Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/048848ee-d5a1-37ab-b69b-dea2827f99d9.roa
File:                     048848ee-d5a1-37ab-b69b-dea2827f99d9.roa (raw, json)
Hash identifier:          YyEDM8QdfIrUPk6rm/2+O4Vk6w1iksh3U1Q6UAN1RXs=
Subject key identifier:   8A:A5:54:E4:74:50:1F:5A:CD:88:07:08:70:2E:8D:A3:1B:88:90:08
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F432858455CF82C06866F60CF1BAAF980
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/048848ee-d5a1-37ab-b69b-dea2827f99d9.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     393457
IP address blocks:        64.191.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2c:06:86:6f:60:cf:1b:aa:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=b6cc8ef8-465d-44ad-b24d-40669e4715a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:f9:5e:af:09:1d:e0:bf:99:81:2f:59:cf:
                    69:56:de:4a:55:fc:37:03:f6:26:e5:d4:72:dd:d5:
                    79:78:0d:71:69:48:c1:82:93:21:5c:fd:1f:a4:ea:
                    e3:c3:49:95:66:f3:1c:3c:2e:98:20:a9:f9:f3:51:
                    48:d1:75:52:88:f3:bf:31:83:98:5a:ae:d4:6d:fa:
                    5e:96:f1:38:28:49:77:fb:4e:cc:8a:86:31:3e:78:
                    bb:9f:71:14:3d:a4:c6:78:06:38:96:ea:69:5b:68:
                    04:e6:8d:d4:ab:9c:d0:cf:36:09:9b:ba:cc:c8:28:
                    22:e5:36:44:ba:0b:43:74:42:01:eb:f3:8b:02:92:
                    df:c9:6f:2a:59:99:84:21:23:5b:f0:00:06:40:18:
                    bd:3f:66:62:9e:31:79:17:ce:a9:96:52:20:52:f3:
                    f2:18:d0:18:a8:96:45:e6:95:1a:39:2a:5a:2e:9f:
                    2a:e4:7d:ee:fc:fe:8e:fc:08:03:34:df:c4:d1:16:
                    ed:37:2a:27:78:06:10:9b:5c:02:5c:c3:23:f2:be:
                    17:b9:c3:a0:a4:48:cc:af:3c:25:c4:59:b3:eb:be:
                    b0:86:2c:7b:82:1f:95:99:26:03:65:45:d7:62:cf:
                    ef:02:43:40:21:51:f2:a0:c5:16:23:b5:88:0b:4b:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A5:54:E4:74:50:1F:5A:CD:88:07:08:70:2E:8D:A3:1B:88:90:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/048848ee-d5a1-37ab-b69b-dea2827f99d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.191.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:21:6d:3a:b3:3e:63:f6:bc:94:ce:7c:a9:10:91:53:21:
         42:7b:4a:84:29:5f:28:4f:c3:f5:12:21:01:7d:8b:2b:73:74:
         d2:ee:78:78:05:ef:91:f2:23:f1:c2:fc:dd:53:5d:c4:7a:00:
         f8:f7:28:e6:0c:02:a3:1b:3b:0e:24:77:ac:84:3a:2f:09:28:
         f6:00:fe:59:98:02:67:95:d5:ad:a3:ca:a1:7a:61:3b:bd:9b:
         c7:f4:56:0b:50:84:52:42:98:35:01:38:a7:03:b4:cc:6a:06:
         fe:82:a5:6e:55:f7:e1:43:24:a8:2f:ad:b6:03:d9:e3:b6:03:
         e2:93:9f:72:f3:c2:bf:1e:43:3d:eb:3b:2b:61:02:f3:05:5a:
         47:56:9b:fa:c0:2d:f8:e8:23:24:6f:ec:3d:67:13:3e:e3:2d:
         3d:5f:a2:8c:6d:2a:34:12:3e:84:ef:86:0b:3f:7e:41:bf:e5:
         62:f5:ad:1a:c5:b7:f4:55:3d:b8:c2:36:49:bc:73:fb:d7:0e:
         08:29:10:f1:e3:f9:5a:f6:00:c6:e8:0b:b5:dd:4f:2a:d0:3f:
         33:d3:bc:20:06:c1:48:ee:09:1f:d3:bc:2d:6b:27:aa:33:7f:
         65:49:53:48:ed:50:a8:11:f3:34:38:8a:54:3c:90:31:31:64:
         cc:c7:9b:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVc+CwGhm9gzxuq+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVmZjgxNmYtNDJlZi00N2E2LWJhNjEtNzA3NWFkYjg1
MzI5MB4XDTI0MDMyOTAxMDAyNloXDTI0MDYyNzAxMDAyNlowLzEtMCsGA1UEAxMk
YjZjYzhlZjgtNDY1ZC00NGFkLWIyNGQtNDA2NjllNDcxNWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuf5Xq8JHeC/mYEvWc9pVt5KVfw3A/Ym5dRy
3dV5eA1xaUjBgpMhXP0fpOrjw0mVZvMcPC6YIKn581FI0XVSiPO/MYOYWq7Ubfpe
lvE4KEl3+07MioYxPni7n3EUPaTGeAY4luppW2gE5o3Uq5zQzzYJm7rMyCgi5TZE
ugtDdEIB6/OLApLfyW8qWZmEISNb8AAGQBi9P2ZinjF5F86pllIgUvPyGNAYqJZF
5pUaOSpaLp8q5H3u/P6O/AgDNN/E0RbtNyoneAYQm1wCXMMj8r4XucOgpEjMrzwl
xFmz676whix7gh+VmSYDZUXXYs/vAkNAIVHyoMUWI7WIC0v2YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIqlVOR0UB9azYgHCHAujaMbiJAIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZm
ODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1YWRiODUzMjkvMDQ4ODQ4ZWUtZDVhMS0z
N2FiLWI2OWItZGVhMjgyN2Y5OWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWVmZjgxNmYtNDJlZi00N2E2LWJh
NjEtNzA3NWFkYjg1MzI5L2VlZmY4MTZmLTQyZWYtNDdhNi1iYTYxLTcwNzVhZGI4
NTMyOS5jcmwwHwYDVR0jBBgwFoAU6ll783GIb8wezeqNVRDlPcsR9H0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZmODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1
YWRiODUzMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQL8oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD8BIW06sz5j9ryUznypEJFTIUJ7SoQpXyhPw/USIQF9iytzdNLueHgF
75HyI/HC/N1TXcR6APj3KOYMAqMbOw4kd6yEOi8JKPYA/lmYAmeV1a2jyqF6YTu9
m8f0VgtQhFJCmDUBOKcDtMxqBv6CpW5V9+FDJKgvrbYD2eO2A+KTn3Lzwr8eQz3r
OythAvMFWkdWm/rALfjoIyRv7D1nEz7jLT1fooxtKjQSPoTvhgs/fkG/5WL1rRrF
t/RVPbjCNkm8c/vXDggpEPHj+Vr2AMboC7XdTyrQPzPTvCAGwUjuCR/TvC1rJ6oz
f2VJU0jtUKgR8zQ4ilQ8kDExZMzHm5M=
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:38 2024 by rpki-client on console-ams.rpki-client.org