Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa
File:                     4de85870-1812-37c2-b185-f215614574da.roa (raw, json)
Hash identifier:          nPuUmVdo2g7l4/1b1EtD+dN2yCO47gDBbywGE+uHNfo=
Subject key identifier:   73:08:EC:8D:62:64:5A:B2:9D:C8:AA:D4:4D:7F:8E:1F:03:2A:CC:44
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F432858459D2DE240140DCAA8A100C140
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        199.65.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:e2:40:14:0d:ca:a8:a1:00:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=e34b4ba1-36ec-4b34-bc97-6ae5a9d0c0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:49:32:d8:79:26:06:18:40:ef:45:f1:e5:
                    a9:a6:d8:b3:e5:94:81:19:8a:ca:eb:22:91:08:83:
                    76:95:ce:13:46:c4:6c:61:88:6b:dd:ab:10:61:0f:
                    dc:1d:9a:ee:e4:ee:68:8a:21:90:a8:5c:e9:08:4a:
                    c2:91:b2:92:e6:09:2f:07:0f:2d:b8:8a:f8:31:79:
                    94:c7:f8:57:80:7e:cd:4b:17:8f:b8:47:c6:77:27:
                    a9:c0:da:6e:8b:de:86:39:7a:eb:b3:4c:ee:8a:07:
                    80:ee:3d:5e:66:4f:54:55:a9:e1:75:af:e2:cb:ad:
                    02:c1:49:39:34:1d:4c:b8:ae:fd:53:cd:0e:32:f4:
                    ad:55:8e:9d:0e:d1:89:7b:c4:3e:c7:50:f1:9a:b0:
                    e2:13:25:2d:1d:b3:ad:55:8f:f7:c0:15:11:7d:5c:
                    a2:e1:fb:0f:af:25:8c:9c:b9:60:d9:41:d8:8a:4e:
                    c1:2e:48:7d:19:a5:95:0a:1b:fc:69:b8:16:86:34:
                    cc:90:2d:c2:90:5f:0b:e4:38:c6:16:e2:30:a8:d3:
                    9f:a8:b7:ac:71:34:3e:a3:6e:77:c6:00:88:f7:e2:
                    41:c7:04:24:89:b3:81:95:15:67:ec:84:06:f3:4e:
                    d6:99:e3:78:cc:82:79:28:07:13:8c:a8:9a:b8:0f:
                    6b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:08:EC:8D:62:64:5A:B2:9D:C8:AA:D4:4D:7F:8E:1F:03:2A:CC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/4de85870-1812-37c2-b185-f215614574da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:91:bd:2f:e6:36:df:ca:8c:ff:41:e9:59:fe:cc:3c:02:c1:
         4f:40:e3:50:dd:15:9e:84:77:1d:51:2f:a7:d4:39:61:8f:84:
         88:31:06:09:dc:bf:38:cd:87:11:11:68:a0:58:03:9e:a2:46:
         93:30:a0:19:b3:d8:d8:7e:f4:e9:7a:7e:11:dd:8b:c5:77:fb:
         83:29:c7:2a:80:dd:c1:3b:cf:62:ad:48:7d:03:27:55:3e:78:
         3b:8a:8c:a3:15:88:e3:df:c6:2c:10:d5:cc:14:bb:97:fe:c5:
         f6:12:c4:96:4a:e5:66:b0:a4:29:b0:ab:8d:39:73:d0:d5:04:
         4f:76:60:13:31:88:7b:5a:fc:42:c6:8a:58:88:aa:4e:49:20:
         b2:c2:6e:de:f1:ac:a5:a6:e1:99:97:6b:21:0c:a3:f8:af:3f:
         cc:0c:ae:2d:8a:64:66:f5:47:3f:b6:12:d1:ad:0b:3c:d2:fe:
         f9:cf:ca:f5:2e:07:1b:f1:a4:df:73:4e:46:a9:77:eb:56:93:
         5f:bb:d1:23:0b:4b:c3:c3:78:c3:dd:5b:ec:84:18:46:db:f4:
         38:f1:39:78:68:ec:3b:11:f2:c0:f2:b6:15:83:11:db:5f:a6:
         97:12:72:e3:7f:97:dd:c6:58:37:ee:86:48:ee:85:1e:53:81:
         8b:67:d9:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWdLeJAFA3KqKEAwUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0
NDY3MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
ZTM0YjRiYTEtMzZlYy00YjM0LWJjOTctNmFlNWE5ZDBjMGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1FJMth5JgYYQO9F8eWpptiz5ZSBGYrK6yKR
CIN2lc4TRsRsYYhr3asQYQ/cHZru5O5oiiGQqFzpCErCkbKS5gkvBw8tuIr4MXmU
x/hXgH7NSxePuEfGdyepwNpui96GOXrrs0zuigeA7j1eZk9UVanhda/iy60CwUk5
NB1MuK79U80OMvStVY6dDtGJe8Q+x1DxmrDiEyUtHbOtVY/3wBURfVyi4fsPryWM
nLlg2UHYik7BLkh9GaWVChv8abgWhjTMkC3CkF8L5DjGFuIwqNOfqLescTQ+o253
xgCI9+JBxwQkibOBlRVn7IQG807WmeN4zIJ5KAcTjKiauA9rBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMI7I1iZFqynciq1E1/jh8DKsxEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi
NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvNGRlODU4NzAtMTgxMi0z
N2MyLWIxODUtZjIxNTYxNDU3NGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx
MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw
NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw
NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0EoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWRvS/mNt/KjP9B6Vn+zDwCwU9A41DdFZ6Edx1RL6fUOWGPhIgxBgnc
vzjNhxERaKBYA56iRpMwoBmz2Nh+9Ol6fhHdi8V3+4MpxyqA3cE7z2KtSH0DJ1U+
eDuKjKMViOPfxiwQ1cwUu5f+xfYSxJZK5WawpCmwq405c9DVBE92YBMxiHta/ELG
iliIqk5JILLCbt7xrKWm4ZmXayEMo/ivP8wMri2KZGb1Rz+2EtGtCzzS/vnPyvUu
BxvxpN9zTkapd+tWk1+70SMLS8PDeMPdW+yEGEbb9DjxOXho7DsR8sDythWDEdtf
ppcScuN/l93GWDfuhkjuhR5TgYtn2ec=
-----END CERTIFICATE-----
Generated at Wed May 1 22:26:05 2024 by rpki-client on console-fra.rpki-client.org