Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa
File:                     280c97c7-56b8-3514-9a4a-9008c60ea148.roa (raw, json)
Hash identifier:          yeIHJnwgiAHiQnwdz76NwXfcDxcMNmIQFhrNi1N/EtU=
Subject key identifier:   09:C7:8C:45:10:E7:DF:06:3E:2E:40:24:10:D1:71:70:F4:D4:7B:00
Certificate issuer:       /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
Certificate serial:       010D0C9F432858455F1123D44F37869119744B80
Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa
Signing time:             Fri 29 Mar 2024 19:02:24 +0000
ROA not before:           Fri 29 Mar 2024 19:02:24 +0000
ROA not after:            Thu 27 Jun 2024 19:02:24 +0000
asID:                     14618
IP address blocks:        165.1.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:11:23:d4:4f:37:86:91:19:74:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53
        Validity
            Not Before: Mar 29 19:02:24 2024 GMT
            Not After : Jun 27 19:02:24 2024 GMT
        Subject: CN=b7bcc4bb-21dd-4d3c-aa7c-13190bc08e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:55:25:0c:78:87:be:c3:6b:c0:a1:4b:bf:
                    da:64:ed:ae:99:7d:5a:95:7a:6d:41:31:ac:03:5b:
                    5f:05:cd:76:d0:6c:f3:20:b3:3b:e7:25:00:81:80:
                    ed:80:d3:80:be:b3:dd:3f:ac:1d:90:35:55:37:7b:
                    8c:3d:13:b7:27:22:ac:28:26:cf:dc:6b:f1:7e:01:
                    ce:38:a6:ae:c7:89:28:70:16:d5:77:17:b8:3b:b7:
                    20:5d:b9:d8:5f:a2:69:fd:77:27:be:22:a0:ad:8a:
                    b8:d0:d1:b1:e9:22:13:af:29:29:ca:c5:9d:ee:0d:
                    96:e6:3f:ea:ce:89:b3:0d:1e:4a:7e:75:10:ed:7a:
                    6a:4a:39:82:17:df:eb:74:a4:c8:bb:d7:7b:43:2f:
                    a9:9e:b6:09:bf:a0:f3:4e:5b:75:7a:3b:47:92:e8:
                    0d:d8:91:9a:0a:07:4c:6d:a7:16:35:24:72:95:ad:
                    3d:1d:a5:b3:e0:04:e8:38:53:6a:46:d7:55:91:8a:
                    41:82:c5:55:eb:08:7d:4b:e5:9a:b7:2b:64:61:91:
                    88:14:0c:3c:b5:4f:b6:52:05:22:05:6b:d8:60:71:
                    9c:62:13:ce:27:62:dd:01:b9:4b:f3:bb:8d:a1:25:
                    8c:71:fc:49:b0:d7:b1:20:b6:c7:4a:c8:10:ff:c9:
                    ee:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:8C:45:10:E7:DF:06:3E:2E:40:24:10:D1:71:70:F4:D4:7B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl

            X509v3 Authority Key Identifier:
                keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.1.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8d:3c:72:85:a8:b9:3f:bc:12:cc:bf:30:9e:bb:96:55:8d:
         52:ff:f4:32:3a:06:f8:8c:46:93:b8:a9:77:ee:e0:10:15:95:
         9d:d5:26:2c:87:18:ba:ff:bc:b3:1e:35:b1:f6:33:51:f8:58:
         cb:84:5f:e2:3b:18:ff:bd:0f:21:1e:28:e0:94:59:41:32:50:
         b7:a3:1d:26:2e:65:d5:d9:7a:98:6c:ff:71:2e:3b:10:b6:be:
         7e:26:a6:0d:dc:27:de:f3:57:b9:cd:6f:f1:4e:52:f9:23:92:
         86:52:6e:43:28:55:cf:ce:d7:2c:ff:61:76:fa:e0:e7:1f:3b:
         c7:61:9e:1b:4c:bb:8b:0e:fd:1b:1c:6f:11:f4:c5:2c:87:3e:
         e5:21:f0:d8:20:ab:f4:34:70:28:21:d3:4f:93:84:bb:11:43:
         99:a1:77:a0:9f:df:9c:89:bf:0f:c1:06:ca:ca:dd:66:6c:10:
         62:44:b7:51:4e:96:d9:da:1d:82:fb:73:d8:eb:45:ba:17:9b:
         10:2d:6c:76:82:c9:43:63:a0:9a:f8:76:96:ad:7c:21:fe:0e:
         92:99:28:e6:d3:5f:a2:cc:0b:40:1d:14:0c:03:5a:82:c5:82:
         f4:05:d1:9f:01:9e:c8:7c:6e:e2:31:f3:0c:90:12:fe:a3:50:
         b8:f3:7b:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfESPUTzeGkRl0S4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll
YTUzMB4XDTI0MDMyOTE5MDIyNFoXDTI0MDYyNzE5MDIyNFowLzEtMCsGA1UEAxMk
YjdiY2M0YmItMjFkZC00ZDNjLWFhN2MtMTMxOTBiYzA4ZTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ1VJQx4h77Da8ChS7/aZO2umX1alXptQTGs
A1tfBc120GzzILM75yUAgYDtgNOAvrPdP6wdkDVVN3uMPRO3JyKsKCbP3GvxfgHO
OKaux4kocBbVdxe4O7cgXbnYX6Jp/XcnviKgrYq40NGx6SITrykpysWd7g2W5j/q
zomzDR5KfnUQ7XpqSjmCF9/rdKTIu9d7Qy+pnrYJv6DzTlt1ejtHkugN2JGaCgdM
bacWNSRyla09HaWz4AToOFNqRtdVkYpBgsVV6wh9S+WatytkYZGIFAw8tU+2UgUi
BWvYYHGcYhPOJ2LdAblL87uNoSWMcfxJsNexILbHSsgQ/8nutwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnHjEUQ598GPi5AJBDRcXD01HsAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw
N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvMjgwYzk3YzctNTZiOC0z
NTE0LTlhNGEtOTAwOGM2MGVhMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx
MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5
ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1
OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpQEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGONPHKFqLk/vBLMvzCeu5ZVjVL/9DI6BviMRpO4qXfu4BAVlZ3VJiyH
GLr/vLMeNbH2M1H4WMuEX+I7GP+9DyEeKOCUWUEyULejHSYuZdXZephs/3EuOxC2
vn4mpg3cJ97zV7nNb/FOUvkjkoZSbkMoVc/O1yz/YXb64OcfO8dhnhtMu4sO/Rsc
bxH0xSyHPuUh8Nggq/Q0cCgh00+ThLsRQ5mhd6Cf35yJvw/BBsrK3WZsEGJEt1FO
ltnaHYL7c9jrRboXmxAtbHaCyUNjoJr4dpatfCH+DpKZKObTX6LMC0AdFAwDWoLF
gvQF0Z8Bnsh8buIx8wyQEv6jULjze2o=
-----END CERTIFICATE-----
Generated at Wed May 1 20:50:36 2024 by rpki-client on console-ams.rpki-client.org