Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a9b4a6d1-0169-334b-96f1-c55bc379552b.roa
File:                     a9b4a6d1-0169-334b-96f1-c55bc379552b.roa (raw, json)
Hash identifier:          BzjSB6YWp/azL5IFKQC+n6NQ16NQkRSw+3eJi4F4SMo=
Subject key identifier:   57:09:40:5E:08:69:7F:7A:32:BE:F2:62:48:74:08:14:BC:9E:08:D5
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F432858454D9D7A8D9A6D512D8CCBF100
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a9b4a6d1-0169-334b-96f1-c55bc379552b.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     18013
IP address blocks:        107.151.200.0/21 maxlen: 21
                          107.151.202.0/23 maxlen: 23
                          107.151.200.0/23 maxlen: 23
                          107.151.206.0/23 maxlen: 23
                          107.151.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7a:8d:9a:6d:51:2d:8c:cb:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=2770d768-8cfc-4002-9b60-eb96628d60cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:ef:71:83:6e:07:89:b9:fd:f3:d8:89:b6:
                    f6:48:c2:f6:67:9f:ab:13:d3:52:2d:be:84:a3:5c:
                    e7:e4:5c:1e:48:ba:78:fc:ff:1f:0d:99:1a:6c:e3:
                    f0:93:77:57:35:3d:06:92:ea:22:01:21:66:53:33:
                    ba:10:7a:82:24:d2:c4:ec:ca:41:e6:c3:2c:89:84:
                    ab:4e:53:ca:9c:e3:b3:8b:1e:b1:12:96:db:50:f6:
                    5c:4f:d1:7a:86:88:75:90:0c:32:98:48:ba:30:45:
                    de:9a:6b:1c:c5:a9:ee:a5:47:62:8d:aa:11:f4:ad:
                    79:22:c6:0e:0f:89:08:1b:4f:8c:cf:48:48:6e:f8:
                    dd:86:e0:f6:b8:ea:7c:9f:36:08:d6:ab:0a:08:27:
                    6b:30:35:98:83:ad:60:66:af:80:8e:14:05:e7:1d:
                    1b:43:cf:ea:a0:05:c3:27:62:0d:5d:b0:8c:db:f8:
                    c7:63:7b:2b:4b:cb:91:a4:d4:9f:9c:6f:43:7b:27:
                    d3:00:7e:5e:c9:3d:ac:2a:a9:a1:5b:4a:2b:0d:47:
                    17:20:a9:27:e0:30:b4:53:13:31:f9:71:40:6e:ae:
                    49:94:15:9b:85:f4:95:5f:e6:a2:47:b5:3a:24:a2:
                    cd:63:85:36:ba:c1:32:b4:82:b9:eb:0e:78:52:b7:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:09:40:5E:08:69:7F:7A:32:BE:F2:62:48:74:08:14:BC:9E:08:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a9b4a6d1-0169-334b-96f1-c55bc379552b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ef:b4:3a:05:7f:ec:03:77:01:8d:b6:29:86:40:f5:a0:4c:
         d2:21:ba:ab:35:12:27:d6:08:37:bb:d6:20:dc:59:44:74:c0:
         0b:3f:ae:2d:a0:2c:05:f2:73:f0:2c:76:e6:a5:74:75:93:d7:
         14:b6:c4:bf:d4:6f:5f:a9:a5:9c:4b:3e:b2:ba:ac:02:d5:e1:
         04:bf:61:d4:90:cf:55:45:df:d0:c6:73:90:47:7c:1b:8c:47:
         bb:42:06:e5:0c:39:c4:6c:dd:9b:4a:93:59:93:41:cb:0e:b0:
         3a:10:fa:8e:ba:af:38:3d:fc:38:f5:94:b2:6c:5c:19:9e:c0:
         83:1c:cf:7f:f5:d5:86:e2:b9:60:c1:c6:90:1d:47:d9:ca:44:
         cd:e9:cd:5c:c9:12:dc:fd:31:63:a6:7b:f1:37:0d:4a:7e:f6:
         82:2f:e3:14:85:8a:05:21:d5:f4:88:fe:eb:d3:3f:a9:80:62:
         4c:f9:14:08:4a:b7:15:46:ea:a9:e6:6d:fb:3a:7c:40:1b:5f:
         b6:fd:44:8c:ce:ec:4f:e5:8b:68:35:be:35:e8:54:03:45:ad:
         1a:9d:3d:55:65:ef:33:3c:47:22:0c:c3:5d:5a:c0:92:5e:de:
         a4:cd:eb:ca:86:cc:cd:79:dd:8b:d8:44:08:4c:7d:45:dd:23:
         3f:1f:ef:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVNnXqNmm1RLYzL8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
Mjc3MGQ3NjgtOGNmYy00MDAyLTliNjAtZWI5NjYyOGQ2MGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMnvcYNuB4m5/fPYibb2SML2Z5+rE9NSLb6E
o1zn5FweSLp4/P8fDZkabOPwk3dXNT0GkuoiASFmUzO6EHqCJNLE7MpB5sMsiYSr
TlPKnOOzix6xEpbbUPZcT9F6hoh1kAwymEi6MEXemmscxanupUdijaoR9K15IsYO
D4kIG0+Mz0hIbvjdhuD2uOp8nzYI1qsKCCdrMDWYg61gZq+AjhQF5x0bQ8/qoAXD
J2INXbCM2/jHY3srS8uRpNSfnG9DeyfTAH5eyT2sKqmhW0orDUcXIKkn4DC0UxMx
+XFAbq5JlBWbhfSVX+aiR7U6JKLNY4U2usEytIK56w54UrdXowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcJQF4IaX96Mr7yYkh0CBS8ngjVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYTliNGE2ZDEtMDE2OS0z
MzRiLTk2ZjEtYzU1YmMzNzk1NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa5fIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfvtDoFf+wDdwGNtimGQPWgTNIhuqs1EifWCDe71iDcWUR0wAs/ri2g
LAXyc/AsdualdHWT1xS2xL/Ub1+ppZxLPrK6rALV4QS/YdSQz1VF39DGc5BHfBuM
R7tCBuUMOcRs3ZtKk1mTQcsOsDoQ+o66rzg9/Dj1lLJsXBmewIMcz3/11YbiuWDB
xpAdR9nKRM3pzVzJEtz9MWOme/E3DUp+9oIv4xSFigUh1fSI/uvTP6mAYkz5FAhK
txVG6qnmbfs6fEAbX7b9RIzO7E/li2g1vjXoVANFrRqdPVVl7zM8RyIMw11awJJe
3qTN68qGzM153YvYRAhMfUXdIz8f7xg=
-----END CERTIFICATE-----
Generated at Sun May 5 01:40:48 2024 by rpki-client on console-fra.rpki-client.org