Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/890573c2-5d76-3e60-aba8-8cb1b23922de.roa
File:                     890573c2-5d76-3e60-aba8-8cb1b23922de.roa (raw, json)
Hash identifier:          ff2KpNSzhKh8eQfmk2NC6BsUm4WwkdrrAbCpBF04DFk=
Subject key identifier:   93:FD:82:F5:65:8D:27:11:7D:D9:B0:5E:B8:B2:57:66:30:47:62:3F
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F43285845ADEE187EDD581D3726FC1480
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/890573c2-5d76-3e60-aba8-8cb1b23922de.roa
Signing time:             Sat 27 Apr 2024 01:00:26 +0000
ROA not before:           Sat 27 Apr 2024 01:00:26 +0000
ROA not after:            Fri 26 Jul 2024 01:00:26 +0000
asID:                     3356
IP address blocks:        67.159.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:ee:18:7e:dd:58:1d:37:26:fc:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Apr 27 01:00:26 2024 GMT
            Not After : Jul 26 01:00:26 2024 GMT
        Subject: CN=e41f043d-8874-48e5-b688-fb0327de08fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:ed:f6:d8:8e:1d:7e:27:94:67:46:c4:c4:
                    6c:43:e7:d1:2e:7c:f4:74:d0:f2:30:1b:a0:bf:b4:
                    09:32:21:cb:ef:9f:40:16:72:13:6e:a0:03:43:43:
                    5c:73:66:a3:ee:3e:68:25:a9:c5:8d:bc:ee:7d:27:
                    53:55:22:96:51:f5:47:5c:7e:3f:bb:fd:a7:c4:29:
                    8c:63:73:36:62:b1:b5:03:45:1b:9d:ab:6f:bb:aa:
                    f2:08:c3:44:3a:f7:74:53:f2:1c:df:01:ad:79:e6:
                    44:c9:cb:7d:69:b6:9a:d9:6d:e1:bd:83:84:52:92:
                    f2:94:4f:1e:4f:c0:3f:36:5e:3f:60:9a:0c:18:23:
                    c5:55:6c:29:9b:bd:fc:de:09:5e:c6:00:f3:9d:77:
                    2d:09:8f:c9:18:8a:38:de:ad:e7:fd:cb:52:4f:dc:
                    b9:2c:2d:54:7d:c0:00:f9:20:9e:24:d4:94:a7:05:
                    1b:cd:99:bc:81:87:37:b2:99:28:4c:b5:80:a8:b9:
                    3c:85:5f:44:c9:72:e2:0e:bd:bf:95:37:5f:67:9a:
                    a3:84:cb:bb:f7:cd:cb:43:a7:19:84:92:c4:f7:ec:
                    66:d8:ae:e0:43:5a:ae:a1:fe:eb:a2:89:68:3c:81:
                    44:b9:f3:04:fb:ae:fc:38:56:c1:4b:36:c6:24:8f:
                    29:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FD:82:F5:65:8D:27:11:7D:D9:B0:5E:B8:B2:57:66:30:47:62:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/890573c2-5d76-3e60-aba8-8cb1b23922de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:bd:63:71:38:ad:cb:be:8d:e5:4f:32:c0:ee:dd:94:a3:
         8d:ba:1c:c9:fa:5c:5a:bf:12:67:e4:9c:1b:08:df:ff:86:91:
         7f:fc:8d:25:6c:eb:87:fe:44:fc:1e:1e:be:61:e0:b0:45:b8:
         63:47:8d:36:d6:86:96:ef:65:97:0d:90:96:e7:b3:45:f5:85:
         73:cb:8a:86:67:da:c8:d1:45:c0:2d:f2:b4:6f:8d:40:6f:7c:
         36:c1:19:da:fc:0c:46:91:33:41:e7:aa:9c:e5:94:38:bc:c6:
         de:a7:bc:f8:5b:63:03:2c:53:9e:c6:77:e1:73:a7:ce:9d:48:
         16:b9:76:da:b3:98:84:09:5a:f0:f5:08:5e:6b:9b:82:8e:76:
         01:20:20:2f:75:86:e6:eb:ad:3c:45:1b:4b:ba:7b:b8:32:f9:
         fc:b8:41:3c:2b:55:e9:75:44:c9:ca:b5:01:0a:7f:1e:f7:d1:
         94:bc:0c:80:65:1e:51:65:00:61:a0:56:57:a7:c9:4e:3b:dd:
         27:97:db:c5:f0:fd:1b:cc:4d:70:5d:b5:65:3e:b4:d3:6e:5c:
         0d:d2:aa:9e:50:dc:2d:48:87:a7:59:a8:11:50:63:ae:b6:23:
         6c:99:6e:3f:29:ff:20:98:a1:ef:fc:cf:d2:ee:24:01:7e:b9:
         c2:6d:90:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWt7hh+3VgdNyb8FIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI0MDQyNzAxMDAyNloXDTI0MDcyNjAxMDAyNlowLzEtMCsGA1UEAxMk
ZTQxZjA0M2QtODg3NC00OGU1LWI2ODgtZmIwMzI3ZGUwOGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Tt9tiOHX4nlGdGxMRsQ+fRLnz0dNDyMBug
v7QJMiHL759AFnITbqADQ0Ncc2aj7j5oJanFjbzufSdTVSKWUfVHXH4/u/2nxCmM
Y3M2YrG1A0Ubnatvu6ryCMNEOvd0U/Ic3wGteeZEyct9abaa2W3hvYOEUpLylE8e
T8A/Nl4/YJoMGCPFVWwpm7383glexgDznXctCY/JGIo43q3n/ctST9y5LC1UfcAA
+SCeJNSUpwUbzZm8gYc3spkoTLWAqLk8hV9EyXLiDr2/lTdfZ5qjhMu7983LQ6cZ
hJLE9+xm2K7gQ1quof7rooloPIFEufME+678OFbBSzbGJI8pqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJP9gvVljScRfdmwXriyV2YwR2I/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvODkwNTczYzItNWQ3Ni0z
ZTYwLWFiYTgtOGNiMWIyMzkyMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5/BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQfvWNxOK3Lvo3lTzLA7t2Uo426HMn6XFq/EmfknBsI3/+GkX/8jSVs
64f+RPweHr5h4LBFuGNHjTbWhpbvZZcNkJbns0X1hXPLioZn2sjRRcAt8rRvjUBv
fDbBGdr8DEaRM0HnqpzllDi8xt6nvPhbYwMsU57Gd+Fzp86dSBa5dtqzmIQJWvD1
CF5rm4KOdgEgIC91hubrrTxFG0u6e7gy+fy4QTwrVel1RMnKtQEKfx730ZS8DIBl
HlFlAGGgVlenyU473SeX28Xw/RvMTXBdtWU+tNNuXA3Sqp5Q3C1Ih6dZqBFQY662
I2yZbj8p/yCYoe/8z9LuJAF+ucJtkNA=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:01 2024 by rpki-client on console-ams.rpki-client.org