Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa
File:                     febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa (raw, json)
Hash identifier:          6sFsS+M4l/zMPnZTXs03PuYfUu7C8rl9Z3pvWa9F0+0=
Subject key identifier:   78:7E:9E:29:7A:96:F7:8A:AC:81:7A:18:7E:69:DB:3F:1C:3E:49:84
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F432858456F1DBE776178AAE15EBAEA40
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        158.247.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:be:77:61:78:aa:e1:5e:ba:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=36ba0ebf-7924-454a-a767-040393c4d4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:82:8a:fd:0f:c2:22:7f:e9:d7:c5:1a:95:f5:
                    b1:df:cb:c2:3f:31:ce:3c:ec:f1:ae:29:6a:e9:9d:
                    83:aa:c7:86:79:d9:53:69:58:7d:7a:2a:66:2f:57:
                    72:62:54:80:cc:0a:2a:7b:a2:cc:1a:8e:ef:6e:ff:
                    15:73:87:3a:e2:f9:17:76:b2:1f:99:17:83:78:ee:
                    2a:c6:77:14:93:a6:81:30:5f:a1:2d:ca:1d:31:bd:
                    06:8f:7e:1c:6a:2f:71:32:2c:d6:31:3e:8c:7d:c4:
                    d4:de:a6:16:41:59:54:7d:a7:f7:d4:33:03:9d:59:
                    0d:ef:9a:aa:22:c4:d1:33:6f:7e:22:cd:0b:19:58:
                    6d:25:9b:65:61:7b:5b:51:2c:d1:81:e6:80:7e:88:
                    12:49:92:f9:4d:d3:3b:53:be:d0:6b:6d:2c:22:ca:
                    60:d0:2d:24:1b:49:07:6d:83:5d:54:7a:35:06:78:
                    02:16:8f:a0:c9:47:f0:8d:f0:a0:b1:29:15:35:e3:
                    1b:7c:a1:83:35:8f:ca:70:88:c0:ab:92:5d:3f:0d:
                    45:b5:92:04:b8:04:7a:e7:38:92:22:2a:aa:68:ef:
                    fe:4b:bb:6c:38:c4:54:4b:ac:24:47:d4:5b:d3:b6:
                    12:ee:93:0c:05:21:0c:28:0b:9f:c6:7b:f8:03:b5:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7E:9E:29:7A:96:F7:8A:AC:81:7A:18:7E:69:DB:3F:1C:3E:49:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/febefbbc-0e99-3e27-8085-4857bf2f8ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:68:b0:94:41:c3:09:3c:84:a8:c2:11:73:74:8a:68:b8:49:
         b1:c8:a4:21:c9:8d:36:c1:ef:56:33:c0:9e:5a:18:5e:ad:7d:
         ed:4b:6d:63:ae:4f:e4:01:e3:3b:32:9e:26:fd:77:a1:8f:0f:
         4b:03:30:95:29:d9:48:8e:3e:c4:d3:f4:6d:8c:ad:67:26:fa:
         60:c4:ec:50:9f:80:4d:e3:bd:30:a1:bb:80:06:cb:8b:31:53:
         82:57:6d:24:a8:a7:8f:06:b8:bd:c7:d5:a6:4f:4d:56:18:86:
         0b:35:fa:eb:2c:91:84:12:9d:36:0d:03:16:a8:66:4b:49:07:
         1e:49:d5:fb:05:0b:4c:12:10:19:d1:14:ed:5e:49:67:7b:eb:
         0d:58:08:bb:b2:64:28:9a:81:00:61:b7:36:12:d9:2f:3e:f3:
         8b:11:50:2e:9f:ca:59:d5:18:79:8a:8d:9b:c3:fa:40:3a:7a:
         0f:cb:6d:bb:6d:f0:94:cb:04:a2:b0:59:8a:9a:30:bb:63:39:
         06:54:82:27:c4:d9:76:ea:8c:73:54:8b:d0:88:00:a7:fb:9d:
         79:39:58:51:97:4b:59:78:27:81:b0:90:ae:7a:fd:c3:35:54:
         ae:8e:ff:39:b8:69:e7:ba:50:bd:7d:21:28:55:2c:67:13:5c:
         0c:ec:39:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVvHb53YXiq4V666kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI0MDQwNDEzMDAzNloXDTI0MDcwMzEzMDAzNlowLzEtMCsGA1UEAxMk
MzZiYTBlYmYtNzkyNC00NTRhLWE3NjctMDQwMzkzYzRkNGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4KK/Q/CIn/p18UalfWx38vCPzHOPOzxrilq
6Z2DqseGedlTaVh9eipmL1dyYlSAzAoqe6LMGo7vbv8Vc4c64vkXdrIfmReDeO4q
xncUk6aBMF+hLcodMb0Gj34cai9xMizWMT6MfcTU3qYWQVlUfaf31DMDnVkN75qq
IsTRM29+Is0LGVhtJZtlYXtbUSzRgeaAfogSSZL5TdM7U77Qa20sIspg0C0kG0kH
bYNdVHo1BngCFo+gyUfwjfCgsSkVNeMbfKGDNY/KcIjAq5JdPw1FtZIEuAR65ziS
IiqqaO/+S7tsOMRUS6wkR9Rb07YS7pMMBSEMKAufxnv4A7UkxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHh+nil6lveKrIF6GH5p2z8cPkmEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZmViZWZiYmMtMGU5OS0z
ZTI3LTgwODUtNDg1N2JmMmY4ZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnvcQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJosJRBwwk8hKjCEXN0imi4SbHIpCHJjTbB71YzwJ5aGF6tfe1LbWOu
T+QB4zsynib9d6GPD0sDMJUp2UiOPsTT9G2MrWcm+mDE7FCfgE3jvTChu4AGy4sx
U4JXbSSop48GuL3H1aZPTVYYhgs1+usskYQSnTYNAxaoZktJBx5J1fsFC0wSEBnR
FO1eSWd76w1YCLuyZCiagQBhtzYS2S8+84sRUC6fylnVGHmKjZvD+kA6eg/Lbbtt
8JTLBKKwWYqaMLtjOQZUgifE2XbqjHNUi9CIAKf7nXk5WFGXS1l4J4GwkK56/cM1
VK6O/zm4aee6UL19IShVLGcTXAzsOek=
-----END CERTIFICATE-----
Generated at Fri Apr 19 01:52:36 2024 by rpki-client on console-ams.rpki-client.org