Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa
File:                     184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa (raw, json)
Hash identifier:          4mr6iAo3w0mqd9mdsJ3Jju0M2w5wF7khhtYggEMARh8=
Subject key identifier:   33:8D:8D:F0:73:07:90:0C:D6:72:2E:C4:BE:01:F9:D3:6E:AA:B1:84
Certificate issuer:       /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial:       010D0C9F43285845C01393EE5E419C3B693A3C80
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     42831
IP address blocks:        104.128.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:93:ee:5e:41:9c:3b:69:3a:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=6e37b447-97f9-4363-9d3f-82a455e6dfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:43:c7:a2:ab:85:c1:18:0a:24:81:8d:f9:
                    1f:a1:79:2a:0a:6e:82:c4:1d:87:aa:39:7f:45:28:
                    ac:04:75:0a:d5:cd:86:6a:1c:7b:9e:f7:85:6a:98:
                    99:93:fd:59:85:2c:fe:09:2c:c9:34:d5:20:ae:c4:
                    78:a2:e3:18:39:ae:a9:49:7a:2e:fd:ca:65:82:4e:
                    05:e6:52:b8:4c:27:29:f1:8d:de:40:26:61:88:29:
                    e8:d2:86:d0:b6:af:3f:3e:4f:49:ac:3b:22:a2:09:
                    67:59:bc:08:22:41:c6:1c:3e:f9:71:6a:73:66:b6:
                    94:64:c3:c1:e2:59:6e:4c:95:7c:17:cb:33:60:22:
                    2d:df:e7:78:4e:b5:3d:78:f0:04:ba:51:65:fd:16:
                    18:81:4c:44:4a:6d:90:14:0f:7a:9c:9d:de:3e:7e:
                    c5:e6:44:4f:b0:00:77:c4:d2:cb:6d:65:f9:3d:03:
                    0a:c3:06:38:89:f9:d7:35:da:0d:1c:3e:8a:1d:79:
                    2f:65:65:ac:78:fe:42:4e:ce:ad:e0:0d:82:ed:b2:
                    0d:1c:ca:09:b9:42:03:b0:0e:8a:83:7e:35:66:77:
                    8d:9f:bf:ed:2c:e1:38:74:17:b8:42:76:2b:56:b3:
                    58:36:fc:e7:7b:4b:fe:d3:1b:1e:5e:55:09:ed:48:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8D:8D:F0:73:07:90:0C:D6:72:2E:C4:BE:01:F9:D3:6E:AA:B1:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/184c4ea1-9be5-30b6-b2a0-97daf91eb572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c1:d7:9c:83:80:45:da:e7:a4:ed:a6:57:fa:e4:68:32:8d:
         9c:c7:83:a8:b7:de:70:34:83:1b:ae:3a:8d:b1:ae:f1:d9:00:
         02:0c:17:f3:34:05:4f:9f:c8:58:5f:ed:d3:eb:b4:1f:e3:fd:
         e2:30:88:d3:bf:6f:6a:8d:21:b9:ea:13:5a:22:b8:b0:10:9a:
         8d:12:7c:5d:34:e7:67:17:ae:63:ed:ec:30:a3:df:28:ec:6d:
         b7:97:27:66:79:73:d1:58:8b:bf:ae:5f:c6:ce:21:2d:14:a3:
         6e:c3:c8:3c:30:fd:f0:22:7e:e8:52:fe:62:5a:c2:1f:02:8e:
         37:18:b7:04:58:14:55:86:6b:0e:3d:ed:57:f1:f8:47:14:57:
         0e:cb:89:77:13:88:53:98:1d:52:ab:4b:cc:5f:f1:43:b1:9f:
         fe:2b:c4:bd:f3:74:8b:61:7c:aa:cd:98:6e:ba:85:f9:7f:e1:
         45:c2:89:5a:a3:ef:60:98:d0:21:fe:b8:3c:4e:1f:9c:c4:b4:
         6e:58:98:9b:bc:42:ab:45:6c:47:71:68:d7:ef:17:41:4c:64:
         8c:d6:ce:64:3a:a6:7f:67:cd:ad:56:73:13:76:93:f3:54:72:
         7d:f3:2f:42:db:9c:84:41:e5:05:fd:64:a5:de:c4:42:30:58:
         dd:6b:3d:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXAE5PuXkGcO2k6PIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj
ODVmMB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk
NmUzN2I0NDctOTdmOS00MzYzLTlkM2YtODJhNDU1ZTZkZmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk15Dx6KrhcEYCiSBjfkfoXkqCm6CxB2Hqjl/
RSisBHUK1c2Gahx7nveFapiZk/1ZhSz+CSzJNNUgrsR4ouMYOa6pSXou/cplgk4F
5lK4TCcp8Y3eQCZhiCno0obQtq8/Pk9JrDsioglnWbwIIkHGHD75cWpzZraUZMPB
4lluTJV8F8szYCIt3+d4TrU9ePAEulFl/RYYgUxESm2QFA96nJ3ePn7F5kRPsAB3
xNLLbWX5PQMKwwY4ifnXNdoNHD6KHXkvZWWseP5CTs6t4A2C7bINHMoJuUIDsA6K
g341ZneNn7/tLOE4dBe4QnYrVrNYNvzne0v+0xseXlUJ7UgRZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDONjfBzB5AM1nIuxL4B+dNuqrGEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5
ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvMTg0YzRlYTEtOWJlNS0z
MGI2LWIyYTAtOTdkYWY5MWViNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0
MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz
Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi
NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIC+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzB15yDgEXa56Ttplf65GgyjZzHg6i33nA0gxuuOo2xrvHZAAIMF/M0
BU+fyFhf7dPrtB/j/eIwiNO/b2qNIbnqE1oiuLAQmo0SfF0052cXrmPt7DCj3yjs
bbeXJ2Z5c9FYi7+uX8bOIS0Uo27DyDww/fAifuhS/mJawh8CjjcYtwRYFFWGaw49
7Vfx+EcUVw7LiXcTiFOYHVKrS8xf8UOxn/4rxL3zdIthfKrNmG66hfl/4UXCiVqj
72CY0CH+uDxOH5zEtG5YmJu8QqtFbEdxaNfvF0FMZIzWzmQ6pn9nza1WcxN2k/NU
cn3zL0LbnIRB5QX9ZKXexEIwWN1rPRM=
-----END CERTIFICATE-----
Generated at Sat May 4 02:39:11 2024 by rpki-client on console-fra.rpki-client.org