Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa
File:                     acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa (raw, json)
Hash identifier:          EWmCXeqa4DhS5bKvznjC9l5Uq6585chFySOomH1FCws=
Subject key identifier:   FC:A9:4E:1B:F0:C5:D3:B3:7E:58:F8:BB:E8:B3:E9:6F:DF:EE:E5:AA
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F432858453FE4FA8EC2E170FAACE91340
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa
Signing time:             Mon 18 Mar 2024 15:03:22 +0000
ROA not before:           Mon 18 Mar 2024 15:03:22 +0000
ROA not after:            Sun 16 Jun 2024 15:03:22 +0000
asID:                     19442
IP address blocks:        192.25.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3f:e4:fa:8e:c2:e1:70:fa:ac:e9:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: Mar 18 15:03:22 2024 GMT
            Not After : Jun 16 15:03:22 2024 GMT
        Subject: CN=c7ff6536-ac0e-47f3-aad7-114650ca6f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:5c:df:d2:be:59:d1:00:21:7b:c4:8b:c8:
                    a3:b0:50:c3:94:60:22:4a:93:d3:b6:a3:e7:22:a0:
                    41:15:9e:a0:8e:2d:9b:d3:43:6e:62:6b:bf:37:7d:
                    f7:fa:c3:00:20:49:e3:f4:2b:d5:98:34:f6:16:0f:
                    bc:db:aa:55:b8:bf:fb:a1:a6:14:2c:76:4f:7e:1b:
                    f1:67:81:30:1f:bb:8d:98:14:01:b5:e2:be:a2:86:
                    bf:54:9c:1e:e7:58:46:4e:69:ca:85:8f:9f:32:83:
                    6f:cc:0f:4e:40:df:9c:9d:ef:7f:f2:52:28:23:b3:
                    95:a4:70:82:3d:6a:bb:e5:4f:05:0f:ac:c3:44:7c:
                    e0:e1:b4:93:2b:2b:3d:10:63:58:b3:94:27:13:02:
                    3d:7d:75:8d:5c:aa:70:19:d0:c7:93:47:61:30:37:
                    bf:da:39:ca:a1:53:9c:76:76:ca:b1:62:21:9b:17:
                    c8:ea:5a:36:60:62:b0:47:59:2c:2a:08:e0:50:53:
                    96:b8:a7:33:db:ba:5f:57:80:8b:87:b3:e9:85:3e:
                    41:cf:ac:68:0d:9b:e7:af:a5:6e:9b:2b:68:69:4b:
                    8d:fc:b7:13:9f:7a:4b:1d:55:b0:36:92:d8:3a:7c:
                    03:4e:e5:05:c0:85:17:02:6e:a7:0a:8f:e5:34:45:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A9:4E:1B:F0:C5:D3:B3:7E:58:F8:BB:E8:B3:E9:6F:DF:EE:E5:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:23:83:6e:c3:ff:33:7e:c9:86:b1:89:7d:7c:45:7f:1c:
         b4:ee:39:eb:04:c6:f5:de:d1:73:78:41:75:45:af:15:6e:85:
         10:a0:25:9e:3f:61:35:be:cf:38:87:84:89:02:83:79:b7:ba:
         b2:ee:fa:5d:2f:b3:40:8f:2b:53:a8:43:32:b4:9d:7f:d0:ff:
         40:75:88:73:81:e4:d6:5b:82:92:68:f3:03:76:89:9f:df:a0:
         a6:b4:aa:26:69:29:45:b0:16:c1:79:58:77:05:e8:18:30:09:
         1b:6b:31:20:f1:6f:d7:43:ab:80:43:04:70:00:76:75:66:d0:
         fb:bb:ed:54:ac:e8:33:2f:84:b2:1e:56:f0:f7:91:48:76:99:
         2b:b2:d9:d9:34:2d:3f:f1:b8:fd:58:c4:d6:74:86:5e:3f:75:
         b4:3a:d3:7f:85:80:b3:22:4c:e5:3e:9e:62:a3:3a:b8:32:de:
         a8:b4:81:94:3f:03:68:85:3e:57:c8:d7:25:bf:5c:a9:c6:e4:
         4c:a1:1d:7d:72:e9:c5:05:56:a3:54:b8:8c:1d:48:b5:91:c2:
         1d:a3:e8:4f:d4:a3:bb:e4:f5:c4:33:ab:47:7b:01:44:26:00:
         2b:37:33:71:2a:19:12:4d:bf:a1:8e:f9:5e:87:74:00:1f:25:
         1f:01:df:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU/5PqOwuFw+qzpE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg0ZjQ1YmMtNjFiMy00M2RkLWI4NTgtMGViMWE2YTdi
NzJlMB4XDTI0MDMxODE1MDMyMloXDTI0MDYxNjE1MDMyMlowLzEtMCsGA1UEAxMk
YzdmZjY1MzYtYWMwZS00N2YzLWFhZDctMTE0NjUwY2E2ZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWBc39K+WdEAIXvEi8ijsFDDlGAiSpPTtqPn
IqBBFZ6gji2b00NuYmu/N333+sMAIEnj9CvVmDT2Fg+826pVuL/7oaYULHZPfhvx
Z4EwH7uNmBQBteK+ooa/VJwe51hGTmnKhY+fMoNvzA9OQN+cne9/8lIoI7OVpHCC
PWq75U8FD6zDRHzg4bSTKys9EGNYs5QnEwI9fXWNXKpwGdDHk0dhMDe/2jnKoVOc
dnbKsWIhmxfI6lo2YGKwR1ksKgjgUFOWuKcz27pfV4CLh7PphT5Bz6xoDZvnr6Vu
mytoaUuN/LcTn3pLHVWwNpLYOnwDTuUFwIUXAm6nCo/lNEXu4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPypThvwxdOzflj4u+iz6W/f7uWqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRm
NDViYy02MWIzLTQzZGQtYjg1OC0wZWIxYTZhN2I3MmUvYWNmNmY5MGUtNmUwNC0z
N2NiLWEyYjYtYTk4NTM1ZGQ2MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTg0ZjQ1YmMtNjFiMy00M2RkLWI4
NTgtMGViMWE2YTdiNzJlLzE4NGY0NWJjLTYxYjMtNDNkZC1iODU4LTBlYjFhNmE3
YjcyZS5jcmwwHwYDVR0jBBgwFoAU1su1+FzryDHOMvoxQFhDa7e70sswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRmNDViYy02MWIzLTQzZGQtYjg1OC0wZWIx
YTZhN2I3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBmYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+XI4Nuw/8zfsmGsYl9fEV/HLTuOesExvXe0XN4QXVFrxVuhRCgJZ4/
YTW+zziHhIkCg3m3urLu+l0vs0CPK1OoQzK0nX/Q/0B1iHOB5NZbgpJo8wN2iZ/f
oKa0qiZpKUWwFsF5WHcF6BgwCRtrMSDxb9dDq4BDBHAAdnVm0Pu77VSs6DMvhLIe
VvD3kUh2mSuy2dk0LT/xuP1YxNZ0hl4/dbQ603+FgLMiTOU+nmKjOrgy3qi0gZQ/
A2iFPlfI1yW/XKnG5EyhHX1y6cUFVqNUuIwdSLWRwh2j6E/Uo7vk9cQzq0d7AUQm
ACs3M3EqGRJNv6GO+V6HdAAfJR8B3+4=
-----END CERTIFICATE-----
Generated at Fri May 10 00:36:42 2024 by rpki-client on console-fra.rpki-client.org