Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16348858-8f46-38c3-afb4-c6afe7fd9adb.roa
File:                     16348858-8f46-38c3-afb4-c6afe7fd9adb.roa (raw, json)
Hash identifier:          GAJSaPIKqWhDS6fU4oTh6X0IhuVtbKx/QMy3Bn8hj8w=
Subject key identifier:   35:B6:46:42:3C:4E:F8:6B:88:B1:59:F2:E9:0A:CD:12:23:16:4A:5C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285844DF752DA421E2E4104245C880
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16348858-8f46-38c3-afb4-c6afe7fd9adb.roa
Signing time:             Tue 13 Feb 2024 02:00:25 +0000
ROA not before:           Tue 13 Feb 2024 02:00:25 +0000
ROA not after:            Mon 13 May 2024 01:00:25 +0000
asID:                     212238
IP address blocks:        172.111.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:75:2d:a4:21:e2:e4:10:42:45:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 13 02:00:25 2024 GMT
            Not After : May 13 01:00:25 2024 GMT
        Subject: CN=ffd09e9d-536f-433e-a2c9-640cdcd57802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:78:97:e7:0c:4b:d6:a0:74:35:73:86:08:b9:
                    97:d3:27:66:d6:19:02:1b:23:56:06:7f:aa:aa:80:
                    be:f1:c7:c6:89:07:38:92:79:9d:8d:9c:a8:d5:7b:
                    da:56:23:b4:70:cd:b3:7e:11:b5:dc:60:b1:73:07:
                    55:08:46:b4:f5:34:36:e9:16:dc:60:d8:52:07:a6:
                    53:49:88:23:7d:18:4f:9b:1e:53:76:03:3d:3b:70:
                    34:2d:3f:08:8a:dc:98:fe:a8:b7:21:e7:d4:e2:6a:
                    af:80:22:d0:ac:9d:09:72:95:70:33:46:e6:2b:bb:
                    67:61:f4:85:d9:3f:3f:f7:18:db:bf:bd:5d:c3:11:
                    42:89:9c:3c:05:82:ae:cb:c9:28:2c:ba:da:fd:e1:
                    1c:fc:8f:95:7a:27:92:6b:93:e4:00:3b:95:66:a5:
                    4d:e4:7c:0b:6d:45:f1:c6:5c:13:32:9a:2c:c2:0e:
                    0c:9a:e3:2c:b8:ac:10:59:46:1f:a5:ef:61:6e:d5:
                    3a:66:19:c2:6c:1d:cb:52:36:ce:1c:e4:e8:4a:cf:
                    0b:37:1e:f0:d7:b3:fd:4e:6b:8d:67:d9:ab:9e:2b:
                    2e:c9:b4:cf:9d:6d:13:fc:23:52:c2:16:e5:94:cf:
                    5f:eb:05:a1:1f:d5:e3:8d:5a:2f:57:45:89:1a:15:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B6:46:42:3C:4E:F8:6B:88:B1:59:F2:E9:0A:CD:12:23:16:4A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16348858-8f46-38c3-afb4-c6afe7fd9adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:95:c4:16:e7:67:72:49:8b:b5:a4:39:28:ef:b1:96:28:ef:
         76:ba:8a:71:7e:10:4f:c0:49:63:92:32:1a:e0:7b:31:e9:3a:
         95:f8:df:5c:28:07:5f:2d:a6:bc:5c:49:47:a3:1d:d5:3b:89:
         91:ec:9e:ca:8a:bc:18:b0:a0:26:6f:83:16:ea:0e:91:7e:f7:
         80:b3:f4:7b:28:a4:b0:5c:98:17:bd:d7:f4:5f:5e:ca:b3:99:
         7c:fb:9c:fe:e4:9a:2a:c9:91:3e:21:10:53:3f:01:d3:8d:03:
         9c:0a:89:ec:b8:8c:54:b3:80:fc:12:e8:f9:43:8f:8a:d9:52:
         86:6d:dd:2c:1f:0a:17:f4:04:74:16:b4:4d:04:6e:5e:56:4e:
         44:38:29:57:f2:a4:71:00:3d:bc:3e:2e:77:60:9f:d1:8e:dc:
         6c:17:94:c6:90:a6:ce:68:f1:c5:cb:73:11:84:53:83:d4:b1:
         69:22:00:eb:d6:7e:03:7d:22:b8:95:0f:3b:0f:9e:59:cd:75:
         38:a2:2b:fb:c5:74:77:35:b3:2c:5a:d3:b5:6b:af:af:19:da:
         b4:81:b7:5e:20:d5:c1:34:90:3a:8f:fe:58:19:e2:2e:a3:6a:
         11:fc:b7:09:e1:35:a6:8a:96:74:fb:1d:fe:cf:c9:ec:e5:8d:
         dd:4d:7e:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETfdS2kIeLkEEJFyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDIxMzAyMDAyNVoXDTI0MDUxMzAxMDAyNVowLzEtMCsGA1UEAxMk
ZmZkMDllOWQtNTM2Zi00MzNlLWEyYzktNjQwY2RjZDU3ODAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhniX5wxL1qB0NXOGCLmX0ydm1hkCGyNWBn+q
qoC+8cfGiQc4knmdjZyo1XvaViO0cM2zfhG13GCxcwdVCEa09TQ26RbcYNhSB6ZT
SYgjfRhPmx5TdgM9O3A0LT8IityY/qi3IefU4mqvgCLQrJ0JcpVwM0bmK7tnYfSF
2T8/9xjbv71dwxFCiZw8BYKuy8koLLra/eEc/I+VeieSa5PkADuVZqVN5HwLbUXx
xlwTMposwg4MmuMsuKwQWUYfpe9hbtU6ZhnCbB3LUjbOHOToSs8LNx7w17P9TmuN
Z9mrnisuybTPnW0T/CNSwhbllM9f6wWhH9XjjVovV0WJGhUgoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDW2RkI8TvhriLFZ8ukKzRIjFkpcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTYzNDg4NTgtOGY0Ni0z
OGMzLWFmYjQtYzZhZmU3ZmQ5YWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSVxBbnZ3JJi7WkOSjvsZYo73a6inF+EE/ASWOSMhrgezHpOpX431wo
B18tprxcSUejHdU7iZHsnsqKvBiwoCZvgxbqDpF+94Cz9HsopLBcmBe91/RfXsqz
mXz7nP7kmirJkT4hEFM/AdONA5wKiey4jFSzgPwS6PlDj4rZUoZt3SwfChf0BHQW
tE0Ebl5WTkQ4KVfypHEAPbw+Lndgn9GO3GwXlMaQps5o8cXLcxGEU4PUsWkiAOvW
fgN9IriVDzsPnlnNdTiiK/vFdHc1syxa07Vrr68Z2rSBt14g1cE0kDqP/lgZ4i6j
ahH8twnhNaaKlnT7Hf7Pyezljd1NfhY=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:01 2024 by rpki-client on console-ams.rpki-client.org