Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/313c088d-dab3-3856-9376-903f80132488.roa
File:                     313c088d-dab3-3856-9376-903f80132488.roa (raw, json)
Hash identifier:          aJf9QvxcxuJFwrTDhwVAXOhhtyEQ9DZ05tgbwyp+RW8=
Subject key identifier:   E1:16:81:92:88:88:ED:87:F6:A0:DF:4E:CA:5A:B7:99:1E:CB:A3:A0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453CDD58FADA0F87E24DAFA700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/313c088d-dab3-3856-9376-903f80132488.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        108.172.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:58:fa:da:0f:87:e2:4d:af:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=96176292-847a-44c7-a74a-36e45b7fe77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:26:cf:90:93:c6:3f:26:1f:80:71:c8:a2:d7:
                    90:96:cf:bb:7d:38:c1:12:92:34:ec:4d:f4:37:e0:
                    01:d5:69:df:09:cb:a8:f6:f7:12:cb:24:38:1f:11:
                    8b:2e:d6:94:60:98:18:0a:64:e9:72:64:de:27:ff:
                    dd:ee:5b:a6:fb:c5:4c:61:9e:9c:bb:37:a0:98:ea:
                    ee:2a:89:37:c8:9a:a7:45:ad:c8:d6:e7:70:59:5a:
                    69:2a:47:d2:b8:1f:9e:0f:03:38:0e:27:92:3f:73:
                    6a:e7:1d:6d:8d:37:00:88:4e:24:a8:5c:23:bb:92:
                    41:6f:46:67:80:07:88:47:e4:f0:a5:d8:3e:8e:7b:
                    85:0a:32:b4:34:3d:1f:89:4a:26:2b:1e:df:30:75:
                    bb:ea:51:94:d5:8b:e8:ed:bf:05:de:7f:62:05:d1:
                    73:f6:21:f7:59:4e:85:31:13:44:56:d6:b6:18:8f:
                    fc:92:86:e3:2b:18:77:45:de:00:af:43:20:7e:0c:
                    0c:fb:28:f0:ff:3c:0e:bb:87:ea:40:f5:f5:54:e8:
                    f1:08:df:55:27:a8:fe:2c:e6:56:d4:7a:69:21:00:
                    04:4a:03:7f:b4:68:09:94:65:e8:27:00:b4:08:f1:
                    f7:78:2d:4a:0a:f4:81:f5:b4:cf:6f:f5:07:88:8f:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:16:81:92:88:88:ED:87:F6:A0:DF:4E:CA:5A:B7:99:1E:CB:A3:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/313c088d-dab3-3856-9376-903f80132488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.172.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fa:d2:4e:7d:50:8a:3e:c5:94:14:f9:e2:39:d4:78:9c:1a:
         1e:70:0f:d5:ba:ad:95:9b:da:08:9b:c1:df:fc:9f:54:54:a4:
         a4:2c:b5:4d:57:e9:f6:0a:70:72:7c:5e:2b:80:e2:87:e3:bb:
         da:f2:7f:0f:d9:d2:b2:2f:68:f2:61:a7:17:09:41:0a:73:84:
         ae:c5:35:80:ef:52:14:87:2e:eb:e8:e1:04:3d:f6:cf:82:25:
         c1:a9:7b:8c:4d:02:de:53:d7:25:03:8e:fb:81:60:a9:48:ff:
         9d:fc:ce:54:f0:f5:3d:0e:20:10:1e:e7:6e:37:32:e8:be:33:
         a4:49:89:7a:a2:1a:cb:10:fa:05:03:fc:fe:3e:d2:55:91:ef:
         59:f1:75:7e:62:23:9f:c2:d2:04:9f:5f:5d:75:7d:f7:0d:c8:
         e2:1d:00:6d:b5:03:17:ca:58:50:3b:df:67:0b:31:1b:47:25:
         3b:31:84:5b:44:4b:5c:af:4b:2c:c8:38:50:de:67:15:c8:4b:
         2b:b5:58:60:3d:78:21:70:08:6d:0c:18:67:18:f1:84:49:ab:
         a4:11:a8:26:b3:4e:1a:71:12:1d:93:bf:ad:1b:af:11:a4:1d:
         88:17:e7:a4:d0:f3:60:c8:dd:9a:6a:e8:7c:26:26:99:9e:37:
         12:91:d3:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEU83Vj62g+H4k2vpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNzEzMDAzMFoXDTI0MDYxNTEzMDAzMFowLzEtMCsGA1UEAxMk
OTYxNzYyOTItODQ3YS00NGM3LWE3NGEtMzZlNDViN2ZlNzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSbPkJPGPyYfgHHIoteQls+7fTjBEpI07E30
N+AB1WnfCcuo9vcSyyQ4HxGLLtaUYJgYCmTpcmTeJ//d7lum+8VMYZ6cuzegmOru
Kok3yJqnRa3I1udwWVppKkfSuB+eDwM4DieSP3Nq5x1tjTcAiE4kqFwju5JBb0Zn
gAeIR+Twpdg+jnuFCjK0ND0fiUomKx7fMHW76lGU1Yvo7b8F3n9iBdFz9iH3WU6F
MRNEVta2GI/8kobjKxh3Rd4Ar0MgfgwM+yjw/zwOu4fqQPX1VOjxCN9VJ6j+LOZW
1HppIQAESgN/tGgJlGXoJwC0CPH3eC1KCvSB9bTPb/UHiI8x4wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOEWgZKIiO2H9qDfTspat5key6OgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzEzYzA4OGQtZGFiMy0z
ODU2LTkzNzYtOTAzZjgwMTMyNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbKwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcfrSTn1Qij7FlBT54jnUeJwaHnAP1bqtlZvaCJvB3/yfVFSkpCy1TVfp
9gpwcnxeK4Dih+O72vJ/D9nSsi9o8mGnFwlBCnOErsU1gO9SFIcu6+jhBD32z4Il
wal7jE0C3lPXJQOO+4FgqUj/nfzOVPD1PQ4gEB7nbjcy6L4zpEmJeqIayxD6BQP8
/j7SVZHvWfF1fmIjn8LSBJ9fXXV99w3I4h0AbbUDF8pYUDvfZwsxG0clOzGEW0RL
XK9LLMg4UN5nFchLK7VYYD14IXAIbQwYZxjxhEmrpBGoJrNOGnESHZO/rRuvEaQd
iBfnpNDzYMjdmmrofCYmmZ43EpHTaA==
-----END CERTIFICATE-----
Generated at Sat May 18 16:10:59 2024 by rpki-client on console-ams.rpki-client.org