Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de79c89f-87a4-34a1-a272-c3b158ebe10c.roa
File:                     de79c89f-87a4-34a1-a272-c3b158ebe10c.roa (raw, json)
Hash identifier:          UUIn3Qen/4GHr3vvdwWtMZTbiXapVUxb/70MnC+jLTg=
Subject key identifier:   83:D4:4A:EF:1A:69:4F:3C:41:D6:9A:55:E0:01:B3:E6:73:C5:20:09
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858459E935989DE2F35469E194000
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de79c89f-87a4-34a1-a272-c3b158ebe10c.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     20940
IP address blocks:        165.254.119.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:59:89:de:2f:35:46:9e:19:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=dbfcd04c-172e-4c69-952e-4cb524d52309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:51:d5:2b:c5:2b:3a:15:48:a5:8e:4f:0c:
                    2c:82:65:c1:25:8a:70:8c:2b:30:ef:96:59:89:29:
                    f2:14:bb:78:77:9c:e2:9b:38:59:f8:30:18:49:89:
                    f2:8a:ae:32:c9:5d:53:8b:59:71:67:d4:4d:89:13:
                    7a:32:50:45:17:df:7e:2b:14:6c:26:d0:c6:59:a4:
                    05:98:43:60:90:ee:c7:45:39:49:4b:2b:ec:6e:5a:
                    d2:bc:a4:5c:40:40:50:cd:27:ad:1a:85:ef:28:f5:
                    7a:75:72:0d:a8:7d:d4:90:4f:a3:fd:5b:3e:0f:a0:
                    15:32:0d:04:06:c6:f0:0e:60:fb:46:0e:02:e0:ee:
                    c3:e7:91:ac:89:a3:35:60:36:0e:b2:b3:35:f2:7f:
                    b7:c6:71:e8:98:d6:72:81:7f:33:e5:37:64:d7:03:
                    3f:3b:83:fe:09:b7:1f:1a:16:11:6b:33:63:1d:5e:
                    03:a7:18:5c:21:ca:45:28:56:dd:6a:08:92:20:09:
                    db:1b:bd:74:d9:40:19:bc:c5:a2:bf:3d:68:34:60:
                    73:ab:ae:0c:49:93:4f:4f:79:09:b6:a8:e9:ee:7e:
                    ca:59:28:10:7c:bf:cd:f8:1b:8f:c3:1a:56:01:aa:
                    dd:b8:a7:ca:f5:12:49:00:8c:a9:cb:84:8a:f4:99:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D4:4A:EF:1A:69:4F:3C:41:D6:9A:55:E0:01:B3:E6:73:C5:20:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de79c89f-87a4-34a1-a272-c3b158ebe10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.119.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:01:87:fa:16:9e:d5:e4:6a:46:38:7c:26:82:1e:9f:20:17:
         0e:23:b1:1d:f3:b3:1c:14:05:f2:38:d3:61:2b:d8:37:ff:66:
         1a:20:04:45:cd:3e:ff:96:f1:29:fd:37:42:ef:52:ab:23:83:
         8c:86:7a:4c:f2:db:24:c2:c1:f7:6f:b9:94:be:4b:8b:6f:0b:
         68:50:f7:a0:7c:36:d7:b1:5d:5b:76:36:7d:db:1a:fb:a8:ce:
         31:42:8a:fd:77:5e:45:8a:e6:e6:c0:ce:51:e1:d3:2d:2d:c6:
         61:e3:6b:b6:c6:21:0a:ed:6a:c0:d6:45:7e:31:5e:1a:39:05:
         5b:88:36:c8:0d:af:59:73:ad:15:54:85:41:11:8a:f6:6c:f0:
         18:e8:79:d6:cd:c0:88:d6:16:82:58:e0:23:2e:d0:17:28:d3:
         31:0c:65:75:05:6a:72:d4:57:4f:40:ee:fe:26:c5:8a:36:36:
         1e:47:bd:1d:00:78:2e:29:c1:39:9e:00:03:2d:2e:89:53:d0:
         2a:07:98:6b:c0:1a:84:e0:d0:2a:18:db:0f:1a:29:df:21:43:
         db:b1:29:9a:8c:da:16:ba:ff:2e:d8:19:4e:b0:0f:d9:08:6c:
         27:ab:46:aa:c3:71:e0:a0:e1:ee:6b:e9:b6:5c:46:88:12:a8:
         f9:05:fe:98
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWek1mJ3i81Rp4ZQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
ZGJmY2QwNGMtMTcyZS00YzY5LTk1MmUtNGNiNTI0ZDUyMzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF1R1SvFKzoVSKWOTwwsgmXBJYpwjCsw75ZZ
iSnyFLt4d5zimzhZ+DAYSYnyiq4yyV1Ti1lxZ9RNiRN6MlBFF99+KxRsJtDGWaQF
mENgkO7HRTlJSyvsblrSvKRcQEBQzSetGoXvKPV6dXINqH3UkE+j/Vs+D6AVMg0E
BsbwDmD7Rg4C4O7D55GsiaM1YDYOsrM18n+3xnHomNZygX8z5Tdk1wM/O4P+Cbcf
GhYRazNjHV4DpxhcIcpFKFbdagiSIAnbG7102UAZvMWivz1oNGBzq64MSZNPT3kJ
tqjp7n7KWSgQfL/N+BuPwxpWAarduKfK9RJJAIypy4SK9JlQ3wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIPUSu8aaU88QdaaVeABs+ZzxSAJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGU3OWM4OWYtODdhNC0z
NGExLWEyNzItYzNiMTU4ZWJlMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf53gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQANAYf6Fp7V5GpGOHwmgh6fIBcOI7Ed87McFAXyONNhK9g3/2YaIARF
zT7/lvEp/TdC71KrI4OMhnpM8tskwsH3b7mUvkuLbwtoUPegfDbXsV1bdjZ92xr7
qM4xQor9d15FiubmwM5R4dMtLcZh42u2xiEK7WrA1kV+MV4aOQVbiDbIDa9Zc60V
VIVBEYr2bPAY6HnWzcCI1haCWOAjLtAXKNMxDGV1BWpy1FdPQO7+JsWKNjYeR70d
AHguKcE5ngADLS6JU9AqB5hrwBqE4NAqGNsPGinfIUPbsSmajNoWuv8u2BlOsA/Z
CGwnq0aqw3HgoOHua+m2XEaIEqj5Bf6Y
-----END CERTIFICATE-----
Generated at Mon May 6 17:38:02 2024 by rpki-client on console-fra.rpki-client.org