Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/eb1d30cd-56d3-3a4c-b24a-94c218a76dc0.roa
File:                     eb1d30cd-56d3-3a4c-b24a-94c218a76dc0.roa (raw, json)
Hash identifier:          xYT8GBIa/LJTlLf115a3+AXhbUgZA4cu6DXsjuLU5OQ=
Subject key identifier:   32:9B:20:9D:D7:AD:A3:4B:85:EB:70:32:2A:ED:3E:35:FB:58:B5:30
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285845BA7E2CE38766D486CF199200
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/eb1d30cd-56d3-3a4c-b24a-94c218a76dc0.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     3561
IP address blocks:        208.164.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2c:e3:87:66:d4:86:cf:19:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=210197c7-4592-4c17-868f-7867a3ce6677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:98:e5:e4:cb:7b:af:a3:1d:dd:1f:5b:f8:
                    35:86:98:d8:43:0c:99:e2:90:79:3b:ca:ee:88:44:
                    ce:b2:bb:c3:3c:ca:eb:9d:89:3e:44:28:44:0b:1d:
                    c9:1b:3e:01:41:6a:7c:c5:24:74:36:e0:91:bb:44:
                    c4:84:68:68:6e:4d:1a:2e:49:69:20:3a:c9:ba:96:
                    ae:25:6f:8d:1f:24:4a:30:9f:17:9c:8a:b7:a3:27:
                    93:41:23:f0:f0:7d:84:bc:26:c4:1a:4d:e2:f4:0d:
                    d5:e2:1d:50:4f:02:6b:9e:03:7b:b4:b2:4a:80:1e:
                    84:e0:1b:7d:d3:29:7e:18:56:d7:dc:d3:73:6f:28:
                    d4:a2:95:d6:fd:43:0b:55:9f:47:fd:79:b4:52:69:
                    67:f0:9f:43:0f:5b:8c:08:53:93:49:cc:98:75:e6:
                    38:1c:f1:be:d0:d9:5e:48:ea:de:cb:18:76:b8:a7:
                    f3:cb:c9:1c:6a:33:fd:94:4d:43:f0:de:b1:d1:16:
                    9a:41:a3:14:dd:1d:85:ce:27:95:89:1a:1f:ab:61:
                    ad:72:dc:d8:8f:e5:40:a2:7d:f8:6e:ad:50:dd:10:
                    ad:41:81:7f:95:92:eb:95:a5:8b:1a:c2:78:0b:72:
                    dc:55:db:51:3f:b8:a7:37:ca:85:c6:2e:69:2b:3e:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9B:20:9D:D7:AD:A3:4B:85:EB:70:32:2A:ED:3E:35:FB:58:B5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/eb1d30cd-56d3-3a4c-b24a-94c218a76dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.164.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3b:68:df:cd:ee:96:57:28:e6:9d:66:0a:bb:0b:27:89:ea:
         14:3e:ba:29:22:9b:7f:16:16:d6:6f:48:e0:aa:f0:37:40:be:
         55:24:7d:8c:5e:e7:ef:0a:c6:2c:55:1b:fa:32:85:cb:03:1b:
         c8:e7:b4:2e:35:b6:af:bb:1b:8d:90:77:b0:39:39:d2:8f:3a:
         82:9d:05:4a:4e:de:c7:ea:12:2e:15:66:28:07:5c:c7:45:c8:
         1a:a1:cd:7f:0f:db:18:ac:eb:30:ad:a2:0a:1d:4c:54:57:e8:
         4b:b4:61:f7:24:15:d9:43:15:a9:72:16:c8:e1:94:d7:cf:52:
         75:07:ab:b0:c2:f4:3a:de:ee:72:6a:eb:38:da:14:73:77:06:
         d2:02:00:ea:06:8b:90:b8:dd:63:9c:6a:0a:5d:3a:53:de:fc:
         b1:db:6e:6d:b9:2e:6a:ce:e9:43:96:58:d8:97:dd:bb:63:52:
         bc:7d:5e:69:32:51:61:be:f2:e4:d4:a0:0e:76:7a:c3:c4:cf:
         41:9c:fa:25:c8:5f:c7:80:60:de:fd:f1:70:b7:8e:51:28:60:
         2b:8e:e1:53:e7:74:1f:44:c3:d2:1e:79:91:5e:3e:f1:83:75:
         11:fa:a7:be:ae:16:0f:66:b7:cb:2d:16:46:2f:8d:69:cf:77:
         a0:49:00:0d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEW6fizjh2bUhs8ZkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI0MDUwMTEzMDAzNFoXDTI0MDczMDEzMDAzNFowLzEtMCsGA1UEAxMk
MjEwMTk3YzctNDU5Mi00YzE3LTg2OGYtNzg2N2EzY2U2Njc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs32Y5eTLe6+jHd0fW/g1hpjYQwyZ4pB5O8ru
iETOsrvDPMrrnYk+RChECx3JGz4BQWp8xSR0NuCRu0TEhGhobk0aLklpIDrJupau
JW+NHyRKMJ8XnIq3oyeTQSPw8H2EvCbEGk3i9A3V4h1QTwJrngN7tLJKgB6E4Bt9
0yl+GFbX3NNzbyjUopXW/UMLVZ9H/Xm0Umln8J9DD1uMCFOTScyYdeY4HPG+0Nle
SOreyxh2uKfzy8kcajP9lE1D8N6x0RaaQaMU3R2FzieViRofq2GtctzYj+VAon34
bq1Q3RCtQYF/lZLrlaWLGsJ4C3LcVdtRP7inN8qFxi5pKz6XFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDKbIJ3XraNLhetwMirtPjX7WLUwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZWIxZDMwY2QtNTZkMy0z
YTRjLWIyNGEtOTRjMjE4YTc2ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB0KQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASTto383ullco5p1mCrsLJ4nqFD66KSKbfxYW1m9I4KrwN0C+VSR9jF7n
7wrGLFUb+jKFywMbyOe0LjW2r7sbjZB3sDk50o86gp0FSk7ex+oSLhVmKAdcx0XI
GqHNfw/bGKzrMK2iCh1MVFfoS7Rh9yQV2UMVqXIWyOGU189SdQersML0Ot7ucmrr
ONoUc3cG0gIA6gaLkLjdY5xqCl06U978sdtubbkuas7pQ5ZY2Jfdu2NSvH1eaTJR
Yb7y5NSgDnZ6w8TPQZz6Jchfx4Bg3v3xcLeOUShgK47hU+d0H0TD0h55kV4+8YN1
Efqnvq4WD2a3yy0WRi+Nac93oEkADQ==
-----END CERTIFICATE-----
Generated at Mon May 6 15:06:10 2024 by rpki-client on console-ams.rpki-client.org