Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa
File:                     e3e04aed-b26a-36b2-8c93-d3312cb16705.roa (raw, json)
Hash identifier:          mBiaZ7MncCyNkr3SvhFx3QqHs/1GIvY8mCuleljDVdw=
Subject key identifier:   23:30:3B:17:00:B7:F6:16:CF:89:A2:D4:BC:05:46:68:48:E2:F5:EF
Certificate issuer:       /CN=03e67bc8-299e-48ec-b739-e66ab6f422c7
Certificate serial:       010D0C9F43285845A6F35FF9F9833BC13B6E5BA0
Authority key identifier: 12:F3:98:4A:8E:E5:7B:B0:60:BB:CA:19:51:CA:A4:C3:FB:DC:04:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     6579
IP address blocks:        134.153.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:5f:f9:f9:83:3b:c1:3b:6e:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e67bc8-299e-48ec-b739-e66ab6f422c7
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=8cf9dd2a-5a88-4151-a376-7586662b9ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3a:b6:8b:c7:90:eb:3c:b5:76:45:06:a3:08:
                    65:53:1d:88:70:f2:29:3e:3d:13:72:53:79:93:23:
                    c2:f4:c6:48:47:e7:4f:7d:83:41:9b:58:02:d1:68:
                    64:9e:df:09:a2:40:51:75:ac:74:22:0f:c5:f5:2b:
                    08:5c:73:f7:fc:17:45:ab:f1:b5:14:f7:8a:48:e5:
                    17:f3:d1:8d:ee:8c:6d:1a:c8:39:41:77:4a:e7:9d:
                    01:d6:f6:f7:4e:70:c0:08:98:a3:db:c0:08:05:10:
                    58:e5:a0:72:1f:a0:a1:6f:62:32:11:6c:fa:d7:a8:
                    06:f5:b5:0f:ff:6f:96:ab:96:a6:2e:14:f3:9c:0a:
                    ba:35:39:6a:28:99:ee:f2:bf:88:ec:2c:6a:3b:eb:
                    45:72:92:93:be:c9:35:e8:5f:7e:d8:ca:74:31:32:
                    db:45:cb:1d:62:82:20:ae:a7:9d:6f:70:ed:48:e7:
                    a3:9c:4b:84:f4:72:7b:ba:89:d7:fd:e0:b0:4b:c9:
                    63:d0:14:cd:da:21:e4:ab:63:03:ea:7b:ca:c4:57:
                    10:8e:3d:c3:a2:dc:ef:01:6e:cf:01:39:90:e0:44:
                    33:86:7f:42:59:83:e3:e1:01:92:d6:11:50:bc:40:
                    e4:2d:cf:82:20:00:ec:15:4d:1b:3f:d4:cc:55:97:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:30:3B:17:00:B7:F6:16:CF:89:A2:D4:BC:05:46:68:48:E2:F5:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.crl

            X509v3 Authority Key Identifier:
                keyid:12:F3:98:4A:8E:E5:7B:B0:60:BB:CA:19:51:CA:A4:C3:FB:DC:04:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:aa:74:ba:5f:c0:f1:cd:d0:84:a5:57:e3:21:e2:39:2a:2c:
         b1:7b:79:94:e2:75:97:d7:57:af:01:5e:72:9d:df:46:72:08:
         df:45:b4:cb:be:e4:4c:e4:c8:a6:40:dd:a6:81:1e:36:8f:b0:
         9b:d9:d2:e9:0b:8b:32:20:e6:0a:cb:00:83:1b:d3:1f:66:b4:
         07:d0:66:8d:95:00:a7:3a:76:b9:ca:cf:ca:06:b2:df:67:89:
         58:85:53:ba:55:49:f7:8a:13:bc:82:ce:94:68:da:c2:c0:d9:
         64:15:42:b3:b6:14:8c:5d:bb:b8:47:28:eb:1d:c0:ab:65:ee:
         61:fd:bc:bf:c7:f9:f5:d0:6a:26:38:0c:f4:33:23:10:b6:df:
         a8:42:6a:b5:ee:77:38:28:92:f9:51:27:21:aa:84:5f:80:d0:
         8f:1e:63:ca:6f:af:64:34:c0:0c:9e:76:da:ca:06:d7:30:db:
         eb:1a:51:3b:6d:35:29:be:94:a0:cd:cd:a7:4e:ae:97:0a:5a:
         40:1e:83:5e:0f:a2:bb:a3:bb:b9:17:35:9a:4a:b3:64:f0:75:
         30:df:07:c3:a0:ac:88:95:27:4a:65:5d:49:28:59:c6:e5:a9:
         48:07:3e:82:37:1d:c5:ca:36:4a:78:85:67:69:bd:be:4a:72:
         30:29:4e:0e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWm81/5+YM7wTtuW6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNlNjdiYzgtMjk5ZS00OGVjLWI3MzktZTY2YWI2ZjQy
MmM3MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk
OGNmOWRkMmEtNWE4OC00MTUxLWEzNzYtNzU4NjY2MmI5YWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTq2i8eQ6zy1dkUGowhlUx2IcPIpPj0TclN5
kyPC9MZIR+dPfYNBm1gC0Whknt8JokBRdax0Ig/F9SsIXHP3/BdFq/G1FPeKSOUX
89GN7oxtGsg5QXdK550B1vb3TnDACJij28AIBRBY5aByH6Chb2IyEWz616gG9bUP
/2+Wq5amLhTznAq6NTlqKJnu8r+I7CxqO+tFcpKTvsk16F9+2Mp0MTLbRcsdYoIg
rqedb3DtSOejnEuE9HJ7uonX/eCwS8lj0BTN2iHkq2MD6nvKxFcQjj3DotzvAW7P
ATmQ4EQzhn9CWYPj4QGS1hFQvEDkLc+CIADsFU0bP9TMVZeReQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCMwOxcAt/YWz4mi1LwFRmhI4vXvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wM2U2
N2JjOC0yOTllLTQ4ZWMtYjczOS1lNjZhYjZmNDIyYzcvZTNlMDRhZWQtYjI2YS0z
NmIyLThjOTMtZDMzMTJjYjE2NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDNlNjdiYzgtMjk5ZS00OGVjLWI3
MzktZTY2YWI2ZjQyMmM3LzAzZTY3YmM4LTI5OWUtNDhlYy1iNzM5LWU2NmFiNmY0
MjJjNy5jcmwwHwYDVR0jBBgwFoAUEvOYSo7le7Bgu8oZUcqkw/vcBBowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wM2U2N2JjOC0yOTllLTQ4ZWMtYjczOS1lNjZh
YjZmNDIyYzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhpkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAK6p0ul/A8c3QhKVX4yHiOSossXt5lOJ1l9dXrwFecp3fRnII30W0y77k
TOTIpkDdpoEeNo+wm9nS6QuLMiDmCssAgxvTH2a0B9BmjZUApzp2ucrPygay32eJ
WIVTulVJ94oTvILOlGjawsDZZBVCs7YUjF27uEco6x3Aq2XuYf28v8f59dBqJjgM
9DMjELbfqEJqte53OCiS+VEnIaqEX4DQjx5jym+vZDTADJ522soG1zDb6xpRO201
Kb6UoM3Np06ulwpaQB6DXg+iu6O7uRc1mkqzZPB1MN8Hw6CsiJUnSmVdSShZxuWp
SAc+gjcdxco2SniFZ2m9vkpyMClODg==
-----END CERTIFICATE-----
Generated at Wed May 22 01:42:11 2024 by rpki-client on console-ams.rpki-client.org