Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/956c2dc6-fd2b-3fbd-8dc8-6f0c463c14c1.roa
File:                     956c2dc6-fd2b-3fbd-8dc8-6f0c463c14c1.roa (raw, json)
Hash identifier:          XIx9YAPwHzRjhNuxZ2rDIn9BEuRLwpq3crHQte/+Xmk=
Subject key identifier:   FD:D2:18:5F:B6:C1:38:14:BE:54:9F:82:E1:4C:B4:98:88:E2:8F:50
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F43285845C0139095CE6ED79D8E4DB7D0
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/956c2dc6-fd2b-3fbd-8dc8-6f0c463c14c1.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     16795
IP address blocks:        64.136.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:90:95:ce:6e:d7:9d:8e:4d:b7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=deb6e0fa-f993-4006-8350-c9280dd30a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:f2:d3:04:1d:3b:89:f0:e9:5e:08:90:6b:
                    16:32:cd:40:87:dc:b0:2e:d7:aa:9f:e1:3b:71:a5:
                    f6:e7:27:4f:b9:20:46:26:b5:7d:71:72:f0:8b:58:
                    b8:5f:23:ab:c9:88:2b:98:4e:7f:61:e0:17:85:05:
                    4b:dd:e4:8e:cd:71:3f:da:85:5b:fd:99:8c:2d:52:
                    81:d2:94:1b:7e:5e:22:0b:74:46:ff:32:d3:a8:de:
                    b8:68:5d:5f:4f:30:de:2e:63:b8:1e:8c:b2:c0:a4:
                    96:b4:95:1b:5b:7a:33:c2:ed:00:96:97:96:f7:1f:
                    c9:64:23:97:39:35:88:ce:3c:60:1d:6f:75:7b:52:
                    ce:2b:8a:38:e1:11:be:70:cb:66:cd:01:2f:19:ea:
                    15:58:c6:85:a2:5f:fb:65:0b:2a:9b:6e:1b:7f:27:
                    6e:8e:d8:10:44:7b:ff:af:82:68:30:c1:8c:9f:e5:
                    9d:ff:f5:f4:6d:6b:9c:b1:aa:40:4e:ee:bf:1f:d9:
                    71:26:d8:4f:fb:c3:b9:f9:ac:8e:4c:41:4c:1d:d2:
                    00:62:cc:0f:fc:ce:31:38:10:e6:2a:c7:fc:df:11:
                    10:56:ed:82:96:0f:fc:a3:1c:c5:be:6f:ef:0c:52:
                    f9:e9:56:5b:44:e4:98:80:46:40:79:64:06:e5:ce:
                    f5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D2:18:5F:B6:C1:38:14:BE:54:9F:82:E1:4C:B4:98:88:E2:8F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/956c2dc6-fd2b-3fbd-8dc8-6f0c463c14c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.136.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:88:84:00:b3:a9:83:a7:6b:10:f2:ed:40:5c:1a:3d:94:58:
         07:43:8b:70:8f:68:e2:cf:b0:9c:fb:b8:ec:0b:c3:5c:88:f9:
         2b:09:85:3e:93:6b:5d:cd:57:f7:d7:65:5f:9f:69:ce:cc:15:
         ba:4a:50:46:5b:a7:6f:83:4a:0d:6b:8f:af:71:06:2d:f4:57:
         b6:74:98:9b:95:15:3f:09:a4:21:b7:42:2d:84:53:66:f3:b1:
         8b:1d:53:bc:b6:9e:d5:9c:78:4d:61:94:c4:36:8d:e6:05:ea:
         d7:93:65:7b:ed:6d:89:e7:0e:24:03:a8:6d:67:47:13:1d:76:
         f3:de:bb:09:a1:05:e6:1e:f5:91:85:a5:bd:ce:4f:7a:d3:2b:
         60:16:64:79:96:fc:d8:a7:3e:92:af:1a:29:aa:78:dc:ff:73:
         d2:e7:95:0a:2c:a0:94:8b:a5:b4:64:de:f3:e9:24:b4:6a:c2:
         f9:f5:0b:bd:94:8e:94:30:55:7b:5e:e9:6f:84:07:4a:2c:77:
         1b:5c:16:7d:15:3b:0b:45:4d:e0:1f:b6:79:74:6a:e2:e2:cc:
         02:02:3e:11:15:97:b6:8d:f0:9b:a2:84:22:b2:96:f3:47:be:
         fa:7c:c7:3d:95:07:d1:6c:48:c8:33:a8:44:e8:5d:b1:b0:ef:
         5b:92:aa:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXAE5CVzm7XnY5Nt9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2
ZTAwMB4XDTI0MDUwMzEzMDAzNFoXDTI0MDgwMTEzMDAzNFowLzEtMCsGA1UEAxMk
ZGViNmUwZmEtZjk5My00MDA2LTgzNTAtYzkyODBkZDMwYTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueHy0wQdO4nw6V4IkGsWMs1Ah9ywLteqn+E7
caX25ydPuSBGJrV9cXLwi1i4XyOryYgrmE5/YeAXhQVL3eSOzXE/2oVb/ZmMLVKB
0pQbfl4iC3RG/zLTqN64aF1fTzDeLmO4HoyywKSWtJUbW3ozwu0AlpeW9x/JZCOX
OTWIzjxgHW91e1LOK4o44RG+cMtmzQEvGeoVWMaFol/7ZQsqm24bfydujtgQRHv/
r4JoMMGMn+Wd//X0bWucsapATu6/H9lxJthP+8O5+ayOTEFMHdIAYswP/M4xOBDm
Ksf83xEQVu2Clg/8oxzFvm/vDFL56VZbROSYgEZAeWQG5c71awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3SGF+2wTgUvlSfguFMtJiI4o9QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx
YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOTU2YzJkYzYtZmQyYi0z
ZmJkLThkYzgtNmYwYzQ2M2MxNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx
NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj
NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh
MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWIhACzqYOnaxDy7UBcGj2UWAdDi3CPaOLPsJz7uOwLw1yI+SsJhT6T
a13NV/fXZV+fac7MFbpKUEZbp2+DSg1rj69xBi30V7Z0mJuVFT8JpCG3Qi2EU2bz
sYsdU7y2ntWceE1hlMQ2jeYF6teTZXvtbYnnDiQDqG1nRxMddvPeuwmhBeYe9ZGF
pb3OT3rTK2AWZHmW/NinPpKvGimqeNz/c9LnlQosoJSLpbRk3vPpJLRqwvn1C72U
jpQwVXte6W+EB0osdxtcFn0VOwtFTeAftnl0auLizAICPhEVl7aN8JuihCKylvNH
vvp8xz2VB9FsSMgzqEToXbGw71uSqrU=
-----END CERTIFICATE-----
Generated at Sat May 18 01:40:44 2024 by rpki-client on console-fra.rpki-client.org