Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa
File:                     958b8918-f172-31ae-a424-106ec0eef078.roa (raw, json)
Hash identifier:          qr4a/E30eUvOZlK2pWVMlk85cYPBsLrzdk6XrftVewA=
Subject key identifier:   D9:2F:B6:94:7B:7B:CB:C2:C2:A4:A2:C5:CE:DE:A7:04:49:D6:F7:16
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F432858455FC2DB75AF9DB384B1463C00
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     56274
IP address blocks:        198.208.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:db:75:af:9d:b3:84:b1:46:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=81136079-bafc-496f-acd9-5415b7876e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3e:21:4b:10:67:ae:fc:b1:73:19:38:3a:48:
                    14:42:12:15:e9:fe:ea:b5:f1:c8:2f:4e:58:e6:7e:
                    a6:58:86:85:50:9b:4b:f5:88:9f:58:38:e5:25:b5:
                    4e:ed:70:cc:a6:93:f9:3f:17:07:20:a9:dd:ec:8c:
                    1f:dd:e9:c4:bf:18:ef:b8:20:50:8f:8f:22:55:8c:
                    76:14:11:d3:e6:8d:db:a4:77:02:6a:d9:ed:00:49:
                    87:11:62:8c:78:c9:3c:64:1d:cd:c5:ba:e8:c3:04:
                    45:5f:26:9a:26:d4:91:9c:23:f2:a6:fb:16:4a:18:
                    0f:75:c4:96:d1:31:d4:db:d6:7e:c8:b4:27:f2:f0:
                    6d:43:f9:9d:e8:12:2c:86:53:54:9e:12:11:78:83:
                    a7:48:20:3b:aa:77:80:79:f2:5c:b9:7c:2f:0f:92:
                    fd:ea:fd:e6:4e:ca:43:9d:7e:85:91:93:a3:07:bf:
                    c9:9f:3a:48:43:33:04:a3:98:fa:53:e9:ec:e0:f6:
                    e6:76:30:90:21:99:ee:c6:fe:7f:a5:ba:1e:2b:db:
                    63:39:dc:68:91:77:94:ca:68:ca:70:d8:38:52:08:
                    15:fe:f8:ab:7a:d5:d6:b7:13:d7:dd:cb:18:a4:f9:
                    bb:77:c0:6e:24:d3:19:94:82:64:31:d9:c0:81:30:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2F:B6:94:7B:7B:CB:C2:C2:A4:A2:C5:CE:DE:A7:04:49:D6:F7:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ee:58:86:00:64:7c:d9:26:66:21:29:12:fb:9c:c1:bd:77:
         14:ea:18:b9:d3:c4:21:ed:90:d9:ca:78:7b:97:e3:ac:e1:37:
         48:98:2c:9e:f8:1f:b8:12:6c:5a:fb:de:63:b7:e0:c6:4e:39:
         f1:64:2d:66:01:84:28:b2:89:c4:88:89:29:ac:68:ac:c3:ba:
         21:55:fb:7d:e1:65:f5:fd:58:2b:59:c5:c0:b9:d5:53:5c:1c:
         cb:9d:03:05:20:7b:2a:6b:45:7f:38:79:33:83:ea:c1:98:48:
         d3:93:67:74:d9:2a:d1:65:ea:80:7a:25:cd:bd:82:91:47:74:
         59:8e:7f:5c:37:9b:a2:50:34:6e:0c:5a:1b:9e:a9:58:da:73:
         29:e9:39:74:58:3a:62:a8:ff:c8:25:90:40:de:46:bd:32:63:
         84:2a:e5:a6:44:0c:a7:fd:3b:75:e7:f6:8c:9f:33:de:ca:01:
         bd:03:dd:28:44:fd:ad:3f:01:7d:f9:ee:72:16:76:27:5e:39:
         ba:9b:8b:6f:a6:5c:ec:2b:da:d3:76:d5:61:c4:d8:d6:36:e1:
         02:dc:13:fa:0c:87:46:93:34:db:9d:8e:ab:31:ca:e1:c4:d6:
         14:55:13:80:dc:40:4b:c9:d0:c1:bc:e5:00:b7:14:e7:92:5f:
         0a:3a:2e:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfwtt1r52zhLFGPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl
M2U0MB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
ODExMzYwNzktYmFmYy00OTZmLWFjZDktNTQxNWI3ODc2ZTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj4hSxBnrvyxcxk4OkgUQhIV6f7qtfHIL05Y
5n6mWIaFUJtL9YifWDjlJbVO7XDMppP5PxcHIKnd7Iwf3enEvxjvuCBQj48iVYx2
FBHT5o3bpHcCatntAEmHEWKMeMk8ZB3NxbrowwRFXyaaJtSRnCPypvsWShgPdcSW
0THU29Z+yLQn8vBtQ/md6BIshlNUnhIReIOnSCA7qneAefJcuXwvD5L96v3mTspD
nX6FkZOjB7/JnzpIQzMEo5j6U+ns4PbmdjCQIZnuxv5/pboeK9tjOdxokXeUymjK
cNg4UggV/viretXWtxPX3csYpPm7d8BuJNMZlIJkMdnAgTAPKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkvtpR7e8vCwqSixc7epwRJ1vcWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2
N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvOTU4Yjg5MTgtZjE3Mi0z
MWFlLWE0MjQtMTA2ZWMwZWVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm
YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0
ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj
NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADuWIYAZHzZJmYhKRL7nMG9dxTqGLnTxCHtkNnKeHuX46zhN0iYLJ74
H7gSbFr73mO34MZOOfFkLWYBhCiyicSIiSmsaKzDuiFV+33hZfX9WCtZxcC51VNc
HMudAwUgeyprRX84eTOD6sGYSNOTZ3TZKtFl6oB6Jc29gpFHdFmOf1w3m6JQNG4M
WhueqVjacynpOXRYOmKo/8glkEDeRr0yY4Qq5aZEDKf9O3Xn9oyfM97KAb0D3ShE
/a0/AX357nIWdideObqbi2+mXOwr2tN21WHE2NY24QLcE/oMh0aTNNudjqsxyuHE
1hRVE4DcQEvJ0MG85QC3FOeSXwo6LqQ=
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:59:47 2024 by rpki-client on console-fra.rpki-client.org