Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f528570-a95c-342b-b3a2-395e5fe46026.roa
File:                     8f528570-a95c-342b-b3a2-395e5fe46026.roa (raw, json)
Hash identifier:          sYAQhK3PsypZKePMS8CSwP580olsb0/3qIzoyh6nsz0=
Subject key identifier:   33:03:1A:B2:C3:73:D0:AA:E4:7B:78:B1:C5:48:75:C0:9A:13:A9:9F
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D7FE551F5A8B870E47940
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f528570-a95c-342b-b3a2-395e5fe46026.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     397630
IP address blocks:        147.53.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:7f:e5:51:f5:a8:b8:70:e4:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=9de15372-bad7-4326-a3a1-7b11716e1e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0d:41:3e:20:62:19:60:c9:1d:4e:77:fd:42:
                    47:b6:26:90:44:c4:d8:6d:7e:6e:41:b6:68:d2:f7:
                    9c:02:49:73:ba:3d:58:97:9a:56:1b:bd:2d:4f:ed:
                    62:3b:dd:9d:36:4b:71:bb:36:98:cb:6e:e7:8c:77:
                    f4:fd:b3:a8:b6:48:2f:d1:65:ad:ac:e3:b0:f2:fc:
                    22:51:39:a4:ca:e0:59:ef:ad:55:7b:0f:34:d7:4a:
                    aa:7c:2c:60:8d:eb:98:4f:da:a1:bb:26:e0:94:5b:
                    c8:84:66:ba:bb:1b:ac:55:fe:5f:de:f9:92:e1:84:
                    19:43:8b:31:89:91:c7:16:f2:df:2e:db:b0:20:70:
                    b2:79:63:33:f7:3f:81:43:a1:53:a0:4d:f4:ea:25:
                    13:36:6f:16:96:10:c6:aa:39:09:c1:00:db:fe:4e:
                    09:15:a8:f0:c5:12:c1:e5:61:b2:35:2b:28:e2:ed:
                    77:4f:da:c2:2f:cd:a6:0c:6d:ed:b8:bc:06:a1:06:
                    54:af:7e:73:46:0b:b9:5a:68:59:a4:ae:90:f0:c1:
                    de:fc:f2:3b:88:36:be:23:5c:30:b1:bc:51:b3:57:
                    74:ed:8d:af:b2:8a:c0:4b:3b:6c:08:6e:82:c8:b3:
                    8e:49:09:45:c1:78:90:34:1f:ab:92:a0:97:44:48:
                    8c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:03:1A:B2:C3:73:D0:AA:E4:7B:78:B1:C5:48:75:C0:9A:13:A9:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f528570-a95c-342b-b3a2-395e5fe46026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a7:19:47:46:c9:b8:5c:7d:56:f2:8e:7c:29:1e:75:4f:b3:
         a7:ea:7e:db:6f:0e:21:c9:74:d6:95:4f:7c:2b:fb:d1:ed:b1:
         a8:09:b5:11:47:45:78:ea:67:e6:49:5d:30:20:f3:fe:c3:9f:
         8c:10:7d:9e:de:0d:30:a1:af:ae:02:04:90:6c:6d:50:25:92:
         2f:03:61:0b:3e:86:31:dc:64:b2:51:5f:dc:7b:51:50:a7:ff:
         a5:de:af:7f:98:4b:18:e5:2f:5b:4e:dc:16:11:1c:e6:53:c8:
         2f:f6:1d:a7:51:9c:47:0b:37:f0:d5:dc:3d:d0:a6:e9:96:0b:
         8d:79:71:bd:70:a4:4c:86:21:d1:03:9c:6a:10:80:68:4e:3e:
         74:d9:cf:e3:5a:5a:15:cd:9e:c3:9d:8d:2d:ba:95:4a:f3:ad:
         1b:c7:6e:4e:ff:40:1d:9c:d0:af:79:cd:cb:e9:5e:74:b6:5b:
         5c:b2:95:f8:e8:bb:6d:08:87:d5:97:a4:a7:81:f5:67:72:2b:
         fd:f4:8a:92:53:5d:51:de:de:1d:ea:21:27:df:42:c0:49:94:
         ba:d5:a9:5f:4a:74:71:25:67:16:72:38:a5:35:7b:c9:48:38:
         ab:8a:2e:f0:1b:09:7f:cf:05:2b:30:67:21:4d:ad:28:c8:27:
         c7:2e:fd:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVNnX/lUfWouHDkeUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
OWRlMTUzNzItYmFkNy00MzI2LWEzYTEtN2IxMTcxNmUxZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw1BPiBiGWDJHU53/UJHtiaQRMTYbX5uQbZo
0vecAklzuj1Yl5pWG70tT+1iO92dNktxuzaYy27njHf0/bOotkgv0WWtrOOw8vwi
UTmkyuBZ761Vew8010qqfCxgjeuYT9qhuybglFvIhGa6uxusVf5f3vmS4YQZQ4sx
iZHHFvLfLtuwIHCyeWMz9z+BQ6FToE306iUTNm8WlhDGqjkJwQDb/k4JFajwxRLB
5WGyNSso4u13T9rCL82mDG3tuLwGoQZUr35zRgu5WmhZpK6Q8MHe/PI7iDa+I1ww
sbxRs1d07Y2vsorASztsCG6CyLOOSQlFwXiQNB+rkqCXREiMDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMDGrLDc9Cq5Ht4scVIdcCaE6mfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGY1Mjg1NzAtYTk1Yy0z
NDJiLWIzYTItMzk1ZTVmZTQ2MDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFynGUdGybhcfVbyjnwpHnVPs6fqfttvDiHJdNaVT3wr+9HtsagJtRFH
RXjqZ+ZJXTAg8/7Dn4wQfZ7eDTChr64CBJBsbVAlki8DYQs+hjHcZLJRX9x7UVCn
/6Xer3+YSxjlL1tO3BYRHOZTyC/2HadRnEcLN/DV3D3QpumWC415cb1wpEyGIdED
nGoQgGhOPnTZz+NaWhXNnsOdjS26lUrzrRvHbk7/QB2c0K95zcvpXnS2W1yylfjo
u20Ih9WXpKeB9WdyK/30ipJTXVHe3h3qISffQsBJlLrVqV9KdHElZxZyOKU1e8lI
OKuKLvAbCX/PBSswZyFNrSjIJ8cu/UI=
-----END CERTIFICATE-----
Generated at Sun Apr 28 06:32:26 2024 by rpki-client on console-ams.rpki-client.org