Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa
File:                     aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa (raw, json)
Hash identifier:          y7RJNoWCE0ovBMpfCjABx73aRidWD03Skuq+czaBgLY=
Subject key identifier:   05:C6:6E:25:E1:0A:E4:9F:3F:BE:7D:80:51:0B:F5:4D:0C:2B:FC:9C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FE0B35DB6085CF61E11240
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     40816
IP address blocks:        165.254.137.0/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:0b:35:db:60:85:cf:61:e1:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=b8a8c3e6-ced2-4a44-ae80-7b294666dec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fe:f6:53:17:3d:a4:d1:30:79:46:82:71:e9:
                    98:a9:01:f7:9a:14:a1:ee:77:7d:8b:2f:99:c8:18:
                    c5:57:c9:e2:c7:06:6d:6c:dd:4c:ee:69:85:82:11:
                    9d:ab:01:8d:75:b0:3f:a9:74:9b:be:8e:57:8b:fb:
                    9e:a8:25:e9:6d:84:4f:a7:00:b9:35:99:69:ac:b8:
                    ed:80:52:79:fa:b6:90:82:c8:81:c7:78:7b:ef:52:
                    00:ea:c3:86:4b:0a:b9:69:58:35:43:c5:e1:cd:5e:
                    e8:ad:79:c6:c4:e2:2a:0e:d8:86:5d:46:2e:b2:de:
                    72:c6:98:a2:92:01:c1:d7:f9:b9:86:3a:09:63:d7:
                    28:08:2c:12:84:71:aa:62:05:9f:8e:9e:e1:45:3e:
                    8b:80:df:79:d3:8b:f4:85:bc:35:dd:71:b8:7e:23:
                    fe:f2:23:dd:06:10:aa:95:a4:02:eb:39:9f:c4:6a:
                    66:05:4c:00:8a:9c:9d:d6:d3:68:cf:39:f7:d0:58:
                    f3:95:ee:81:41:27:e1:76:29:7a:8b:f0:9b:9b:cf:
                    70:d2:5e:f9:6a:8e:f3:0f:00:9e:b2:80:c1:79:78:
                    61:0b:05:34:79:67:dd:1f:ab:49:8d:11:6e:79:70:
                    82:51:5b:39:6c:7b:cc:c4:08:19:ed:06:a7:d6:69:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C6:6E:25:E1:0A:E4:9F:3F:BE:7D:80:51:0B:F5:4D:0C:2B:FC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa7f3713-c810-31c1-94af-73aa4bb0fc17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.137.0/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6c:4a:69:4d:e0:7e:72:ca:e5:d7:1e:fb:1c:be:26:f4:49:
         8d:07:dc:97:1f:2f:f8:ac:5b:03:58:ac:db:28:7a:27:04:d2:
         ff:08:73:83:28:62:0e:bb:d8:cd:d2:ec:99:24:49:36:03:84:
         a8:1b:0e:e1:5b:ec:23:ad:d1:b9:2e:c5:75:c0:f3:d0:fd:db:
         81:f7:ee:7e:7c:61:51:aa:63:42:f8:8e:4a:2f:75:3a:1d:92:
         f5:bd:dd:c0:b3:85:19:1b:8c:ac:d5:21:3d:7e:a0:a6:4d:13:
         14:aa:e6:14:e3:f0:ff:fa:5b:0c:25:5e:fd:6e:aa:60:15:d2:
         8f:88:c8:75:d0:1c:7c:e9:f7:28:62:91:45:d9:40:eb:01:29:
         09:a1:91:79:a9:66:52:6a:44:da:55:48:2b:56:8b:68:35:10:
         9b:6a:4f:22:52:db:47:cc:a4:31:a2:36:d8:85:29:2a:07:f2:
         74:57:09:58:33:db:fa:f7:42:f0:78:38:3d:93:37:7a:53:c0:
         7e:a4:59:7f:ae:b3:7c:0a:be:80:11:34:6f:2f:e3:3e:2e:22:
         db:1f:5c:17:4a:e0:fd:b3:b6:a1:87:a6:ea:76:3e:84:8b:33:
         d8:ec:60:1a:2b:be:73:68:a0:76:69:ce:07:f7:2e:3e:20:99:
         bd:fc:ae:39
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWY/gs122CFz2HhEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk
YjhhOGMzZTYtY2VkMi00YTQ0LWFlODAtN2IyOTQ2NjZkZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf72Uxc9pNEweUaCcemYqQH3mhSh7nd9iy+Z
yBjFV8nixwZtbN1M7mmFghGdqwGNdbA/qXSbvo5Xi/ueqCXpbYRPpwC5NZlprLjt
gFJ5+raQgsiBx3h771IA6sOGSwq5aVg1Q8XhzV7orXnGxOIqDtiGXUYust5yxpii
kgHB1/m5hjoJY9coCCwShHGqYgWfjp7hRT6LgN9504v0hbw13XG4fiP+8iPdBhCq
laQC6zmfxGpmBUwAipyd1tNozzn30Fjzle6BQSfhdil6i/Cbm89w0l75ao7zDwCe
soDBeXhhCwU0eWfdH6tJjRFueXCCUVs5bHvMxAgZ7Qan1mnqzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAXGbiXhCuSfP759gFEL9U0MK/ycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWE3ZjM3MTMtYzgxMC0z
MWMxLTk0YWYtNzNhYTRiYjBmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf6JADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBObEppTeB+csrl1x77HL4m9EmNB9yXHy/4rFsDWKzbKHonBNL/CHOD
KGIOu9jN0uyZJEk2A4SoGw7hW+wjrdG5LsV1wPPQ/duB9+5+fGFRqmNC+I5KL3U6
HZL1vd3As4UZG4ys1SE9fqCmTRMUquYU4/D/+lsMJV79bqpgFdKPiMh10Bx86fco
YpFF2UDrASkJoZF5qWZSakTaVUgrVotoNRCbak8iUttHzKQxojbYhSkqB/J0VwlY
M9v690LweDg9kzd6U8B+pFl/rrN8Cr6AETRvL+M+LiLbH1wXSuD9s7ahh6bqdj6E
izPY7GAaK75zaKB2ac4H9y4+IJm9/K45
-----END CERTIFICATE-----
Generated at Mon May 6 17:38:01 2024 by rpki-client on console-fra.rpki-client.org