Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa
File:                     2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (raw, json)
Hash identifier:          f4FuH36FJLHdYhnsQcwmtT37XEhCC5j8JRLvAev+kRs=
Subject key identifier:   DA:64:C5:63:63:65:1A:42:53:5F:59:83:4C:E5:61:21:10:FC:B2:AC
Certificate issuer:       /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
Certificate serial:       010D0C9F43285845A6F35CB3E511D97AF024DD40
Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        148.59.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:5c:b3:e5:11:d9:7a:f0:24:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=d4c4fe3d-9f50-4b14-8bcf-85f7703339d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:d7:d9:fb:5d:e3:f6:24:9a:e8:ab:48:d6:
                    7f:10:44:ad:b2:bc:17:ad:c0:17:12:91:b4:0b:32:
                    a3:8d:3f:f7:2b:be:15:d7:f8:07:60:44:9b:77:9c:
                    40:4c:a5:93:b3:51:17:38:7b:86:63:ac:2f:15:47:
                    1b:54:a0:6e:88:13:0f:24:1b:8b:73:d7:c3:2a:09:
                    17:f8:a3:e2:0d:dd:5e:c8:c4:0c:52:55:d1:0c:b4:
                    87:a2:d2:b7:9c:6e:bc:44:be:52:b9:83:a1:36:b5:
                    1b:ed:86:80:2d:31:89:5a:02:6e:ae:97:1c:1e:64:
                    a6:b6:56:76:65:5b:f7:03:58:e9:25:9b:31:a6:8b:
                    0e:4c:c5:f0:8f:49:67:99:d7:fd:7f:0b:29:a1:fc:
                    ca:c1:54:7d:24:6f:1a:5c:15:aa:7e:ca:82:91:f2:
                    61:9a:bd:7a:5b:13:02:46:aa:14:ed:91:c5:7b:69:
                    b8:ea:f2:74:50:6b:7c:e4:d8:f7:fe:e3:c5:e5:20:
                    20:a4:02:f8:e3:5d:25:fb:62:ec:ca:82:e6:61:01:
                    99:ed:b4:de:01:94:cd:6a:12:37:6a:56:c3:f6:7f:
                    d8:51:ee:9e:d2:82:e8:a1:4e:fa:c6:ba:63:7c:48:
                    27:85:83:50:6f:43:b3:55:af:eb:74:1a:17:24:fe:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:64:C5:63:63:65:1A:42:53:5F:59:83:4C:E5:61:21:10:FC:B2:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl

            X509v3 Authority Key Identifier:
                keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:11:ff:8d:3e:1f:33:10:14:e6:32:51:c0:43:c5:90:d7:5f:
         fc:40:50:b5:68:f6:02:f0:74:80:b6:4b:64:98:d2:7d:10:b9:
         df:34:c9:01:22:27:a1:ce:f6:c0:76:24:d0:e2:12:ca:98:4a:
         4d:6b:5a:61:b0:f5:73:5d:41:2d:6a:2b:d2:19:f6:a4:fd:ab:
         98:b8:5c:80:c7:f4:61:61:64:18:78:4b:ad:e5:00:2e:bb:69:
         67:86:3d:6f:09:a8:a9:c2:2d:68:28:cc:32:84:c5:ae:a3:a3:
         81:5f:b4:56:88:d1:93:af:b6:cd:d3:f3:e5:61:00:fd:23:1e:
         92:aa:45:3d:6d:db:db:36:64:ce:13:69:d4:66:81:5a:de:2c:
         b6:86:cc:7c:29:b3:f4:9d:b7:b6:96:bd:4d:24:1a:a9:bd:59:
         af:20:22:08:25:d5:f8:97:9b:c0:5f:0c:98:da:cf:50:95:5b:
         7d:3f:2e:8c:93:b0:1f:85:08:c9:de:a4:ae:a9:e3:7c:d0:8b:
         58:a7:e2:16:f9:9f:f8:0f:92:6e:06:7c:80:69:d0:7d:3e:d4:
         7d:67:dc:fa:bf:c5:e7:f7:13:a7:90:33:a8:cd:4f:56:24:d2:
         55:1a:62:b4:9a:24:88:bd:34:32:96:d4:a1:7b:f6:4c:fd:4f:
         ee:ed:8b:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWm81yz5RHZevAk3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4
MTI0MB4XDTI0MDQyNDEzMDAzM1oXDTI0MDcyMzEzMDAzM1owLzEtMCsGA1UEAxMk
ZDRjNGZlM2QtOWY1MC00YjE0LThiY2YtODVmNzcwMzMzOWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmPX2ftd4/YkmuirSNZ/EEStsrwXrcAXEpG0
CzKjjT/3K74V1/gHYESbd5xATKWTs1EXOHuGY6wvFUcbVKBuiBMPJBuLc9fDKgkX
+KPiDd1eyMQMUlXRDLSHotK3nG68RL5SuYOhNrUb7YaALTGJWgJurpccHmSmtlZ2
ZVv3A1jpJZsxposOTMXwj0lnmdf9fwspofzKwVR9JG8aXBWqfsqCkfJhmr16WxMC
RqoU7ZHFe2m46vJ0UGt85Nj3/uPF5SAgpAL4410l+2LsyoLmYQGZ7bTeAZTNahI3
albD9n/YUe6e0oLooU76xrpjfEgnhYNQb0OzVa/rdBoXJP4BDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNpkxWNjZRpCU19Zg0zlYSEQ/LKsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz
NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvMmVkMDRlNjAtMWU5Ny0z
NjQ3LWIzOWEtOWE5M2JlOWUzY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1
NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw
ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl
MGZjMDgxMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDtOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkR/40+HzMQFOYyUcBDxZDXX/xAULVo9gLwdIC2S2SY0n0Qud80yQEi
J6HO9sB2JNDiEsqYSk1rWmGw9XNdQS1qK9IZ9qT9q5i4XIDH9GFhZBh4S63lAC67
aWeGPW8JqKnCLWgozDKExa6jo4FftFaI0ZOvts3T8+VhAP0jHpKqRT1t29s2ZM4T
adRmgVreLLaGzHwps/Sdt7aWvU0kGqm9Wa8gIggl1fiXm8BfDJjaz1CVW30/LoyT
sB+FCMnepK6p43zQi1in4hb5n/gPkm4GfIBp0H0+1H1n3Pq/xef3E6eQM6jNT1Yk
0lUaYrSaJIi9NDKW1KF79kz9T+7tizs=
-----END CERTIFICATE-----
Generated at Thu May 2 14:55:58 2024 by rpki-client on console-ams.rpki-client.org