Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa
File:                     52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa (raw, json)
Hash identifier:          MYwFdNWEUc8pQi4ETEfh0N2yUR67TZlOoyy5Ju2JEyE=
Subject key identifier:   9F:37:F6:8D:F0:E0:F2:51:2F:7F:78:74:5F:E1:37:9A:25:33:5F:CB
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858457FDDE20D292365795AE15300
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     14015
IP address blocks:        148.76.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:e2:0d:29:23:65:79:5a:e1:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=fa77025f-2e68-4fe4-8ed8-095d7d3451c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:71:4c:65:c2:69:65:bd:b6:b9:f7:2c:35:
                    28:e5:c7:86:0e:48:22:f3:21:f1:47:93:ec:bb:c6:
                    69:ae:80:fc:0c:5e:ab:46:34:7a:1a:e8:99:9f:27:
                    b0:85:1b:89:e8:ad:aa:cc:68:e6:28:3d:51:3f:82:
                    54:43:a4:6f:82:23:2b:cd:b8:7b:f5:29:99:af:fb:
                    44:0e:59:91:8e:ce:3a:2d:56:35:b3:66:61:6a:e0:
                    e8:2d:ac:04:aa:e2:fd:01:28:90:94:84:8f:a0:33:
                    7d:4c:18:ed:d3:69:3e:24:06:e4:80:ad:e7:e5:08:
                    10:ad:2a:f8:af:55:2e:94:2f:83:bf:31:a1:ab:a1:
                    ed:3b:62:4a:36:ee:4d:0f:72:83:10:7b:5d:22:60:
                    00:e7:a0:6e:3f:44:26:89:40:4d:0f:3f:9b:e3:6c:
                    ea:13:b6:60:ac:5c:60:60:85:63:45:90:58:ad:61:
                    2f:70:b6:a8:77:5b:55:69:f8:ee:d7:28:40:12:6a:
                    ea:a5:4a:88:a7:7e:b0:8e:d3:0f:f7:d7:2f:c2:80:
                    44:f1:3a:b1:76:9c:3c:d8:b1:0a:24:41:18:1d:f1:
                    69:0f:e3:04:d2:a6:5e:78:48:2e:3b:97:c2:53:d8:
                    77:fb:9d:86:ff:1d:3e:24:a9:72:d1:8f:ea:c0:f4:
                    f4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:37:F6:8D:F0:E0:F2:51:2F:7F:78:74:5F:E1:37:9A:25:33:5F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/52bbfc69-b5ac-3604-941b-13254b2d5eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:88:23:df:7e:64:66:71:6d:c8:0e:b1:a3:c7:8b:ab:5b:f0:
         c3:3b:98:7a:68:4d:90:d7:3f:9c:ea:48:86:67:3b:2e:ce:46:
         df:6c:2b:6a:db:df:4c:28:18:92:a0:68:29:e9:10:98:ae:b2:
         d1:0d:c7:0f:39:2b:da:47:01:12:e8:fd:df:c4:b1:d3:d3:95:
         6c:31:44:7a:42:a1:87:eb:56:8f:a1:9b:a9:7d:54:8c:d7:1d:
         bb:4f:b6:e7:61:4d:62:e5:2f:c0:b8:22:58:82:25:87:6f:9f:
         37:08:bd:b6:4a:2a:1f:46:6b:1e:46:4a:d1:a4:1b:47:04:a4:
         4c:3a:e2:5a:aa:71:6f:e7:98:56:cb:a1:5d:99:3d:66:a1:cc:
         c0:11:58:e0:03:76:b2:4e:8d:d9:94:e5:b8:2a:b0:8a:59:a5:
         e4:c9:29:00:f7:2a:9e:cf:3a:0f:a1:9a:ca:ad:58:80:b0:0f:
         13:c3:46:0c:b3:77:04:b7:84:44:85:49:9f:bc:b4:02:3b:7d:
         6f:55:4f:ca:ab:78:80:6b:0d:3d:1e:50:b5:d9:f2:91:ab:7c:
         0d:18:a6:44:db:7b:fc:76:3f:7a:29:74:cd:9a:23:f0:ea:88:
         29:2d:c8:50:0c:08:c4:37:8b:f8:3d:f0:72:ee:ff:46:7d:e2:
         10:97:cb:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV/3eINKSNleVrhUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU0NTliZTEtZjJjNy00NGEyLWFjNjktMDFkMjM4ZjFi
MGRlMB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
ZmE3NzAyNWYtMmU2OC00ZmU0LThlZDgtMDk1ZDdkMzQ1MWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfBxTGXCaWW9trn3LDUo5ceGDkgi8yHxR5Ps
u8ZproD8DF6rRjR6GuiZnyewhRuJ6K2qzGjmKD1RP4JUQ6RvgiMrzbh79SmZr/tE
DlmRjs46LVY1s2ZhauDoLawEquL9ASiQlISPoDN9TBjt02k+JAbkgK3n5QgQrSr4
r1UulC+DvzGhq6HtO2JKNu5ND3KDEHtdImAA56BuP0QmiUBNDz+b42zqE7ZgrFxg
YIVjRZBYrWEvcLaod1tVafju1yhAEmrqpUqIp36wjtMP99cvwoBE8Tqxdpw82LEK
JEEYHfFpD+ME0qZeeEguO5fCU9h3+52G/x0+JKly0Y/qwPT0awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ839o3w4PJRL394dF/hN5olM1/LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1
OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQyMzhmMWIwZGUvNTJiYmZjNjktYjVhYy0z
NjA0LTk0MWItMTMyNTRiMmQ1ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU0NTliZTEtZjJjNy00NGEyLWFj
NjktMDFkMjM4ZjFiMGRlLzE1NDU5YmUxLWYyYzctNDRhMi1hYzY5LTAxZDIzOGYx
YjBkZS5jcmwwHwYDVR0jBBgwFoAUBXpuInCyuuyxWzzTdkAFIVAzxRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQy
MzhmMWIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlEx0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFeII99+ZGZxbcgOsaPHi6tb8MM7mHpoTZDXP5zqSIZnOy7ORt9sK2rb
30woGJKgaCnpEJiustENxw85K9pHARLo/d/EsdPTlWwxRHpCoYfrVo+hm6l9VIzX
HbtPtudhTWLlL8C4IliCJYdvnzcIvbZKKh9Gax5GStGkG0cEpEw64lqqcW/nmFbL
oV2ZPWahzMARWOADdrJOjdmU5bgqsIpZpeTJKQD3Kp7POg+hmsqtWICwDxPDRgyz
dwS3hESFSZ+8tAI7fW9VT8qreIBrDT0eULXZ8pGrfA0YpkTbe/x2P3opdM2aI/Dq
iCktyFAMCMQ3i/g98HLu/0Z94hCXy3I=
-----END CERTIFICATE-----
Generated at Mon May 13 16:54:50 2024 by rpki-client on console-ams.rpki-client.org