Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/09037bef-2b08-3844-903f-1933941a3fc2.roa
File:                     09037bef-2b08-3844-903f-1933941a3fc2.roa (raw, json)
Hash identifier:          HPeO/RCL3iwlLpvEawJQ6gaipkaapcxMKMo9kM6Jar4=
Subject key identifier:   E2:28:C5:B3:37:E5:A8:3F:AE:17:60:6A:95:B3:26:C4:C5:1A:1F:FE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583E29C53A473B5B6C43525697C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/09037bef-2b08-3844-903f-1933941a3fc2.roa
Signing time:             Tue 10 Apr 2018 11:26:02 +0000
ROA not before:           Tue 10 Apr 2018 11:26:02 +0000
ROA not after:            Sat 08 Apr 2028 04:00:00 +0000
asID:                     3727
IP address blocks:        205.238.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:29:c5:3a:47:3b:5b:6c:43:52:56:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Apr  8 04:00:00 2028 GMT
        Subject: CN=644b0de3-7bef-46ad-88e8-ba6d2f467345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8c:a2:95:c7:52:f5:c3:bc:bf:24:a3:e3:6d:
                    49:6f:58:80:c0:cd:f5:42:bd:d5:a6:b0:db:e5:b8:
                    05:0a:4c:9b:be:28:f8:db:72:a9:87:1d:30:b2:b6:
                    7b:9e:e1:ff:9f:c2:d0:93:90:91:12:09:94:6b:28:
                    84:bb:52:36:ac:f5:8f:b3:e7:12:87:4a:c7:de:31:
                    46:55:9e:59:82:06:07:d8:54:9c:d2:7c:6e:90:eb:
                    79:2c:95:ba:ce:7b:89:26:7e:7f:27:1d:0e:dc:d4:
                    10:ab:38:62:0e:f1:9b:12:51:73:cc:9d:82:84:b6:
                    9a:13:8a:61:bc:71:3e:d3:a4:86:67:39:f9:26:b5:
                    c1:50:29:f0:88:08:4b:7d:ce:a5:4d:70:4a:2f:40:
                    c9:72:40:53:83:ea:16:b7:0b:b8:ba:d1:61:5d:1e:
                    ec:00:a6:80:fb:30:7a:cf:df:fb:c7:a1:91:78:cf:
                    64:1f:9a:21:61:68:60:05:f2:60:ae:af:5c:56:3f:
                    cb:46:3f:07:d6:4b:40:f0:b9:cd:e6:dd:c3:b0:ee:
                    1d:4c:9a:46:b3:05:f4:d3:ac:0b:09:e2:fd:6e:d2:
                    6e:95:e2:8d:88:9d:49:14:42:c6:6c:e9:83:7b:de:
                    ea:40:23:c5:ef:09:03:54:28:40:8f:5b:fd:c5:60:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:C5:B3:37:E5:A8:3F:AE:17:60:6A:95:B3:26:C4:C5:1A:1F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/09037bef-2b08-3844-903f-1933941a3fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.238.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:09:5e:d9:bc:36:6c:74:18:14:26:76:e1:bb:c6:78:c8:60:
         c7:2f:f1:ba:3c:58:8e:b7:cf:d4:6f:79:79:01:21:7a:ae:cd:
         a6:bb:96:95:d2:dd:1b:13:b2:2a:2c:85:91:61:77:93:66:09:
         da:c3:89:7a:8e:42:c0:e3:cf:f5:d3:76:42:73:7d:73:3d:c6:
         e3:b2:82:40:20:c6:22:1f:ee:c5:14:30:5e:09:3e:f3:08:66:
         cf:be:8e:97:0d:52:5c:85:f4:2b:1d:ba:8a:2f:bf:76:19:b1:
         0b:f2:08:51:07:da:b0:96:62:9f:18:89:7d:2a:a0:8c:02:b9:
         a4:6c:15:7f:42:31:0a:fb:a0:8d:24:30:2e:8a:98:fb:1c:09:
         fa:4a:82:52:22:8e:c9:8a:17:0e:93:c6:99:86:97:82:ac:00:
         21:55:98:ff:24:2e:11:d1:d0:43:9d:50:49:1a:2c:49:eb:46:
         ae:dc:91:98:c5:16:e2:8b:18:a6:85:6d:bb:c3:f0:54:86:78:
         f8:88:30:db:f6:54:72:8f:66:f5:14:84:01:df:a3:47:cb:e4:
         17:ca:24:ce:ce:5d:98:70:fd:68:35:db:2d:52:24:fd:5b:07:
         0f:95:af:84:88:4b:57:ad:8a:5f:08:c3:ec:f3:25:ec:a3:69:
         84:b0:21:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4pxTpHO1tsQ1JWl8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTE4MDQxMDExMjYwMloXDTI4MDQwODA0MDAwMFowLzEtMCsGA1UEAxMk
NjQ0YjBkZTMtN2JlZi00NmFkLTg4ZTgtYmE2ZDJmNDY3MzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoyilcdS9cO8vySj421Jb1iAwM31Qr3VprDb
5bgFCkybvij423Kphx0wsrZ7nuH/n8LQk5CREgmUayiEu1I2rPWPs+cSh0rH3jFG
VZ5ZggYH2FSc0nxukOt5LJW6znuJJn5/Jx0O3NQQqzhiDvGbElFzzJ2ChLaaE4ph
vHE+06SGZzn5JrXBUCnwiAhLfc6lTXBKL0DJckBTg+oWtwu4utFhXR7sAKaA+zB6
z9/7x6GReM9kH5ohYWhgBfJgrq9cVj/LRj8H1ktA8LnN5t3DsO4dTJpGswX006wL
CeL9btJuleKNiJ1JFELGbOmDe97qQCPF7wkDVChAj1v9xWAzCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOIoxbM35ag/rhdgapWzJsTFGh/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDkwMzdiZWYtMmIwOC0z
ODQ0LTkwM2YtMTkzMzk0MWEzZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAze4wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYJXtm8Nmx0GBQmduG7xnjIYMcv8bo8WI63z9RveXkBIXquzaa7lpXS
3RsTsioshZFhd5NmCdrDiXqOQsDjz/XTdkJzfXM9xuOygkAgxiIf7sUUMF4JPvMI
Zs++jpcNUlyF9Csduoovv3YZsQvyCFEH2rCWYp8YiX0qoIwCuaRsFX9CMQr7oI0k
MC6KmPscCfpKglIijsmKFw6TxpmGl4KsACFVmP8kLhHR0EOdUEkaLEnrRq7ckZjF
FuKLGKaFbbvD8FSGePiIMNv2VHKPZvUUhAHfo0fL5BfKJM7OXZhw/Wg12y1SJP1b
Bw+Vr4SIS1etil8Iw+zzJeyjaYSwIeE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:07 2024 by rpki-client on console-ams.rpki-client.org