Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea60e2b7-ef64-3ef2-8526-11a88aeedef3.roa
File:                     ea60e2b7-ef64-3ef2-8526-11a88aeedef3.roa (raw, json)
Hash identifier:          Pta0g1ySkPo3IEeJRO7+SKZw+cmQ+/fOCtwgJfwVbGk=
Subject key identifier:   03:56:58:AD:4C:FD:7F:E4:AF:9D:74:B8:CC:01:7D:84:76:5E:EA:DE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584598FE0B1BDCEB2E668957BA00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea60e2b7-ef64-3ef2-8526-11a88aeedef3.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     21639
IP address blocks:        165.254.60.216/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:0b:1b:dc:eb:2e:66:89:57:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=cf571386-3fb4-4a41-a611-67916190ae5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:33:3c:52:77:c1:81:a0:4b:52:e2:b9:39:
                    bc:0d:91:5a:6b:6a:b2:ab:af:39:8d:5a:3d:05:27:
                    9f:8e:04:5f:80:4b:c8:66:ad:35:64:fb:6d:4b:e1:
                    cd:62:52:02:d8:e8:e7:30:ff:81:b4:53:fe:2c:fb:
                    78:2f:c0:bd:b7:34:a6:f5:9f:0c:ad:4a:f3:c4:ea:
                    57:f3:cb:ec:ed:26:1c:96:fd:cb:bc:7f:66:53:f4:
                    fa:63:2b:73:45:3f:5b:1f:76:a8:78:bd:1d:5c:c3:
                    61:1f:ad:db:c1:69:bf:9f:1b:20:8e:3d:38:a6:4b:
                    6f:75:7e:17:7c:4c:0b:4f:8e:cf:e7:06:4e:75:1c:
                    74:55:22:92:91:e4:90:80:1e:6a:ee:7f:29:ca:19:
                    ca:0e:fa:3e:a6:53:47:a9:5e:87:d0:21:80:23:dd:
                    13:d9:25:79:db:4d:d3:6e:7b:2c:b4:fc:66:1a:88:
                    1a:2d:6a:07:2f:b4:24:39:60:52:61:95:21:c4:dd:
                    b3:b7:42:2d:33:81:1d:1c:d2:d2:22:e4:bb:6e:9d:
                    00:02:2b:88:89:68:71:57:a7:41:d0:cc:c2:03:0a:
                    d2:76:1f:41:69:e8:8e:91:10:97:a4:6d:5c:33:6b:
                    83:83:66:d6:55:3f:5f:df:d4:df:50:5c:dc:01:ba:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:56:58:AD:4C:FD:7F:E4:AF:9D:74:B8:CC:01:7D:84:76:5E:EA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea60e2b7-ef64-3ef2-8526-11a88aeedef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.60.216/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3a:15:0a:67:87:ee:9e:c8:c8:87:96:e5:e0:bf:43:0c:43:
         e2:c0:52:16:73:98:55:46:43:d6:b6:08:16:b2:b7:de:fb:d0:
         3d:20:74:2f:3f:38:a6:e7:35:2d:4d:58:3f:18:8c:05:94:e4:
         e7:22:12:c0:ad:b7:fa:27:82:08:8f:4f:fe:91:50:ef:5b:52:
         aa:8b:11:03:c6:1b:a4:29:07:e9:24:63:5f:45:81:43:e6:39:
         d4:29:61:c2:e4:bf:c2:68:b5:5d:32:40:17:08:34:5e:e8:52:
         2b:61:d1:46:a4:8d:07:e5:86:53:ab:28:e8:96:04:63:bb:c6:
         f8:18:fe:dc:c9:94:75:32:58:01:a9:9b:56:4c:b7:cb:65:16:
         40:26:f3:1f:40:34:3f:97:1a:17:8a:99:12:1a:4c:a2:24:62:
         6c:f7:73:a5:87:c8:db:22:3f:29:9f:ab:d6:51:a4:a9:c0:62:
         0a:a7:42:61:77:39:7d:e9:65:bb:3d:de:ff:f0:61:41:49:12:
         96:cf:fd:ec:b0:76:f1:2a:20:d7:49:37:bf:34:c6:b0:01:05:
         63:ac:94:14:9b:24:42:0f:3b:ca:3a:48:43:58:8c:31:88:49:
         2e:72:eb:c3:0d:3c:df:3a:c9:9b:60:e3:f1:9b:a3:33:d0:fd:
         be:b5:79:31
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWY/gsb3OsuZolXugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk
Y2Y1NzEzODYtM2ZiNC00YTQxLWE2MTEtNjc5MTYxOTBhZTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloczPFJ3wYGgS1LiuTm8DZFaa2qyq685jVo9
BSefjgRfgEvIZq01ZPttS+HNYlIC2OjnMP+BtFP+LPt4L8C9tzSm9Z8MrUrzxOpX
88vs7SYclv3LvH9mU/T6YytzRT9bH3aoeL0dXMNhH63bwWm/nxsgjj04pktvdX4X
fEwLT47P5wZOdRx0VSKSkeSQgB5q7n8pyhnKDvo+plNHqV6H0CGAI90T2SV5203T
bnsstPxmGogaLWoHL7QkOWBSYZUhxN2zt0ItM4EdHNLSIuS7bp0AAiuIiWhxV6dB
0MzCAwrSdh9BaeiOkRCXpG1cM2uDg2bWVT9f39TfUFzcAbrjewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFANWWK1M/X/kr510uMwBfYR2XureMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWE2MGUyYjctZWY2NC0z
ZWYyLTg1MjYtMTFhODhhZWVkZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDpf482DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFOhUKZ4funsjIh5bl4L9DDEPiwFIWc5hVRkPWtggWsrfe+9A9IHQv
Pzim5zUtTVg/GIwFlOTnIhLArbf6J4IIj0/+kVDvW1KqixEDxhukKQfpJGNfRYFD
5jnUKWHC5L/CaLVdMkAXCDRe6FIrYdFGpI0H5YZTqyjolgRju8b4GP7cyZR1MlgB
qZtWTLfLZRZAJvMfQDQ/lxoXipkSGkyiJGJs93Olh8jbIj8pn6vWUaSpwGIKp0Jh
dzl96WW7Pd7/8GFBSRKWz/3ssHbxKiDXSTe/NMawAQVjrJQUmyRCDzvKOkhDWIwx
iEkucuvDDTzfOsmbYOPxm6Mz0P2+tXkx
-----END CERTIFICATE-----
Generated at Tue May 7 02:10:15 2024 by rpki-client on console-ams.rpki-client.org