Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c51b0613-46f1-3adf-a87f-ce47427afc0c.roa
File:                     c51b0613-46f1-3adf-a87f-ce47427afc0c.roa (raw, json)
Hash identifier:          lpweB/R8PpMBAxQnh+mmwqLhaq9fpD3KuX5ePNDftHw=
Subject key identifier:   BB:51:AC:45:D2:8C:87:79:4E:01:9F:13:B1:82:43:4C:76:1C:49:92
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285844F2FFF3DDB30DC282270EAB80
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c51b0613-46f1-3adf-a87f-ce47427afc0c.roa
Signing time:             Tue 20 Feb 2024 02:00:26 +0000
ROA not before:           Tue 20 Feb 2024 02:00:26 +0000
ROA not after:            Mon 20 May 2024 01:00:26 +0000
asID:                     140096
IP address blocks:        161.129.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f2:ff:f3:dd:b3:0d:c2:82:27:0e:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb 20 02:00:26 2024 GMT
            Not After : May 20 01:00:26 2024 GMT
        Subject: CN=d2aaa0bb-a665-4e6a-8af6-b96d1b401188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:20:77:57:a8:28:8b:ce:db:50:ef:c1:b1:
                    8b:20:24:9d:01:24:70:b3:70:10:70:15:82:a4:c8:
                    88:a0:0b:7b:69:9c:b1:28:3f:45:eb:5d:ca:3c:92:
                    fe:38:35:c5:08:a6:e5:f1:48:a1:17:bb:c1:7e:11:
                    e1:fe:3c:f8:99:d1:72:b0:42:7d:2d:82:6b:04:04:
                    4a:f8:b8:f9:c8:29:51:07:9c:2f:58:8d:1f:5b:64:
                    7e:91:4f:15:ff:f7:cc:73:e0:ae:ce:22:4b:fe:aa:
                    bb:4a:f2:a3:ba:2f:ff:a6:fa:b1:20:e0:08:d7:3b:
                    91:e3:bc:be:e4:7d:29:7e:01:a8:e9:e4:b6:6c:04:
                    fd:4b:30:1e:b2:a1:0a:cf:06:75:c3:51:eb:84:0f:
                    44:19:95:cc:93:d5:1a:a3:71:43:0e:57:fb:42:83:
                    77:f4:64:05:fd:26:25:3e:63:07:55:d1:f4:4e:12:
                    12:48:c3:53:50:8f:a1:a7:c2:4d:b5:b4:9a:40:6d:
                    e6:6a:36:a5:e7:3f:d5:61:ca:ad:2d:c9:2e:16:89:
                    60:84:a6:e9:50:c6:a5:74:38:43:47:33:fc:3d:30:
                    8b:db:a8:95:0a:5d:f6:47:36:c1:16:4f:97:92:b2:
                    0e:86:f3:92:7f:93:8e:41:7f:10:c3:53:9e:a7:ba:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:51:AC:45:D2:8C:87:79:4E:01:9F:13:B1:82:43:4C:76:1C:49:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c51b0613-46f1-3adf-a87f-ce47427afc0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:03:95:3f:49:b2:43:85:b1:6b:80:63:16:58:98:4f:0b:66:
         38:76:dd:0e:2f:6c:2b:ae:e0:b5:0b:3f:ae:89:4e:94:3a:ba:
         7a:43:f4:24:d0:cf:f8:d1:f5:fa:6b:22:9c:1c:21:f6:01:b3:
         15:26:9f:63:37:60:93:17:88:19:59:45:7d:19:88:2f:96:bc:
         e9:37:4a:2f:71:f8:c3:ba:69:9f:d0:1e:0e:f8:9c:f3:11:84:
         87:b4:47:e4:67:9c:10:88:e3:9a:10:c1:cf:40:54:7d:a2:5e:
         34:ff:44:40:62:b8:67:27:78:d5:c6:0c:ad:e1:f1:8c:ed:3b:
         b5:8e:26:b1:90:cf:42:2d:24:6e:af:62:72:9d:ec:09:7a:ef:
         0f:76:ac:75:72:70:73:0c:29:a8:06:75:ff:59:4b:0d:68:34:
         d9:44:5a:a3:33:2f:fc:70:d7:d7:89:2f:9f:5c:fa:bc:77:1b:
         5c:4e:16:9c:fa:61:6a:01:cf:0f:b9:37:45:6c:99:96:0c:2f:
         51:a7:f8:9c:9d:6f:95:2d:52:da:8e:e6:2c:bd:52:8c:79:cf:
         54:4b:09:85:ee:8d:95:33:75:7a:7f:04:8d:e7:23:e4:d0:ef:
         09:d2:39:1d:0f:65:2d:ab:84:b8:6e:5e:c7:87:3b:c7:2f:28:
         7e:6d:79:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETy//Pdsw3CgicOq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI0MDIyMDAyMDAyNloXDTI0MDUyMDAxMDAyNlowLzEtMCsGA1UEAxMk
ZDJhYWEwYmItYTY2NS00ZTZhLThhZjYtYjk2ZDFiNDAxMTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Ugd1eoKIvO21DvwbGLICSdASRws3AQcBWC
pMiIoAt7aZyxKD9F613KPJL+ODXFCKbl8UihF7vBfhHh/jz4mdFysEJ9LYJrBARK
+Lj5yClRB5wvWI0fW2R+kU8V//fMc+CuziJL/qq7SvKjui//pvqxIOAI1zuR47y+
5H0pfgGo6eS2bAT9SzAesqEKzwZ1w1HrhA9EGZXMk9Uao3FDDlf7QoN39GQF/SYl
PmMHVdH0ThISSMNTUI+hp8JNtbSaQG3majal5z/VYcqtLckuFolghKbpUMaldDhD
RzP8PTCL26iVCl32RzbBFk+XkrIOhvOSf5OOQX8Qw1Oep7rVZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtRrEXSjId5TgGfE7GCQ0x2HEmSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYzUxYjA2MTMtNDZmMS0z
YWRmLWE4N2YtY2U0NzQyN2FmYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYErMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgDlT9JskOFsWuAYxZYmE8LZjh23Q4vbCuu4LULP66JTpQ6unpD9CTQ
z/jR9fprIpwcIfYBsxUmn2M3YJMXiBlZRX0ZiC+WvOk3Si9x+MO6aZ/QHg74nPMR
hIe0R+RnnBCI45oQwc9AVH2iXjT/REBiuGcneNXGDK3h8YztO7WOJrGQz0ItJG6v
YnKd7Al67w92rHVycHMMKagGdf9ZSw1oNNlEWqMzL/xw19eJL59c+rx3G1xOFpz6
YWoBzw+5N0VsmZYML1Gn+Jydb5UtUtqO5iy9Uox5z1RLCYXujZUzdXp/BI3nI+TQ
7wnSOR0PZS2rhLhuXseHO8cvKH5teeQ=
-----END CERTIFICATE-----
Generated at Thu May 9 21:04:52 2024 by rpki-client on console-fra.rpki-client.org