Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d5176c-b9d9-3b9e-9ca3-ac26e484de56.roa
File:                     12d5176c-b9d9-3b9e-9ca3-ac26e484de56.roa (raw, json)
Hash identifier:          Ii8qKLB0SQwJMsu5BWSwPNwkmRsjgevObiebqdHx9qE=
Subject key identifier:   DE:86:9C:94:8B:21:00:44:AB:16:14:91:A1:8F:71:C1:DF:55:52:C0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFB38B035B8954060BFD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d5176c-b9d9-3b9e-9ca3-ac26e484de56.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        76.156.64.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:b3:8b:03:5b:89:54:06:0b:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=142bc107-5a15-44c6-978b-bc0206a63964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:38:a0:ac:be:26:97:ae:9a:c5:7a:33:0a:
                    ed:3e:ce:39:3d:7b:21:d2:5c:b6:a2:81:a0:26:1f:
                    af:2b:c8:5e:66:57:47:fd:06:e5:a4:ad:d2:e7:66:
                    98:b1:1e:d7:13:ad:7d:f9:d5:64:72:4d:97:72:d2:
                    39:f3:07:89:d8:38:8f:06:80:ff:ae:bd:c6:c4:7e:
                    70:bb:7a:dc:58:79:30:4a:26:cf:d0:bb:23:d0:bd:
                    6b:40:90:76:5d:ae:91:bb:7a:f1:63:5b:37:dc:a2:
                    a0:d0:c4:2e:46:da:c2:bd:0c:78:01:61:8c:ae:28:
                    ad:d3:a4:ed:d3:1a:3f:c0:01:53:46:3b:3d:61:52:
                    fb:68:bc:c6:29:ca:29:4f:ed:32:50:b0:a1:17:ff:
                    d7:ff:13:0f:12:62:af:94:ec:96:e6:48:0e:de:60:
                    13:01:f8:79:cf:2a:01:72:8e:11:e0:a1:62:0a:b0:
                    a3:e8:0f:44:22:ec:e4:50:6a:d1:b9:a2:51:84:6e:
                    9c:33:56:23:ab:ec:2d:5e:c7:9a:5a:32:6f:37:2b:
                    4a:bc:75:66:1b:bf:28:bb:1d:af:39:d9:52:8e:5a:
                    b5:8a:1b:de:45:8c:84:50:bd:4d:f1:ce:5a:00:a9:
                    b5:62:b8:7b:da:7e:25:f2:46:e7:96:3f:85:59:b0:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:86:9C:94:8B:21:00:44:AB:16:14:91:A1:8F:71:C1:DF:55:52:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d5176c-b9d9-3b9e-9ca3-ac26e484de56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.156.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:93:2e:2e:24:4b:70:c0:f2:8a:4b:a7:6a:c3:1a:43:f4:f0:
         5e:f0:20:b7:8d:61:7b:31:9d:98:70:39:53:82:a8:d8:33:b8:
         93:2b:07:f7:1f:74:0b:5e:af:23:81:52:24:c8:9d:43:00:4d:
         c2:54:86:97:83:b1:2b:72:32:0d:02:1f:33:85:26:bd:82:2e:
         e6:19:98:b1:87:88:df:08:e5:6c:fb:fa:92:bf:7c:4a:ef:25:
         a5:d4:8c:43:09:c4:3e:07:5b:69:44:3b:2a:b9:ac:97:11:24:
         db:8d:8f:b9:2d:09:bf:5e:b3:ec:77:fe:67:2a:0c:32:2b:68:
         71:86:d1:ca:91:75:3c:2c:89:14:c0:86:02:85:9c:ef:2c:37:
         12:5a:d8:0e:65:10:19:3c:b6:70:c3:6f:04:68:2c:a5:6d:5f:
         01:e9:bf:2f:0a:4a:1b:33:10:37:0a:54:ca:c9:d8:0b:89:f9:
         94:78:5e:e4:1a:31:75:f6:18:88:3e:d3:7b:33:6e:83:80:d1:
         b4:8b:3d:d1:94:63:16:f9:48:5b:49:d6:4e:09:56:f4:c2:dd:
         93:c8:66:0d:40:ab:bd:26:25:98:79:dc:3f:1d:68:52:d7:7b:
         e5:a2:24:ba:8a:e1:7f:52:d2:f7:c8:9b:23:95:40:61:e0:aa:
         a1:cb:4b:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfr7OLA1uJVAYL/UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MTQyYmMxMDctNWExNS00NGM2LTk3OGItYmMwMjA2YTYzOTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfM4oKy+JpeumsV6MwrtPs45PXsh0ly2ooGg
Jh+vK8heZldH/QblpK3S52aYsR7XE619+dVkck2XctI58weJ2DiPBoD/rr3GxH5w
u3rcWHkwSibP0Lsj0L1rQJB2Xa6Ru3rxY1s33KKg0MQuRtrCvQx4AWGMriit06Tt
0xo/wAFTRjs9YVL7aLzGKcopT+0yULChF//X/xMPEmKvlOyW5kgO3mATAfh5zyoB
co4R4KFiCrCj6A9EIuzkUGrRuaJRhG6cM1Yjq+wtXseaWjJvNytKvHVmG78oux2v
OdlSjlq1ihveRYyEUL1N8c5aAKm1Yrh72n4l8kbnlj+FWbCDKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6GnJSLIQBEqxYUkaGPccHfVVLAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTJkNTE3NmMtYjlkOS0z
YjllLTljYTMtYWMyNmU0ODRkZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJxAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaTLi4kS3DA8opLp2rDGkP08F7wILeNYXsxnZhwOVOCqNgzuJMrB/cf
dAteryOBUiTInUMATcJUhpeDsStyMg0CHzOFJr2CLuYZmLGHiN8I5Wz7+pK/fErv
JaXUjEMJxD4HW2lEOyq5rJcRJNuNj7ktCb9es+x3/mcqDDIraHGG0cqRdTwsiRTA
hgKFnO8sNxJa2A5lEBk8tnDDbwRoLKVtXwHpvy8KShszEDcKVMrJ2AuJ+ZR4XuQa
MXX2GIg+03szboOA0bSLPdGUYxb5SFtJ1k4JVvTC3ZPIZg1Aq70mJZh53D8daFLX
e+WiJLqK4X9S0vfImyOVQGHgqqHLSzk=
-----END CERTIFICATE-----
Generated at Sat May 4 14:47:33 2024 by rpki-client on console-ams.rpki-client.org