Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67299ecf-a488-3b54-9f64-9f5aca98384c.roa
File:                     67299ecf-a488-3b54-9f64-9f5aca98384c.roa (raw, json)
Hash identifier:          Nan011dXdBCMBqvi9mnQ4M5y2EmgmDBmMrpf6Xd2J74=
Subject key identifier:   9D:10:0B:D3:E1:ED:2C:1E:18:A5:03:B9:35:17:C0:78:04:72:AB:71
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D80350995CD7CBAC7A900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67299ecf-a488-3b54-9f64-9f5aca98384c.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     397630
IP address blocks:        147.53.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:80:35:09:95:cd:7c:ba:c7:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=1dbed827-93a2-4f0b-bfce-b35ddd81c5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:bb:90:f4:52:44:c4:db:04:b0:4b:56:d6:
                    30:08:1f:0e:a7:79:5d:85:6c:95:0a:3a:5c:cd:1e:
                    36:89:71:b0:6e:50:33:32:bc:56:30:15:1e:f4:cb:
                    d3:a6:67:22:08:65:37:7f:07:b0:92:52:b4:bf:23:
                    73:a0:a9:88:c7:84:dd:73:06:63:49:1b:5c:2e:b1:
                    8d:8a:40:d8:55:4a:bc:85:d3:26:6d:95:16:e3:77:
                    5d:ef:01:3f:1c:00:63:ad:36:f0:c8:f5:2a:77:44:
                    9f:4f:06:c0:7d:9d:c6:3f:e7:15:f3:98:c0:7a:f6:
                    6c:59:12:cd:73:bd:d5:f7:69:e6:fc:6d:a0:ef:9a:
                    bb:2a:a7:c2:7e:57:3a:90:65:ea:2a:04:29:a6:a8:
                    8c:8f:e3:11:6e:dd:33:c9:8f:cc:61:0b:e1:70:c8:
                    d6:e9:78:02:1a:d3:dd:df:6a:40:27:97:a0:5a:c9:
                    ac:37:59:eb:23:5e:8e:14:7d:0f:a3:86:1b:26:4e:
                    1c:08:b8:eb:2d:d5:40:1b:62:cc:b5:fa:93:8e:41:
                    a2:8d:92:d2:fe:30:e0:71:d6:7c:fe:a2:d1:87:56:
                    41:01:25:6e:4e:c8:72:68:10:15:db:31:5f:d3:10:
                    76:0c:cd:1f:68:06:18:51:df:3a:0c:d2:36:f2:50:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:0B:D3:E1:ED:2C:1E:18:A5:03:B9:35:17:C0:78:04:72:AB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67299ecf-a488-3b54-9f64-9f5aca98384c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:26:bc:24:3e:96:07:48:50:08:de:9d:22:e4:11:2c:82:f1:
         09:ef:b8:58:e7:97:ca:b8:3f:ff:0c:d7:44:46:35:3d:fd:1c:
         78:60:3c:95:d0:5f:97:90:27:0a:52:62:98:c4:88:d8:3d:d7:
         6b:22:f5:e7:5c:83:c2:30:6d:19:1c:e6:37:1f:3a:37:3a:6f:
         c6:ce:2a:da:34:1f:77:49:35:b5:7f:1c:a3:08:fb:d8:dd:0e:
         5d:d7:e6:26:21:fe:55:3d:5c:e2:7e:69:53:5c:41:38:9c:3d:
         36:3e:fb:c5:c8:a3:b5:39:f3:a9:7e:e7:5e:eb:a0:87:6d:81:
         31:a2:0c:d9:c8:ab:42:e0:66:6b:e5:92:22:08:da:fd:ec:60:
         09:8a:85:4f:41:59:3f:9f:ea:15:a9:0b:82:40:ef:33:23:1e:
         0e:1f:f9:38:9c:d1:f2:c4:aa:9e:e3:52:cd:2c:e3:27:2f:7d:
         7c:85:cf:85:2a:94:10:e3:e3:8b:d6:79:ce:b7:bc:09:0d:29:
         bb:aa:6f:92:10:ad:cb:71:dc:eb:04:a2:b9:2e:6d:22:df:6f:
         9b:91:09:7e:ea:98:f4:b5:eb:2a:ef:56:6b:ab:dc:72:3a:77:
         f8:51:15:54:db:07:82:e5:dc:37:9f:64:42:ad:46:c8:2f:b4:
         62:80:15:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVNnYA1CZXNfLrHqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
MWRiZWQ4MjctOTNhMi00ZjBiLWJmY2UtYjM1ZGRkODFjNWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE67kPRSRMTbBLBLVtYwCB8Op3ldhWyVCjpc
zR42iXGwblAzMrxWMBUe9MvTpmciCGU3fwewklK0vyNzoKmIx4TdcwZjSRtcLrGN
ikDYVUq8hdMmbZUW43dd7wE/HABjrTbwyPUqd0SfTwbAfZ3GP+cV85jAevZsWRLN
c73V92nm/G2g75q7KqfCflc6kGXqKgQppqiMj+MRbt0zyY/MYQvhcMjW6XgCGtPd
32pAJ5egWsmsN1nrI16OFH0Po4YbJk4cCLjrLdVAG2LMtfqTjkGijZLS/jDgcdZ8
/qLRh1ZBASVuTshyaBAV2zFf0xB2DM0faAYYUd86DNI28lDSzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0QC9Ph7SweGKUDuTUXwHgEcqtxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjcyOTllY2YtYTQ4OC0z
YjU0LTlmNjQtOWY1YWNhOTgzODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYmvCQ+lgdIUAjenSLkESyC8QnvuFjnl8q4P/8M10RGNT39HHhgPJXQ
X5eQJwpSYpjEiNg912si9edcg8IwbRkc5jcfOjc6b8bOKto0H3dJNbV/HKMI+9jd
Dl3X5iYh/lU9XOJ+aVNcQTicPTY++8XIo7U586l+517roIdtgTGiDNnIq0LgZmvl
kiII2v3sYAmKhU9BWT+f6hWpC4JA7zMjHg4f+Tic0fLEqp7jUs0s4ycvfXyFz4Uq
lBDj44vWec63vAkNKbuqb5IQrctx3OsEorkubSLfb5uRCX7qmPS16yrvVmur3HI6
d/hRFVTbB4Ll3DefZEKtRsgvtGKAFQM=
-----END CERTIFICATE-----
Generated at Sun Apr 28 16:13:20 2024 by rpki-client on console-fra.rpki-client.org