Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
File:                     8d86e371-b987-3a40-92a0-b73d73f009c3.roa (raw, json)
Hash identifier:          aFRJO6UtpAvxiXsgPZCKNiRh5cBfgyGMUsr6RHIxr7M=
Subject key identifier:   60:38:EC:43:BE:21:47:AA:2E:EE:4E:34:5A:EF:FF:F8:31:22:55:56
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F43285845CE0908AB19AA7D66D7A36CC0
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394893
IP address blocks:        205.234.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:09:08:ab:19:aa:7d:66:d7:a3:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=5c49a30a-18fd-4b5e-beb4-c486b6e2a846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:ac:23:58:57:47:d7:53:c2:39:c7:65:72:
                    df:5c:c9:c8:d8:5e:db:3c:5a:47:b9:24:f1:38:fa:
                    c4:f6:7a:91:86:b0:a7:0b:d5:c6:87:18:99:15:a3:
                    c8:9a:3e:26:b9:b3:9a:09:bf:ef:01:b6:94:09:0f:
                    14:23:26:09:fd:a6:9d:23:87:5b:a1:79:20:cd:db:
                    7e:96:8c:bf:07:28:b3:fa:96:cf:50:06:2d:72:b8:
                    4e:52:e2:96:ec:4d:87:8c:ef:f2:9e:52:70:33:61:
                    18:cb:42:19:82:53:b5:d9:17:ac:79:9c:c8:22:21:
                    f0:63:11:f2:e6:b1:02:ec:d4:51:c5:75:26:9e:5f:
                    d1:58:bd:ba:82:08:4a:80:59:93:79:6d:c9:c1:d5:
                    1d:50:d2:b9:22:c7:6c:19:8c:1e:8d:78:fd:49:56:
                    e6:1c:23:a7:5d:3a:39:40:7f:81:1b:ca:b9:fb:30:
                    e3:ca:2a:ce:a7:74:f9:28:1d:77:90:77:3a:e3:b2:
                    d0:dc:3c:46:c1:fc:25:6d:52:a1:a4:6a:e6:fa:21:
                    68:95:d9:d8:96:76:5b:27:88:b0:85:08:4e:da:1d:
                    c8:d3:2b:7f:9f:f3:38:df:da:c4:99:8a:a0:97:20:
                    cb:33:9e:9b:52:ef:b3:40:d3:f8:7b:09:4a:3c:d1:
                    9b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:EC:43:BE:21:47:AA:2E:EE:4E:34:5A:EF:FF:F8:31:22:55:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/8d86e371-b987-3a40-92a0-b73d73f009c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:bb:96:c0:9c:6a:45:e9:4b:3c:67:c9:5b:b8:04:68:9d:d6:
         d8:6d:57:b7:4d:b1:c0:3a:c9:bd:97:b7:9d:9e:0b:d9:40:eb:
         77:48:5e:ce:94:51:8b:90:03:b6:c0:8c:b5:4d:7c:27:e5:11:
         bc:35:f6:97:b3:50:dd:be:aa:dd:76:f4:cf:d5:46:38:49:f1:
         37:4b:65:b4:33:08:01:d7:31:5f:d9:c6:ed:dd:59:23:fc:8b:
         7a:b8:8b:cd:3a:af:dd:ff:34:7f:81:1d:c3:02:81:0d:73:12:
         3d:76:c9:48:4c:de:6c:61:11:c7:2c:76:4b:50:7a:b1:d7:64:
         98:c6:9a:02:76:6c:8e:73:8c:99:e6:e6:d8:53:9e:f4:d5:a7:
         53:3a:93:5d:a5:69:c0:3d:3a:6c:eb:8f:de:e6:54:61:80:d6:
         62:29:4b:9c:ea:31:55:43:34:4f:c1:42:84:17:58:2b:37:06:
         04:cb:9d:44:3a:79:b4:c2:de:65:a7:34:56:1c:1b:b8:bd:14:
         8a:24:89:8e:17:a6:99:4c:1b:a2:a0:3f:06:a1:50:a3:da:e3:
         1a:aa:6b:2c:2d:3f:be:8f:94:b2:60:82:08:3d:66:6a:56:db:
         08:2d:a2:3a:07:e7:8a:97:1b:e7:9e:a2:ad:0a:9c:62:33:28:
         fd:36:b5:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCQirGap9ZtejbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl
ZGI0MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
NWM0OWEzMGEtMThmZC00YjVlLWJlYjQtYzQ4NmI2ZTJhODQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx16sI1hXR9dTwjnHZXLfXMnI2F7bPFpHuSTx
OPrE9nqRhrCnC9XGhxiZFaPImj4mubOaCb/vAbaUCQ8UIyYJ/aadI4dboXkgzdt+
loy/Byiz+pbPUAYtcrhOUuKW7E2HjO/ynlJwM2EYy0IZglO12ReseZzIIiHwYxHy
5rEC7NRRxXUmnl/RWL26gghKgFmTeW3JwdUdUNK5IsdsGYwejXj9SVbmHCOnXTo5
QH+BG8q5+zDjyirOp3T5KB13kHc647LQ3DxGwfwlbVKhpGrm+iFoldnYlnZbJ4iw
hQhO2h3I0yt/n/M439rEmYqglyDLM56bUu+zQNP4ewlKPNGbeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGA47EO+IUeqLu5ONFrv//gxIlVWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj
NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvOGQ4NmUzNzEtYjk4Ny0z
YTQwLTkyYTAtYjczZDczZjAwOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh
MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My
ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi
MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzep1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANi7lsCcakXpSzxnyVu4BGid1thtV7dNscA6yb2Xt52eC9lA63dIXs6U
UYuQA7bAjLVNfCflEbw19pezUN2+qt129M/VRjhJ8TdLZbQzCAHXMV/Zxu3dWSP8
i3q4i806r93/NH+BHcMCgQ1zEj12yUhM3mxhEccsdktQerHXZJjGmgJ2bI5zjJnm
5thTnvTVp1M6k12lacA9Omzrj97mVGGA1mIpS5zqMVVDNE/BQoQXWCs3BgTLnUQ6
ebTC3mWnNFYcG7i9FIokiY4XpplMG6KgPwahUKPa4xqqaywtP76PlLJgggg9ZmpW
2wgtojoH54qXG+eeoq0KnGIzKP02tbk=
-----END CERTIFICATE-----
Generated at Sun May 12 19:25:29 2024 by rpki-client on console-fra.rpki-client.org