Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/f881d9c8-1fe2-3fe0-8329-84d4754946d4.roa
File:                     f881d9c8-1fe2-3fe0-8329-84d4754946d4.roa (raw, json)
Hash identifier:          ETN1T4WIOyFql/7IWvZxz6ehy7T9qNMb4PrQPy7qqwc=
Subject key identifier:   A5:94:85:46:A5:1B:EB:80:09:41:28:49:4C:08:A2:9E:B4:01:C4:69
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285845E45E875BE99FE92272D90380
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/f881d9c8-1fe2-3fe0-8329-84d4754946d4.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     12083
IP address blocks:        216.186.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:87:5b:e9:9f:e9:22:72:d9:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=33a8777d-8ab9-4144-9bce-78fb4e8ce6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:9c:df:a8:09:0f:0e:60:01:4f:29:59:2e:
                    4c:c2:57:73:5e:5f:31:42:e5:32:a5:3c:a3:a6:eb:
                    80:12:94:ee:5f:9b:5b:e5:07:3b:4f:41:40:66:11:
                    55:71:4f:6e:6b:a4:2f:79:bb:79:66:7a:42:dd:9d:
                    43:9f:74:9e:15:78:1c:c2:1f:13:b4:d2:fb:b8:b5:
                    13:38:17:00:e7:e4:8e:5f:84:aa:6c:26:6b:fa:ce:
                    a6:63:c2:76:71:e2:9f:26:bb:d4:0a:be:4c:bb:9d:
                    e7:7d:8b:47:fc:d7:9c:cc:35:ac:5b:b2:4e:e3:06:
                    2c:cf:82:5c:5f:e3:ea:a1:42:1f:97:21:1c:fe:bf:
                    15:80:af:09:71:e4:fc:71:3b:80:62:b6:d9:0e:f5:
                    08:61:b3:64:65:c7:a5:58:cb:1d:41:ed:8f:da:dd:
                    33:f7:f6:99:b4:23:08:24:f6:3f:7c:3b:4e:1e:a0:
                    95:77:e7:65:6f:ed:aa:f5:b6:fa:85:aa:a2:4c:ff:
                    a2:e1:6e:35:db:bf:bf:96:3a:1c:8f:07:24:13:fd:
                    8f:40:72:af:62:8e:01:75:2f:df:23:79:ca:15:fb:
                    8c:26:04:21:aa:ef:3d:61:a3:71:56:70:dd:b0:0e:
                    81:f7:ea:1b:6c:f9:a5:ec:78:fb:59:aa:fa:17:6a:
                    ce:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:94:85:46:A5:1B:EB:80:09:41:28:49:4C:08:A2:9E:B4:01:C4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/f881d9c8-1fe2-3fe0-8329-84d4754946d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.186.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bd:6a:60:ba:46:e2:c5:9b:d2:b9:10:34:1c:23:c2:cd:20:
         ba:34:d9:d5:15:1b:94:0a:e3:7f:16:82:dd:2c:5f:f4:11:2a:
         03:b9:e3:33:23:0d:e5:fd:72:36:4a:d9:85:25:5e:bf:d7:05:
         e5:54:e4:4e:d4:36:03:81:a8:a6:3d:fd:86:c9:52:09:50:5a:
         f6:c4:c7:17:c0:c9:50:87:61:72:2d:c3:ff:21:96:72:ce:8e:
         a1:c6:f8:43:4e:4a:4c:3b:b5:1c:7d:a6:c1:72:a3:43:a0:7a:
         97:10:d9:01:04:ae:27:ad:77:f9:52:c9:d6:f4:20:f6:ce:ab:
         fa:e7:bd:3e:39:b0:f9:b6:25:dc:03:12:c4:21:92:95:75:45:
         5b:4d:c9:1f:c1:d1:86:90:e3:25:4c:4f:51:37:8d:a4:80:cd:
         d9:72:1f:2b:92:c6:b3:d4:44:fd:c8:e3:35:60:58:fd:30:87:
         39:3b:e0:bb:c8:52:cb:fe:5b:65:80:09:53:de:d4:35:95:f9:
         7f:af:0a:75:77:2e:2e:bd:c5:f6:f1:2d:f5:96:dd:81:4e:5f:
         aa:28:86:1f:bd:00:8b:03:8f:4f:67:d6:53:31:3a:6d:c7:3a:
         7a:e1:06:99:77:ad:0b:06:c7:02:a1:0c:07:10:a2:25:34:32:
         7d:11:78:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXkXodb6Z/pInLZA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI0MDUxNjEzMDAzNVoXDTI0MDgxNDEzMDAzNVowLzEtMCsGA1UEAxMk
MzNhODc3N2QtOGFiOS00MTQ0LTliY2UtNzhmYjRlOGNlNmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrCc36gJDw5gAU8pWS5MwldzXl8xQuUypTyj
puuAEpTuX5tb5Qc7T0FAZhFVcU9ua6Qvebt5ZnpC3Z1Dn3SeFXgcwh8TtNL7uLUT
OBcA5+SOX4SqbCZr+s6mY8J2ceKfJrvUCr5Mu53nfYtH/NeczDWsW7JO4wYsz4Jc
X+PqoUIflyEc/r8VgK8JceT8cTuAYrbZDvUIYbNkZcelWMsdQe2P2t0z9/aZtCMI
JPY/fDtOHqCVd+dlb+2q9bb6haqiTP+i4W4127+/ljocjwckE/2PQHKvYo4BdS/f
I3nKFfuMJgQhqu89YaNxVnDdsA6B9+obbPml7Hj7War6F2rOxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWUhUalG+uACUEoSUwIop60AcRpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZjg4MWQ5YzgtMWZlMi0z
ZmUwLTgzMjktODRkNDc1NDk0NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LqkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC29amC6RuLFm9K5EDQcI8LNILo02dUVG5QK438Wgt0sX/QRKgO54zMj
DeX9cjZK2YUlXr/XBeVU5E7UNgOBqKY9/YbJUglQWvbExxfAyVCHYXItw/8hlnLO
jqHG+ENOSkw7tRx9psFyo0OgepcQ2QEErietd/lSydb0IPbOq/rnvT45sPm2JdwD
EsQhkpV1RVtNyR/B0YaQ4yVMT1E3jaSAzdlyHyuSxrPURP3I4zVgWP0whzk74LvI
Usv+W2WACVPe1DWV+X+vCnV3Li69xfbxLfWW3YFOX6oohh+9AIsDj09n1lMxOm3H
OnrhBpl3rQsGxwKhDAcQoiU0Mn0ReGU=
-----END CERTIFICATE-----
Generated at Sat May 18 16:10:26 2024 by rpki-client on console-ams.rpki-client.org