Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c753aca4-2293-31df-a2e0-09caff20f8b7.roa
File:                     c753aca4-2293-31df-a2e0-09caff20f8b7.roa (raw, json)
Hash identifier:          72zENPR48xXvbhea9V/QGVp8JcI3HRx/fgDPhNsjpDE=
Subject key identifier:   4B:61:0D:78:F8:AA:EB:FE:4B:B0:D0:50:A6:50:A7:8A:E5:7E:38:9D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858459A6347EC9609BF2D67548F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c753aca4-2293-31df-a2e0-09caff20f8b7.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     64267
IP address blocks:        141.164.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:47:ec:96:09:bf:2d:67:54:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=6b3ad9fa-246b-4352-afb7-1fb308526387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:62:3c:d0:fc:8c:bf:ee:ee:fd:3e:2c:45:
                    dc:82:02:e3:86:ce:cd:7a:a6:0f:d5:78:5a:6c:96:
                    e0:e1:19:87:55:37:02:40:08:9f:e0:c1:a9:6d:01:
                    1b:2a:aa:d9:9d:b8:56:27:74:0d:91:a0:3e:b0:a3:
                    e5:74:4b:ba:14:dd:b5:75:be:67:50:93:5e:23:0a:
                    2c:60:f5:4e:00:c4:7d:ed:73:3c:53:f4:d4:d9:de:
                    cb:e9:f6:8d:7a:bb:ea:ea:29:ad:ee:d3:5d:24:42:
                    63:17:72:d0:88:2d:25:98:1b:54:b3:45:42:93:a2:
                    42:72:ea:0f:de:5b:bf:70:10:71:5f:55:15:02:1f:
                    8f:99:ad:91:25:2d:af:90:75:4f:98:3c:20:2c:55:
                    0c:f5:e9:fc:94:87:3f:97:8e:22:0f:8b:cf:e7:38:
                    e8:fb:25:a1:c8:ca:cb:3a:18:04:7e:ab:87:c6:43:
                    f8:04:73:52:3f:ef:aa:17:ef:b6:f6:91:95:2d:7f:
                    a1:a3:ba:bd:cc:0d:d6:1f:00:56:91:f9:77:31:c4:
                    0d:ce:39:dc:c4:98:c6:2a:09:5a:92:ea:aa:1f:27:
                    ac:37:4c:27:26:22:7c:21:ae:6d:83:de:4a:65:dc:
                    78:ed:2c:2d:11:30:51:3d:5b:79:eb:04:a3:63:3f:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:61:0D:78:F8:AA:EB:FE:4B:B0:D0:50:A6:50:A7:8A:E5:7E:38:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c753aca4-2293-31df-a2e0-09caff20f8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:16:37:b8:b0:eb:73:1c:1d:dc:00:72:31:9f:48:4f:13:db:
         de:a6:53:d7:29:ee:c4:43:12:8c:26:e9:28:cd:21:30:20:90:
         ca:15:2d:ab:a8:d7:b5:03:be:67:08:26:5a:c9:5f:c1:1c:f2:
         b9:e4:48:8a:00:88:d5:b2:0c:53:b1:15:68:c6:1c:32:4c:46:
         13:b4:eb:c2:4a:76:18:56:28:80:4d:f2:f0:ec:32:dd:e4:a3:
         29:c6:42:e8:8d:a4:fb:b2:85:26:e1:81:ed:d9:4c:e0:4b:48:
         f5:72:e3:9b:ca:41:6f:e1:5d:41:08:77:aa:a7:30:9f:b1:b3:
         08:32:44:2a:cc:c2:e3:46:65:00:03:d6:a2:9d:d4:f9:a8:5f:
         55:86:de:6f:7d:72:f2:1f:f5:83:1a:08:82:7c:70:70:38:51:
         30:31:21:01:37:6e:99:e9:fd:00:8a:c1:69:b7:73:05:fc:fd:
         a5:e3:9b:22:fb:97:c7:85:ef:b8:5a:a3:85:54:a3:59:39:44:
         51:43:88:52:68:47:c4:9d:6d:c1:0d:63:ad:94:05:71:df:85:
         2a:b4:d2:00:1f:15:aa:98:de:ac:d5:98:66:44:87:7a:54:3e:
         9a:64:5f:31:5c:54:36:95:0f:48:30:e5:41:40:f4:be:c9:85:
         16:6e:f3:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWaY0fslgm/LWdUjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk
NmIzYWQ5ZmEtMjQ2Yi00MzUyLWFmYjctMWZiMzA4NTI2Mzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWpiPND8jL/u7v0+LEXcggLjhs7NeqYP1Xha
bJbg4RmHVTcCQAif4MGpbQEbKqrZnbhWJ3QNkaA+sKPldEu6FN21db5nUJNeIwos
YPVOAMR97XM8U/TU2d7L6faNervq6imt7tNdJEJjF3LQiC0lmBtUs0VCk6JCcuoP
3lu/cBBxX1UVAh+Pma2RJS2vkHVPmDwgLFUM9en8lIc/l44iD4vP5zjo+yWhyMrL
OhgEfquHxkP4BHNSP++qF++29pGVLX+ho7q9zA3WHwBWkfl3McQNzjncxJjGKgla
kuqqHyesN0wnJiJ8Ia5tg95KZdx47SwtETBRPVt56wSjYz8TowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEthDXj4quv+S7DQUKZQp4rlfjidMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzc1M2FjYTQtMjI5My0z
MWRmLWEyZTAtMDljYWZmMjBmOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjaRVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsWN7iw63McHdwAcjGfSE8T296mU9cp7sRDEowm6SjNITAgkMoVLauo
17UDvmcIJlrJX8Ec8rnkSIoAiNWyDFOxFWjGHDJMRhO068JKdhhWKIBN8vDsMt3k
oynGQuiNpPuyhSbhge3ZTOBLSPVy45vKQW/hXUEId6qnMJ+xswgyRCrMwuNGZQAD
1qKd1PmoX1WG3m99cvIf9YMaCIJ8cHA4UTAxIQE3bpnp/QCKwWm3cwX8/aXjmyL7
l8eF77hao4VUo1k5RFFDiFJoR8SdbcENY62UBXHfhSq00gAfFaqY3qzVmGZEh3pU
PppkXzFcVDaVD0gw5UFA9L7JhRZu8xo=
-----END CERTIFICATE-----
Generated at Sun Apr 28 06:32:26 2024 by rpki-client on console-ams.rpki-client.org