Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/bef278fc-8194-3501-832d-baa7c8240251.roa
File:                     bef278fc-8194-3501-832d-baa7c8240251.roa (raw, json)
Hash identifier:          AimSdYqWU3pxYVsVG93MYjLmaNi5yLOklqz4tkDMBqQ=
Subject key identifier:   73:F4:B0:58:34:1E:B2:E4:07:FF:9C:D5:71:54:DE:B2:4A:26:51:8B
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F432858451B7AF214C7A1D45332836F80
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/bef278fc-8194-3501-832d-baa7c8240251.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     399244
IP address blocks:        170.205.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:f2:14:c7:a1:d4:53:32:83:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=2f70a5d5-0474-48fd-94b8-f90b26743e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:8b:b0:40:fd:9c:72:5a:b7:ce:78:17:7f:
                    c7:dc:42:9e:ae:d3:9d:dc:43:56:9a:6d:48:67:5a:
                    13:db:c9:8d:2e:bd:70:bc:04:71:fd:65:9f:a8:98:
                    aa:14:91:22:51:c0:88:3f:b3:eb:79:42:dd:a6:6d:
                    b8:38:0f:fd:dd:1b:84:0b:54:fe:3d:3d:b9:ca:7b:
                    d3:c8:3f:29:ca:3d:0f:61:ed:0a:7a:5f:67:e4:2e:
                    14:e1:df:59:47:e7:c9:0e:72:54:18:33:22:f4:71:
                    11:0e:d2:a7:ab:76:97:ce:cb:06:09:e0:87:c9:e3:
                    9b:3a:c4:4e:99:d2:8a:02:c5:50:a7:57:17:5c:a9:
                    7a:54:b2:c6:4d:13:78:06:5e:b4:e1:a1:b7:3e:0d:
                    c1:13:84:62:52:81:00:0c:94:0a:de:50:db:d1:0f:
                    4c:11:41:97:e9:ac:7a:67:26:0b:51:91:43:05:55:
                    91:5a:43:68:bb:b6:51:8e:fd:4b:a1:99:b7:47:1e:
                    3c:b3:2b:60:fa:c2:0c:e9:ce:e9:6e:a9:ee:be:47:
                    bf:2f:65:32:16:ef:29:43:48:b5:0c:44:c7:ff:d9:
                    bf:4e:69:38:84:5c:33:3d:fe:1e:03:72:71:e3:17:
                    e2:d9:96:d2:d3:09:7c:7f:93:05:cf:38:f5:76:72:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F4:B0:58:34:1E:B2:E4:07:FF:9C:D5:71:54:DE:B2:4A:26:51:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/bef278fc-8194-3501-832d-baa7c8240251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:55:ca:75:77:46:f5:ed:42:ed:e2:ca:3a:3f:0b:cf:03:ba:
         a6:cc:88:87:b7:7b:57:47:ea:e2:ba:8c:99:f9:71:8f:21:e7:
         0a:15:5b:d3:c7:78:68:71:52:28:96:86:0d:74:be:5a:f4:46:
         50:8f:f2:6a:8f:ee:13:62:c6:ba:69:6b:63:58:4f:53:1e:eb:
         74:34:65:ce:89:c0:82:21:e0:17:5f:e3:dc:cd:33:75:b6:54:
         7a:8e:f2:f1:b2:af:08:c6:c7:4b:d4:f7:aa:35:73:49:ac:c1:
         ab:09:15:cc:65:ff:99:b4:04:e0:17:ce:56:78:1f:36:07:5d:
         49:8a:44:4c:78:8d:26:54:f5:4b:60:9d:6c:88:de:6a:71:a8:
         b1:9f:41:d6:51:1f:ab:28:73:73:68:07:3c:41:6d:30:6b:72:
         fd:d0:cc:fa:21:fa:bc:20:53:0b:48:a0:36:9b:0e:fc:6d:e5:
         e3:6e:1c:97:95:87:7e:7a:93:52:d3:ec:8c:a2:6d:0f:4b:6c:
         2b:1d:b7:57:ca:a1:26:51:fc:4f:bc:5b:10:6d:95:8e:da:af:
         3e:4e:39:a8:6b:ba:d7:43:6e:c5:06:0f:2f:ca:13:39:04:b8:
         69:bf:83:8f:52:5d:94:f4:df:04:f9:e0:d5:c0:1d:66:25:d5:
         05:30:31:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUbevIUx6HUUzKDb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh
MzhkMB4XDTI0MDMwNTE0MDAzMVoXDTI0MDYwMzEzMDAzMVowLzEtMCsGA1UEAxMk
MmY3MGE1ZDUtMDQ3NC00OGZkLTk0YjgtZjkwYjI2NzQzZThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZWLsED9nHJat854F3/H3EKertOd3ENWmm1I
Z1oT28mNLr1wvARx/WWfqJiqFJEiUcCIP7PreULdpm24OA/93RuEC1T+PT25ynvT
yD8pyj0PYe0Kel9n5C4U4d9ZR+fJDnJUGDMi9HERDtKnq3aXzssGCeCHyeObOsRO
mdKKAsVQp1cXXKl6VLLGTRN4Bl604aG3Pg3BE4RiUoEADJQK3lDb0Q9MEUGX6ax6
ZyYLUZFDBVWRWkNou7ZRjv1LoZm3Rx48sytg+sIM6c7pbqnuvke/L2UyFu8pQ0i1
DETH/9m/Tmk4hFwzPf4eA3Jx4xfi2ZbS0wl8f5MFzzj1dnK5HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHP0sFg0HrLkB/+c1XFU3rJKJlGLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk
ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYmVmMjc4ZmMtODE5NC0z
NTAxLTgzMmQtYmFhN2M4MjQwMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh
MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi
YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl
MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhVynV3RvXtQu3iyjo/C88DuqbMiIe3e1dH6uK6jJn5cY8h5woVW9PH
eGhxUiiWhg10vlr0RlCP8mqP7hNixrppa2NYT1Me63Q0Zc6JwIIh4Bdf49zNM3W2
VHqO8vGyrwjGx0vU96o1c0mswasJFcxl/5m0BOAXzlZ4HzYHXUmKREx4jSZU9Utg
nWyI3mpxqLGfQdZRH6soc3NoBzxBbTBrcv3QzPoh+rwgUwtIoDabDvxt5eNuHJeV
h356k1LT7IyibQ9LbCsdt1fKoSZR/E+8WxBtlY7arz5OOahrutdDbsUGDy/KEzkE
uGm/g49SXZT03wT54NXAHWYl1QUwMZQ=
-----END CERTIFICATE-----
Generated at Wed May 1 22:26:33 2024 by rpki-client on console-fra.rpki-client.org