Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ef20bbd-fb4f-366f-a8a2-ff6db8dc6f1d.roa
File:                     2ef20bbd-fb4f-366f-a8a2-ff6db8dc6f1d.roa (raw, json)
Hash identifier:          PLvpjF4Xv4ffQ857F7TnA7mFoKTCXkv8jLRZL2jCI6U=
Subject key identifier:   B3:62:A2:EC:43:88:00:40:73:D2:AB:FC:BA:B0:BC:42:19:32:49:DD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285845A9BE0F88943A91D822AF4BB0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ef20bbd-fb4f-366f-a8a2-ff6db8dc6f1d.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     1225
IP address blocks:        165.254.137.64/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:0f:88:94:3a:91:d8:22:af:4b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=3abb244b-6959-4c40-8177-5c24d29ea846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:50:fb:36:b3:fb:7b:9e:62:bc:1d:f7:d3:fc:
                    12:f5:d1:fa:2b:2e:47:c2:8a:0f:18:71:28:be:b7:
                    57:6f:2b:49:4c:f9:d0:4b:4d:e6:98:d0:c5:59:9a:
                    a6:4d:fa:f7:c3:ff:48:0c:49:fd:2a:c4:40:b4:e2:
                    6c:0c:77:b0:17:ec:bf:0f:e6:68:9f:02:fa:e9:b9:
                    78:54:8e:0a:8e:b3:b0:2c:9f:d7:df:ef:03:05:87:
                    52:0a:76:86:1e:59:5e:c1:6f:64:ed:6d:3c:52:3d:
                    79:eb:77:de:21:d5:7d:b1:c7:bd:cb:e8:5b:0f:f0:
                    98:07:0a:49:de:da:d5:27:fc:9e:4d:fa:8b:e3:69:
                    d9:71:f1:dc:73:c5:e2:d0:c2:c5:5a:98:e1:9c:1d:
                    a5:da:54:ca:ff:49:fa:de:7c:73:f5:77:b5:47:ff:
                    c6:1d:6e:49:8e:f7:57:df:e5:af:b0:21:fa:39:f5:
                    47:e4:eb:30:da:cb:5c:d2:f3:12:58:c5:be:52:71:
                    da:b3:bd:06:df:c4:06:e8:6d:42:b4:cd:e5:18:97:
                    ef:c9:ff:47:36:c6:3e:c4:fb:2f:65:07:ca:04:29:
                    0b:3b:55:d4:1b:2f:b4:9c:0c:74:05:ac:c8:ad:68:
                    69:45:21:73:7f:c7:a5:49:b2:35:70:90:30:f5:94:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:62:A2:EC:43:88:00:40:73:D2:AB:FC:BA:B0:BC:42:19:32:49:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ef20bbd-fb4f-366f-a8a2-ff6db8dc6f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.137.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:cf:4d:56:6a:53:db:1b:62:8f:2b:57:0f:40:4e:19:33:
         85:cd:af:e7:6f:c4:83:04:72:9c:e4:69:bc:11:0a:87:24:9b:
         7a:fc:d2:0b:3f:c7:a5:46:9e:85:39:01:35:fa:ec:74:36:86:
         52:c4:ee:c5:fd:43:da:88:33:33:30:3a:9c:ef:83:63:d7:61:
         c5:f3:6b:07:98:3e:98:ff:45:d3:64:31:4f:41:3e:b6:8f:13:
         b2:0a:e4:d7:17:95:23:98:30:0c:41:38:27:ad:c4:97:c6:95:
         fd:41:ff:6c:5f:b0:90:41:c4:7f:6d:1e:59:e0:1f:f3:fd:86:
         3b:ea:70:e1:33:9f:0e:12:91:5a:07:35:0e:99:5f:af:be:90:
         c1:14:f9:35:ac:24:58:6c:88:34:79:b4:c1:74:af:50:49:ca:
         ee:4e:9e:7d:08:ff:64:da:d1:98:d2:2b:30:50:c1:ab:b8:dd:
         2b:60:93:02:a1:4e:ef:33:fd:a7:da:f7:2c:9a:4e:56:f9:fe:
         be:ec:70:7f:f9:ab:f4:c2:46:7e:c2:d3:55:15:07:3b:4f:02:
         6c:64:be:c7:4e:96:1c:01:aa:68:a4:3a:6a:d4:52:9c:2d:f9:
         81:e9:0a:b4:bb:cc:05:2a:4b:a1:5f:58:22:9a:a6:64:2d:d5:
         32:0d:b8:21
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWpvg+IlDqR2CKvS7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk
M2FiYjI0NGItNjk1OS00YzQwLTgxNzctNWMyNGQyOWVhODQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FD7NrP7e55ivB330/wS9dH6Ky5HwooPGHEo
vrdXbytJTPnQS03mmNDFWZqmTfr3w/9IDEn9KsRAtOJsDHewF+y/D+ZonwL66bl4
VI4KjrOwLJ/X3+8DBYdSCnaGHllewW9k7W08Uj1563feIdV9sce9y+hbD/CYBwpJ
3trVJ/yeTfqL42nZcfHcc8Xi0MLFWpjhnB2l2lTK/0n63nxz9Xe1R//GHW5JjvdX
3+WvsCH6OfVH5Osw2stc0vMSWMW+UnHas70G38QG6G1CtM3lGJfvyf9HNsY+xPsv
ZQfKBCkLO1XUGy+0nAx0BazIrWhpRSFzf8elSbI1cJAw9ZQ34wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLNiouxDiABAc9Kr/LqwvEIZMkndMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmVmMjBiYmQtZmI0Zi0z
NjZmLWE4YTItZmY2ZGI4ZGM2ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGpf6JQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBsHs9NVmpT2xtijytXD0BOGTOFza/nb8SDBHKc5Gm8EQqHJJt6/NIL
P8elRp6FOQE1+ux0NoZSxO7F/UPaiDMzMDqc74Nj12HF82sHmD6Y/0XTZDFPQT62
jxOyCuTXF5UjmDAMQTgnrcSXxpX9Qf9sX7CQQcR/bR5Z4B/z/YY76nDhM58OEpFa
BzUOmV+vvpDBFPk1rCRYbIg0ebTBdK9QScruTp59CP9k2tGY0iswUMGruN0rYJMC
oU7vM/2n2vcsmk5W+f6+7HB/+av0wkZ+wtNVFQc7TwJsZL7HTpYcAapopDpq1FKc
LfmB6Qq0u8wFKkuhX1gimqZkLdUyDbgh
-----END CERTIFICATE-----
Generated at Tue May 7 02:10:07 2024 by rpki-client on console-ams.rpki-client.org