Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa
File:                     1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa (raw, json)
Hash identifier:          +68Qm1G1q0zXu39Ry18nISVVhx3GoXYfYN1Ws4l2U4Q=
Subject key identifier:   38:27:11:E6:0B:D0:F7:F8:A7:7E:36:B2:92:4E:6F:FB:6B:D2:C8:E8
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F36B8FD71CC84418A74C00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        143.198.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6b:8f:d7:1c:c8:44:18:a7:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=885d8e3a-cdae-47c1-9010-beee8742c844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:77:62:c2:a1:bb:44:8a:c8:5f:da:7c:f5:
                    2e:2f:9a:f5:74:70:74:95:9d:bc:01:19:5a:45:a1:
                    01:e3:b2:b5:bc:a8:97:2c:e2:46:3f:32:bd:b6:13:
                    e1:15:c9:e7:3c:fb:31:e6:dc:cd:e6:b7:f2:57:5a:
                    b9:f6:14:af:5f:ce:df:4b:2c:25:b9:39:44:ec:a1:
                    b7:45:88:3b:89:91:de:d1:69:08:af:33:01:9a:6d:
                    d0:67:d0:b0:14:e4:34:0d:d7:98:c6:68:b3:66:74:
                    3b:45:cc:68:04:44:30:fb:1b:74:0e:6d:75:ee:33:
                    7a:ec:de:a5:ad:98:88:7e:9a:33:03:f9:12:d7:8d:
                    ea:04:7d:74:03:ed:14:3d:de:4f:6d:3c:e7:ec:a0:
                    1b:4e:3a:10:06:e3:4f:90:5a:32:1e:57:5e:a4:c1:
                    27:d0:28:c3:71:20:31:81:7a:99:f6:00:8a:2d:60:
                    94:2d:04:63:e2:01:f8:a6:cd:44:09:f5:cb:d3:ac:
                    62:ea:e1:9a:28:8b:b4:db:6b:89:bf:84:33:42:49:
                    5d:cf:cc:37:70:3b:7c:1a:93:1e:50:9d:b5:c9:a5:
                    de:2e:00:d9:e3:ee:6e:5a:86:e3:11:27:e0:e0:8c:
                    10:e7:35:94:7a:55:53:70:f3:92:b6:d4:d0:19:1f:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:27:11:E6:0B:D0:F7:F8:A7:7E:36:B2:92:4E:6F:FB:6B:D2:C8:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:6c:b2:1d:7d:65:c0:ec:17:ef:ef:de:64:c8:c3:c6:02:59:
         7d:e2:d7:95:6d:27:93:f6:9e:e5:01:b3:01:aa:19:4f:a6:94:
         c4:50:64:b3:7c:cc:1d:9d:82:f6:7e:3e:e1:a5:0f:33:74:36:
         d2:78:8f:81:cc:18:89:56:ee:78:d4:83:15:2b:1a:7d:ea:98:
         fe:be:01:d3:1a:e3:98:27:8d:c0:a7:8c:6c:6b:59:87:71:52:
         cd:ef:76:a3:77:33:df:e1:05:02:b4:67:c2:d7:57:46:70:5e:
         65:d4:9b:05:4b:2c:1c:06:da:a4:42:2a:10:17:50:1c:f1:8c:
         62:17:c7:49:e3:2f:2f:12:e3:0e:23:80:8b:bd:7c:6d:0c:60:
         7c:b6:97:0d:d8:13:7e:90:1c:76:4a:4a:52:ff:64:6a:61:15:
         85:32:e5:08:e1:1a:af:75:f7:07:24:55:6a:26:e5:6a:df:ac:
         aa:01:d8:88:84:01:78:6f:1f:ae:b8:bf:dc:8b:41:3e:ea:1e:
         e9:5c:06:ac:39:0e:b9:74:d7:c2:32:45:1f:3c:1b:f5:bd:8b:
         86:e1:25:31:a2:e0:89:09:f3:4b:aa:f4:b6:32:7b:ef:37:bb:
         d5:78:08:e5:3b:2b:4e:9b:20:59:d2:36:94:02:ef:fc:c1:86:
         cb:00:a7:32
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWm82uP1xzIRBinTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk
ODg1ZDhlM2EtY2RhZS00N2MxLTkwMTAtYmVlZTg3NDJjODQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTd3YsKhu0SKyF/afPUuL5r1dHB0lZ28ARla
RaEB47K1vKiXLOJGPzK9thPhFcnnPPsx5tzN5rfyV1q59hSvX87fSywluTlE7KG3
RYg7iZHe0WkIrzMBmm3QZ9CwFOQ0DdeYxmizZnQ7RcxoBEQw+xt0Dm117jN67N6l
rZiIfpozA/kS143qBH10A+0UPd5PbTzn7KAbTjoQBuNPkFoyHldepMEn0CjDcSAx
gXqZ9gCKLWCULQRj4gH4ps1ECfXL06xi6uGaKIu022uJv4QzQkldz8w3cDt8GpMe
UJ21yaXeLgDZ4+5uWobjESfg4IwQ5zWUelVTcPOSttTQGR/GxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDgnEeYL0Pf4p342spJOb/tr0sjoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMWY2YTZlNGItZjQyZC0z
NGJkLWI1YjYtNTJiNDI0NWM2ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj8YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACmyyHX1lwOwX7+/eZMjDxgJZfeLXlW0nk/ae5QGzAaoZT6aUxFBks3zM
HZ2C9n4+4aUPM3Q20niPgcwYiVbueNSDFSsafeqY/r4B0xrjmCeNwKeMbGtZh3FS
ze92o3cz3+EFArRnwtdXRnBeZdSbBUssHAbapEIqEBdQHPGMYhfHSeMvLxLjDiOA
i718bQxgfLaXDdgTfpAcdkpKUv9kamEVhTLlCOEar3X3ByRVaiblat+sqgHYiIQB
eG8frri/3ItBPuoe6VwGrDkOuXTXwjJFHzwb9b2LhuElMaLgiQnzS6r0tjJ77ze7
1XgI5TsrTpsgWdI2lALv/MGGywCnMg==
-----END CERTIFICATE-----
Generated at Sat May 11 15:15:57 2024 by rpki-client on console-ams.rpki-client.org