Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a61a6602-9cfc-3547-b30e-c9320912a8db.roa
File:                     a61a6602-9cfc-3547-b30e-c9320912a8db.roa (raw, json)
Hash identifier:          6cZRYvlm9BtPFI3onw1KyKrsWwQfKGTIWU2p6K/MHxo=
Subject key identifier:   D1:C0:3E:0A:D4:D5:22:C3:B6:9A:9F:DA:28:83:6F:CC:9B:DD:61:EA
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F43285845C5A8F3F9016BB07AE26FE680
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a61a6602-9cfc-3547-b30e-c9320912a8db.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     2495
IP address blocks:        198.248.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f3:f9:01:6b:b0:7a:e2:6f:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=4f0cddeb-1cb5-4f2d-9c40-2407eaa0528b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:c1:7a:b0:e3:3e:ec:44:cf:6d:a6:6d:23:
                    a9:a9:c0:2c:10:dd:7a:49:31:0e:2a:c2:c5:4b:65:
                    ea:3b:11:48:ef:c1:03:7a:dd:db:ac:4f:53:80:af:
                    cf:84:a2:7f:21:72:f8:c0:3e:d9:14:82:39:b2:91:
                    83:a9:40:2c:4f:96:da:ad:9c:52:44:7b:be:07:6a:
                    46:96:9d:19:f8:bf:56:15:6c:02:7c:ed:d7:43:1a:
                    91:52:ad:c1:5e:f4:e5:41:24:d5:a4:d3:53:c6:dd:
                    07:77:6c:0c:42:08:50:18:4f:19:9e:ef:7f:dd:2f:
                    14:00:e4:3b:b7:1f:2b:ba:f3:c0:cc:5e:50:99:2a:
                    07:f8:22:55:26:ab:10:3a:69:16:34:72:2d:8b:2e:
                    be:b3:eb:6c:5c:df:7d:13:47:32:8a:f4:0d:c5:8d:
                    b6:3b:5f:2d:97:2b:50:43:aa:66:7a:39:ad:69:92:
                    15:ed:cb:92:d1:ce:30:12:ea:cd:6a:25:47:47:6b:
                    c1:2e:1f:5f:42:3c:84:b0:39:5a:f8:27:1d:da:b5:
                    35:7a:d4:22:48:c1:59:49:70:6b:ec:71:93:8e:bd:
                    57:5e:72:2a:1a:f4:fc:c1:f6:c5:ca:22:cb:95:76:
                    0b:58:6a:1f:f6:59:c9:5c:41:fd:a6:76:e2:df:88:
                    07:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C0:3E:0A:D4:D5:22:C3:B6:9A:9F:DA:28:83:6F:CC:9B:DD:61:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a61a6602-9cfc-3547-b30e-c9320912a8db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d7:b2:c8:8e:7e:fc:3e:a0:6a:ba:9e:4f:4a:7c:ea:5a:4b:
         f5:0c:c6:40:84:16:9d:43:43:e2:84:88:ae:33:45:0a:11:a0:
         8e:2a:9c:5d:59:c6:f9:2d:ab:84:cf:2a:2f:f9:f2:bc:1d:29:
         ea:7e:0b:90:b3:b8:49:7b:b3:ac:44:a0:b0:ad:99:ab:db:7b:
         03:53:2a:1d:8e:c2:97:21:1b:85:2a:eb:1c:94:c7:77:3d:a8:
         7f:f9:3c:ad:06:6e:fb:db:cd:91:81:22:66:b0:b5:22:a7:c3:
         17:98:e0:5a:7a:d7:e6:81:1c:b0:a0:ba:cb:31:38:d8:8c:fc:
         7e:50:e2:45:c8:2c:7f:43:7e:24:ad:1d:c2:39:96:4e:19:d9:
         0b:a6:3c:9a:ce:c7:dd:a0:b6:d7:4b:e8:bc:f7:57:bc:9c:00:
         70:2f:6b:7a:8a:e6:01:6a:0f:68:db:41:0d:70:9d:dc:b9:d1:
         2e:cb:4b:66:5c:14:a0:e4:3e:17:be:6e:91:65:22:05:b0:9a:
         ed:3f:4f:7b:5f:17:18:80:dc:37:a1:3e:e9:d5:76:3f:47:2e:
         ff:93:d5:15:ec:63:b3:7c:e0:24:1c:bc:04:e5:af:26:ae:ab:
         21:64:b2:8c:e5:1c:66:2f:aa:a2:1f:c0:2a:3f:a1:79:f5:9f:
         06:90:5e:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqPP5AWuweuJv5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk
NGYwY2RkZWItMWNiNS00ZjJkLTljNDAtMjQwN2VhYTA1MjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5rBerDjPuxEz22mbSOpqcAsEN16STEOKsLF
S2XqOxFI78EDet3brE9TgK/PhKJ/IXL4wD7ZFII5spGDqUAsT5barZxSRHu+B2pG
lp0Z+L9WFWwCfO3XQxqRUq3BXvTlQSTVpNNTxt0Hd2wMQghQGE8Znu9/3S8UAOQ7
tx8ruvPAzF5QmSoH+CJVJqsQOmkWNHItiy6+s+tsXN99E0cyivQNxY22O18tlytQ
Q6pmejmtaZIV7cuS0c4wEurNaiVHR2vBLh9fQjyEsDla+Ccd2rU1etQiSMFZSXBr
7HGTjr1XXnIqGvT8wfbFyiLLlXYLWGof9lnJXEH9pnbi34gHsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHAPgrU1SLDtpqf2iiDb8yb3WHqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvYTYxYTY2MDItOWNmYy0z
NTQ3LWIzMGUtYzkzMjA5MTJhOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxvhIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzXssiOfvw+oGq6nk9KfOpaS/UMxkCEFp1DQ+KEiK4zRQoRoI4qnF1Z
xvktq4TPKi/58rwdKep+C5CzuEl7s6xEoLCtmavbewNTKh2OwpchG4Uq6xyUx3c9
qH/5PK0GbvvbzZGBImawtSKnwxeY4Fp61+aBHLCgussxONiM/H5Q4kXILH9DfiSt
HcI5lk4Z2QumPJrOx92gttdL6Lz3V7ycAHAva3qK5gFqD2jbQQ1wndy50S7LS2Zc
FKDkPhe+bpFlIgWwmu0/T3tfFxiA3DehPunVdj9HLv+T1RXsY7N84CQcvATlryau
qyFksozlHGYvqqIfwCo/oXn1nwaQXi8=
-----END CERTIFICATE-----
Generated at Sun May 12 15:18:32 2024 by rpki-client on console-ams.rpki-client.org