Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c3b4e13-1b75-32a6-b899-1ad143b9a3be.roa
File:                     9c3b4e13-1b75-32a6-b899-1ad143b9a3be.roa (raw, json)
Hash identifier:          Am4oWhFRoRAmy5BDGuL0m4UasQv5Guq+5tsiTEufNIc=
Subject key identifier:   86:A0:91:D3:CA:02:F5:74:10:FE:DD:8B:05:E9:CC:46:4F:F8:C1:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DE4F8BC176C2EA37E8F20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c3b4e13-1b75-32a6-b899-1ad143b9a3be.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        184.63.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:e4:f8:bc:17:6c:2e:a3:7e:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=3b02aa57-be66-4b99-8d27-efdd838999e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:87:32:ce:42:65:bc:b2:88:21:e7:01:14:
                    cf:a5:9a:17:73:85:14:0d:2d:3a:6d:c6:cd:f2:90:
                    45:dd:0f:c0:f5:71:ef:d3:0b:9f:99:91:8b:05:96:
                    d6:75:4e:2d:1f:e3:4c:e4:49:64:61:3c:fd:13:1c:
                    ca:d3:aa:d1:7a:70:26:33:1b:20:29:09:52:86:ec:
                    20:50:94:38:84:a3:09:35:e3:d5:a2:e4:23:97:e4:
                    7b:62:ec:c8:6e:9f:2e:a3:8e:29:2a:55:63:3e:ff:
                    f8:47:fb:ab:09:ea:9b:94:f5:e3:20:f6:d4:c1:dd:
                    66:96:79:89:a2:29:7a:40:bc:22:68:85:fc:21:e6:
                    c2:76:c4:05:8f:91:79:32:25:1a:4a:da:16:db:9b:
                    94:f5:d1:4b:7a:4b:db:46:67:1f:c7:a3:5a:c3:1f:
                    fd:60:3b:9e:c3:d5:ca:b0:34:61:71:15:6a:6a:53:
                    9e:34:29:76:99:7a:ba:e5:11:93:fe:c9:d0:42:09:
                    bc:1d:c1:f3:58:e9:f0:36:5d:aa:05:bb:da:62:ea:
                    a0:45:52:3b:c2:dd:4c:cf:30:8a:96:80:b7:e7:6d:
                    33:36:8b:3c:fa:34:6b:6e:58:00:00:36:42:79:b6:
                    a9:2d:3c:c6:c3:50:e9:fc:ec:62:99:09:6d:ae:ba:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A0:91:D3:CA:02:F5:74:10:FE:DD:8B:05:E9:CC:46:4F:F8:C1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c3b4e13-1b75-32a6-b899-1ad143b9a3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:71:ac:a6:10:ba:fc:d6:46:46:00:01:73:f0:a4:37:95:45:
         39:b2:e3:20:01:e8:77:87:df:9a:cc:fe:b8:62:32:0a:a1:a7:
         46:c3:68:78:04:e2:36:b4:a4:61:14:66:7b:c7:8e:9a:b8:4c:
         72:6f:b0:46:ff:fb:d2:34:cf:b2:9b:0d:9c:7c:8a:14:34:30:
         95:bc:da:6b:b8:5c:e9:b8:e1:29:4b:84:17:64:20:3c:9b:7f:
         9a:95:11:42:c8:eb:ab:50:69:6d:09:d2:a3:24:64:44:f4:43:
         27:7d:6b:e8:9e:7b:2d:50:bc:99:9d:3e:2f:93:33:4c:4c:68:
         68:1b:8b:16:b4:a5:06:99:5a:37:02:4c:cd:db:03:8a:1c:e5:
         8f:ae:b2:77:48:01:1a:7f:1d:9f:5a:b6:4b:b6:8b:54:a8:d4:
         a3:12:46:3c:d5:b8:86:5d:2d:ee:cd:c0:77:33:ab:4a:25:1e:
         c5:1d:2b:24:a9:0a:eb:f9:7a:58:80:76:21:7b:30:5e:f8:38:
         a8:43:cd:47:d4:85:60:d2:89:af:e3:53:32:f9:7c:cb:74:31:
         ef:25:5b:a2:34:76:ef:c6:93:75:50:90:97:ce:0c:48:51:51:
         5f:64:c2:c5:34:b0:30:62:93:32:38:a4:c2:a5:e6:d9:c5:57:
         93:8f:40:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPeT4vBdsLqN+jyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
M2IwMmFhNTctYmU2Ni00Yjk5LThkMjctZWZkZDgzODk5OWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGqHMs5CZbyyiCHnARTPpZoXc4UUDS06bcbN
8pBF3Q/A9XHv0wufmZGLBZbWdU4tH+NM5ElkYTz9ExzK06rRenAmMxsgKQlShuwg
UJQ4hKMJNePVouQjl+R7YuzIbp8uo44pKlVjPv/4R/urCeqblPXjIPbUwd1mlnmJ
oil6QLwiaIX8IebCdsQFj5F5MiUaStoW25uU9dFLekvbRmcfx6Nawx/9YDuew9XK
sDRhcRVqalOeNCl2mXq65RGT/snQQgm8HcHzWOnwNl2qBbvaYuqgRVI7wt1MzzCK
loC3520zNos8+jRrblgAADZCebapLTzGw1Dp/OximQltrrohkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIagkdPKAvV0EP7diwXpzEZP+MHKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWMzYjRlMTMtMWI3NS0z
MmE2LWI4OTktMWFkMTQzYjlhM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD9XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVxrKYQuvzWRkYAAXPwpDeVRTmy4yAB6HeH35rM/rhiMgqhp0bDaHgE
4ja0pGEUZnvHjpq4THJvsEb/+9I0z7KbDZx8ihQ0MJW82mu4XOm44SlLhBdkIDyb
f5qVEULI66tQaW0J0qMkZET0Qyd9a+ieey1QvJmdPi+TM0xMaGgbixa0pQaZWjcC
TM3bA4oc5Y+usndIARp/HZ9atku2i1So1KMSRjzVuIZdLe7NwHczq0olHsUdKySp
Cuv5eliAdiF7MF74OKhDzUfUhWDSia/jUzL5fMt0Me8lW6I0du/Gk3VQkJfODEhR
UV9kwsU0sDBikzI4pMKl5tnFV5OPQNQ=
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:08 2024 by rpki-client on console-ams.rpki-client.org