Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa
File:                     2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa (raw, json)
Hash identifier:          rA+eCHrfIXx76jWzZNDhh78p2qJX0JK9dp1A+1xgXVI=
Subject key identifier:   89:71:46:88:38:8D:A2:50:33:E5:92:29:AC:70:7C:FC:AC:20:7F:FF
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285845A6F36B7B3D7CDEC089C70F00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14061
IP address blocks:        147.182.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6b:7b:3d:7c:de:c0:89:c7:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=5386ee51-7ba5-47ee-8e7d-20da6abd6a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:67:c7:e5:3c:6b:8f:75:af:b3:e6:e6:ca:
                    b6:c3:70:87:6a:d6:b6:e6:1d:d1:7f:07:10:0a:0c:
                    5d:03:83:a5:4a:ae:7c:67:ca:10:e8:26:7e:ca:3f:
                    10:a4:57:15:f0:9e:87:4d:5c:97:af:7f:f0:2b:a6:
                    d5:58:24:1f:9e:99:c8:a4:15:91:37:9c:f5:a8:05:
                    56:2f:ac:9d:1f:4f:89:37:0d:ff:99:50:6c:78:19:
                    19:ef:4c:6c:e6:42:f1:99:78:2a:6b:4b:50:14:c8:
                    ae:b9:e4:e5:71:9f:84:d7:45:30:c5:f3:95:df:1d:
                    f2:f4:80:62:dd:2a:8e:46:68:48:5f:7c:20:c2:ba:
                    ec:45:a5:6c:51:30:c9:06:c0:e2:9e:32:29:28:ca:
                    1f:0b:ff:80:64:f6:41:95:a8:50:5c:cd:5f:76:c4:
                    2f:b6:ab:c3:9a:92:33:40:46:7b:64:38:10:47:7d:
                    c5:b4:a7:f5:6c:01:71:1f:3f:d3:8d:d4:92:39:a8:
                    48:eb:fe:d0:ec:b7:2a:69:67:73:77:98:06:3c:cf:
                    bc:35:f2:09:57:27:a1:34:3d:a4:60:45:1b:df:7b:
                    e4:8a:01:ff:32:dd:98:f7:10:dc:00:3c:38:a9:9a:
                    4a:65:3d:07:94:e8:88:13:d3:da:94:f8:31:85:8d:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:71:46:88:38:8D:A2:50:33:E5:92:29:AC:70:7C:FC:AC:20:7F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2abc3599-3a4c-3a0f-b547-946093bc9bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.182.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:be:dd:03:0f:4d:16:44:3c:4d:0f:72:3c:f6:eb:1c:30:2e:
         e0:82:67:92:27:7f:e4:77:53:51:89:ac:f6:47:ca:de:ab:59:
         0d:76:df:77:d8:36:a5:f4:8d:8e:0a:78:04:b6:8a:91:b4:8f:
         77:74:22:87:88:65:84:ed:72:47:fc:f3:8d:b4:3b:37:bd:85:
         9a:b3:29:1e:ea:bf:a1:9d:36:bd:17:af:ef:9b:e1:f2:e2:f7:
         5e:64:4e:8e:80:34:21:e6:28:9a:9d:8e:42:09:7c:eb:c8:cf:
         38:bb:9f:68:02:fb:b0:66:c7:02:03:e0:3f:e3:f2:31:57:44:
         e6:4d:43:5b:ed:4e:66:9e:89:7b:d4:43:2f:6b:e8:8a:d6:7d:
         b2:67:88:b3:bc:ea:e2:ac:01:74:b9:d1:33:be:0b:ba:38:1a:
         0a:83:d9:34:99:02:9c:2d:82:60:08:cc:16:c9:ac:4f:82:b8:
         e0:9b:89:5a:a5:3f:31:6b:e4:95:a2:6d:d1:13:ef:29:3c:a5:
         a1:cb:e5:7a:9f:4f:a8:14:e6:fb:ee:c5:d0:b6:82:65:d9:17:
         9b:7c:7c:ce:6c:dc:b9:4c:af:bd:45:5f:2a:10:39:b9:8e:ff:
         bc:61:6b:86:46:27:22:0b:9d:e2:54:b4:5b:99:3f:dd:cd:76:
         78:5c:69:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm82t7PXzewInHDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk
NTM4NmVlNTEtN2JhNS00N2VlLThlN2QtMjBkYTZhYmQ2YTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrpnx+U8a491r7Pm5sq2w3CHata25h3RfwcQ
CgxdA4OlSq58Z8oQ6CZ+yj8QpFcV8J6HTVyXr3/wK6bVWCQfnpnIpBWRN5z1qAVW
L6ydH0+JNw3/mVBseBkZ70xs5kLxmXgqa0tQFMiuueTlcZ+E10UwxfOV3x3y9IBi
3SqORmhIX3wgwrrsRaVsUTDJBsDinjIpKMofC/+AZPZBlahQXM1fdsQvtqvDmpIz
QEZ7ZDgQR33FtKf1bAFxHz/TjdSSOahI6/7Q7LcqaWdzd5gGPM+8NfIJVyehND2k
YEUb33vkigH/Mt2Y9xDcADw4qZpKZT0HlOiIE9PalPgxhY1+SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIlxRog4jaJQM+WSKaxwfPysIH//MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMmFiYzM1OTktM2E0Yy0z
YTBmLWI1NDctOTQ2MDkzYmM5YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHk7aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADW+3QMPTRZEPE0Pcjz26xwwLuCCZ5Inf+R3U1GJrPZHyt6rWQ1233fY
NqX0jY4KeAS2ipG0j3d0IoeIZYTtckf88420Oze9hZqzKR7qv6GdNr0Xr++b4fLi
915kTo6ANCHmKJqdjkIJfOvIzzi7n2gC+7BmxwID4D/j8jFXROZNQ1vtTmaeiXvU
Qy9r6IrWfbJniLO86uKsAXS50TO+C7o4GgqD2TSZApwtgmAIzBbJrE+CuOCbiVql
PzFr5JWibdET7yk8paHL5XqfT6gU5vvuxdC2gmXZF5t8fM5s3LlMr71FXyoQObmO
/7xha4ZGJyILneJUtFuZP93NdnhcaWU=
-----END CERTIFICATE-----
Generated at Sat May 11 15:23:28 2024 by rpki-client on console-fra.rpki-client.org