Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/0f3f67fb-23be-338f-8572-dab1184548e2.roa
File:                     0f3f67fb-23be-338f-8572-dab1184548e2.roa (raw, json)
Hash identifier:          fKlxMXJKbZlSoFC8zY4kB0DerqQZp66YSJ/Bb+/UGac=
Subject key identifier:   EF:3A:DF:60:6D:81:A9:BE:5B:D6:BB:FB:53:5E:E1:31:C3:8B:A2:3B
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F432858454D9D7C405EAB8B3CCEA671C0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/0f3f67fb-23be-338f-8572-dab1184548e2.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     14537
IP address blocks:        198.37.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7c:40:5e:ab:8b:3c:ce:a6:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=7348a4a8-5a6a-4c21-939c-241ea6cb5184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:87:80:df:8a:7b:b2:d0:0e:5e:62:89:69:
                    49:21:7e:3a:6d:1a:91:fe:3e:f9:57:41:ef:03:02:
                    2d:7e:fa:df:a0:60:77:e7:8f:ed:06:5c:fe:dc:68:
                    ff:a3:8e:33:2f:52:6a:79:a8:45:f9:e3:84:df:1f:
                    c2:92:28:79:9b:f8:d2:6d:41:8d:41:56:e2:0d:bc:
                    46:1a:e9:6b:26:b7:76:e0:dd:82:a1:e1:05:9e:ad:
                    65:b8:70:90:de:f5:f4:4e:67:6b:ec:02:2a:0a:69:
                    ec:e9:8e:94:05:5d:e0:71:e1:f0:9a:f1:c6:be:df:
                    fa:06:9f:4e:bb:54:48:97:90:4d:b2:f4:a8:87:f1:
                    7c:47:c0:67:78:17:aa:dd:21:5b:29:24:85:f5:a8:
                    21:b0:a7:3f:42:b6:86:ae:f9:9f:3e:79:04:24:b5:
                    e2:76:1c:e8:76:49:ba:01:70:ab:6b:71:24:ba:26:
                    80:63:17:5c:44:e0:b1:82:e1:04:f8:6c:c2:4a:eb:
                    52:db:9a:a1:2b:12:ab:ac:cd:0e:2c:e2:47:c0:75:
                    c6:1e:89:a7:f9:b4:13:b1:e4:ff:0b:a1:22:4f:28:
                    14:88:ad:40:a2:1b:10:fa:24:60:2f:9c:34:aa:18:
                    76:57:d5:b8:13:e0:65:c8:68:4e:f7:fc:28:7b:b7:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3A:DF:60:6D:81:A9:BE:5B:D6:BB:FB:53:5E:E1:31:C3:8B:A2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/0f3f67fb-23be-338f-8572-dab1184548e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:59:cd:b1:31:b4:a5:51:7d:d8:31:68:2c:6a:19:0a:37:27:
         85:a6:82:5e:63:c6:4f:07:24:bf:d3:5e:36:03:b7:30:1a:63:
         a8:7d:d1:80:dd:63:ae:e3:b1:3f:61:9d:d1:10:0e:a7:13:f7:
         1b:57:af:6f:ce:09:04:eb:eb:70:a0:72:04:34:7f:7e:80:af:
         db:66:6e:25:d0:f0:af:8b:b3:56:15:6e:08:47:79:f6:26:29:
         1d:5b:fb:ff:3b:5f:f9:01:40:a6:39:e8:7d:a6:40:e6:bc:d3:
         0d:dd:2e:5d:57:41:8d:b6:fa:96:57:a4:21:a7:be:83:7d:2e:
         ae:e1:05:c2:f8:68:52:7b:43:6f:36:fd:ca:53:28:b2:f8:0b:
         fd:bb:c8:84:15:45:bf:f6:33:95:5b:1d:3c:a0:1a:fc:f9:59:
         fa:11:67:11:23:dc:44:64:c2:f0:ee:6a:79:da:fc:4c:af:e9:
         48:a4:e4:db:b2:d1:8b:09:d0:be:ae:82:b0:d5:04:fb:36:7f:
         39:a0:59:c0:c4:e8:8b:95:b7:06:dd:7b:ba:1e:ee:4c:28:47:
         38:bb:d4:e8:ed:b0:f5:76:26:08:5e:fc:64:29:82:be:65:bd:
         8c:9b:1d:30:4c:b6:0c:98:43:37:eb:58:46:ca:92:cf:25:94:
         aa:bc:6c:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVNnXxAXquLPM6mccAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
NzM0OGE0YTgtNWE2YS00YzIxLTkzOWMtMjQxZWE2Y2I1MTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllaHgN+Ke7LQDl5iiWlJIX46bRqR/j75V0Hv
AwItfvrfoGB354/tBlz+3Gj/o44zL1JqeahF+eOE3x/Ckih5m/jSbUGNQVbiDbxG
GulrJrd24N2CoeEFnq1luHCQ3vX0Tmdr7AIqCmns6Y6UBV3gceHwmvHGvt/6Bp9O
u1RIl5BNsvSoh/F8R8BneBeq3SFbKSSF9aghsKc/QraGrvmfPnkEJLXidhzodkm6
AXCra3EkuiaAYxdcROCxguEE+GzCSutS25qhKxKrrM0OLOJHwHXGHomn+bQTseT/
C6EiTygUiK1AohsQ+iRgL5w0qhh2V9W4E+BlyGhO9/woe7eLtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8632Btgam+W9a7+1Ne4THDi6I7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvMGYzZjY3ZmItMjNiZS0z
MzhmLTg1NzItZGFiMTE4NDU0OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhZzbExtKVRfdgxaCxqGQo3J4Wmgl5jxk8HJL/TXjYDtzAaY6h90YDd
Y67jsT9hndEQDqcT9xtXr2/OCQTr63CgcgQ0f36Ar9tmbiXQ8K+Ls1YVbghHefYm
KR1b+/87X/kBQKY56H2mQOa80w3dLl1XQY22+pZXpCGnvoN9Lq7hBcL4aFJ7Q282
/cpTKLL4C/27yIQVRb/2M5VbHTygGvz5WfoRZxEj3ERkwvDuanna/Eyv6Uik5Nuy
0YsJ0L6ugrDVBPs2fzmgWcDE6IuVtwbde7oe7kwoRzi71OjtsPV2Jghe/GQpgr5l
vYybHTBMtgyYQzfrWEbKks8llKq8bM4=
-----END CERTIFICATE-----
Generated at Sat May 25 15:56:37 2024 by rpki-client on console-ams.rpki-client.org