Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/5a8dd8d5-9b21-328d-b299-14216c3417ed.roa
File:                     5a8dd8d5-9b21-328d-b299-14216c3417ed.roa (raw, json)
Hash identifier:          CO5aHsefJQVH4+cnR3ZvhVPIXkA8lTvT1Ctk20DA8jA=
Subject key identifier:   F8:9E:77:B3:45:C2:73:24:44:39:1E:90:BF:00:E7:E8:AC:C5:5A:A7
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584563F300037A8C0B2F963C7760
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/5a8dd8d5-9b21-328d-b299-14216c3417ed.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     16826
IP address blocks:        198.248.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:00:03:7a:8c:0b:2f:96:3c:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=bf6de8f3-f886-472f-a2a6-2eae8a3d3d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:38:13:46:c3:c5:3a:ed:58:9e:aa:45:43:
                    a4:b2:e7:63:a2:db:98:18:1c:29:bb:2c:ef:8e:9d:
                    f2:2f:3e:df:de:d6:13:2d:67:2f:4c:bd:11:c9:c7:
                    11:fd:1f:15:52:3e:59:db:e0:cf:65:dc:0a:3d:c6:
                    52:65:8c:d2:ef:20:e6:30:23:21:b9:5e:11:c1:42:
                    30:aa:09:eb:06:49:c3:ae:e8:b8:86:63:2c:55:27:
                    ac:c5:b3:36:7f:3a:61:93:50:09:7a:82:65:38:8a:
                    07:fb:76:fc:19:ba:58:34:3d:e0:74:2b:a2:64:64:
                    c7:b6:dd:fe:6c:06:8f:5c:61:bc:c4:03:cb:2c:1c:
                    20:b1:25:03:88:e6:33:e6:60:a2:b2:31:00:88:12:
                    7c:c1:8d:91:9a:72:4a:f7:11:f1:b6:a8:c4:5e:25:
                    6b:c4:8e:7e:5a:03:c8:48:c3:d6:7b:41:88:48:06:
                    8b:63:ae:e1:86:f9:18:fe:c4:d8:e4:96:b6:f5:e8:
                    ef:a8:35:58:54:c0:fe:5c:54:3f:63:3a:d8:05:96:
                    4c:32:2f:9d:58:ea:63:f1:ef:97:4f:59:12:c9:d9:
                    4b:aa:c8:e5:6a:4c:b0:0e:d2:a9:90:48:64:6a:39:
                    75:d3:b6:79:33:94:84:8d:28:e6:f5:27:9d:c5:fc:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9E:77:B3:45:C2:73:24:44:39:1E:90:BF:00:E7:E8:AC:C5:5A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/5a8dd8d5-9b21-328d-b299-14216c3417ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:95:98:5e:4e:06:a7:9f:78:c1:65:e4:2e:1a:2c:b6:f3:39:
         41:f9:df:12:37:f6:d5:b1:89:28:7d:b2:b4:e2:01:7e:bf:ab:
         2e:8e:a4:6f:66:49:04:19:ce:02:b6:1d:a1:1b:ef:0a:72:d6:
         f1:cc:90:72:9d:71:74:7c:09:d0:e7:c3:86:a4:16:37:89:07:
         7f:6c:21:98:74:af:8b:1d:8a:f0:01:a5:e9:52:01:f9:85:cc:
         66:a6:5a:1e:43:97:97:e2:e0:26:92:eb:82:d7:3c:38:4e:b3:
         fe:24:be:c7:f6:91:fe:de:47:da:94:9a:86:7d:65:62:80:a9:
         33:37:c7:e3:ee:29:70:cb:84:65:a1:42:6b:84:9e:4f:a1:04:
         49:6a:db:e4:ca:71:1f:3c:37:a5:87:ea:90:a9:38:de:ff:e3:
         d1:90:a3:20:f0:7b:65:22:c2:5a:b1:2d:d4:76:61:c1:08:72:
         f3:df:e0:64:51:c0:7f:b7:ac:c4:f1:fd:00:ed:75:94:d1:85:
         03:cc:94:3c:7e:cf:1b:dd:a8:d9:55:c1:4f:c6:05:5b:06:d5:
         6f:c6:dd:46:59:73:5a:2a:ca:0d:a7:61:29:fb:1a:ab:bd:bd:
         37:03:50:6d:eb:e5:f6:5a:1e:39:5f:e0:b2:42:7b:8d:a5:d8:
         49:66:0e:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8wADeowLL5Y8d2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk
YmY2ZGU4ZjMtZjg4Ni00NzJmLWEyYTYtMmVhZThhM2QzZDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfU4E0bDxTrtWJ6qRUOksudjotuYGBwpuyzv
jp3yLz7f3tYTLWcvTL0RyccR/R8VUj5Z2+DPZdwKPcZSZYzS7yDmMCMhuV4RwUIw
qgnrBknDrui4hmMsVSesxbM2fzphk1AJeoJlOIoH+3b8GbpYND3gdCuiZGTHtt3+
bAaPXGG8xAPLLBwgsSUDiOYz5mCisjEAiBJ8wY2RmnJK9xHxtqjEXiVrxI5+WgPI
SMPWe0GISAaLY67hhvkY/sTY5Ja29ejvqDVYVMD+XFQ/YzrYBZZMMi+dWOpj8e+X
T1kSydlLqsjlakywDtKpkEhkajl107Z5M5SEjSjm9SedxfzW2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPied7NFwnMkRDkekL8A5+isxVqnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvNWE4ZGQ4ZDUtOWIyMS0z
MjhkLWIyOTktMTQyMTZjMzQxN2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvg9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKaVmF5OBqefeMFl5C4aLLbzOUH53xI39tWxiSh9srTiAX6/qy6OpG9m
SQQZzgK2HaEb7wpy1vHMkHKdcXR8CdDnw4akFjeJB39sIZh0r4sdivABpelSAfmF
zGamWh5Dl5fi4CaS64LXPDhOs/4kvsf2kf7eR9qUmoZ9ZWKAqTM3x+PuKXDLhGWh
QmuEnk+hBElq2+TKcR88N6WH6pCpON7/49GQoyDwe2UiwlqxLdR2YcEIcvPf4GRR
wH+3rMTx/QDtdZTRhQPMlDx+zxvdqNlVwU/GBVsG1W/G3UZZc1oqyg2nYSn7Gqu9
vTcDUG3r5fZaHjlf4LJCe42l2ElmDpI=
-----END CERTIFICATE-----
Generated at Mon May 13 01:38:32 2024 by rpki-client on console-ams.rpki-client.org