Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
File:                     fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa (raw, json)
Hash identifier:          urZIZ/bWWpN0kiemulNaAMlltZfD4p3JFmux8/ne/fI=
Subject key identifier:   78:32:0F:A0:51:8C:C0:E9:40:8F:78:77:D9:33:74:FF:BE:8D:76:6E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285844EECFF60BF90E004F258F4700
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     21859
IP address blocks:        128.1.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:f6:0b:f9:0e:00:4f:25:8f:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=1204276f-0602-4ce9-87ae-deb216ed1943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:60:6c:ab:27:e2:41:37:90:b0:ea:83:fe:
                    7a:38:a0:38:bd:00:35:d4:8c:40:1d:cf:06:be:0d:
                    3c:37:10:22:aa:f9:04:4f:f3:6e:83:54:e5:05:32:
                    78:ef:29:3e:33:aa:0e:39:f9:67:32:d7:38:c2:2f:
                    ee:88:e6:b3:92:6f:a4:f1:c2:6e:cf:11:8e:50:b0:
                    22:d6:71:01:ba:0d:e7:39:03:45:d6:fe:7f:c1:0f:
                    38:ed:d8:b0:b8:b7:06:4d:ff:dc:d3:59:34:ec:7a:
                    76:29:38:ae:60:e0:02:38:cf:19:0c:e3:12:51:1c:
                    b0:aa:2e:bf:86:b5:ad:bd:bf:ee:4b:15:66:f6:23:
                    50:4c:62:20:4d:14:02:27:a3:7a:ed:53:4c:27:c0:
                    03:2e:d2:f4:0e:2b:e6:e5:d4:f9:85:ca:ad:fb:b0:
                    2b:08:d4:8a:eb:ff:39:73:ad:07:44:66:9e:7d:c8:
                    e7:9a:b8:c7:a4:25:23:c0:c6:a0:d7:4f:60:73:8c:
                    96:a4:e6:ce:ff:ba:2a:51:5e:ce:1e:24:8f:00:b4:
                    14:0d:3a:d6:33:d7:61:35:95:85:eb:57:f1:a4:d0:
                    eb:71:06:44:0c:04:b7:4a:97:de:be:ae:ab:49:93:
                    83:f9:5a:a7:a4:c0:b7:4b:74:4f:e9:c3:2a:05:54:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:32:0F:A0:51:8C:C0:E9:40:8F:78:77:D9:33:74:FF:BE:8D:76:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:04:00:85:15:fa:dd:ce:f3:83:6d:0b:03:df:3a:72:b4:a8:
         7b:34:29:75:4a:8a:f7:8b:bf:38:8a:53:79:a4:d3:5e:79:67:
         b9:51:8a:98:55:8b:fe:b2:f5:ab:55:7c:9a:16:8b:be:f2:1b:
         00:d7:c5:ca:1f:48:9e:9f:66:f9:d1:30:b9:4d:16:25:30:68:
         1f:fc:ae:0e:3e:fa:da:95:a8:22:29:2d:04:89:2c:93:6e:a8:
         05:f6:e9:d1:5a:00:c3:6b:af:0c:8d:21:2e:4e:18:10:a7:09:
         28:19:6e:77:e1:7e:de:f8:11:25:bf:aa:70:66:05:58:27:54:
         c6:f4:12:3c:05:78:f7:4a:8a:c4:da:e3:38:6c:57:8b:43:6a:
         8d:53:78:d5:25:1c:57:d1:62:19:a6:f0:17:d8:38:12:8e:52:
         12:06:04:3f:bd:a4:5a:44:46:73:51:b1:a6:bc:85:37:38:04:
         d5:bb:2c:ab:fc:d4:54:37:94:a0:fe:b1:9a:3f:d1:2f:ab:03:
         c3:34:cb:bc:f9:61:86:00:5c:b3:ea:cb:14:e6:31:f3:03:2a:
         d1:c4:15:db:fc:1e:da:db:3e:76:14:f1:3d:f5:33:4c:60:63:
         e5:00:28:27:b3:e9:6e:67:7f:25:d4:6d:28:fb:2e:65:d0:32:
         67:71:8a:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETuz/YL+Q4ATyWPRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk
MTIwNDI3NmYtMDYwMi00Y2U5LTg3YWUtZGViMjE2ZWQxOTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj1gbKsn4kE3kLDqg/56OKA4vQA11IxAHc8G
vg08NxAiqvkET/Nug1TlBTJ47yk+M6oOOflnMtc4wi/uiOazkm+k8cJuzxGOULAi
1nEBug3nOQNF1v5/wQ847diwuLcGTf/c01k07Hp2KTiuYOACOM8ZDOMSURywqi6/
hrWtvb/uSxVm9iNQTGIgTRQCJ6N67VNMJ8ADLtL0Divm5dT5hcqt+7ArCNSK6/85
c60HRGaefcjnmrjHpCUjwMag109gc4yWpObO/7oqUV7OHiSPALQUDTrWM9dhNZWF
61fxpNDrcQZEDAS3Spfevq6rSZOD+VqnpMC3S3RP6cMqBVSioQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgyD6BRjMDpQI94d9kzdP++jXZuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZmI0Zjc3MjgtMmY1ZC0z
Zjk1LTkzYWMtZWI3Yjk1ZmNkNmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkEAIUV+t3O84NtCwPfOnK0qHs0KXVKiveLvziKU3mk0155Z7lRiphV
i/6y9atVfJoWi77yGwDXxcofSJ6fZvnRMLlNFiUwaB/8rg4++tqVqCIpLQSJLJNu
qAX26dFaAMNrrwyNIS5OGBCnCSgZbnfhft74ESW/qnBmBVgnVMb0EjwFePdKisTa
4zhsV4tDao1TeNUlHFfRYhmm8BfYOBKOUhIGBD+9pFpERnNRsaa8hTc4BNW7LKv8
1FQ3lKD+sZo/0S+rA8M0y7z5YYYAXLPqyxTmMfMDKtHEFdv8HtrbPnYU8T31M0xg
Y+UAKCez6W5nfyXUbSj7LmXQMmdxivI=
-----END CERTIFICATE-----
Generated at Tue Apr 16 16:32:55 2024 by rpki-client on console-fra.rpki-client.org