Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
File:                     bd706a23-0d52-3069-8efc-b247735d9c39.roa (raw, json)
Hash identifier:          qV5ZkV8jRw3u2mEEO/OKUIhO6Y/Qfrc+HH/KFpRRk2I=
Subject key identifier:   8F:F1:DB:1E:11:E4:50:0B:43:DB:90:8A:E5:C8:73:16:A3:AD:D8:97
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F43285845CE08F68A28B30D7025540B00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     394285
IP address blocks:        174.137.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f6:8a:28:b3:0d:70:25:54:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=b88f65b1-d0b7-4230-9744-8d78f491700d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:3b:84:47:53:de:94:32:68:30:77:ff:e4:
                    89:a9:53:7d:c5:78:52:6a:52:b4:12:f1:e0:8f:b5:
                    25:8b:bd:1e:45:90:53:94:7d:de:73:71:e3:e1:9e:
                    7a:ff:52:cd:0b:8e:44:51:ce:b5:21:96:65:ff:4c:
                    d0:b4:1c:ee:41:0b:95:55:fa:96:1f:2e:e7:b4:59:
                    6b:88:a8:10:ca:99:1c:66:cf:16:a6:92:35:29:4a:
                    7c:76:83:b1:25:0c:34:58:aa:5d:d5:eb:57:26:3d:
                    a8:db:77:9f:ea:94:a6:8d:a9:c1:01:f1:c9:bf:d1:
                    f0:68:a9:84:c0:ba:09:02:fa:dc:88:3c:a4:4f:97:
                    c6:c7:dd:2f:97:94:ec:22:b6:92:29:8a:fd:6b:81:
                    93:f0:50:59:be:f8:09:0b:55:d9:5c:d0:b4:6d:d8:
                    d6:31:f6:a0:85:5d:47:bd:9d:67:86:b0:f4:4e:66:
                    08:d4:f5:c0:9a:d9:a0:d1:71:e1:aa:ce:32:bf:04:
                    ba:31:fb:2e:cc:d3:3f:c8:4e:c7:c2:4e:9e:ab:6a:
                    60:b9:b4:85:d3:d9:81:8e:fc:4b:a8:66:95:1a:aa:
                    be:35:0e:c9:7b:d7:77:50:6c:e3:b6:db:ff:23:b7:
                    b2:ed:99:f0:14:5d:19:7e:8f:fc:aa:6b:7f:e5:63:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F1:DB:1E:11:E4:50:0B:43:DB:90:8A:E5:C8:73:16:A3:AD:D8:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/bd706a23-0d52-3069-8efc-b247735d9c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:19:a0:cd:7e:78:93:d9:d0:ac:76:d3:59:1d:cd:38:91:e0:
         cd:b1:01:f2:9a:da:a7:86:b6:f0:22:82:f5:36:e9:cd:83:ec:
         b7:57:e7:20:18:f7:71:2c:a4:84:8f:e5:d1:4e:2d:9c:46:81:
         8e:ea:78:b4:ed:86:dc:ec:f0:2f:d0:c6:7b:5b:f8:8e:7d:0a:
         72:c1:50:68:38:c7:cf:24:b0:e6:f4:5c:44:da:37:56:40:49:
         a0:a9:4d:5a:20:fe:7c:fb:91:2d:e1:e9:fe:3e:d1:b2:0f:6a:
         1d:8b:80:fd:49:c9:f0:4f:3e:89:23:14:b8:14:9e:78:bf:e5:
         2a:6d:39:17:4e:e4:87:5f:1f:bf:82:cb:29:ec:60:85:65:24:
         2b:fc:82:11:83:48:c7:73:dc:6b:6d:66:51:03:a6:11:4b:91:
         2f:4d:4a:9a:80:14:f3:e1:95:60:06:e1:4e:4c:7b:c3:b3:5e:
         0a:7e:0e:8f:90:13:81:6f:ad:0e:30:3f:42:a7:4b:27:09:06:
         c8:48:6e:7f:32:66:3b:f1:3d:de:eb:27:50:a6:f5:14:c7:73:
         c2:65:6d:99:79:e8:24:c4:22:64:f7:a1:6a:62:69:31:2b:6b:
         05:e9:c1:30:31:28:1a:41:75:ae:c2:ac:81:7c:95:e7:92:ee:
         b7:d2:be:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCPaKKLMNcCVUCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
Yjg4ZjY1YjEtZDBiNy00MjMwLTk3NDQtOGQ3OGY0OTE3MDBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8k7hEdT3pQyaDB3/+SJqVN9xXhSalK0EvHg
j7Uli70eRZBTlH3ec3Hj4Z56/1LNC45EUc61IZZl/0zQtBzuQQuVVfqWHy7ntFlr
iKgQypkcZs8WppI1KUp8doOxJQw0WKpd1etXJj2o23ef6pSmjanBAfHJv9HwaKmE
wLoJAvrciDykT5fGx90vl5TsIraSKYr9a4GT8FBZvvgJC1XZXNC0bdjWMfaghV1H
vZ1nhrD0TmYI1PXAmtmg0XHhqs4yvwS6MfsuzNM/yE7Hwk6eq2pgubSF09mBjvxL
qGaVGqq+NQ7Je9d3UGzjttv/I7ey7ZnwFF0Zfo/8qmt/5WMdqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/x2x4R5FALQ9uQiuXIcxajrdiXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvYmQ3MDZhMjMtMGQ1Mi0z
MDY5LThlZmMtYjI0NzczNWQ5YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArolhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEZoM1+eJPZ0Kx201kdzTiR4M2xAfKa2qeGtvAigvU26c2D7LdX5yAY
93EspISP5dFOLZxGgY7qeLTthtzs8C/Qxntb+I59CnLBUGg4x88ksOb0XETaN1ZA
SaCpTVog/nz7kS3h6f4+0bIPah2LgP1JyfBPPokjFLgUnni/5SptORdO5IdfH7+C
yynsYIVlJCv8ghGDSMdz3GttZlEDphFLkS9NSpqAFPPhlWAG4U5Me8OzXgp+Do+Q
E4FvrQ4wP0KnSycJBshIbn8yZjvxPd7rJ1Cm9RTHc8JlbZl56CTEImT3oWpiaTEr
awXpwTAxKBpBda7CrIF8leeS7rfSvhA=
-----END CERTIFICATE-----
Generated at Sun May 19 18:35:40 2024 by rpki-client on console-ams.rpki-client.org