Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/0d6b90d2-2492-3695-a106-a29303fe9cb3.roa
File:                     0d6b90d2-2492-3695-a106-a29303fe9cb3.roa (raw, json)
Hash identifier:          QCwvSvkAyIp28hPbRJ1MLa2sWYGoPe2OwlDYzoedwrs=
Subject key identifier:   47:2D:51:B4:00:F9:C3:56:53:FE:78:69:2F:81:80:A0:C3:5C:D3:DE
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F432858457082FC65C926B65CBD48E3F0
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/0d6b90d2-2492-3695-a106-a29303fe9cb3.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     14618
IP address blocks:        64.35.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:82:fc:65:c9:26:b6:5c:bd:48:e3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=b82ff0b2-c4fd-4aaa-a9a5-e169782a7db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:8f:58:dd:84:24:03:6f:a2:3b:13:89:82:
                    81:ee:67:c4:87:5d:c4:40:32:6e:3b:ff:17:c6:07:
                    d4:5c:5b:19:43:8a:b2:02:f1:08:2e:bd:60:e6:09:
                    d6:f0:ea:7b:94:c0:52:ed:d7:fe:0a:4f:c7:95:7b:
                    cc:2d:95:83:37:48:7a:ac:9c:92:cf:3c:3e:f2:62:
                    4d:1b:f6:b3:d9:6d:b4:8e:9f:62:d3:cd:a0:d8:68:
                    1c:37:56:d1:22:7d:fc:e6:fe:d8:4e:c0:8d:18:4f:
                    7e:41:01:a5:bf:86:88:61:02:79:19:b2:45:e8:f4:
                    5c:f4:48:5f:51:f4:59:54:bc:6c:03:50:a2:39:cb:
                    02:e0:16:1c:1b:8e:92:d9:62:8f:1e:dd:44:70:3b:
                    9c:d4:20:8b:1b:ac:b6:04:f5:10:19:e5:48:40:11:
                    b1:30:7b:21:f6:a0:44:d5:b5:c0:31:88:b9:37:55:
                    08:32:e2:1f:74:e2:c5:72:25:74:96:ad:e2:07:45:
                    e1:9a:20:4f:b6:e9:c6:02:2b:8d:9d:a5:93:34:f2:
                    5c:63:1c:da:d5:40:ee:e2:60:8a:76:1f:d7:94:5b:
                    1c:c7:50:d2:81:bb:85:73:75:24:09:a0:87:dd:6b:
                    4d:d0:25:af:73:f4:d4:e0:58:df:66:bc:eb:10:95:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2D:51:B4:00:F9:C3:56:53:FE:78:69:2F:81:80:A0:C3:5C:D3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/0d6b90d2-2492-3695-a106-a29303fe9cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:31:5a:31:35:fb:79:b2:7a:d9:15:1f:79:d7:c9:e9:8a:ae:
         ff:6a:cb:88:7a:1e:04:26:d3:02:97:69:fc:ee:2b:e7:79:5a:
         9a:68:08:43:7f:50:91:5c:f4:c5:80:35:b1:32:4c:80:5c:66:
         47:d8:b3:37:f5:be:98:e9:21:49:e8:49:13:8f:88:5d:c6:57:
         94:45:f7:71:34:56:12:2a:75:7b:ed:83:78:f6:59:2d:7a:ee:
         2d:d3:cf:35:e1:90:4c:a3:11:12:26:0f:08:60:0b:88:8b:b9:
         10:28:02:6b:f0:ce:09:9f:a6:64:7a:77:79:b5:13:9a:c4:d4:
         23:d8:07:b2:92:6a:8c:60:9b:01:22:ab:b6:f5:1b:e4:b5:6b:
         89:2a:b7:de:0e:6d:d6:fc:19:7b:72:3c:be:b5:41:4c:d5:05:
         b7:fb:33:b4:21:bc:fc:b9:50:4a:b1:c7:b0:26:98:60:23:e0:
         2d:24:75:1f:01:7c:9c:3d:a1:4d:d9:c6:71:5e:bb:7f:c9:92:
         83:13:14:e3:44:77:4c:08:38:86:ce:94:55:f7:82:bc:5d:1a:
         33:2e:29:89:87:bb:ba:bc:d6:69:6c:0f:87:1d:9f:d5:10:5c:
         c8:0c:b6:41:3e:54:43:50:3f:f8:9e:58:6f:be:09:b0:ab:48:
         f5:a3:cf:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwgvxlySa2XL1I4/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg1MTk2YjEtNTQyZS00MjhjLTg4NjYtMGVmZDEzNjJm
ZGMwMB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk
YjgyZmYwYjItYzRmZC00YWFhLWE5YTUtZTE2OTc4MmE3ZGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXiPWN2EJANvojsTiYKB7mfEh13EQDJuO/8X
xgfUXFsZQ4qyAvEILr1g5gnW8Op7lMBS7df+Ck/HlXvMLZWDN0h6rJySzzw+8mJN
G/az2W20jp9i082g2GgcN1bRIn385v7YTsCNGE9+QQGlv4aIYQJ5GbJF6PRc9Ehf
UfRZVLxsA1CiOcsC4BYcG46S2WKPHt1EcDuc1CCLG6y2BPUQGeVIQBGxMHsh9qBE
1bXAMYi5N1UIMuIfdOLFciV0lq3iB0XhmiBPtunGAiuNnaWTNPJcYxza1UDu4mCK
dh/XlFscx1DSgbuFc3UkCaCH3WtN0CWvc/TU4FjfZrzrEJW7hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEctUbQA+cNWU/54aS+BgKDDXNPeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zODUx
OTZiMS01NDJlLTQyOGMtODg2Ni0wZWZkMTM2MmZkYzAvMGQ2YjkwZDItMjQ5Mi0z
Njk1LWExMDYtYTI5MzAzZmU5Y2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzg1MTk2YjEtNTQyZS00MjhjLTg4
NjYtMGVmZDEzNjJmZGMwLzM4NTE5NmIxLTU0MmUtNDI4Yy04ODY2LTBlZmQxMzYy
ZmRjMC5jcmwwHwYDVR0jBBgwFoAUW+y7fz1tdX5uVIOJ8tVve8Z4/Q0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zODUxOTZiMS01NDJlLTQyOGMtODg2Ni0wZWZk
MTM2MmZkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCOsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL0xWjE1+3myetkVH3nXyemKrv9qy4h6HgQm0wKXafzuK+d5WppoCEN/
UJFc9MWANbEyTIBcZkfYszf1vpjpIUnoSROPiF3GV5RF93E0VhIqdXvtg3j2WS16
7i3TzzXhkEyjERImDwhgC4iLuRAoAmvwzgmfpmR6d3m1E5rE1CPYB7KSaoxgmwEi
q7b1G+S1a4kqt94Obdb8GXtyPL61QUzVBbf7M7QhvPy5UEqxx7AmmGAj4C0kdR8B
fJw9oU3ZxnFeu3/JkoMTFONEd0wIOIbOlFX3grxdGjMuKYmHu7q81mlsD4cdn9UQ
XMgMtkE+VENQP/ieWG++CbCrSPWjz28=
-----END CERTIFICATE-----
Generated at Fri Apr 19 22:21:02 2024 by rpki-client on console-ams.rpki-client.org