Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/888f0921-eb40-31bd-b6df-6836dac322b0.roa
File:                     888f0921-eb40-31bd-b6df-6836dac322b0.roa (raw, json)
Hash identifier:          bQWM98wf96AEon0kDGagFJMfn45+31ok+t/8rpffIFk=
Subject key identifier:   7D:76:B3:96:59:B7:4B:FD:8A:89:26:59:39:FC:91:9C:5B:54:CF:1E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584276CB90BAA37FA314A273EF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/888f0921-eb40-31bd-b6df-6836dac322b0.roa
Signing time:             Thu 06 Jul 2023 12:00:00 +0000
ROA not before:           Thu 06 Jul 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.148.0/24 maxlen: 24
                          172.69.149.0/24 maxlen: 24
                          172.69.150.0/24 maxlen: 24
                          172.69.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:76:cb:90:ba:a3:7f:a3:14:a2:73:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  6 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=904f7847-c7a7-4ead-a540-1d8ac76c4f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:be:78:ab:7b:6c:95:3e:f3:a4:da:55:a0:ee:
                    a5:e3:95:0d:84:d1:9a:f6:f9:ea:51:59:fd:83:78:
                    a1:08:20:10:fb:ba:93:dd:34:8e:f7:b1:ac:a3:fb:
                    80:4c:07:e2:31:a1:b8:50:08:48:bb:1a:ea:a1:8d:
                    52:32:bd:04:65:f1:e8:93:65:e1:55:48:d7:de:5c:
                    0f:f9:45:64:31:8d:67:4d:a8:02:ba:79:00:2e:53:
                    b8:27:81:7c:85:4a:0e:e5:82:5b:ef:b9:12:ee:b7:
                    c4:f0:89:e3:ff:2c:54:d9:9a:56:7a:a0:7e:77:6b:
                    8c:cf:8c:06:65:f6:70:a1:c6:e0:fa:84:1c:48:3d:
                    d8:58:ca:01:71:68:40:b0:93:d7:42:e4:4d:59:2a:
                    8e:6f:57:15:74:ed:a3:65:82:6c:3c:61:03:b6:37:
                    57:c9:29:ad:37:94:62:f8:fa:e6:c8:c1:b7:4a:d8:
                    e3:03:4d:12:d0:9a:dd:06:7e:16:fd:90:8e:77:4c:
                    22:bd:a7:cd:fd:2a:f3:02:db:5f:64:2b:79:cf:91:
                    4f:66:b6:9c:a4:2d:4a:db:88:80:47:70:b7:03:05:
                    5a:65:fd:da:f1:38:f6:28:af:da:65:b0:ed:09:64:
                    6c:20:36:30:04:1a:1f:41:0e:c1:f9:3b:29:7c:fe:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:76:B3:96:59:B7:4B:FD:8A:89:26:59:39:FC:91:9C:5B:54:CF:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/888f0921-eb40-31bd-b6df-6836dac322b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:91:61:6f:ef:3f:90:fc:f4:ab:67:63:35:02:5b:89:d0:5a:
         0c:16:0d:68:94:9a:ab:ca:bc:a3:8a:01:38:19:04:08:b3:f5:
         ad:a5:f6:5b:51:a7:76:5f:89:76:ec:b0:a2:67:1c:6b:33:60:
         a8:c8:45:c9:b2:45:2b:c9:1e:dc:92:dd:f9:f4:71:d6:e1:68:
         a3:61:4b:8d:41:8d:5c:7a:e5:49:d6:03:9f:24:6f:9a:a5:cb:
         17:d7:39:54:a0:8b:8d:4b:3b:10:74:3f:e9:1d:ab:6c:40:d2:
         d5:f8:6c:cb:62:47:f4:04:04:2f:c6:55:74:90:1c:49:55:38:
         95:c2:0c:f1:fc:83:69:f2:bd:80:d0:09:0c:1c:6e:b3:c8:a1:
         11:37:26:2a:da:ea:b8:98:83:0e:27:c9:73:b6:b0:eb:ca:5d:
         3b:89:bf:fb:78:7b:4a:49:2a:0d:37:c9:9e:95:c0:d6:02:a9:
         3e:b2:a9:18:c6:b3:2b:a2:fd:43:d2:5f:56:d4:7b:a6:e1:b5:
         94:8f:60:0c:16:cf:0e:2e:3e:fc:5c:ce:7f:f8:bf:bc:f3:69:
         53:4a:45:a9:d4:36:4d:04:89:10:88:83:22:ca:6f:e5:96:30:
         33:a0:d3:c0:da:02:eb:01:db:5b:07:94:d1:b2:2c:f0:75:da:
         fd:49:db:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJ2y5C6o3+jFKJz74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIzMDcwNjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
OTA0Zjc4NDctYzdhNy00ZWFkLWE1NDAtMWQ4YWM3NmM0ZjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL54q3tslT7zpNpVoO6l45UNhNGa9vnqUVn9
g3ihCCAQ+7qT3TSO97Gso/uATAfiMaG4UAhIuxrqoY1SMr0EZfHok2XhVUjX3lwP
+UVkMY1nTagCunkALlO4J4F8hUoO5YJb77kS7rfE8Inj/yxU2ZpWeqB+d2uMz4wG
ZfZwocbg+oQcSD3YWMoBcWhAsJPXQuRNWSqOb1cVdO2jZYJsPGEDtjdXySmtN5Ri
+PrmyMG3StjjA00S0JrdBn4W/ZCOd0wivafN/SrzAttfZCt5z5FPZracpC1K24iA
R3C3AwVaZf3a8Tj2KK/aZbDtCWRsIDYwBBofQQ7B+TspfP4TiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH12s5ZZt0v9iokmWTn8kZxbVM8eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODg4ZjA5MjEtZWI0MC0z
MWJkLWI2ZGYtNjgzNmRhYzMyMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrEWUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEyRYW/vP5D89KtnYzUCW4nQWgwWDWiUmqvKvKOKATgZBAiz9a2l9ltR
p3ZfiXbssKJnHGszYKjIRcmyRSvJHtyS3fn0cdbhaKNhS41BjVx65UnWA58kb5ql
yxfXOVSgi41LOxB0P+kdq2xA0tX4bMtiR/QEBC/GVXSQHElVOJXCDPH8g2nyvYDQ
CQwcbrPIoRE3Jira6riYgw4nyXO2sOvKXTuJv/t4e0pJKg03yZ6VwNYCqT6yqRjG
syui/UPSX1bUe6bhtZSPYAwWzw4uPvxczn/4v7zzaVNKRanUNk0EiRCIgyLKb+WW
MDOg08DaAusB21sHlNGyLPB12v1J24o=
-----END CERTIFICATE-----
Generated at Sun May 12 03:26:01 2024 by rpki-client on console-fra.rpki-client.org