Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa
File:                     7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa (raw, json)
Hash identifier:          Cw+4Kpn/6UyG6ZPo48Y1ZE0qG+4d/smkCI6Dv0P67yU=
Subject key identifier:   F2:0B:09:4E:4D:7D:91:47:31:0B:29:76:18:70:DB:44:7A:0F:E8:B0
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858457A488DE1834D8C73C019B140
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     3223
IP address blocks:        172.111.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8d:e1:83:4d:8c:73:c0:19:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=64228ce0-e3ff-47ec-bf90-9e13d3aa53bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:e2:ed:7e:d0:c5:23:34:0e:8c:5b:4a:a9:
                    e9:9e:f8:b0:b1:48:ff:c4:88:cb:ec:16:31:23:2f:
                    4e:3f:5a:fa:53:32:82:fa:e8:d8:99:6c:9b:1d:73:
                    66:8e:9a:cb:98:f7:47:9c:43:7b:0d:20:8d:54:e4:
                    33:de:99:1b:e5:1c:73:f7:0d:41:45:74:e0:3f:c0:
                    eb:6c:4a:75:d7:b3:f8:67:86:97:be:4c:3f:4d:56:
                    bf:2e:22:2a:31:bf:53:ae:a2:4f:b5:76:2c:1d:48:
                    1a:e1:c8:da:fa:a9:f5:88:ca:65:a1:22:05:ee:06:
                    c7:b5:81:83:06:4e:63:1c:68:24:17:89:21:5e:2d:
                    93:9d:70:a2:4a:e8:93:02:f5:fe:bd:2a:2b:d0:41:
                    0a:5f:ba:75:90:b9:7e:29:31:df:ba:08:60:49:7d:
                    1c:0c:13:32:97:8c:3e:1e:b7:7b:6e:f0:7f:2f:d9:
                    6d:d6:64:95:37:0f:6a:78:94:eb:f5:61:e9:ca:9f:
                    c6:1b:02:e9:a5:52:44:d8:ba:bc:37:59:11:c5:d5:
                    5a:9f:1f:82:f0:93:d1:b9:46:09:50:b6:f2:6e:6a:
                    cb:e8:0b:84:5c:57:4b:9e:cd:69:a9:15:bc:c0:6d:
                    e6:2f:09:d4:64:8f:40:db:6d:d4:4e:f0:66:fa:a4:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0B:09:4E:4D:7D:91:47:31:0B:29:76:18:70:DB:44:7A:0F:E8:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:37:c7:0f:2e:67:a2:4b:8f:75:8d:a8:55:81:29:22:5a:85:
         99:4b:b4:f2:6b:dd:11:39:04:6a:cc:31:9d:30:ae:0c:f8:28:
         74:5f:e9:25:2c:77:42:e9:54:8f:9f:13:2f:b8:62:e7:5f:29:
         fb:30:37:dc:bd:be:49:ff:df:4e:d2:0c:8a:aa:dd:3b:85:be:
         dd:4c:e6:22:93:87:36:ca:16:18:91:68:04:ae:ec:17:dc:a3:
         43:40:d9:f4:33:be:ae:df:b7:69:95:7c:cb:f9:37:b1:e4:22:
         6c:11:2e:f4:51:f9:89:d1:86:ed:23:38:99:21:ea:45:11:a8:
         49:2e:8d:29:ac:87:7b:d5:47:4c:e9:d2:2f:07:0e:45:9f:56:
         1b:c5:d9:ca:ee:d4:7c:3b:6e:92:dc:cc:8a:51:c6:b2:fc:5b:
         d2:07:11:a1:5e:4b:ea:18:88:dd:91:f2:3d:d0:fc:5f:55:a0:
         f0:e5:95:8a:28:ed:e1:34:39:ff:63:c5:8c:5f:ab:30:8c:44:
         73:1b:62:03:e0:67:4a:2a:02:b5:67:04:e6:c3:71:5d:92:f1:
         a8:84:43:4d:09:b6:bb:70:86:f3:87:e3:fa:5d:10:8f:47:dc:
         db:44:1b:4c:d7:15:03:ef:4c:11:92:f8:eb:d4:7d:d5:67:6d:
         9f:68:c6:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SI3hg02Mc8AZsUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
NjQyMjhjZTAtZTNmZi00N2VjLWJmOTAtOWUxM2QzYWE1M2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHPi7X7QxSM0DoxbSqnpnviwsUj/xIjL7BYx
Iy9OP1r6UzKC+ujYmWybHXNmjprLmPdHnEN7DSCNVOQz3pkb5Rxz9w1BRXTgP8Dr
bEp117P4Z4aXvkw/TVa/LiIqMb9TrqJPtXYsHUga4cja+qn1iMploSIF7gbHtYGD
Bk5jHGgkF4khXi2TnXCiSuiTAvX+vSor0EEKX7p1kLl+KTHfughgSX0cDBMyl4w+
Hrd7bvB/L9lt1mSVNw9qeJTr9WHpyp/GGwLppVJE2Lq8N1kRxdVanx+C8JPRuUYJ
ULbybmrL6AuEXFdLns1pqRW8wG3mLwnUZI9A223UTvBm+qQJzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPILCU5NfZFHMQspdhhw20R6D+iwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2FmMWEzNTMtZmJmMS0z
OGNjLWJiNWQtOWU4M2NlMjNhYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE43xw8uZ6JLj3WNqFWBKSJahZlLtPJr3RE5BGrMMZ0wrgz4KHRf6SUs
d0LpVI+fEy+4YudfKfswN9y9vkn/307SDIqq3TuFvt1M5iKThzbKFhiRaASu7Bfc
o0NA2fQzvq7ft2mVfMv5N7HkImwRLvRR+YnRhu0jOJkh6kURqEkujSmsh3vVR0zp
0i8HDkWfVhvF2cru1Hw7bpLczIpRxrL8W9IHEaFeS+oYiN2R8j3Q/F9VoPDllYoo
7eE0Of9jxYxfqzCMRHMbYgPgZ0oqArVnBObDcV2S8aiEQ00JtrtwhvOH4/pdEI9H
3NtEG0zXFQPvTBGS+OvUfdVnbZ9oxh4=
-----END CERTIFICATE-----
Generated at Sat May 18 15:35:26 2024 by rpki-client on console-fra.rpki-client.org