Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/15ee982d-a6ad-3477-95a4-e3a44b53225c.roa
File:                     15ee982d-a6ad-3477-95a4-e3a44b53225c.roa (raw, json)
Hash identifier:          8f7J9kbijTYGZJNdF6oZnRsAFVjPqK253g10ok5ag7I=
Subject key identifier:   33:F6:23:DE:3C:CC:FF:E7:E5:13:41:2F:B3:F8:4D:A1:94:4B:C1:95
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F432858458F387A9271F2E1677C738700
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/15ee982d-a6ad-3477-95a4-e3a44b53225c.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     29909
IP address blocks:        192.102.255.0/24 maxlen: 24
                          2607:3380:1000::/40 maxlen: 40
                          2607:3380::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7a:92:71:f2:e1:67:7c:73:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=aeac1ff5-ce42-47d9-94fc-bbf61dd083f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:4b:2b:af:e7:2b:fb:4b:e9:df:60:a8:f4:
                    7a:b8:a5:ce:55:a1:e9:74:e2:3c:65:94:13:99:c8:
                    04:f1:38:5c:4c:d0:bf:25:69:8d:4b:93:fa:31:30:
                    c6:48:30:79:36:c6:9d:d2:db:df:14:7a:05:97:37:
                    56:7a:d3:dd:d1:b8:94:87:5b:28:5b:58:99:c8:d5:
                    9b:0d:44:85:bf:05:0f:d9:1d:43:bc:d1:93:e7:2c:
                    41:fa:4b:19:d5:37:74:1a:80:2f:21:34:94:13:b9:
                    3a:2c:17:56:ed:84:a0:90:f9:9e:7c:9e:1b:23:5a:
                    3f:d3:0b:70:4e:6a:8e:ad:44:a9:6b:d6:3d:2e:96:
                    60:b7:9f:02:f7:27:d3:02:2a:45:e9:0d:38:ef:75:
                    e6:25:03:d0:b9:ff:8f:83:a9:c3:78:42:9f:ef:8d:
                    68:fc:3a:d8:17:21:2c:2a:fa:7e:be:e2:80:66:e2:
                    79:06:4a:60:fd:d8:5d:00:06:0c:78:ac:3f:0d:a9:
                    9b:fc:86:9d:90:4d:c4:7c:9d:d2:e4:6d:1c:76:5f:
                    9b:5b:9b:af:62:be:b1:67:1e:37:93:13:3b:d2:b4:
                    4a:2a:d2:b8:fa:30:0e:7e:3f:42:d7:c1:54:0d:a1:
                    55:44:b1:67:42:e9:ac:60:f7:e6:cc:56:7f:92:15:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F6:23:DE:3C:CC:FF:E7:E5:13:41:2F:B3:F8:4D:A1:94:4B:C1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/15ee982d-a6ad-3477-95a4-e3a44b53225c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.255.0/24
                IPv6:
                  2607:3380::/40
                  2607:3380:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:9c:c6:5d:45:fe:ec:d2:5c:65:c9:5f:c8:b6:f1:df:c3:
         75:72:09:61:e2:90:e8:be:c6:40:b0:db:7f:79:f3:91:da:1c:
         a8:be:7c:03:bb:ef:83:b2:dd:e0:bb:3f:45:58:20:7d:ce:32:
         31:fe:60:1c:14:dd:b5:09:32:ae:df:c2:e3:59:8b:db:45:bd:
         33:5a:6c:cf:f2:3f:88:b6:3a:d2:19:7f:fe:c6:9d:53:75:41:
         39:cb:8b:9c:6c:da:e1:8f:cc:c0:ea:1f:83:cc:66:37:6d:8d:
         82:18:bb:96:e4:bc:98:b3:70:18:d4:bb:71:7e:d3:ba:08:18:
         2f:2d:03:4e:63:26:35:46:b6:fb:c4:14:69:f3:2b:01:06:ef:
         53:9f:bf:28:99:f7:3b:7d:35:33:85:ac:32:fb:c5:bd:4f:e1:
         0b:f6:1c:87:59:95:96:d5:72:c8:ed:e5:e2:5c:1d:70:2e:ca:
         9d:9d:d8:d7:a3:40:43:99:fc:e0:9d:51:a2:8a:4c:8f:f5:e4:
         d2:40:1a:29:1f:1c:7d:4e:10:4c:c5:53:d6:94:19:29:bf:3b:
         ab:d8:d2:b8:14:5b:37:da:fe:fa:85:fe:0d:f0:6f:26:8a:2f:
         bf:0a:f9:eb:bf:97:a1:65:01:50:3b:a7:11:c6:4d:16:4e:89:
         f1:5d:42:85
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEWPOHqScfLhZ3xzhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjMzZDhlZWYtNTFkZi00ODdiLTllZGItZjE2YmE0MDNm
NDQyMB4XDTI0MDQxNjAxMDAyNloXDTI0MDcxNTAxMDAyNlowLzEtMCsGA1UEAxMk
YWVhYzFmZjUtY2U0Mi00N2Q5LTk0ZmMtYmJmNjFkZDA4M2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfRLK6/nK/tL6d9gqPR6uKXOVaHpdOI8ZZQT
mcgE8ThcTNC/JWmNS5P6MTDGSDB5Nsad0tvfFHoFlzdWetPd0biUh1soW1iZyNWb
DUSFvwUP2R1DvNGT5yxB+ksZ1Td0GoAvITSUE7k6LBdW7YSgkPmefJ4bI1o/0wtw
TmqOrUSpa9Y9LpZgt58C9yfTAipF6Q0473XmJQPQuf+Pg6nDeEKf741o/DrYFyEs
Kvp+vuKAZuJ5Bkpg/dhdAAYMeKw/Damb/IadkE3EfJ3S5G0cdl+bW5uvYr6xZx43
kxM70rRKKtK4+jAOfj9C18FUDaFVRLFnQumsYPfmzFZ/khUhMQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFDP2I948zP/n5RNBL7P4TaGUS8GVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNk
OGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZiYTQwM2Y0NDIvMTVlZTk4MmQtYTZhZC0z
NDc3LTk1YTQtZTNhNDRiNTMyMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjMzZDhlZWYtNTFkZi00ODdiLTll
ZGItZjE2YmE0MDNmNDQyLzIzM2Q4ZWVmLTUxZGYtNDg3Yi05ZWRiLWYxNmJhNDAz
ZjQ0Mi5jcmwwHwYDVR0jBBgwFoAUVoUG6oo0R7YSsaIf3t1ae2CBbzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNkOGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZi
YTQwM2Y0NDIuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAwGb/MBYE
AgACMBADBgAmBzOAAAMGACYHM4AQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACDXnMZdRf7s0lxlyV/ItvHf
w3VyCWHikOi+xkCw239585HaHKi+fAO774Oy3eC7P0VYIH3OMjH+YBwU3bUJMq7f
wuNZi9tFvTNabM/yP4i2OtIZf/7GnVN1QTnLi5xs2uGPzMDqH4PMZjdtjYIYu5bk
vJizcBjUu3F+07oIGC8tA05jJjVGtvvEFGnzKwEG71OfvyiZ9zt9NTOFrDL7xb1P
4Qv2HIdZlZbVcsjt5eJcHXAuyp2d2NejQEOZ/OCdUaKKTI/15NJAGikfHH1OEEzF
U9aUGSm/O6vY0rgUWzfa/vqF/g3wbyaKL78K+eu/l6FlAVA7pxHGTRZOifFdQoU=
-----END CERTIFICATE-----
Generated at Fri May 10 05:04:44 2024 by rpki-client on console-fra.rpki-client.org