Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1dd7f3d6-f2f3-3a8a-b381-e978afc8d6d9.roa
File:                     1dd7f3d6-f2f3-3a8a-b381-e978afc8d6d9.roa (raw, json)
Hash identifier:          HnkVPfX3kLP3KmB3QAcX7YrjGoQU5I5cfzKA+cATLnc=
Subject key identifier:   B4:B2:31:C7:04:6B:1D:3B:3B:16:10:69:D0:7E:35:1D:27:4C:8D:46
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DDFE3B424C23AD5D89F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1dd7f3d6-f2f3-3a8a-b381-e978afc8d6d9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.62.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:df:e3:b4:24:c2:3a:d5:d8:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=9094d4dd-4650-43c5-bd28-40f157c6d23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:4d:f0:5a:2a:4a:bf:fb:bb:21:15:1c:22:
                    47:3e:69:49:a9:15:1a:17:cd:ee:a4:55:51:74:ab:
                    af:e3:9c:60:e4:17:8f:05:cd:33:94:e0:a0:06:86:
                    3b:bc:71:bd:18:f2:6a:6d:cb:85:1a:82:c0:0a:8f:
                    c6:cc:53:a8:3e:69:6f:24:03:53:07:40:50:58:23:
                    a3:67:ea:23:e2:5a:dc:db:89:23:6a:5b:e3:f8:d0:
                    45:5e:15:9b:d7:de:74:25:25:09:ce:86:94:a7:57:
                    82:72:f8:69:92:2d:b7:6b:21:48:21:0d:db:d3:14:
                    8b:83:66:5c:7d:9d:47:a5:f8:55:ae:14:e0:00:e2:
                    b6:70:ad:2e:dc:a7:e6:a7:37:f7:6c:4b:05:4c:ab:
                    c1:6e:44:bd:e1:82:73:18:73:47:84:40:a4:3a:6f:
                    62:88:ec:40:40:52:a0:da:a9:ed:10:b5:84:44:80:
                    9c:fe:05:85:ce:3e:ac:24:24:e1:52:bf:5d:61:f0:
                    85:72:56:b3:f0:89:c7:51:ab:f9:dc:ea:91:6a:94:
                    49:28:47:2c:ad:82:bf:94:8b:31:fb:72:25:07:08:
                    70:a9:82:41:a7:40:18:aa:9a:7a:1d:e2:1a:4d:e6:
                    1a:e6:f4:5d:ca:a9:54:7e:3e:e1:00:7a:85:35:bd:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B2:31:C7:04:6B:1D:3B:3B:16:10:69:D0:7E:35:1D:27:4C:8D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1dd7f3d6-f2f3-3a8a-b381-e978afc8d6d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:28:d8:ba:c0:d0:88:c0:fc:28:94:a2:48:ef:03:24:19:
         25:cd:f4:ab:96:62:35:78:01:3c:00:ce:64:f3:04:15:fc:b8:
         02:87:f9:35:9c:8d:5f:8d:18:cc:72:ad:21:4f:14:d0:40:3a:
         e4:4f:5c:c9:3c:8e:40:46:40:80:f3:2c:89:f5:7f:5e:5d:4a:
         13:38:ee:e8:b9:2d:64:9c:a0:e4:3f:f8:21:75:3d:05:a5:77:
         50:57:3c:2c:53:da:77:67:2b:1e:c1:d6:ec:5e:37:be:2f:af:
         c1:fc:e1:d0:1f:13:19:fc:81:5f:b6:cf:66:c5:3b:76:4b:dd:
         c0:c1:68:0c:6c:3c:10:56:fa:29:54:c4:4f:35:d9:8e:71:65:
         3a:fc:32:50:b1:b8:07:ea:24:f0:b8:6a:fa:5f:bb:46:0f:2f:
         65:86:29:ca:25:d7:c9:48:42:dc:5f:61:2c:7f:1c:3b:c2:4d:
         1d:17:d7:c8:91:f9:58:89:f6:cd:35:bc:ce:40:bd:81:16:76:
         60:ef:11:da:57:cd:10:83:85:85:45:84:ab:f8:ff:a8:1e:f4:
         a6:e9:e2:88:d0:3c:02:6c:ae:c6:0e:d0:68:20:0f:08:ce:db:
         2e:8c:bc:9d:86:80:b3:9b:9b:c9:bb:8f:34:f9:91:8e:95:61:
         ca:6e:1d:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPd/jtCTCOtXYn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
OTA5NGQ0ZGQtNDY1MC00M2M1LWJkMjgtNDBmMTU3YzZkMjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOhN8FoqSr/7uyEVHCJHPmlJqRUaF83upFVR
dKuv45xg5BePBc0zlOCgBoY7vHG9GPJqbcuFGoLACo/GzFOoPmlvJANTB0BQWCOj
Z+oj4lrc24kjalvj+NBFXhWb1950JSUJzoaUp1eCcvhpki23ayFIIQ3b0xSLg2Zc
fZ1HpfhVrhTgAOK2cK0u3Kfmpzf3bEsFTKvBbkS94YJzGHNHhECkOm9iiOxAQFKg
2qntELWERICc/gWFzj6sJCThUr9dYfCFclaz8InHUav53OqRapRJKEcsrYK/lIsx
+3IlBwhwqYJBp0AYqpp6HeIaTeYa5vRdyqlUfj7hAHqFNb03hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSyMccEax07OxYQadB+NR0nTI1GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWRkN2YzZDYtZjJmMy0z
YThhLWIzODEtZTk3OGFmYzhkNmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD6kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEn4KNi6wNCIwPwolKJI7wMkGSXN9KuWYjV4ATwAzmTzBBX8uAKH+TWc
jV+NGMxyrSFPFNBAOuRPXMk8jkBGQIDzLIn1f15dShM47ui5LWScoOQ/+CF1PQWl
d1BXPCxT2ndnKx7B1uxeN74vr8H84dAfExn8gV+2z2bFO3ZL3cDBaAxsPBBW+ilU
xE812Y5xZTr8MlCxuAfqJPC4avpfu0YPL2WGKcol18lIQtxfYSx/HDvCTR0X18iR
+ViJ9s01vM5AvYEWdmDvEdpXzRCDhYVFhKv4/6ge9Kbp4ojQPAJsrsYO0GggDwjO
2y6MvJ2GgLObm8m7jzT5kY6VYcpuHTM=
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:01 2024 by rpki-client on console-fra.rpki-client.org