Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa
File:                     609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa (raw, json)
Hash identifier:          6AvqJ7NYreLXXz3BXQ9ix5e6KBbO9uwl2Koikn83QxU=
Subject key identifier:   5E:08:6A:01:3A:85:32:CE:B6:10:A4:D9:B0:03:2A:80:6D:15:FF:8D
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584589A3255372F46B72C7E39E80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     11164
IP address blocks:        163.253.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:25:53:72:f4:6b:72:c7:e3:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=798b2c73-8ffc-41d0-8ab2-564788f2b224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:da:d5:97:a7:fc:37:cd:5e:1c:7f:93:fc:e5:
                    ff:1e:e0:23:10:17:49:83:50:94:c7:96:e8:50:42:
                    74:96:e6:ac:49:3c:7c:41:f2:4e:49:40:99:d8:5b:
                    dd:83:86:b3:e6:8f:78:30:9e:fc:68:d7:ad:61:31:
                    8b:ef:a5:6c:6d:f6:f4:5b:ea:d9:55:43:31:de:c5:
                    36:68:07:fe:4b:b9:15:06:92:80:44:14:b0:90:4f:
                    16:db:d3:55:a2:c3:61:7e:37:7f:5f:e0:1a:db:11:
                    0a:4d:3f:0d:73:fd:e5:6f:81:ae:f9:86:c3:8c:d2:
                    16:4d:89:73:85:f2:fe:71:d5:c4:af:70:b0:e9:80:
                    33:78:a4:cc:00:f4:18:a1:7e:de:35:8a:3e:ab:b5:
                    16:2a:99:42:e8:49:da:4b:7f:33:d1:fa:fe:66:d6:
                    6c:f4:69:4f:76:d5:93:88:76:eb:d5:95:55:cf:63:
                    1d:26:f2:e4:17:7c:2c:ab:f5:bd:80:87:41:9e:ae:
                    13:09:8e:34:a1:ba:1b:f7:cb:6d:5f:e6:39:0e:13:
                    31:66:79:87:37:2d:77:7d:95:5b:5f:25:7c:7d:d9:
                    28:d5:c4:fb:2f:2a:9f:5d:6c:db:2b:15:02:54:63:
                    07:13:69:46:46:8c:f7:6d:26:6f:f4:16:d8:4f:6a:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:08:6A:01:3A:85:32:CE:B6:10:A4:D9:B0:03:2A:80:6D:15:FF:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:66:eb:53:32:05:ef:32:1e:aa:eb:32:f1:0e:1e:49:97:a3:
         86:5a:35:80:c5:10:37:73:ae:d4:a7:64:bc:e3:58:a4:80:5b:
         be:bd:22:04:8d:4b:06:f4:9f:c5:9f:2a:7b:84:e2:9c:7d:44:
         13:f8:5c:eb:80:a0:8d:b5:41:23:ab:3a:11:91:95:d0:46:1c:
         93:28:12:61:26:ca:1d:67:cd:31:91:32:4b:e4:6d:4c:dd:f0:
         28:9f:bf:03:77:64:83:16:28:d8:77:a5:d3:2f:91:bc:56:a2:
         de:a3:86:e7:b9:eb:52:c2:41:33:fe:97:66:55:27:21:50:5f:
         ac:da:93:75:f1:4b:df:85:50:bf:6d:97:8b:cf:17:19:37:7a:
         78:09:2e:a9:4b:af:f7:0d:00:72:50:b0:a5:63:89:a9:39:16:
         f0:6b:f8:7f:e4:e4:45:87:0e:39:a7:c8:c2:33:ab:ca:b8:b1:
         87:d6:86:47:99:58:db:cc:89:a0:58:7c:66:1a:61:b4:72:83:
         dd:2f:4f:e2:63:25:46:66:f3:12:ac:33:8c:5a:87:6f:2a:36:
         5b:b9:07:55:66:e8:13:5b:58:aa:7d:2e:8a:1f:88:63:b4:ca:
         dd:92:7f:ec:77:2c:22:5f:74:06:a9:0e:ac:84:84:ec:aa:73:
         16:71:63:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWJoyVTcvRrcsfjnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI0MDQxNDAxMDAyNFoXDTI0MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
Nzk4YjJjNzMtOGZmYy00MWQwLThhYjItNTY0Nzg4ZjJiMjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdrVl6f8N81eHH+T/OX/HuAjEBdJg1CUx5bo
UEJ0luasSTx8QfJOSUCZ2Fvdg4az5o94MJ78aNetYTGL76Vsbfb0W+rZVUMx3sU2
aAf+S7kVBpKARBSwkE8W29NVosNhfjd/X+Aa2xEKTT8Nc/3lb4Gu+YbDjNIWTYlz
hfL+cdXEr3Cw6YAzeKTMAPQYoX7eNYo+q7UWKplC6EnaS38z0fr+ZtZs9GlPdtWT
iHbr1ZVVz2MdJvLkF3wsq/W9gIdBnq4TCY40obob98ttX+Y5DhMxZnmHNy13fZVb
XyV8fdko1cT7LyqfXWzbKxUCVGMHE2lGRoz3bSZv9BbYT2p4lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4IagE6hTLOthCk2bADKoBtFf+NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNjA5ZDU5YTItNGU5YS0z
MzZmLTg5NjYtNTBiOWQxZDZkYmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZm61MyBe8yHqrrMvEOHkmXo4ZaNYDFEDdzrtSnZLzjWKSAW769IgSN
Swb0n8WfKnuE4px9RBP4XOuAoI21QSOrOhGRldBGHJMoEmEmyh1nzTGRMkvkbUzd
8CifvwN3ZIMWKNh3pdMvkbxWot6jhue561LCQTP+l2ZVJyFQX6zak3XxS9+FUL9t
l4vPFxk3engJLqlLr/cNAHJQsKVjiak5FvBr+H/k5EWHDjmnyMIzq8q4sYfWhkeZ
WNvMiaBYfGYaYbRyg90vT+JjJUZm8xKsM4xah28qNlu5B1Vm6BNbWKp9LoofiGO0
yt2Sf+x3LCJfdAapDqyEhOyqcxZxY8w=
-----END CERTIFICATE-----
Generated at Thu May 2 17:33:02 2024 by rpki-client on console-ams.rpki-client.org