Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a73760-9990-3ce6-970f-de482b5a0755.roa
File:                     a6a73760-9990-3ce6-970f-de482b5a0755.roa (raw, json)
Hash identifier:          u9UAU24ZKoKoMf6yo34tSiRE/JA8JYRbuR2mfIIz97A=
Subject key identifier:   2C:70:BE:4B:2B:D3:5E:A9:DD:9A:D8:C7:CA:13:8E:0C:5F:89:6F:D0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DEBD52DEE7CDA4F3FE500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a73760-9990-3ce6-970f-de482b5a0755.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        198.45.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:eb:d5:2d:ee:7c:da:4f:3f:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=53688a35-7671-42b6-aa4d-ccf1ffbee73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:00:6c:fc:af:5d:dd:ad:dd:5f:44:1c:c7:
                    31:e4:2d:99:a8:7a:d7:69:84:18:65:03:82:80:db:
                    21:a4:05:cd:6d:f7:b0:7b:78:64:c8:cb:ba:f5:0b:
                    b8:8e:55:16:eb:ef:a7:24:3b:d2:8f:be:c7:6a:a0:
                    a5:67:62:5b:88:05:33:9a:44:af:e1:87:c7:a9:23:
                    8f:7d:d9:b0:41:38:42:74:f9:fd:87:6d:a7:47:3e:
                    a5:b3:69:0e:8f:24:75:89:b7:86:b2:e5:0b:86:f5:
                    4a:4a:a0:34:8e:0d:ca:b1:7b:3e:35:67:7b:a4:09:
                    84:14:08:3e:06:27:77:18:ec:7a:ac:5e:18:9b:e9:
                    66:6c:b3:e8:17:f1:45:fa:69:8a:39:a5:bb:4e:3c:
                    ad:20:6a:8e:63:69:95:ab:68:25:7c:18:95:d8:5e:
                    51:fc:03:5f:d0:1b:7d:78:be:64:7a:28:f7:c2:b1:
                    f3:b7:3a:e4:88:64:1f:e8:da:27:a4:78:3c:41:16:
                    41:cf:46:d3:30:f8:95:00:0e:89:a4:41:05:b5:06:
                    0d:e4:5e:1c:7c:3f:36:09:35:31:b8:8f:55:a6:f7:
                    a6:64:2b:2b:1e:d4:92:1a:57:2d:14:20:22:39:ff:
                    4a:39:b6:fb:35:25:ca:0e:bc:36:10:10:eb:96:7e:
                    7e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:70:BE:4B:2B:D3:5E:A9:DD:9A:D8:C7:CA:13:8E:0C:5F:89:6F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6a73760-9990-3ce6-970f-de482b5a0755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:92:63:73:38:d8:0a:f9:b8:09:50:d7:9b:3a:64:15:76:f2:
         65:49:04:ec:5a:91:fb:55:c9:2d:39:17:4a:f7:f8:7c:5d:9e:
         01:34:18:c1:94:3b:1d:49:f6:4d:f1:84:a2:97:81:fd:7d:13:
         1b:4a:a5:82:bb:44:e4:8f:02:1e:b8:c2:a8:54:5d:9b:a3:4d:
         99:5f:7e:bc:4b:58:42:b1:13:0f:58:fa:9c:d0:c8:b7:be:a7:
         6a:c3:1b:fc:57:ad:ef:da:03:f0:6e:57:2a:e5:0e:c9:29:f4:
         93:a0:ae:1e:df:05:2b:e1:8c:8f:df:50:59:9c:ee:93:6a:43:
         17:12:35:26:c2:0f:73:f7:9d:97:b6:97:78:83:e3:d9:a6:55:
         f1:90:30:ee:0a:9d:98:36:70:5d:b0:25:cd:21:c8:f6:c5:1a:
         6d:e1:50:9e:0a:78:21:68:2f:9c:c4:7a:4f:2a:4c:d5:52:e9:
         c7:b0:f9:71:d6:9f:4b:3e:43:77:a2:a8:8e:cd:eb:03:71:66:
         08:cd:f0:23:aa:e2:f0:bf:3b:fc:95:d8:63:5e:40:11:ce:b4:
         dd:a5:c0:2a:df:30:f5:84:22:25:23:14:19:d1:84:c0:90:3f:
         2d:5d:5b:87:fa:0a:7e:3b:6a:40:cb:80:bf:ba:1f:c2:88:3d:
         52:56:05:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPevVLe582k8/5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
NTM2ODhhMzUtNzY3MS00MmI2LWFhNGQtY2NmMWZmYmVlNzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVYAbPyvXd2t3V9EHMcx5C2ZqHrXaYQYZQOC
gNshpAXNbfewe3hkyMu69Qu4jlUW6++nJDvSj77HaqClZ2JbiAUzmkSv4YfHqSOP
fdmwQThCdPn9h22nRz6ls2kOjyR1ibeGsuULhvVKSqA0jg3KsXs+NWd7pAmEFAg+
Bid3GOx6rF4Ym+lmbLPoF/FF+mmKOaW7TjytIGqOY2mVq2glfBiV2F5R/ANf0Bt9
eL5keij3wrHztzrkiGQf6NonpHg8QRZBz0bTMPiVAA6JpEEFtQYN5F4cfD82CTUx
uI9VpvemZCsrHtSSGlctFCAiOf9KObb7NSXKDrw2EBDrln5+LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxwvksr016p3ZrYx8oTjgxfiW/QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZhNzM3NjAtOTk5MC0z
Y2U2LTk3MGYtZGU0ODJiNWEwNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMqSY3M42Ar5uAlQ15s6ZBV28mVJBOxakftVyS05F0r3+HxdngE0GMGU
Ox1J9k3xhKKXgf19ExtKpYK7ROSPAh64wqhUXZujTZlffrxLWEKxEw9Y+pzQyLe+
p2rDG/xXre/aA/BuVyrlDskp9JOgrh7fBSvhjI/fUFmc7pNqQxcSNSbCD3P3nZe2
l3iD49mmVfGQMO4KnZg2cF2wJc0hyPbFGm3hUJ4KeCFoL5zEek8qTNVS6cew+XHW
n0s+Q3eiqI7N6wNxZgjN8COq4vC/O/yV2GNeQBHOtN2lwCrfMPWEIiUjFBnRhMCQ
Py1dW4f6Cn47akDLgL+6H8KIPVJWBYI=
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:54:08 2024 by rpki-client on console-fra.rpki-client.org