Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/385e0992-071e-3197-bdb6-fe17ccfb9f51.roa
File:                     385e0992-071e-3197-bdb6-fe17ccfb9f51.roa (raw, json)
Hash identifier:          yfBG3hpIlMQgOGvCO6+B5Ace3H6E1g2JwZti8B8zeWA=
Subject key identifier:   F1:18:8D:FB:DA:24:B6:9F:49:5B:5D:D4:18:42:BC:15:AD:84:36:14
Certificate issuer:       /CN=b567f52f-9461-4275-9469-41dce04ed9a1
Certificate serial:       010D0C9F432858455A2D7F74CE329D00E76A4400
Authority key identifier: FA:8D:C1:82:C3:0E:E4:EC:71:67:46:76:AE:7E:6C:59:72:20:17:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/385e0992-071e-3197-bdb6-fe17ccfb9f51.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     397361
IP address blocks:        216.247.192.0/19 maxlen: 24
                          2607:5c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/b567f52f-9461-4275-9469-41dce04ed9a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/b567f52f-9461-4275-9469-41dce04ed9a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:7f:74:ce:32:9d:00:e7:6a:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b567f52f-9461-4275-9469-41dce04ed9a1
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=07843ffd-3783-4278-94b0-5f08e3dfa2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:f8:7c:ec:a9:a4:f0:a7:b4:13:27:c3:f0:
                    ce:16:9f:cf:34:f3:94:db:d0:aa:d0:6e:d9:03:5b:
                    3d:25:74:18:7a:00:6b:ba:b3:52:86:87:c1:f3:14:
                    a9:08:5f:d6:6c:62:05:cc:e1:78:b4:53:b8:69:45:
                    9b:45:22:b3:5a:80:8f:ff:5e:77:89:2d:b5:21:db:
                    6a:82:b5:6e:2b:31:96:c3:d9:12:97:02:4c:26:68:
                    40:17:ec:b3:e2:4c:0f:e8:27:c5:19:b9:b4:bf:5c:
                    1e:2b:c3:fa:0a:3e:a5:f2:b7:58:b6:8c:33:8d:bb:
                    17:52:2f:be:c2:50:fb:c8:60:cf:fe:94:bc:e3:08:
                    18:43:35:d7:e0:3c:d6:5c:9c:97:80:81:13:53:5b:
                    f6:c6:77:ff:4f:52:62:00:03:af:0d:c7:98:d0:89:
                    f9:9f:c3:04:70:c9:c1:92:a2:ec:03:91:c7:72:68:
                    63:1a:8e:bd:17:5d:5a:2d:37:7d:0d:59:1c:ef:a4:
                    b6:5f:db:28:95:90:b2:7f:f0:67:79:cc:be:7c:b7:
                    9e:71:13:08:e2:91:9d:c5:c0:e0:85:9f:07:55:f3:
                    2e:59:73:11:78:d1:91:88:29:51:5f:5e:75:89:4f:
                    5e:ea:fa:04:a3:37:69:ba:d0:a9:a5:88:cf:bf:c3:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:18:8D:FB:DA:24:B6:9F:49:5B:5D:D4:18:42:BC:15:AD:84:36:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/385e0992-071e-3197-bdb6-fe17ccfb9f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1/b567f52f-9461-4275-9469-41dce04ed9a1.crl

            X509v3 Authority Key Identifier:
                keyid:FA:8D:C1:82:C3:0E:E4:EC:71:67:46:76:AE:7E:6C:59:72:20:17:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b567f52f-9461-4275-9469-41dce04ed9a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.192.0/19
                IPv6:
                  2607:5c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4f:49:2f:8a:1a:ae:04:3c:67:7f:2f:77:09:a7:19:99:4a:
         d8:ff:19:ab:ca:4f:d3:e9:88:77:8c:a8:b3:d5:a4:86:f4:22:
         c0:78:14:73:20:d3:4b:80:2a:d0:54:ee:74:7c:85:e8:3a:86:
         ab:4a:b5:55:0b:40:26:1c:26:4e:08:e8:dc:fa:55:b2:9f:14:
         56:a7:2f:d1:a6:80:d5:f9:e4:f6:c8:1c:7b:e1:65:6c:ba:cb:
         2e:bf:8a:e9:70:2a:ce:f6:55:33:06:43:d2:8b:fc:ac:e2:73:
         31:fb:0d:9b:d5:a0:f6:d7:20:e9:b5:fe:cc:ab:48:2c:1a:0b:
         6d:46:48:f3:22:39:cf:0a:85:11:89:f0:3c:55:59:16:24:40:
         73:ae:2b:e7:2e:a4:b3:8e:93:69:c4:11:8c:13:96:a6:a7:b4:
         7f:68:ae:0f:61:96:f6:50:55:c4:c4:1c:0d:11:f4:6b:82:af:
         d7:1b:ac:07:ab:72:5c:32:49:78:c0:6d:51:7d:a2:2f:eb:88:
         da:49:2c:d3:43:60:f0:b6:db:df:50:6b:bb:1d:23:1a:bb:04:
         09:4b:20:d5:11:20:31:0a:ec:c0:7a:6b:89:ab:09:e1:f1:80:
         00:ef:51:1d:fe:d3:33:8d:af:bf:d1:2c:cf:72:e5:fc:69:2b:
         87:aa:64:f5
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEVaLX90zjKdAOdqRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2N2Y1MmYtOTQ2MS00Mjc1LTk0NjktNDFkY2UwNGVk
OWExMB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk
MDc4NDNmZmQtMzc4My00Mjc4LTk0YjAtNWYwOGUzZGZhMmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudn4fOyppPCntBMnw/DOFp/PNPOU29Cq0G7Z
A1s9JXQYegBrurNShofB8xSpCF/WbGIFzOF4tFO4aUWbRSKzWoCP/153iS21Idtq
grVuKzGWw9kSlwJMJmhAF+yz4kwP6CfFGbm0v1weK8P6Cj6l8rdYtowzjbsXUi++
wlD7yGDP/pS84wgYQzXX4DzWXJyXgIETU1v2xnf/T1JiAAOvDceY0In5n8MEcMnB
kqLsA5HHcmhjGo69F11aLTd9DVkc76S2X9solZCyf/Bnecy+fLeecRMI4pGdxcDg
hZ8HVfMuWXMReNGRiClRX151iU9e6voEozdputCppYjPv8MWaQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFPEYjfvaJLafSVtd1BhCvBWthDYUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNTY3
ZjUyZi05NDYxLTQyNzUtOTQ2OS00MWRjZTA0ZWQ5YTEvMzg1ZTA5OTItMDcxZS0z
MTk3LWJkYjYtZmUxN2NjZmI5ZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjU2N2Y1MmYtOTQ2MS00Mjc1LTk0
NjktNDFkY2UwNGVkOWExL2I1NjdmNTJmLTk0NjEtNDI3NS05NDY5LTQxZGNlMDRl
ZDlhMS5jcmwwHwYDVR0jBBgwFoAU+o3BgsMO5OxxZ0Z2rn5sWXIgF30wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNTY3ZjUyZi05NDYxLTQyNzUtOTQ2OS00MWRj
ZTA0ZWQ5YTEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF2PfAMA0E
AgACMAcDBQAmBwXAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBADRPSS+KGq4EPGd/L3cJpxmZStj/GavKT9Pp
iHeMqLPVpIb0IsB4FHMg00uAKtBU7nR8heg6hqtKtVULQCYcJk4I6Nz6VbKfFFan
L9GmgNX55PbIHHvhZWy6yy6/iulwKs72VTMGQ9KL/KziczH7DZvVoPbXIOm1/syr
SCwaC21GSPMiOc8KhRGJ8DxVWRYkQHOuK+cupLOOk2nEEYwTlqantH9org9hlvZQ
VcTEHA0R9GuCr9cbrAerclwySXjAbVF9oi/riNpJLNNDYPC2299Qa7sdIxq7BAlL
INURIDEK7MB6a4mrCeHxgADvUR3+0zONr7/RLM9y5fxpK4eqZPU=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:45 2024 by rpki-client on console-fra.rpki-client.org