:cb:f9:bc:f8:e7:f8:f7:6c:8f:e3:9e:5e:19:
         d6:86:be:76:68:62:ad:9a:ac:99:f6:e9:e0:f4:f7:9b:35:7f:
         d4:33:59:3c:2b:3e:ba:ae:d4:b2:86:27:99:54:42:bd:c4:c0:
         70:da:c1:05:6f:84:35:10:9e:96:22:b5:4d:4e:f2:49:c0:83:
         2e:31:a0:07:66:b6:8e:9d:6a:e0:5c:09:e2:a9:69:cf:95:69:
         78:4a:bb:72:52:af:42:99:13:8f:b3:8c:e4:a0:5d:2d:1c:61:
         19:76:6a:d6:74:1a:97:7e:be:7e:e3:27:3f:c8:db:1a:f7:65:
         98:e2:8d:1a:b0:12:82:da:e4:7b:ca:7e:43:08:96:03:a2:fa:
         f2:9c:c4:40:bb:d5:0d:1c:14:b3:ac:60:11:cf:61:4c:e8:48:
         34:04:f8:05:5e:7c:85:93:f3:44:95:e5:5d:a9:a1:a0:30:1b:
         ea:8f:e5:37:44:ed:76:33:20:d3:f0:9c:27:c1:aa:b8:da:d8:
         8c:19:36:2d:1c:c5:29:05:29:f1:59:8e:e2:7a:fc:d1:f7:a5:
         2b:25:66:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUH8CSiGbroyjssRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc3MGJlMmYtOTVhMy00M2U0LWExMzktNTM5ODQ1NjRk
YjRhMB4XDTI0MDIyNzE0MDAzMVoXDTI0MDUyNzEzMDAzMVowLzEtMCsGA1UEAxMk
MDc3YzUyYjMtNzhlYy00NDRmLWEwOWEtNTNhYjRiYzJiOWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCWGoiDB5/3Tie1d7k0GjENk4stsgj/96rUf
efG/CcSNlMMz0EtKoZ1TBj1zsnStRO9NzSuKNQ7GNDKqJDAGDBJXCy/4aR0Uwp5S
BfbGi3LtrdYPIaLc9nA23OYU7dQzutGegz819Vkk+cy0jZXnOj/yVS6/XiMBlYE+
r0RKqvjkzLIAEz06yXpPXlXcmhwEOsz8sGnEsY/dMH3UPos926bHENNBCFrfVIio
4yCSLDjdyjr/7xqqslK0J9Hj1nm46Tj1OEMV6VkHOgIOsCuDfW4oV+/yT9W+37S6
Oq7Otx3Ua6UovVyDdyWKT3F2wdE6tRwGAJP1cER+/QUD64QaCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClvyQvpZoqZMvHg4q5B7s0sC3vlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83Nzcw
YmUyZi05NWEzLTQzZTQtYTEzOS01Mzk4NDU2NGRiNGEvOGJmYmU5NDctNjEzMC0z
MDI3LTkxNjAtOTY3NWM1NDNmOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzc3MGJlMmYtOTVhMy00M2U0LWEx
MzktNTM5ODQ1NjRkYjRhLzc3NzBiZTJmLTk1YTMtNDNlNC1hMTM5LTUzOTg0NTY0
ZGI0YS5jcmwwHwYDVR0jBBgwFoAUjvyxd9ZYG8LOEg1dKulnejPHbtcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NzcwYmUyZi05NWEzLTQzZTQtYTEzOS01Mzk4
NDU2NGRiNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotXMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkGce3jcZKvCQlkbLSzvKwXIhZyp4DOUCNDkv+rIgeCA7T2kx3TG0Mb
y/m8+Of492yP455eGdaGvnZoYq2arJn26eD095s1f9QzWTwrPrqu1LKGJ5lUQr3E
wHDawQVvhDUQnpYitU1O8knAgy4xoAdmto6dauBcCeKpac+VaXhKu3JSr0KZE4+z
jOSgXS0cYRl2atZ0Gpd+vn7jJz/I2xr3ZZjijRqwEoLa5HvKfkMIlgOi+vKcxEC7
1Q0cFLOsYBHPYUzoSDQE+AVefIWT80SV5V2poaAwG+qP5TdE7XYzINPwnCfBqrja
2IwZNi0cxSkFKfFZjuJ6/NH3pSslZoI=
-----END CERTIFICATE-----
Generated at Thu May 2 04:05:38 2024 by rpki-client on console-fra.rpki-client.org