Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/e4305ce8-bf5e-3abc-bbb7-f09786714625.roa
File:                     e4305ce8-bf5e-3abc-bbb7-f09786714625.roa (raw, json)
Hash identifier:          BCk/fX4rEpccHveu6/1AmEEhACmfKZXSXnSve8RunhI=
Subject key identifier:   AC:F1:C3:4D:0B:88:77:AF:EE:CD:24:FC:67:98:63:81:5A:BF:5E:BD
Certificate issuer:       /CN=1562c1ab-b395-48ee-8d2d-f34d47e4ee63
Certificate serial:       010D0C9F43285845D503CC83AE72680AB8549C00
Authority key identifier: 4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/e4305ce8-bf5e-3abc-bbb7-f09786714625.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     14041
IP address blocks:        204.228.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:cc:83:ae:72:68:0a:b8:54:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1562c1ab-b395-48ee-8d2d-f34d47e4ee63
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=5933363b-6dd4-47a2-b458-caf87d34c1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:96:f7:d4:b2:25:7a:b8:4b:a5:b0:2a:a6:d5:
                    0f:f3:8e:8a:15:1d:1c:a7:03:59:66:ad:d5:f4:3e:
                    e8:93:4e:86:6c:05:21:b7:1d:3e:fd:96:f6:b3:2e:
                    5d:c6:3b:38:40:59:1c:e7:86:82:f7:6c:25:3a:1b:
                    a2:3e:1d:d5:36:72:52:a7:e6:19:36:db:41:79:57:
                    be:72:7a:57:7a:d8:e1:9f:2f:f9:a7:a9:e8:3e:62:
                    aa:ff:dd:f3:ea:d7:45:5b:99:bf:fd:6d:48:2f:0e:
                    99:7a:a0:95:71:96:31:50:bc:b4:d4:a7:6e:1c:9b:
                    1d:28:54:f8:cd:d0:3c:5d:ae:bb:2e:7f:e2:72:61:
                    65:c5:09:b6:9e:14:ee:73:a6:0b:df:b3:72:cb:b4:
                    24:c8:bc:e7:90:d7:3f:66:ec:8c:e1:96:63:ca:9c:
                    18:c5:52:d2:be:0b:0f:29:fe:32:48:0c:75:bf:53:
                    96:9b:aa:87:e7:43:8d:82:37:ea:5d:ac:75:55:4c:
                    40:8b:42:df:6b:87:81:b2:ea:fd:5e:cd:35:62:53:
                    c8:bd:65:e2:4a:3e:b0:cf:bd:f3:7b:5e:5b:67:bb:
                    80:de:4f:7b:31:db:06:e3:77:cc:0d:bb:4b:1a:49:
                    44:67:eb:76:64:38:af:1b:79:12:d8:4d:36:65:9f:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F1:C3:4D:0B:88:77:AF:EE:CD:24:FC:67:98:63:81:5A:BF:5E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/e4305ce8-bf5e-3abc-bbb7-f09786714625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.crl

            X509v3 Authority Key Identifier:
                keyid:4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.228.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:bc:0e:f8:d8:72:ef:7e:ff:00:ea:4c:46:98:e6:c7:a6:e1:
         1f:d5:53:ff:84:e4:1f:75:aa:a8:d0:57:4a:04:f4:62:9c:88:
         22:5a:eb:2c:9c:a3:33:de:52:a9:fb:99:97:b7:6d:89:f8:54:
         f1:85:05:ae:52:77:37:cb:1b:5c:58:82:aa:c4:b2:16:de:dd:
         b6:53:44:4a:bc:29:be:e5:28:08:6c:f7:79:a5:77:a4:80:1d:
         33:2d:5f:13:ce:a5:55:bb:ce:ca:63:68:ae:2a:f7:1a:ea:a1:
         61:6a:42:55:4d:f1:0b:97:f8:00:50:7d:52:24:71:c9:4d:b2:
         bb:a3:bf:69:e1:ad:8e:bd:3d:d8:eb:59:a1:71:13:6e:44:b4:
         59:7f:49:ad:5a:1c:c6:15:63:a2:1a:52:75:b0:a2:58:a6:d3:
         91:5f:0d:e4:b9:0d:bc:5f:32:01:81:a6:9e:04:4c:7e:f5:69:
         00:b9:6f:24:aa:35:3f:f6:49:f8:61:00:ff:43:0b:be:8c:79:
         66:07:23:7a:a9:cd:2a:39:a2:cd:e2:56:64:8c:b1:05:f4:06:
         3f:a8:98:ee:98:6e:6c:d0:40:86:38:54:f8:8f:36:bf:55:fb:
         4a:2d:dd:1e:3a:a4:26:f4:87:1e:1a:1b:8b:45:6c:44:a3:04:
         93:68:01:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA8yDrnJoCrhUnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU2MmMxYWItYjM5NS00OGVlLThkMmQtZjM0ZDQ3ZTRl
ZTYzMB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
NTkzMzM2M2ItNmRkNC00N2EyLWI0NTgtY2FmODdkMzRjMWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpb31LIlerhLpbAqptUP846KFR0cpwNZZq3V
9D7ok06GbAUhtx0+/Zb2sy5dxjs4QFkc54aC92wlOhuiPh3VNnJSp+YZNttBeVe+
cnpXetjhny/5p6noPmKq/93z6tdFW5m//W1ILw6ZeqCVcZYxULy01KduHJsdKFT4
zdA8Xa67Ln/icmFlxQm2nhTuc6YL37Nyy7QkyLznkNc/ZuyM4ZZjypwYxVLSvgsP
Kf4ySAx1v1OWm6qH50ONgjfqXax1VUxAi0Lfa4eBsur9Xs01YlPIvWXiSj6wz73z
e15bZ7uA3k97MdsG43fMDbtLGklEZ+t2ZDivG3kS2E02ZZ9dKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzxw00LiHev7s0k/GeYY4Fav169MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTYy
YzFhYi1iMzk1LTQ4ZWUtOGQyZC1mMzRkNDdlNGVlNjMvZTQzMDVjZTgtYmY1ZS0z
YWJjLWJiYjctZjA5Nzg2NzE0NjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU2MmMxYWItYjM5NS00OGVlLThk
MmQtZjM0ZDQ3ZTRlZTYzLzE1NjJjMWFiLWIzOTUtNDhlZS04ZDJkLWYzNGQ0N2U0
ZWU2My5jcmwwHwYDVR0jBBgwFoAUSiDBeHmIsE8Yj8tAz8GLaQ2Ci7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTYyYzFhYi1iMzk1LTQ4ZWUtOGQyZC1mMzRk
NDdlNGVlNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzOREMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIO8DvjYcu9+/wDqTEaY5sem4R/VU/+E5B91qqjQV0oE9GKciCJa6yyc
ozPeUqn7mZe3bYn4VPGFBa5SdzfLG1xYgqrEshbe3bZTREq8Kb7lKAhs93mld6SA
HTMtXxPOpVW7zspjaK4q9xrqoWFqQlVN8QuX+ABQfVIkcclNsrujv2nhrY69Pdjr
WaFxE25EtFl/Sa1aHMYVY6IaUnWwolim05FfDeS5DbxfMgGBpp4ETH71aQC5bySq
NT/2SfhhAP9DC76MeWYHI3qpzSo5os3iVmSMsQX0Bj+omO6YbmzQQIY4VPiPNr9V
+0ot3R46pCb0hx4aG4tFbESjBJNoAcs=
-----END CERTIFICATE-----
Generated at Sun May 12 19:09:56 2024 by rpki-client on console-ams.rpki-client.org