Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/47aa8ea8-8831-35f5-aa64-f1a11d76ed6d.roa
File:                     47aa8ea8-8831-35f5-aa64-f1a11d76ed6d.roa (raw, json)
Hash identifier:          8JTsQJ1N4F56/LoLAXKFIRN0d8/1rARfO+fQd7XyxPA=
Subject key identifier:   C6:07:E0:9B:CE:9D:E3:AD:D0:EB:F3:1E:5D:19:8C:0F:D5:91:08:74
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F432858472405C6878F901BAA55765E88
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/47aa8ea8-8831-35f5-aa64-f1a11d76ed6d.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     14007
IP address blocks:        192.234.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c6:87:8f:90:1b:aa:55:76:5e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=3cf91a1a-4933-4c86-b4f8-20140b267d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:18:41:d0:38:1a:2f:86:12:b4:ca:7b:f1:
                    99:0e:22:a6:76:d3:36:01:a4:6a:30:43:7c:a8:9f:
                    4f:97:20:cb:a2:12:f0:2f:0a:92:d7:f8:09:11:e8:
                    c7:e3:16:ef:3e:5f:32:16:f1:08:70:c0:4e:e3:c4:
                    fb:5e:de:68:90:e2:91:ff:8b:f4:8c:16:f6:b2:9e:
                    37:a3:58:d0:6e:e5:96:69:e1:fb:e4:a1:83:f6:17:
                    fc:33:bc:3a:f5:26:e3:7f:35:89:29:d8:1a:71:fd:
                    01:ec:66:64:93:3f:61:52:b5:d6:f1:d8:a3:3c:2d:
                    36:19:d9:b1:41:89:ca:92:05:6a:0d:38:51:d7:c8:
                    c2:68:75:05:ee:20:4a:4b:df:3c:a8:cb:bc:8e:f6:
                    78:1f:22:be:80:a4:09:8d:a0:dd:29:aa:d2:c9:4f:
                    6b:ac:c2:3a:98:34:9e:e9:fd:3f:10:be:a5:22:0b:
                    3b:9b:37:2c:7c:6f:6d:e7:c2:3a:e7:e0:8c:16:8d:
                    98:d9:d5:73:f5:b6:64:d5:51:83:67:13:dc:05:52:
                    0b:ce:aa:ba:ec:ac:1d:39:ed:13:05:b1:99:98:d6:
                    c2:5f:07:ae:e0:15:61:ae:38:fc:4d:89:c0:9c:9b:
                    0b:07:0e:c2:90:3c:88:75:92:0d:db:28:ef:65:52:
                    8d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:07:E0:9B:CE:9D:E3:AD:D0:EB:F3:1E:5D:19:8C:0F:D5:91:08:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/47aa8ea8-8831-35f5-aa64-f1a11d76ed6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c8:54:d1:f7:d8:2a:c6:1e:34:c9:de:90:7d:0f:70:43:76:
         a4:70:b5:14:a0:6d:f4:e5:a3:69:f7:85:42:e3:50:4b:1a:2d:
         5c:cb:f3:b5:d1:3c:8c:98:70:f2:5d:f8:57:9b:71:3c:b6:0f:
         81:04:ef:70:83:c4:88:7d:da:ae:4c:ec:0f:0a:b9:95:28:c6:
         6e:3a:cb:51:b0:f6:57:c8:9c:33:af:db:c9:9a:84:32:b4:bc:
         59:80:67:32:cb:a1:e7:ab:1e:22:aa:63:57:fa:df:85:92:99:
         f2:11:3b:4e:6b:70:65:7a:22:5e:57:e5:63:e4:3a:31:5f:aa:
         81:6d:78:60:a5:15:84:84:70:e8:43:44:0d:12:ff:96:d7:51:
         ad:c7:80:6c:16:8a:f7:fb:62:c8:ae:96:a7:da:e6:f5:2c:18:
         54:1a:44:a9:c8:72:ea:0d:1c:04:6d:8d:67:2a:92:15:1d:08:
         86:0c:98:38:a2:66:20:1d:1c:e1:f7:b2:f2:9d:29:d5:f7:34:
         8c:7c:bb:99:71:27:ee:72:c8:68:2b:45:5c:32:0b:f2:d3:10:
         83:34:3d:c8:5b:92:f3:ab:e7:fb:89:35:ec:9a:90:24:a1:af:
         38:2f:b4:2e:75:89:e8:8b:0c:06:20:67:1c:d2:a3:26:71:31:
         4b:aa:49:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBcaHj5AbqlV2XogwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm
N2UxMB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
M2NmOTFhMWEtNDkzMy00Yzg2LWI0ZjgtMjAxNDBiMjY3ZDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWwYQdA4Gi+GErTKe/GZDiKmdtM2AaRqMEN8
qJ9PlyDLohLwLwqS1/gJEejH4xbvPl8yFvEIcMBO48T7Xt5okOKR/4v0jBb2sp43
o1jQbuWWaeH75KGD9hf8M7w69SbjfzWJKdgacf0B7GZkkz9hUrXW8dijPC02Gdmx
QYnKkgVqDThR18jCaHUF7iBKS988qMu8jvZ4HyK+gKQJjaDdKarSyU9rrMI6mDSe
6f0/EL6lIgs7mzcsfG9t58I65+CMFo2Y2dVz9bZk1VGDZxPcBVILzqq67KwdOe0T
BbGZmNbCXweu4BVhrjj8TYnAnJsLBw7CkDyIdZIN2yjvZVKNCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYH4JvOneOt0OvzHl0ZjA/VkQh0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1
ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvNDdhYThlYTgtODgzMS0z
NWY1LWFhNjQtZjFhMTFkNzZlZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5
ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3
ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw
MDBkN2Y3ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwOrEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTIVNH32CrGHjTJ3pB9D3BDdqRwtRSgbfTlo2n3hULjUEsaLVzL87XR
PIyYcPJd+FebcTy2D4EE73CDxIh92q5M7A8KuZUoxm46y1Gw9lfInDOv28mahDK0
vFmAZzLLoeerHiKqY1f634WSmfIRO05rcGV6Il5X5WPkOjFfqoFteGClFYSEcOhD
RA0S/5bXUa3HgGwWivf7Ysiulqfa5vUsGFQaRKnIcuoNHARtjWcqkhUdCIYMmDii
ZiAdHOH3svKdKdX3NIx8u5lxJ+5yyGgrRVwyC/LTEIM0PchbkvOr5/uJNeyakCSh
rzgvtC51ieiLDAYgZxzSoyZxMUuqSbc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org