Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56e08686-3aac-35a4-8a7a-391ee16d7d17.roa
File:                     56e08686-3aac-35a4-8a7a-391ee16d7d17.roa (raw, json)
Hash identifier:          XHuabvZkqL389bxmR1Qu5yAIivZxC7TtEAxhUiejNKQ=
Subject key identifier:   67:C9:71:98:BB:77:6C:31:85:F1:CF:67:41:05:D1:D6:6E:A1:6E:CD
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285845B7B3786CDD269A6394B13E00
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56e08686-3aac-35a4-8a7a-391ee16d7d17.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     400317
IP address blocks:        63.160.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:78:6c:dd:26:9a:63:94:b1:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=87778a91-30e8-4170-a6fa-8ef1fb44c313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:a1:d5:d7:2d:ee:ae:ca:17:43:78:0d:c6:
                    3c:33:73:9b:32:56:1e:ea:97:db:ff:f3:04:53:59:
                    2e:98:a2:dd:e1:af:3e:18:4f:73:d0:7a:fd:fe:ca:
                    1a:f8:35:5b:9c:dd:c6:65:1c:ee:b6:d4:69:4e:2a:
                    40:de:01:47:7d:8c:ef:03:40:68:63:cf:47:56:c8:
                    de:13:5c:de:e8:a2:82:66:cd:de:04:a2:40:59:20:
                    47:89:83:38:35:b0:09:5a:ba:d3:5b:c8:cd:64:bd:
                    2d:5c:5a:75:b1:75:62:f2:5c:8b:86:0e:dd:81:a2:
                    a5:f3:9f:26:3b:27:47:32:63:45:26:e9:60:b1:02:
                    fc:84:98:c4:2d:4a:68:1d:8c:83:e2:94:7b:9e:2e:
                    49:82:d5:e1:4e:9c:c2:14:b7:78:58:49:ec:ba:52:
                    2c:cd:d9:a1:18:31:c1:89:6a:aa:c8:8f:01:fc:ee:
                    6c:43:0c:2a:83:74:e0:32:4f:ed:35:b3:28:b3:94:
                    e1:62:96:f7:88:70:e4:49:89:08:22:10:63:e9:6a:
                    31:8d:4a:26:5d:5e:66:fa:7b:8e:7c:ad:87:22:f9:
                    fd:95:3a:f0:24:84:50:59:7e:d4:57:8d:a6:54:fa:
                    5a:5a:52:a3:73:62:b2:65:d6:e2:13:f6:28:07:c7:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C9:71:98:BB:77:6C:31:85:F1:CF:67:41:05:D1:D6:6E:A1:6E:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56e08686-3aac-35a4-8a7a-391ee16d7d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:73:c2:28:31:b0:7b:52:08:17:48:77:6e:1f:b6:d4:15:
         7e:97:be:84:4e:9e:9d:d8:bd:26:c4:f1:71:e0:3e:76:46:62:
         85:16:2a:f1:86:0a:33:81:ac:86:23:0b:48:d0:3c:7d:48:c1:
         a0:ca:6b:e0:a6:b7:ef:f6:fc:04:5a:1f:8e:73:5d:e7:d2:bc:
         51:4c:1e:c2:56:4b:22:ec:99:b8:a1:f8:77:be:e6:c4:9a:d7:
         10:17:31:fd:e1:81:f1:5a:96:e9:d4:02:84:40:d9:1f:17:03:
         8a:ed:94:08:b2:9b:14:f5:c6:99:d1:74:c6:33:09:12:75:82:
         14:23:e4:b6:15:25:e4:f2:75:f5:5e:78:f4:fe:8a:3c:45:b4:
         09:6d:29:8f:3e:65:aa:ac:30:d9:41:31:32:40:59:af:36:f3:
         7d:26:5f:d4:81:0a:07:4a:1c:86:ad:1b:b7:21:4d:17:06:9a:
         2e:88:fc:94:b8:6c:1c:60:27:52:16:b9:9b:e8:6b:32:b0:2f:
         60:82:54:f3:b3:1f:d2:8a:b1:74:69:7c:22:33:96:a4:67:2d:
         c7:aa:f0:54:5d:1a:aa:1d:59:60:41:0e:8c:d5:68:4a:bb:32:
         7f:53:f3:e3:65:e7:04:e4:7a:bb:2e:ed:33:0e:18:d9:f5:ab:
         3f:97:fe:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3s3hs3SaaY5SxPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk
ODc3NzhhOTEtMzBlOC00MTcwLWE2ZmEtOGVmMWZiNDRjMzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFih1dct7q7KF0N4DcY8M3ObMlYe6pfb//ME
U1kumKLd4a8+GE9z0Hr9/soa+DVbnN3GZRzuttRpTipA3gFHfYzvA0BoY89HVsje
E1ze6KKCZs3eBKJAWSBHiYM4NbAJWrrTW8jNZL0tXFp1sXVi8lyLhg7dgaKl858m
OydHMmNFJulgsQL8hJjELUpoHYyD4pR7ni5JgtXhTpzCFLd4WEnsulIszdmhGDHB
iWqqyI8B/O5sQwwqg3TgMk/tNbMos5ThYpb3iHDkSYkIIhBj6WoxjUomXV5m+nuO
fK2HIvn9lTrwJIRQWX7UV42mVPpaWlKjc2KyZdbiE/YoB8dHSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfJcZi7d2wxhfHPZ0EF0dZuoW7NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvNTZlMDg2ODYtM2FhYy0z
NWE0LThhN2EtMzkxZWUxNmQ3ZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6CGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOsc8IoMbB7UggXSHduH7bUFX6XvoROnp3YvSbE8XHgPnZGYoUWKvGG
CjOBrIYjC0jQPH1IwaDKa+Cmt+/2/ARaH45zXefSvFFMHsJWSyLsmbih+He+5sSa
1xAXMf3hgfFalunUAoRA2R8XA4rtlAiymxT1xpnRdMYzCRJ1ghQj5LYVJeTydfVe
ePT+ijxFtAltKY8+ZaqsMNlBMTJAWa82830mX9SBCgdKHIatG7chTRcGmi6I/JS4
bBxgJ1IWuZvoazKwL2CCVPOzH9KKsXRpfCIzlqRnLceq8FRdGqodWWBBDozVaEq7
Mn9T8+Nl5wTkersu7TMOGNn1qz+X/ls=
-----END CERTIFICATE-----
Generated at Thu Jun 13 18:07:38 2024 by rpki-client on console-ams.rpki-client.org