Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa
File:                     9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa (raw, json)
Hash identifier:          4tL3fsg8/42HKygmq6OhyyJkXL93SHJsAV4dhFns+qI=
Subject key identifier:   01:C3:A8:D7:62:4F:B3:83:F0:8B:5C:0F:8A:35:94:05:14:48:F9:2E
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F43285845F253F49889FAA12200C59900
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa
Signing time:             Tue 21 May 2024 13:00:34 +0000
ROA not before:           Tue 21 May 2024 13:00:34 +0000
ROA not after:            Mon 19 Aug 2024 13:00:34 +0000
asID:                     32771
IP address blocks:        199.247.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:53:f4:98:89:fa:a1:22:00:c5:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: May 21 13:00:34 2024 GMT
            Not After : Aug 19 13:00:34 2024 GMT
        Subject: CN=4edd1f6b-ebb1-46be-84fc-0076c61699a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:bf:56:cc:c6:b2:b9:35:ee:3d:fc:07:a7:
                    98:b6:d3:7a:3a:44:72:2a:76:01:75:0b:f4:dd:2e:
                    75:21:d5:39:97:fa:1b:4d:14:98:d2:11:0d:85:9b:
                    36:da:ab:2a:ad:db:aa:3e:6b:79:c4:06:ca:5a:30:
                    1c:49:9f:24:b7:8d:bd:d7:87:95:20:b7:2c:46:1d:
                    dc:d8:0e:11:ff:c2:91:ba:62:af:2c:53:bf:dc:6c:
                    19:db:5f:57:77:07:c7:b3:07:c0:42:5f:97:c7:13:
                    69:15:22:a7:e6:fd:19:fe:b0:94:44:94:fa:b5:fb:
                    26:14:56:27:ae:02:d2:e4:07:f6:d5:4e:bf:b3:b6:
                    6a:03:77:7d:33:d1:92:6f:26:c2:b7:db:a4:63:25:
                    73:dd:a8:67:8b:3f:ff:9f:a3:27:c4:3a:41:d2:06:
                    0d:2f:13:cb:1f:15:1d:e2:79:26:61:66:d3:c4:10:
                    1a:fb:e9:7b:80:a4:0b:2c:f6:6e:50:6e:76:26:9a:
                    00:ff:8e:18:79:8c:9b:23:a0:76:55:db:c8:97:cb:
                    45:06:fb:de:3f:67:6e:cd:dc:3a:f4:5b:b0:48:62:
                    f3:7f:36:87:7a:17:02:3b:8a:54:77:48:61:d7:52:
                    70:6f:a0:c6:2d:26:95:eb:dc:86:d4:c3:0c:b1:73:
                    d7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C3:A8:D7:62:4F:B3:83:F0:8B:5C:0F:8A:35:94:05:14:48:F9:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/9ba9ef6c-85e7-3b71-89e7-41b2bd314899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:1a:64:d2:62:26:04:36:1e:e2:ab:0e:49:f1:3f:e2:f6:
         0e:cc:de:7a:89:05:07:4e:30:e0:90:6a:f3:1e:d9:da:54:5e:
         09:50:0e:39:bd:3f:7d:4f:a9:25:0d:c9:2d:07:5b:3b:b9:7e:
         c1:29:44:7b:a8:00:ba:32:b7:d3:93:76:20:f4:07:9c:30:1b:
         31:d9:f7:d7:0c:07:57:1f:fa:fb:e8:5e:c5:15:0b:86:96:fe:
         15:a6:ed:01:68:c4:b1:40:2c:fb:05:fd:3d:8c:81:36:2f:2b:
         4b:cf:7a:cd:4a:8f:81:be:87:e3:f5:27:0e:99:4a:fd:f7:52:
         0f:b8:43:17:77:43:96:21:ce:65:c7:c9:ca:af:a3:b6:05:e5:
         3f:f0:cf:dc:32:cb:64:04:90:dd:59:c5:ea:61:fb:1b:d4:74:
         4e:bc:31:b2:05:19:95:f8:d2:e7:74:06:e7:e4:4a:f3:24:76:
         15:50:eb:a8:ad:59:88:d0:45:01:20:79:e6:e5:f9:54:a6:68:
         b7:03:13:17:46:7b:83:4b:63:81:f9:de:56:4e:ef:0b:b7:6e:
         e3:7a:de:1a:f6:aa:c7:3e:ec:4b:ee:f6:50:ba:c7:92:c9:18:
         d1:03:2c:4f:b9:d2:64:8c:ce:24:0e:f0:b1:34:88:c0:1e:0c:
         b3:20:d2:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXyU/SYifqhIgDFmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl
OTVjMB4XDTI0MDUyMTEzMDAzNFoXDTI0MDgxOTEzMDAzNFowLzEtMCsGA1UEAxMk
NGVkZDFmNmItZWJiMS00NmJlLTg0ZmMtMDA3NmM2MTY5OWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimq/VszGsrk17j38B6eYttN6OkRyKnYBdQv0
3S51IdU5l/obTRSY0hENhZs22qsqrduqPmt5xAbKWjAcSZ8kt42914eVILcsRh3c
2A4R/8KRumKvLFO/3GwZ219XdwfHswfAQl+XxxNpFSKn5v0Z/rCURJT6tfsmFFYn
rgLS5Af21U6/s7ZqA3d9M9GSbybCt9ukYyVz3ahniz//n6MnxDpB0gYNLxPLHxUd
4nkmYWbTxBAa++l7gKQLLPZuUG52JpoA/44YeYybI6B2VdvIl8tFBvveP2duzdw6
9FuwSGLzfzaHehcCO4pUd0hh11Jwb6DGLSaV69yG1MMMsXPX9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHDqNdiT7OD8ItcD4o1lAUUSPkuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5
OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvOWJhOWVmNmMtODVlNy0z
YjcxLTg5ZTctNDFiMmJkMzE0ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4
ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0
ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh
YzU1NGU5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/eZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIK0GmTSYiYENh7iqw5J8T/i9g7M3nqJBQdOMOCQavMe2dpUXglQDjm9
P31PqSUNyS0HWzu5fsEpRHuoALoyt9OTdiD0B5wwGzHZ99cMB1cf+vvoXsUVC4aW
/hWm7QFoxLFALPsF/T2MgTYvK0vPes1Kj4G+h+P1Jw6ZSv33Ug+4Qxd3Q5YhzmXH
ycqvo7YF5T/wz9wyy2QEkN1Zxeph+xvUdE68MbIFGZX40ud0BufkSvMkdhVQ66it
WYjQRQEgeebl+VSmaLcDExdGe4NLY4H53lZO7wu3buN63hr2qsc+7Evu9lC6x5LJ
GNEDLE+50mSMziQO8LE0iMAeDLMg0mw=
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:59:40 2024 by rpki-client on console-fra.rpki-client.org