Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/5d616ec8-7340-395a-9d6b-483ceb57914d.roa
File:                     5d616ec8-7340-395a-9d6b-483ceb57914d.roa (raw, json)
Hash identifier:          YGZ0WFgsde3CVJGhUH5cZlUU5QQx5Q6Mxo9OzdaybKo=
Subject key identifier:   56:09:8E:77:95:C3:47:25:39:3B:58:25:65:E8:CE:CF:4F:D0:05:F6
Certificate issuer:       /CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
Certificate serial:       010D0C9F43285844DCAA7693BFD89988FD4D3970
Authority key identifier: C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/5d616ec8-7340-395a-9d6b-483ceb57914d.roa
Signing time:             Mon 12 Feb 2024 02:00:25 +0000
ROA not before:           Mon 12 Feb 2024 02:00:25 +0000
ROA not after:            Sun 12 May 2024 01:00:25 +0000
asID:                     48252
IP address blocks:        192.163.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dc:aa:76:93:bf:d8:99:88:fd:4d:39:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
        Validity
            Not Before: Feb 12 02:00:25 2024 GMT
            Not After : May 12 01:00:25 2024 GMT
        Subject: CN=f447ed10-a13c-471e-b15f-5a83167d4206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:1f:7c:96:e7:8e:17:a0:66:eb:77:cd:e1:
                    02:b0:38:0c:ab:02:d6:f1:81:cc:73:92:c9:4c:03:
                    d9:c8:d6:95:49:3b:c5:47:37:51:dc:aa:dd:31:64:
                    b0:69:9e:de:19:f0:17:1e:ec:56:76:11:b3:f8:4b:
                    cf:80:23:bd:6c:46:e3:bb:ea:1f:d4:f7:4b:8b:c2:
                    a7:8b:aa:29:96:c4:b8:f4:9b:ad:22:6e:ab:7b:96:
                    18:3e:79:5b:fc:22:49:30:d1:d0:82:14:b9:28:43:
                    98:78:8d:c1:70:6b:76:36:fb:34:65:fe:87:40:ba:
                    f3:99:84:0c:e5:d6:69:3c:3a:9f:be:df:ea:26:4f:
                    5a:68:95:83:97:f6:43:51:11:55:21:38:08:08:5c:
                    d8:3f:ca:07:1f:db:a2:66:90:d1:f7:cd:53:ca:ef:
                    14:88:3c:df:9a:2e:7f:0e:55:01:b6:c3:52:64:f7:
                    e3:de:4e:22:29:88:80:8c:cf:16:55:9d:1f:81:7d:
                    ce:de:ed:f7:42:b5:95:f1:65:d9:5e:f3:fd:27:81:
                    6d:4c:23:d2:d2:a4:5b:c0:70:e2:ff:2d:b6:82:85:
                    9b:2e:98:00:f0:da:50:39:89:42:bd:68:e7:a1:c5:
                    1c:ac:bb:c4:60:61:03:bb:59:fc:64:f0:cc:84:3d:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:8E:77:95:C3:47:25:39:3B:58:25:65:E8:CE:CF:4F:D0:05:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/5d616ec8-7340-395a-9d6b-483ceb57914d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1f:ea:3d:bb:b7:ce:bc:1b:e8:99:05:d2:95:61:61:81:e3:
         fa:54:88:f3:a7:c1:ec:62:90:00:88:68:bb:68:08:cc:2b:e7:
         84:44:6b:76:6d:7c:43:56:2d:2e:0b:94:c9:cc:74:1b:16:c4:
         4a:f8:ac:6a:a6:72:a4:cf:05:7c:ee:8e:a2:f1:93:de:5c:95:
         ec:0f:4b:0e:b1:b5:e4:0d:1d:db:7b:8b:ac:3e:63:6a:8c:5f:
         ac:b8:97:83:df:47:0e:d5:d5:b3:49:76:09:8a:cb:7c:8f:0d:
         74:a8:c5:ee:cf:45:1f:ea:c8:5a:30:dd:4d:ea:39:ff:a5:23:
         75:0a:db:5e:9e:4a:01:bb:8a:f8:58:7a:14:4e:2f:01:af:6e:
         e6:91:3e:2b:c3:84:82:29:0f:56:7c:90:ac:4d:01:6e:19:28:
         f1:b5:1e:79:9d:9a:12:91:95:90:f7:67:38:3f:1f:0d:26:a7:
         e1:3d:c4:ff:f7:1d:9a:b4:53:52:90:a8:b7:fd:48:62:d4:8d:
         55:34:09:47:bd:ec:f5:21:a3:d2:d6:f7:90:dc:36:e8:3d:42:
         68:1d:b5:ea:2e:5e:3e:68:fe:6c:3f:1d:a9:1a:39:c3:2f:5b:
         54:d8:ac:b2:f6:fb:c5:69:c0:5b:ae:ca:26:e7:ed:08:6d:6d:
         85:dc:c1:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETcqnaTv9iZiP1NOXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ3Yzc3ZWMtMGFkMC00ODRiLWEwYzUtZjVjYjEyZDFk
ZTgyMB4XDTI0MDIxMjAyMDAyNVoXDTI0MDUxMjAxMDAyNVowLzEtMCsGA1UEAxMk
ZjQ0N2VkMTAtYTEzYy00NzFlLWIxNWYtNWE4MzE2N2Q0MjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppgffJbnjhegZut3zeECsDgMqwLW8YHMc5LJ
TAPZyNaVSTvFRzdR3KrdMWSwaZ7eGfAXHuxWdhGz+EvPgCO9bEbju+of1PdLi8Kn
i6oplsS49JutIm6re5YYPnlb/CJJMNHQghS5KEOYeI3BcGt2Nvs0Zf6HQLrzmYQM
5dZpPDqfvt/qJk9aaJWDl/ZDURFVITgICFzYP8oHH9uiZpDR981Tyu8UiDzfmi5/
DlUBtsNSZPfj3k4iKYiAjM8WVZ0fgX3O3u33QrWV8WXZXvP9J4FtTCPS0qRbwHDi
/y22goWbLpgA8NpQOYlCvWjnocUcrLvEYGEDu1n8ZPDMhD2oVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYJjneVw0clOTtYJWXozs9P0AX2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdj
NzdlYy0wYWQwLTQ4NGItYTBjNS1mNWNiMTJkMWRlODIvNWQ2MTZlYzgtNzM0MC0z
OTVhLTlkNmItNDgzY2ViNTc5MTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ3Yzc3ZWMtMGFkMC00ODRiLWEw
YzUtZjVjYjEyZDFkZTgyLzFkN2M3N2VjLTBhZDAtNDg0Yi1hMGM1LWY1Y2IxMmQx
ZGU4Mi5jcmwwHwYDVR0jBBgwFoAUw4Yz49c8TTQljj4eKbNU3e5RIyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdjNzdlYy0wYWQwLTQ4NGItYTBjNS1mNWNi
MTJkMWRlODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKMYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkf6j27t868G+iZBdKVYWGB4/pUiPOnwexikACIaLtoCMwr54REa3Zt
fENWLS4LlMnMdBsWxEr4rGqmcqTPBXzujqLxk95clewPSw6xteQNHdt7i6w+Y2qM
X6y4l4PfRw7V1bNJdgmKy3yPDXSoxe7PRR/qyFow3U3qOf+lI3UK216eSgG7ivhY
ehROLwGvbuaRPivDhIIpD1Z8kKxNAW4ZKPG1HnmdmhKRlZD3Zzg/Hw0mp+E9xP/3
HZq0U1KQqLf9SGLUjVU0CUe97PUho9LW95DcNug9QmgdteouXj5o/mw/HakaOcMv
W1TYrLL2+8VpwFuuyibn7QhtbYXcwbs=
-----END CERTIFICATE-----
Generated at Thu May 2 04:21:09 2024 by rpki-client on console-ams.rpki-client.org