Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/2dde838b-f3eb-3f14-b1f3-f896bb87f20d.roa
File:                     2dde838b-f3eb-3f14-b1f3-f896bb87f20d.roa (raw, json)
Hash identifier:          dbnE5HSXD7uhVLL7Ofiy8gqPb39fLodZtDqfu+WrQ9M=
Subject key identifier:   B0:86:5B:9A:CE:A6:E1:3A:48:61:7F:27:10:58:29:0F:BD:88:86:C1
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F43285845708301E5A93C092BD7D01480
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/2dde838b-f3eb-3f14-b1f3-f896bb87f20d.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     16509
IP address blocks:        64.35.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:01:e5:a9:3c:09:2b:d7:d0:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=194f5f7d-a39a-4b10-b1d7-e54fb686196b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:34:7b:0b:7c:f5:96:ee:ed:ce:9b:43:08:
                    96:33:d4:ed:99:87:c2:8d:cb:41:95:2a:25:5f:a5:
                    6a:70:e7:a4:11:81:37:d3:60:16:bf:1d:b0:05:88:
                    69:7a:5e:24:14:c9:a7:e6:4f:66:59:b8:e4:b7:8f:
                    bc:6c:7c:08:9a:22:8f:82:93:24:ce:6e:8d:12:7d:
                    9d:07:75:a5:df:6f:3f:03:50:cd:0e:32:d9:49:2d:
                    78:67:e1:58:13:bc:f6:ef:53:ed:b0:9f:e0:ad:25:
                    f8:b9:00:ac:3f:c8:bc:eb:51:e6:7b:8b:d9:6a:16:
                    f9:92:a3:64:a1:20:dd:73:87:e0:07:79:52:83:e9:
                    96:aa:60:65:a4:1d:f8:b1:63:56:e6:f2:b5:86:ab:
                    6b:b6:ea:ce:95:6f:52:2a:c7:e8:a7:35:20:31:e4:
                    44:ca:7a:f1:08:f6:6d:cb:93:35:c3:f9:4f:7a:2f:
                    bd:77:93:f0:76:e9:b5:26:36:8b:34:72:98:ee:5c:
                    5c:6b:dd:3a:88:30:b6:5c:de:61:37:f4:a0:7a:8b:
                    1b:42:e0:e5:4f:12:14:8a:fa:e1:27:46:08:f9:52:
                    bc:b8:d5:e9:ae:76:70:1a:9a:c4:a6:05:38:e8:23:
                    a9:b3:98:a2:6a:17:ba:ad:35:b8:5f:29:d7:83:eb:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:86:5B:9A:CE:A6:E1:3A:48:61:7F:27:10:58:29:0F:BD:88:86:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/2dde838b-f3eb-3f14-b1f3-f896bb87f20d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:22:3f:ee:80:69:b4:4b:aa:56:f9:82:84:7e:0a:fd:34:6c:
         db:a2:3f:b7:6e:71:f4:51:c6:02:21:b0:f0:ce:90:6c:4c:bb:
         c2:bb:23:0f:20:22:2b:16:63:66:bd:13:c2:34:51:4b:b1:22:
         9e:03:5d:87:f1:85:62:6a:b3:c0:9f:2f:bf:49:73:d6:2b:3b:
         e7:97:3f:34:27:20:08:1e:32:81:2a:59:02:37:a6:18:41:6f:
         61:3d:df:d1:f7:b6:f9:29:3b:34:27:e1:7d:29:12:35:c8:84:
         3c:35:47:91:3c:f7:d0:f4:55:12:5e:4b:e4:e2:89:34:8c:f6:
         33:03:b4:42:77:d1:6f:bb:fb:ad:77:2f:a5:4c:fc:76:51:57:
         c2:72:c9:a4:84:35:f4:46:1f:76:d2:59:f8:bc:27:ce:6f:76:
         ac:ec:17:f2:f9:12:95:41:03:8a:b3:4e:0f:f0:1b:bd:ce:ca:
         68:ea:e7:1f:42:d6:2c:c9:7c:5f:81:f4:d7:80:9d:a4:28:bb:
         17:05:e2:43:7e:09:22:bd:a4:62:fb:c9:0f:21:f7:d9:0d:68:
         c5:3d:78:a7:55:b1:33:66:02:44:ce:a2:0a:d9:17:a3:89:6a:
         9e:88:c6:aa:db:ba:76:dc:ff:01:3f:f8:e0:a1:72:5b:35:d1:
         c1:95:21:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwgwHlqTwJK9fQFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg1MTk2YjEtNTQyZS00MjhjLTg4NjYtMGVmZDEzNjJm
ZGMwMB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk
MTk0ZjVmN2QtYTM5YS00YjEwLWIxZDctZTU0ZmI2ODYxOTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVc0ewt89Zbu7c6bQwiWM9TtmYfCjctBlSol
X6VqcOekEYE302AWvx2wBYhpel4kFMmn5k9mWbjkt4+8bHwImiKPgpMkzm6NEn2d
B3Wl328/A1DNDjLZSS14Z+FYE7z271PtsJ/grSX4uQCsP8i861Hme4vZahb5kqNk
oSDdc4fgB3lSg+mWqmBlpB34sWNW5vK1hqtrturOlW9SKsfopzUgMeREynrxCPZt
y5M1w/lPei+9d5Pwdum1JjaLNHKY7lxca906iDC2XN5hN/SgeosbQuDlTxIUivrh
J0YI+VK8uNXprnZwGprEpgU46COps5iiahe6rTW4XynXg+tjWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCGW5rOpuE6SGF/JxBYKQ+9iIbBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zODUx
OTZiMS01NDJlLTQyOGMtODg2Ni0wZWZkMTM2MmZkYzAvMmRkZTgzOGItZjNlYi0z
ZjE0LWIxZjMtZjg5NmJiODdmMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzg1MTk2YjEtNTQyZS00MjhjLTg4
NjYtMGVmZDEzNjJmZGMwLzM4NTE5NmIxLTU0MmUtNDI4Yy04ODY2LTBlZmQxMzYy
ZmRjMC5jcmwwHwYDVR0jBBgwFoAUW+y7fz1tdX5uVIOJ8tVve8Z4/Q0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zODUxOTZiMS01NDJlLTQyOGMtODg2Ni0wZWZk
MTM2MmZkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCOgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL8iP+6AabRLqlb5goR+Cv00bNuiP7ducfRRxgIhsPDOkGxMu8K7Iw8g
IisWY2a9E8I0UUuxIp4DXYfxhWJqs8CfL79Jc9YrO+eXPzQnIAgeMoEqWQI3phhB
b2E939H3tvkpOzQn4X0pEjXIhDw1R5E899D0VRJeS+TiiTSM9jMDtEJ30W+7+613
L6VM/HZRV8JyyaSENfRGH3bSWfi8J85vdqzsF/L5EpVBA4qzTg/wG73Oymjq5x9C
1izJfF+B9NeAnaQouxcF4kN+CSK9pGL7yQ8h99kNaMU9eKdVsTNmAkTOogrZF6OJ
ap6Ixqrbunbc/wE/+OChcls10cGVIYA=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:38 2024 by rpki-client on console-ams.rpki-client.org