Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/c6ef55a1-667d-3f34-b165-406b071c6b4d.roa
File:                     c6ef55a1-667d-3f34-b165-406b071c6b4d.roa (raw, json)
Hash identifier:          ImmCNRAhMhTyRo0a51mK8XZZfKfbIuEQQLj2X9SVMeA=
Subject key identifier:   B0:E8:5E:B6:B6:B5:B1:C2:01:C7:A4:82:59:F3:72:DE:5B:2C:C9:49
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F432858451A158F696B517FB5508942C0
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/c6ef55a1-667d-3f34-b165-406b071c6b4d.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     19381
IP address blocks:        162.211.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:8f:69:6b:51:7f:b5:50:89:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=87ed2678-3e3b-4b83-b5fd-664d883251ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:93:ac:92:2c:9c:c2:66:3c:c8:27:97:9c:
                    e0:98:63:16:3f:e1:0d:58:02:41:c0:60:83:82:8f:
                    84:0f:ab:27:1b:30:40:08:49:f5:a7:f0:9f:81:56:
                    0f:db:95:2c:82:a0:d9:06:58:08:8b:f6:78:c9:4b:
                    3f:03:3e:5e:39:22:ca:db:33:9c:cd:b8:4c:ab:e9:
                    53:4f:75:52:57:64:56:af:41:26:36:b6:d6:13:a5:
                    8c:1a:c1:a3:6c:b7:9f:00:d2:06:f8:ff:0f:43:ae:
                    5c:28:e8:d5:7d:2b:16:87:99:9e:49:14:2f:82:15:
                    21:52:c8:b5:3b:ba:73:c2:e1:b0:64:de:ba:b2:25:
                    e8:ec:91:0c:ba:c3:49:08:54:d4:d1:d4:ca:0f:b9:
                    c5:e3:ec:b5:1d:50:3e:fc:98:d4:cc:9b:8d:91:9f:
                    03:af:1b:d3:9f:fe:d1:05:97:9d:6c:df:5e:0b:cf:
                    f0:02:2c:3e:8e:4d:90:10:83:68:a7:68:aa:0f:2b:
                    9f:7f:87:8a:13:02:e8:b2:2b:c9:91:6c:37:78:d7:
                    13:80:75:41:ca:b8:ee:b7:89:e1:38:e3:7f:fe:09:
                    55:d8:97:7e:79:4d:fc:e7:68:a6:5f:0f:20:5c:3b:
                    48:ea:4e:3e:6f:f3:ee:57:93:a8:c0:b7:13:41:a6:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E8:5E:B6:B6:B5:B1:C2:01:C7:A4:82:59:F3:72:DE:5B:2C:C9:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/c6ef55a1-667d-3f34-b165-406b071c6b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:8a:a5:d3:67:01:fd:98:4c:cd:1c:29:60:be:55:e6:67:47:
         ce:2c:a0:54:13:a5:61:d8:78:28:00:50:f6:8d:be:03:f9:e4:
         18:8c:b3:6a:78:1d:c6:8a:01:56:dd:f6:4e:1a:ce:f3:d4:16:
         61:4d:8c:fe:4d:87:f6:06:81:7b:09:7c:c3:b4:eb:c9:dd:4c:
         6b:37:e6:11:db:ef:9e:59:7a:90:ac:fb:80:ab:cf:3e:2b:cd:
         e2:66:42:3c:5b:89:0d:2f:fe:2a:e3:e6:4b:6c:66:72:68:7e:
         46:0e:23:8e:c2:c1:ec:17:e8:aa:16:eb:17:e8:8b:43:e1:7d:
         ae:db:19:c1:22:de:cc:dc:6d:04:ea:2d:33:13:73:ce:55:21:
         b9:77:eb:19:e5:58:1d:c8:c0:f8:80:ae:f1:06:77:3c:a6:de:
         9c:f4:4d:f4:46:ac:8f:52:30:c7:84:e2:3f:df:64:ca:08:c7:
         54:2a:b7:d8:a2:7e:97:bb:67:43:29:ef:95:20:ad:6e:19:3a:
         b8:66:0d:14:dc:07:47:2a:88:be:d8:a9:8f:cd:e5:66:b9:fd:
         70:37:7c:f2:1e:14:20:aa:59:69:b4:bb:62:c6:e0:85:d1:97:
         c7:3b:81:c1:3c:78:0d:6f:1c:3f:a3:6c:e5:8b:92:1c:bb:cd:
         f3:bd:96:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUaFY9pa1F/tVCJQsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl
Njc0MB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk
ODdlZDI2NzgtM2UzYi00YjgzLWI1ZmQtNjY0ZDg4MzI1MWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZWTrJIsnMJmPMgnl5zgmGMWP+ENWAJBwGCD
go+ED6snGzBACEn1p/CfgVYP25UsgqDZBlgIi/Z4yUs/Az5eOSLK2zOczbhMq+lT
T3VSV2RWr0EmNrbWE6WMGsGjbLefANIG+P8PQ65cKOjVfSsWh5meSRQvghUhUsi1
O7pzwuGwZN66siXo7JEMusNJCFTU0dTKD7nF4+y1HVA+/JjUzJuNkZ8DrxvTn/7R
BZedbN9eC8/wAiw+jk2QEINop2iqDyuff4eKEwLosivJkWw3eNcTgHVByrjut4nh
OON//glV2Jd+eU3852imXw8gXDtI6k4+b/PuV5OowLcTQaalTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDoXra2tbHCAcekglnzct5bLMlJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy
MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvYzZlZjU1YTEtNjY3ZC0z
ZjM0LWIxNjUtNDA2YjA3MWM2YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl
YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2
ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1
NTM3NmU2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotMwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACiKpdNnAf2YTM0cKWC+VeZnR84soFQTpWHYeCgAUPaNvgP55BiMs2p4
HcaKAVbd9k4azvPUFmFNjP5Nh/YGgXsJfMO068ndTGs35hHb755ZepCs+4Crzz4r
zeJmQjxbiQ0v/irj5ktsZnJofkYOI47CwewX6KoW6xfoi0Phfa7bGcEi3szcbQTq
LTMTc85VIbl36xnlWB3IwPiArvEGdzym3pz0TfRGrI9SMMeE4j/fZMoIx1Qqt9ii
fpe7Z0Mp75UgrW4ZOrhmDRTcB0cqiL7YqY/N5Wa5/XA3fPIeFCCqWWm0u2LG4IXR
l8c7gcE8eA1vHD+jbOWLkhy7zfO9lss=
-----END CERTIFICATE-----
Generated at Sat May 11 02:47:03 2024 by rpki-client on console-fra.rpki-client.org