Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/6684397c-59b8-3099-b1de-c2148796dd93.roa
File:                     6684397c-59b8-3099-b1de-c2148796dd93.roa (raw, json)
Hash identifier:          D0pJnZbeIecehpVqjBsm7hBAJ+3EfCRz+ca2oHJSLzU=
Subject key identifier:   F8:DD:8C:C3:A3:AA:8E:F1:C7:6A:1D:94:31:7A:7A:2B:FB:2F:80:FB
Certificate issuer:       /CN=770e3eb7-a110-4c5f-ac71-41397fe16cac
Certificate serial:       010D0C9F43285845347D4DB7CCC47CBD329A0C80
Authority key identifier: E3:0D:DB:6E:F8:F7:03:76:59:71:90:CF:59:61:6E:82:50:4E:A4:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/6684397c-59b8-3099-b1de-c2148796dd93.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     16509
IP address blocks:        163.47.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/770e3eb7-a110-4c5f-ac71-41397fe16cac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/770e3eb7-a110-4c5f-ac71-41397fe16cac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4d:b7:cc:c4:7c:bd:32:9a:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770e3eb7-a110-4c5f-ac71-41397fe16cac
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=5a49ced7-86c4-47e5-bea6-981b647857ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4a:df:3d:91:60:11:80:a2:8d:55:d6:02:70:
                    a1:f6:e1:92:6b:4c:cd:88:20:5a:f3:61:a8:af:23:
                    14:95:99:92:b9:b8:6b:55:7c:07:fa:8e:58:e1:73:
                    45:b1:01:11:fa:1c:17:c8:b9:16:bb:e1:41:2b:a5:
                    e9:48:8f:7b:fc:be:dd:69:95:52:c6:39:51:a4:13:
                    97:82:5a:e8:a4:4f:7a:c6:29:a8:97:ba:ff:ed:8b:
                    27:c8:10:9b:d0:fd:da:41:fd:54:fd:65:cf:68:b0:
                    7c:ae:b0:3b:f6:ca:3a:90:81:bf:a6:15:93:fd:51:
                    e0:e6:d7:b9:e3:aa:be:49:f5:dc:74:6a:d2:b1:c6:
                    0b:97:3c:b6:52:90:84:1f:32:ed:2c:de:91:bc:54:
                    cb:40:20:29:06:8d:bc:0d:74:f8:3d:8b:1c:f6:60:
                    ad:2b:ca:c0:94:ec:41:9a:a9:df:0c:ec:3c:89:d9:
                    48:d0:d4:6a:5a:2e:65:ca:e7:b4:c1:a3:fa:7c:32:
                    07:64:20:6e:8e:83:7b:e2:6e:58:f6:10:c3:7c:ac:
                    00:d9:8b:bf:38:2b:74:82:51:5c:37:44:ee:39:7e:
                    f0:6a:99:49:03:0a:46:88:e5:64:60:50:01:0e:18:
                    3f:b9:b4:ef:89:97:8a:41:67:c7:a4:67:dc:72:07:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DD:8C:C3:A3:AA:8E:F1:C7:6A:1D:94:31:7A:7A:2B:FB:2F:80:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/6684397c-59b8-3099-b1de-c2148796dd93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/770e3eb7-a110-4c5f-ac71-41397fe16cac.crl

            X509v3 Authority Key Identifier:
                keyid:E3:0D:DB:6E:F8:F7:03:76:59:71:90:CF:59:61:6E:82:50:4E:A4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.47.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:40:bb:c6:b4:59:88:35:71:da:ea:7e:8b:87:dc:f3:d1:00:
         da:72:3c:15:ec:74:d6:f0:88:76:b3:33:8f:38:bd:5c:b4:eb:
         76:10:42:49:a8:d0:b9:7f:27:5c:29:d1:0e:32:38:53:f8:86:
         f7:f4:4f:46:96:33:4f:d3:bd:a8:14:ff:09:e9:72:85:f2:ae:
         b1:c6:9e:d6:dc:af:9c:e9:16:34:fc:3f:c2:00:15:a9:27:c5:
         1b:a6:1f:70:87:b7:37:f0:2b:5b:4b:2e:30:b3:fd:69:53:6e:
         ac:43:5e:3a:a9:43:a9:ac:a4:bc:fa:c0:ef:41:2e:a4:6c:46:
         b8:ce:1c:02:0e:4f:1f:f9:a7:b8:e7:d6:4c:2f:c0:5f:3c:b5:
         34:7e:f6:b9:cd:bf:fb:1f:a8:c0:05:df:ce:46:15:e2:23:d2:
         54:41:ca:da:cd:84:07:e1:bc:1b:89:b4:5c:44:79:f4:4d:2e:
         50:32:36:0b:80:35:84:e1:78:7c:9f:41:46:5d:3f:4b:23:b3:
         69:7b:cd:4a:ce:d4:e9:40:7d:2e:92:f1:2a:60:91:e8:4d:26:
         fe:a1:96:03:3a:45:e3:da:bd:69:36:75:a4:67:8a:cd:6b:75:
         23:61:cf:16:5f:77:5a:71:33:a2:90:a3:f1:c8:51:e7:eb:9f:
         75:0e:d8:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU0fU23zMR8vTKaDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzcwZTNlYjctYTExMC00YzVmLWFjNzEtNDEzOTdmZTE2
Y2FjMB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk
NWE0OWNlZDctODZjNC00N2U1LWJlYTYtOTgxYjY0Nzg1N2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ErfPZFgEYCijVXWAnCh9uGSa0zNiCBa82Go
ryMUlZmSubhrVXwH+o5Y4XNFsQER+hwXyLkWu+FBK6XpSI97/L7daZVSxjlRpBOX
glropE96ximol7r/7YsnyBCb0P3aQf1U/WXPaLB8rrA79so6kIG/phWT/VHg5te5
46q+SfXcdGrSscYLlzy2UpCEHzLtLN6RvFTLQCApBo28DXT4PYsc9mCtK8rAlOxB
mqnfDOw8idlI0NRqWi5lyue0waP6fDIHZCBujoN74m5Y9hDDfKwA2Yu/OCt0glFc
N0TuOX7waplJAwpGiOVkYFABDhg/ubTviZeKQWfHpGfccgchhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjdjMOjqo7xx2odlDF6eiv7L4D7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83NzBl
M2ViNy1hMTEwLTRjNWYtYWM3MS00MTM5N2ZlMTZjYWMvNjY4NDM5N2MtNTliOC0z
MDk5LWIxZGUtYzIxNDg3OTZkZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzcwZTNlYjctYTExMC00YzVmLWFj
NzEtNDEzOTdmZTE2Y2FjLzc3MGUzZWI3LWExMTAtNGM1Zi1hYzcxLTQxMzk3ZmUx
NmNhYy5jcmwwHwYDVR0jBBgwFoAU4w3bbvj3A3ZZcZDPWWFuglBOpMYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83NzBlM2ViNy1hMTEwLTRjNWYtYWM3MS00MTM5
N2ZlMTZjYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoy+2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5Au8a0WYg1cdrqfouH3PPRANpyPBXsdNbwiHazM484vVy063YQQkmo
0Ll/J1wp0Q4yOFP4hvf0T0aWM0/TvagU/wnpcoXyrrHGntbcr5zpFjT8P8IAFakn
xRumH3CHtzfwK1tLLjCz/WlTbqxDXjqpQ6mspLz6wO9BLqRsRrjOHAIOTx/5p7jn
1kwvwF88tTR+9rnNv/sfqMAF385GFeIj0lRBytrNhAfhvBuJtFxEefRNLlAyNguA
NYTheHyfQUZdP0sjs2l7zUrO1OlAfS6S8SpgkehNJv6hlgM6RePavWk2daRnis1r
dSNhzxZfd1pxM6KQo/HIUefrn3UO2A0=
-----END CERTIFICATE-----
Generated at Thu May 2 18:03:52 2024 by rpki-client on console-fra.rpki-client.org