Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/b9049831-a585-3dc5-bd04-5de3d4566636.roa
File:                     b9049831-a585-3dc5-bd04-5de3d4566636.roa (raw, json)
Hash identifier:          YiAjFZQ88gW9yVQ4N0+Bi7dwna+y0qUq+SLYa03L2kY=
Subject key identifier:   AF:67:E4:D1:FF:14:6C:FF:DB:DF:77:B2:C8:7E:33:B3:B5:46:23:C4
Certificate issuer:       /CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Certificate serial:       010D0C9F43285845DBFE6C93CF0D3F4C7211E280
Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/b9049831-a585-3dc5-bd04-5de3d4566636.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     151338
IP address blocks:        207.167.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:6c:93:cf:0d:3f:4c:72:11:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=45cdf468-0c9d-477f-aca1-282fb9d8ec15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:30:bc:40:68:b8:66:e5:27:c9:7d:cf:b7:24:
                    5b:df:b8:50:b4:38:57:c8:93:eb:4a:0f:54:bf:ae:
                    f2:8a:eb:4c:c4:c1:5f:9b:a8:d6:13:22:6c:f3:10:
                    0d:96:aa:3f:44:b8:fc:79:d3:70:63:a3:2f:a6:08:
                    30:a1:44:91:76:2a:73:f1:5e:a5:78:49:8b:7d:e8:
                    0f:b2:a6:18:68:0b:78:22:b1:b0:c2:fb:49:64:f0:
                    60:75:e8:8a:b6:a1:ff:93:93:64:3d:e6:83:ec:0e:
                    40:06:c1:2e:fd:77:d7:3e:a6:cd:de:77:43:be:b9:
                    e7:2a:86:58:a2:db:85:61:38:7d:4d:08:a0:fa:7e:
                    97:0e:83:59:60:a6:66:7d:48:56:3b:34:7c:11:13:
                    e3:aa:d6:5b:a4:3f:c5:d3:40:be:f9:48:89:6a:fa:
                    bd:cf:a6:ca:65:99:bb:a7:84:99:a5:a1:7d:2b:5f:
                    0b:4e:85:96:2e:44:75:d0:2a:95:b5:05:6d:e6:9c:
                    ee:98:16:ed:65:b3:dd:cf:65:54:84:86:00:21:4e:
                    fa:72:d2:55:d9:b5:0d:e8:53:27:f9:e1:f4:b3:11:
                    80:05:71:6d:d4:e6:66:4f:39:6c:3e:40:d1:21:ab:
                    61:b3:a9:7f:01:4a:cc:56:1e:e9:e1:c4:c9:e5:f2:
                    35:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:67:E4:D1:FF:14:6C:FF:DB:DF:77:B2:C8:7E:33:B3:B5:46:23:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/b9049831-a585-3dc5-bd04-5de3d4566636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl

            X509v3 Authority Key Identifier:
                keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c2:5b:f7:c2:20:c1:5b:60:bf:21:35:ba:94:7a:21:aa:d6:
         11:72:6f:8f:30:e7:fe:d0:a9:82:1c:63:2f:63:64:e3:c4:59:
         d8:d8:c4:de:6a:ae:e1:c2:8f:4f:ba:f0:d0:70:81:5a:f0:72:
         fc:fd:b7:89:c0:a7:dd:75:09:6a:b4:63:83:cf:35:d1:ff:60:
         73:aa:d4:2a:5b:9e:46:45:33:2e:f3:23:56:58:58:b7:24:40:
         08:ed:de:f8:dd:6d:29:f6:cf:ef:d6:6f:28:e6:43:04:17:64:
         1f:8b:0c:b8:b7:2a:1d:1d:d6:94:4e:37:8f:78:aa:e2:26:b3:
         20:7d:15:25:a9:4d:cf:32:07:8e:bb:b9:0d:1c:f1:87:d9:6e:
         1c:75:c3:dc:06:ca:b5:b8:3c:42:d2:69:f7:93:0a:98:e0:4e:
         6d:67:59:c6:96:38:d5:94:46:08:11:c4:65:47:aa:45:fd:e7:
         59:ca:78:2d:0f:df:44:3c:f6:7b:c4:66:4c:79:b1:9e:62:bb:
         9e:35:a6:4c:ef:ad:94:9a:9a:97:dd:ac:ea:4b:93:f6:87:be:
         00:1f:f7:bf:40:3e:5f:a4:67:f9:c2:55:5d:64:72:cb:8a:6f:
         0d:2f:8d:c0:38:c0:cf:2d:01:d9:c7:16:d7:b8:00:f0:c8:ab:
         f0:4a:54:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb/myTzw0/THIR4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ2MWEyMTQtZDg2Ny00NDRlLWIyZjQtY2EyOTFkNGM0
NDE5MB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk
NDVjZGY0NjgtMGM5ZC00NzdmLWFjYTEtMjgyZmI5ZDhlYzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjC8QGi4ZuUnyX3PtyRb37hQtDhXyJPrSg9U
v67yiutMxMFfm6jWEyJs8xANlqo/RLj8edNwY6MvpggwoUSRdipz8V6leEmLfegP
sqYYaAt4IrGwwvtJZPBgdeiKtqH/k5NkPeaD7A5ABsEu/XfXPqbN3ndDvrnnKoZY
otuFYTh9TQig+n6XDoNZYKZmfUhWOzR8ERPjqtZbpD/F00C++UiJavq9z6bKZZm7
p4SZpaF9K18LToWWLkR10CqVtQVt5pzumBbtZbPdz2VUhIYAIU76ctJV2bUN6FMn
+eH0sxGABXFt1OZmTzlsPkDRIaths6l/AUrMVh7p4cTJ5fI1NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK9n5NH/FGz/2993ssh+M7O1RiPEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYx
YTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5MWQ0YzQ0MTkvYjkwNDk4MzEtYTU4NS0z
ZGM1LWJkMDQtNWRlM2Q0NTY2NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmQ2MWEyMTQtZDg2Ny00NDRlLWIy
ZjQtY2EyOTFkNGM0NDE5L2ZkNjFhMjE0LWQ4NjctNDQ0ZS1iMmY0LWNhMjkxZDRj
NDQxOS5jcmwwHwYDVR0jBBgwFoAUksvOm7LOK/AGOs800+OjDwhvc1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYxYTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5
MWQ0YzQ0MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6dUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHrCW/fCIMFbYL8hNbqUeiGq1hFyb48w5/7QqYIcYy9jZOPEWdjYxN5q
ruHCj0+68NBwgVrwcvz9t4nAp911CWq0Y4PPNdH/YHOq1CpbnkZFMy7zI1ZYWLck
QAjt3vjdbSn2z+/WbyjmQwQXZB+LDLi3Kh0d1pRON494quImsyB9FSWpTc8yB467
uQ0c8YfZbhx1w9wGyrW4PELSafeTCpjgTm1nWcaWONWURggRxGVHqkX951nKeC0P
30Q89nvEZkx5sZ5iu541pkzvrZSampfdrOpLk/aHvgAf979APl+kZ/nCVV1kcsuK
bw0vjcA4wM8tAdnHFte4APDIq/BKVDI=
-----END CERTIFICATE-----
Generated at Sat May 18 01:55:17 2024 by rpki-client on console-ams.rpki-client.org