Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa
File:                     cebecf45-75c8-339f-b4d9-cff06abf94d8.roa (raw, json)
Hash identifier:          5fi64p8BlFEuDqR1/INTLTwqmiEuKrB5ER0tlwZeBYw=
Subject key identifier:   8B:E8:73:BB:EE:06:19:49:D2:73:8E:F3:FA:93:7B:CD:1C:38:19:88
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F43285845C0138F81E2B56B26FC3AD380
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     46555
IP address blocks:        198.133.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:8f:81:e2:b5:6b:26:fc:3a:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=6209faf0-5702-44e8-a684-b0334cac8237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:06:3f:7a:0a:5e:7a:74:02:63:07:5f:19:
                    f8:50:aa:7a:18:63:79:4c:ef:8c:46:d9:65:0e:31:
                    99:2f:9b:04:da:12:24:25:56:a5:66:da:b3:15:25:
                    60:f8:59:54:5d:ce:c6:f0:42:19:95:90:56:64:a5:
                    88:96:81:4a:37:30:ca:e8:7b:37:6a:85:7d:a0:9c:
                    e4:31:a5:d2:04:9b:44:ca:74:28:c0:21:79:3a:03:
                    64:6a:20:c0:68:2b:92:41:a8:ed:f2:1d:6a:80:ae:
                    fa:fb:2e:a9:33:1c:45:9b:4b:83:5a:85:41:22:45:
                    38:f2:66:a7:da:a4:7d:e6:47:f0:37:c5:22:6a:16:
                    37:49:48:4e:a9:08:59:da:e7:ca:db:35:85:bf:85:
                    43:49:44:b8:86:d2:ec:ed:40:e6:0e:21:ac:0f:5e:
                    0f:4a:1c:f7:4b:ae:f4:cb:a1:d4:81:b8:08:a8:0f:
                    2a:b2:64:7f:4d:2f:79:ce:d9:4e:aa:6f:61:9d:90:
                    f6:e0:28:6b:9f:62:e2:f0:c4:cf:d5:22:95:cc:3f:
                    9d:eb:de:96:d9:e7:ca:c9:62:c8:d0:64:34:10:1b:
                    3f:fc:5e:81:b8:ad:8e:90:14:f7:4a:b0:48:03:fe:
                    c1:35:85:e3:45:06:2b:83:9b:99:5d:51:cd:11:b9:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E8:73:BB:EE:06:19:49:D2:73:8E:F3:FA:93:7B:CD:1C:38:19:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/cebecf45-75c8-339f-b4d9-cff06abf94d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:51:74:59:82:6a:ed:f0:e9:00:8f:b1:fd:02:82:57:7f:53:
         89:3e:76:53:3e:42:ab:91:64:10:9c:8b:f3:7f:fc:bc:b9:7a:
         59:1d:b7:64:be:6a:ff:6f:a7:f4:60:b2:12:c5:50:bb:50:0d:
         bd:5b:60:7f:c9:c9:e9:f6:89:ba:7b:e1:a9:2c:61:82:aa:2c:
         b9:83:b2:31:75:62:01:d3:bd:8d:4c:d2:16:8e:28:cf:71:48:
         ca:74:15:f6:3a:1e:4d:89:97:35:a5:8e:05:43:7a:14:e9:a7:
         06:67:a4:44:53:35:d9:f7:e9:3d:5f:8c:46:f4:5e:98:f7:b5:
         66:c0:44:6e:5f:fb:5d:cc:f1:53:0c:65:08:08:93:c8:05:97:
         b7:56:e9:52:b6:43:4f:12:cf:22:b5:b8:b8:22:8d:ac:81:ee:
         5e:4e:d1:91:30:cc:78:f2:c5:58:e5:d0:e3:94:d4:fb:a4:26:
         d3:b2:c8:b2:9a:97:2c:5b:1d:bb:e9:dd:cc:59:77:b7:9e:a2:
         ee:fd:e2:f6:99:0b:b3:1c:10:e6:aa:dd:3d:17:ec:8a:d0:65:
         c2:1b:0d:fa:e7:11:fd:4f:cc:53:14:55:b2:d5:0f:3c:d8:aa:
         62:c4:02:3f:cf:b7:e4:32:1e:ec:7a:38:a5:06:94:5f:85:fe:
         69:ce:a6:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXAE4+B4rVrJvw604AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhZGE4ZjUtNmJlMy00YTlmLTlhMmMtMWUxYWEwZTM3
NTk2MB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk
NjIwOWZhZjAtNTcwMi00NGU4LWE2ODQtYjAzMzRjYWM4MjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp8GP3oKXnp0AmMHXxn4UKp6GGN5TO+MRtll
DjGZL5sE2hIkJValZtqzFSVg+FlUXc7G8EIZlZBWZKWIloFKNzDK6Hs3aoV9oJzk
MaXSBJtEynQowCF5OgNkaiDAaCuSQajt8h1qgK76+y6pMxxFm0uDWoVBIkU48man
2qR95kfwN8UiahY3SUhOqQhZ2ufK2zWFv4VDSUS4htLs7UDmDiGsD14PShz3S670
y6HUgbgIqA8qsmR/TS95ztlOqm9hnZD24Chrn2Li8MTP1SKVzD+d696W2efKyWLI
0GQ0EBs//F6BuK2OkBT3SrBIA/7BNYXjRQYrg5uZXVHNEbk4dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvoc7vuBhlJ0nOO8/qTe80cOBmIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFk
YThmNS02YmUzLTRhOWYtOWEyYy0xZTFhYTBlMzc1OTYvY2ViZWNmNDUtNzVjOC0z
MzlmLWI0ZDktY2ZmMDZhYmY5NGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTZhZGE4ZjUtNmJlMy00YTlmLTlh
MmMtMWUxYWEwZTM3NTk2L2U2YWRhOGY1LTZiZTMtNGE5Zi05YTJjLTFlMWFhMGUz
NzU5Ni5jcmwwHwYDVR0jBBgwFoAU7UtG3BZ/kJdyk1+1d0FQ/ZJcw20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFkYThmNS02YmUzLTRhOWYtOWEyYy0xZTFh
YTBlMzc1OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMNRdFmCau3w6QCPsf0Cgld/U4k+dlM+QquRZBCci/N//Ly5elkdt2S+
av9vp/RgshLFULtQDb1bYH/Jyen2ibp74aksYYKqLLmDsjF1YgHTvY1M0haOKM9x
SMp0FfY6Hk2JlzWljgVDehTppwZnpERTNdn36T1fjEb0Xpj3tWbARG5f+13M8VMM
ZQgIk8gFl7dW6VK2Q08SzyK1uLgijayB7l5O0ZEwzHjyxVjl0OOU1PukJtOyyLKa
lyxbHbvp3cxZd7eeou794vaZC7McEOaq3T0X7IrQZcIbDfrnEf1PzFMUVbLVDzzY
qmLEAj/Pt+QyHux6OKUGlF+F/mnOpiE=
-----END CERTIFICATE-----
Generated at Sun May 12 02:11:51 2024 by rpki-client on console-ams.rpki-client.org