Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa
File:                     4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa (raw, json)
Hash identifier:          hrw8idniUXC/7oX9K0UzHHWgZy7/HtfYd2FlI89rIKs=
Subject key identifier:   22:93:9B:17:0E:56:16:F2:E7:DD:48:EC:0B:BD:3A:97:E0:41:4D:84
Certificate issuer:       /CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
Certificate serial:       010D0C9F43285845496D60072CB4536CDC288280
Authority key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa
Signing time:             Fri 22 Mar 2024 01:00:24 +0000
ROA not before:           Fri 22 Mar 2024 01:00:24 +0000
ROA not after:            Thu 20 Jun 2024 01:00:24 +0000
asID:                     31782
IP address blocks:        192.219.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:6d:60:07:2c:b4:53:6c:dc:28:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
        Validity
            Not Before: Mar 22 01:00:24 2024 GMT
            Not After : Jun 20 01:00:24 2024 GMT
        Subject: CN=198fea4d-1bb9-4f4c-8163-668b232006dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:d9:d0:1a:04:37:db:79:9c:eb:31:05:c5:
                    1b:94:bf:bf:7f:af:2d:f0:a5:f1:8b:41:03:82:2b:
                    fb:5b:12:39:4d:d5:28:d2:cb:c9:36:8c:a6:44:78:
                    ba:37:fb:57:61:15:73:d9:61:af:0d:06:88:58:a4:
                    ce:a4:55:82:f8:84:1a:79:4f:a0:7d:36:d4:c1:5c:
                    da:32:75:cf:63:06:22:d3:6a:70:b4:0e:48:ef:90:
                    eb:2b:59:00:0f:17:46:38:03:9a:7a:57:d1:2f:2d:
                    2d:c0:55:d2:15:9a:2d:b4:e1:8f:93:00:00:e9:42:
                    fc:9a:b7:ea:13:76:b4:84:43:e8:a4:bb:66:df:93:
                    44:34:8f:b5:77:be:02:63:45:ca:b9:95:a7:9a:f4:
                    76:b5:b9:f3:8f:99:b4:1c:2f:c7:83:46:9f:2a:5a:
                    6f:e9:a2:0e:b8:a2:cc:91:95:77:41:f6:11:7f:ef:
                    23:2d:ba:01:5c:f7:ff:b0:b2:b2:30:68:61:20:75:
                    00:a9:25:9c:10:cb:26:14:c9:51:53:b1:f9:d7:9a:
                    26:76:6d:6e:97:e9:b4:a2:63:0e:12:54:3c:fa:d9:
                    28:f3:4d:9b:5c:a8:f7:fd:71:a0:b1:da:5a:3a:2c:
                    1a:1d:4d:fd:21:86:8c:8e:94:ab:5c:5b:f5:11:3d:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:93:9B:17:0E:56:16:F2:E7:DD:48:EC:0B:BD:3A:97:E0:41:4D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/4ad3c5e0-590a-381a-b8b3-8fa63d8f6217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl

            X509v3 Authority Key Identifier:
                keyid:B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:b2:f7:52:ed:30:f3:d9:bf:42:7d:28:46:36:ce:68:fa:
         b9:fa:7d:37:55:e1:53:84:9c:a2:dc:fd:f4:d0:b3:c3:58:dd:
         30:79:39:18:2b:72:9b:3d:72:23:c1:ee:f4:1f:56:3e:99:66:
         36:97:9b:d2:5e:07:8d:2a:41:2b:ae:71:af:ac:30:f7:e4:f5:
         5e:4e:1c:5c:78:5f:07:d4:26:0d:11:c1:83:c4:6f:8e:68:aa:
         b7:30:80:21:fd:0c:46:d5:14:9b:9e:84:81:1c:43:98:c6:8f:
         f6:0c:af:dd:a3:5c:99:02:d4:32:63:ec:26:12:b3:e4:0f:37:
         2c:93:30:e1:b1:98:9e:f1:3d:58:a2:d8:19:e9:49:27:89:25:
         49:71:49:91:10:dd:81:2c:36:fc:ef:9d:30:ed:cb:4e:f3:9f:
         96:db:b0:2e:98:ed:80:e1:bd:60:c8:8d:7e:49:30:24:f7:7b:
         c2:13:d9:4a:76:8d:ee:df:25:34:25:32:cf:d9:30:fb:50:80:
         17:4a:32:5d:84:6d:8b:5d:e5:7e:a6:52:c8:42:cf:4f:b2:5c:
         0a:f7:9c:8a:ae:0b:0c:ca:06:2b:6e:44:30:76:f8:77:95:a3:
         2c:2e:ed:36:1b:c5:fb:92:87:f3:10:2d:07:f4:24:37:df:93:
         bc:4e:c9:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJbWAHLLRTbNwogoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MxNGVmN2MtMTI4OS00N2VkLTgxNDQtYzdiM2ZlYWNm
NWFmMB4XDTI0MDMyMjAxMDAyNFoXDTI0MDYyMDAxMDAyNFowLzEtMCsGA1UEAxMk
MTk4ZmVhNGQtMWJiOS00ZjRjLTgxNjMtNjY4YjIzMjAwNmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUvZ0BoEN9t5nOsxBcUblL+/f68t8KXxi0ED
giv7WxI5TdUo0svJNoymRHi6N/tXYRVz2WGvDQaIWKTOpFWC+IQaeU+gfTbUwVza
MnXPYwYi02pwtA5I75DrK1kADxdGOAOaelfRLy0twFXSFZottOGPkwAA6UL8mrfq
E3a0hEPopLtm35NENI+1d74CY0XKuZWnmvR2tbnzj5m0HC/Hg0afKlpv6aIOuKLM
kZV3QfYRf+8jLboBXPf/sLKyMGhhIHUAqSWcEMsmFMlRU7H515omdm1ul+m0omMO
ElQ8+tko802bXKj3/XGgsdpaOiwaHU39IYaMjpSrXFv1ET1OIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKTmxcOVhby591I7Au9OpfgQU2EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YzE0
ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVhY2Y1YWYvNGFkM2M1ZTAtNTkwYS0z
ODFhLWI4YjMtOGZhNjNkOGY2MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2MxNGVmN2MtMTI4OS00N2VkLTgx
NDQtYzdiM2ZlYWNmNWFmLzdjMTRlZjdjLTEyODktNDdlZC04MTQ0LWM3YjNmZWFj
ZjVhZi5jcmwwHwYDVR0jBBgwFoAUsN8Y7XkJwz2LZ31Fr9aB9mU8KxwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2Iz
ZmVhY2Y1YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNvwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESMsvdS7TDz2b9CfShGNs5o+rn6fTdV4VOEnKLc/fTQs8NY3TB5ORgr
cps9ciPB7vQfVj6ZZjaXm9JeB40qQSuuca+sMPfk9V5OHFx4XwfUJg0RwYPEb45o
qrcwgCH9DEbVFJuehIEcQ5jGj/YMr92jXJkC1DJj7CYSs+QPNyyTMOGxmJ7xPVii
2BnpSSeJJUlxSZEQ3YEsNvzvnTDty07zn5bbsC6Y7YDhvWDIjX5JMCT3e8IT2Up2
je7fJTQlMs/ZMPtQgBdKMl2EbYtd5X6mUshCz0+yXAr3nIquCwzKBituRDB2+HeV
oywu7TYbxfuSh/MQLQf0JDffk7xOyRc=
-----END CERTIFICATE-----
Generated at Mon May 20 14:55:23 2024 by rpki-client on console-ams.rpki-client.org