Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576e0d96-e27b-44ef-99b2-054ed19052a5/8498a3d7-9070-36c7-8562-d40442eed3f1.roa
File:                     8498a3d7-9070-36c7-8562-d40442eed3f1.roa (raw, json)
Hash identifier:          LCuvQZ0tcTGUCmoRkSD6LUEYAn8qkBLumiidCiywgjk=
Subject key identifier:   CC:30:E0:3F:A7:77:E9:AF:09:5A:00:A3:A7:60:1F:91:33:82:8E:8F
Certificate issuer:       /CN=576e0d96-e27b-44ef-99b2-054ed19052a5
Certificate serial:       010D0C9F4328584551CD6BB2DA9F053D2A7E9280
Authority key identifier: C3:BA:B2:04:38:D7:74:27:A8:E7:3C:C2:4C:3D:4E:3C:2C:86:1F:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576e0d96-e27b-44ef-99b2-054ed19052a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576e0d96-e27b-44ef-99b2-054ed19052a5/8498a3d7-9070-36c7-8562-d40442eed3f1.roa
Signing time:             Mon 25 Mar 2024 01:00:25 +0000
ROA not before:           Mon 25 Mar 2024 01:00:25 +0000
ROA not after:            Sun 23 Jun 2024 01:00:25 +0000
asID:                     398471
IP address blocks:        204.108.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576e0d96-e27b-44ef-99b2-054ed19052a5/576e0d96-e27b-44ef-99b2-054ed19052a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576e0d96-e27b-44ef-99b2-054ed19052a5/576e0d96-e27b-44ef-99b2-054ed19052a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576e0d96-e27b-44ef-99b2-054ed19052a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:51:cd:6b:b2:da:9f:05:3d:2a:7e:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576e0d96-e27b-44ef-99b2-054ed19052a5
        Validity
            Not Before: Mar 25 01:00:25 2024 GMT
            Not After : Jun 23 01:00:25 2024 GMT
        Subject: CN=c61ca00b-589e-4781-8778-f075985bbe91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:54:4e:8b:4a:28:df:f8:1a:36:04:70:61:
                    51:37:5b:21:49:e8:25:f6:26:b3:55:0e:53:bb:a6:
                    1c:d9:02:34:93:13:d5:c6:73:32:8a:df:99:61:21:
                    f3:3e:9e:24:4b:35:06:66:17:47:00:42:16:f7:fc:
                    b5:7d:29:38:f7:c9:ae:ce:90:36:c2:b6:a5:d5:c4:
                    d0:e0:8d:11:b6:7f:9d:f9:96:ac:e8:e1:28:68:d3:
                    9b:2d:7f:62:95:5f:cc:87:c2:6f:ce:29:99:54:e0:
                    3a:77:1c:2d:63:d4:8e:64:43:a5:b2:92:09:8b:40:
                    fd:cc:77:3f:7c:e9:9f:0d:40:23:bc:cc:db:66:13:
                    87:69:f6:82:24:d0:ad:74:d8:a4:ca:e4:62:f3:32:
                    8a:77:92:73:5f:77:ba:18:0a:91:6c:af:fb:9f:2f:
                    1b:fa:e3:6f:08:9b:8a:49:da:cb:83:6f:03:31:9f:
                    26:62:28:e5:19:86:75:0a:bb:b3:fd:5d:3f:df:98:
                    78:0b:a8:b1:22:d2:87:82:85:57:18:43:4b:23:04:
                    41:90:d7:28:d9:64:62:fc:bd:05:87:e7:ca:30:ed:
                    d0:25:29:02:5e:eb:16:8a:7a:06:98:f3:80:df:16:
                    5a:03:c5:18:24:9f:6a:55:52:63:3f:15:7a:6d:93:
                    11:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:30:E0:3F:A7:77:E9:AF:09:5A:00:A3:A7:60:1F:91:33:82:8E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576e0d96-e27b-44ef-99b2-054ed19052a5/8498a3d7-9070-36c7-8562-d40442eed3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576e0d96-e27b-44ef-99b2-054ed19052a5/576e0d96-e27b-44ef-99b2-054ed19052a5.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:B2:04:38:D7:74:27:A8:E7:3C:C2:4C:3D:4E:3C:2C:86:1F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/576e0d96-e27b-44ef-99b2-054ed19052a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7f:a9:8e:f8:ec:33:c8:d4:bb:8a:93:f8:70:16:3b:16:c6:
         3a:c7:fb:ca:dd:9d:78:d9:3a:6c:4a:18:15:14:bc:44:42:d5:
         05:74:b7:b0:84:a6:e2:b0:41:89:09:c7:66:e7:37:0e:d9:1b:
         91:41:a5:42:a5:56:ca:b5:44:8b:a4:a3:6f:7e:87:9b:95:95:
         6c:d9:28:84:ad:94:af:e2:4d:23:4e:b3:d4:ce:f9:1c:d9:b2:
         f6:14:d5:77:cc:3d:58:e5:5f:f1:d9:76:18:82:2b:50:e8:ac:
         ab:d4:23:4d:28:82:d0:4b:a1:75:e0:c9:bd:c4:d4:9e:f8:05:
         ab:62:24:1f:55:61:23:16:17:be:55:03:97:36:6e:2c:f2:40:
         6a:3a:58:c3:9a:59:20:69:36:30:16:57:94:c2:e2:0e:97:ea:
         c9:b2:14:9b:12:61:72:42:24:9e:45:12:ba:d2:74:c3:d7:45:
         05:02:9c:df:33:df:88:08:11:a8:4f:74:b9:72:58:5a:af:31:
         83:8f:ab:75:6e:76:12:e2:f2:04:c6:48:1d:7f:68:14:13:b1:
         d3:e7:ef:46:bf:a9:71:b4:05:51:d5:b7:dd:84:3c:d4:f4:a6:
         7e:b7:22:9e:b3:d1:ea:40:35:70:7a:c1:36:ff:c3:a2:20:2d:
         e4:a7:ff:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVRzWuy2p8FPSp+koAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc2ZTBkOTYtZTI3Yi00NGVmLTk5YjItMDU0ZWQxOTA1
MmE1MB4XDTI0MDMyNTAxMDAyNVoXDTI0MDYyMzAxMDAyNVowLzEtMCsGA1UEAxMk
YzYxY2EwMGItNTg5ZS00NzgxLTg3NzgtZjA3NTk4NWJiZTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS9UTotKKN/4GjYEcGFRN1shSegl9iazVQ5T
u6Yc2QI0kxPVxnMyit+ZYSHzPp4kSzUGZhdHAEIW9/y1fSk498muzpA2wral1cTQ
4I0Rtn+d+Zas6OEoaNObLX9ilV/Mh8JvzimZVOA6dxwtY9SOZEOlspIJi0D9zHc/
fOmfDUAjvMzbZhOHafaCJNCtdNikyuRi8zKKd5JzX3e6GAqRbK/7ny8b+uNvCJuK
SdrLg28DMZ8mYijlGYZ1Cruz/V0/35h4C6ixItKHgoVXGENLIwRBkNco2WRi/L0F
h+fKMO3QJSkCXusWinoGmPOA3xZaA8UYJJ9qVVJjPxV6bZMRNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMww4D+nd+mvCVoAo6dgH5Ezgo6PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NzZl
MGQ5Ni1lMjdiLTQ0ZWYtOTliMi0wNTRlZDE5MDUyYTUvODQ5OGEzZDctOTA3MC0z
NmM3LTg1NjItZDQwNDQyZWVkM2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTc2ZTBkOTYtZTI3Yi00NGVmLTk5
YjItMDU0ZWQxOTA1MmE1LzU3NmUwZDk2LWUyN2ItNDRlZi05OWIyLTA1NGVkMTkw
NTJhNS5jcmwwHwYDVR0jBBgwFoAUw7qyBDjXdCeo5zzCTD1OPCyGH2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NzZlMGQ5Ni1lMjdiLTQ0ZWYtOTliMi0wNTRl
ZDE5MDUyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5/qY747DPI1LuKk/hwFjsWxjrH+8rdnXjZOmxKGBUUvERC1QV0t7CE
puKwQYkJx2bnNw7ZG5FBpUKlVsq1RIuko29+h5uVlWzZKIStlK/iTSNOs9TO+RzZ
svYU1XfMPVjlX/HZdhiCK1DorKvUI00ogtBLoXXgyb3E1J74BatiJB9VYSMWF75V
A5c2bizyQGo6WMOaWSBpNjAWV5TC4g6X6smyFJsSYXJCJJ5FErrSdMPXRQUCnN8z
34gIEahPdLlyWFqvMYOPq3VudhLi8gTGSB1/aBQTsdPn70a/qXG0BVHVt92EPNT0
pn63Ip6z0epANXB6wTb/w6IgLeSn/+A=
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:04 2024 by rpki-client on console-ams.rpki-client.org