Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d4bccbd8-82db-3b96-9cc2-77682ca3ab2c.roa
File:                     d4bccbd8-82db-3b96-9cc2-77682ca3ab2c.roa (raw, json)
Hash identifier:          vFRhk4alZ1XwDck++tOB5OyjHCKYC506K8rT4DItMVs=
Subject key identifier:   DA:BF:78:50:F0:24:0A:22:4A:60:EE:CE:EC:36:1B:0A:17:36:2B:57
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453B77F9B739B731DD641CCB80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d4bccbd8-82db-3b96-9cc2-77682ca3ab2c.roa
Signing time:             Sun 17 Mar 2024 01:00:26 +0000
ROA not before:           Sun 17 Mar 2024 01:00:26 +0000
ROA not after:            Sat 15 Jun 2024 01:00:26 +0000
asID:                     852
IP address blocks:        75.158.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:77:f9:b7:39:b7:31:dd:64:1c:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 17 01:00:26 2024 GMT
            Not After : Jun 15 01:00:26 2024 GMT
        Subject: CN=6f893782-2910-47d8-99cd-f78998f7a648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:6d:89:64:97:e8:63:c0:cb:de:7d:46:a4:
                    91:c1:9d:b7:c3:84:16:c1:2d:94:07:78:d9:c4:18:
                    c0:1a:58:04:50:5a:4d:51:34:29:92:38:91:44:4c:
                    a6:0c:ef:aa:6b:77:ee:42:2b:70:aa:6c:71:b6:c4:
                    18:fa:93:18:1e:18:b2:f4:84:ab:26:f4:1f:10:02:
                    58:bc:ec:73:94:4d:80:37:e0:a7:9d:59:a3:c0:bb:
                    fb:03:35:3e:f7:87:39:4b:4d:d7:ac:d4:7e:f2:f1:
                    12:11:98:17:88:9b:e3:66:2d:01:a2:0e:88:c1:df:
                    02:53:d4:40:6e:a6:25:db:a9:31:9e:a9:72:31:be:
                    8a:8a:6f:c3:35:f9:c0:f1:3d:87:05:8c:f0:84:5f:
                    00:f4:e7:6b:c3:b0:38:7a:cf:3b:11:5c:d4:dc:c4:
                    58:89:9f:3b:a8:8b:be:c5:07:33:39:ff:c7:d2:9b:
                    df:b5:e6:36:85:46:8d:b2:e0:21:69:b5:0b:e2:77:
                    3d:17:18:1b:9c:0a:77:ed:d7:80:dc:a3:68:d3:89:
                    1a:75:07:40:49:fc:47:c5:27:89:c5:a2:bb:fd:9b:
                    4e:7e:76:ef:27:3a:5d:1f:9a:c4:0d:69:df:74:07:
                    82:9f:bd:c1:55:01:8e:0c:81:84:87:fa:68:8f:29:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BF:78:50:F0:24:0A:22:4A:60:EE:CE:EC:36:1B:0A:17:36:2B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d4bccbd8-82db-3b96-9cc2-77682ca3ab2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.158.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:78:c3:a8:3d:d8:59:74:66:e3:30:72:bc:5a:14:b6:94:01:
         7a:15:22:84:1e:2a:4a:e2:22:d8:b4:a4:5d:51:76:72:70:c1:
         63:15:7d:14:b3:c3:20:63:09:ef:8b:ea:8a:31:a7:49:4f:a8:
         82:52:3c:66:dc:7a:e6:6f:ba:1f:13:c3:60:9b:1c:8c:ea:d5:
         f0:83:5b:ae:dd:88:39:75:62:f1:57:69:25:83:db:93:37:9a:
         a6:3f:e4:5e:8e:00:00:23:7c:d6:21:b5:91:27:8c:ca:4d:75:
         bc:8c:50:85:9e:52:31:84:e7:0b:ad:65:d7:6e:b6:60:17:de:
         f4:f2:81:15:40:ac:63:a3:98:80:ed:64:01:32:14:bb:1e:6f:
         be:56:f0:11:f1:1b:c4:4c:08:a3:0d:72:8b:a7:39:f1:78:f9:
         d1:88:4b:3d:f7:16:41:be:f7:66:a8:2e:81:11:a1:b0:e1:da:
         e8:fa:82:ba:3d:65:15:32:2d:96:a7:27:54:9f:ba:1e:f0:3e:
         0c:d7:57:87:90:6c:ff:03:f2:64:aa:8b:40:98:dd:65:c1:80:
         9a:60:cf:d6:d6:b3:1f:13:30:d6:b8:d3:5c:ff:e2:d2:b7:84:
         e7:ef:79:3c:50:84:9a:59:55:d8:0a:37:fa:34:82:a8:7a:9e:
         d5:64:9a:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU7d/m3Obcx3WQcy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNzAxMDAyNloXDTI0MDYxNTAxMDAyNlowLzEtMCsGA1UEAxMk
NmY4OTM3ODItMjkxMC00N2Q4LTk5Y2QtZjc4OTk4ZjdhNjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YhtiWSX6GPAy959RqSRwZ23w4QWwS2UB3jZ
xBjAGlgEUFpNUTQpkjiRREymDO+qa3fuQitwqmxxtsQY+pMYHhiy9ISrJvQfEAJY
vOxzlE2AN+CnnVmjwLv7AzU+94c5S03XrNR+8vESEZgXiJvjZi0Bog6Iwd8CU9RA
bqYl26kxnqlyMb6Kim/DNfnA8T2HBYzwhF8A9Odrw7A4es87EVzU3MRYiZ87qIu+
xQczOf/H0pvfteY2hUaNsuAhabUL4nc9FxgbnAp37deA3KNo04kadQdASfxHxSeJ
xaK7/ZtOfnbvJzpdH5rEDWnfdAeCn73BVQGODIGEh/pojyks+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNq/eFDwJAoiSmDuzuw2GwoXNitXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDRiY2NiZDgtODJkYi0z
Yjk2LTljYzItNzc2ODJjYTNhYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES57gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIN4w6g92Fl0ZuMwcrxaFLaUAXoVIoQeKkriIti0pF1RdnJwwWMVfRSz
wyBjCe+L6ooxp0lPqIJSPGbceuZvuh8Tw2CbHIzq1fCDW67diDl1YvFXaSWD25M3
mqY/5F6OAAAjfNYhtZEnjMpNdbyMUIWeUjGE5wutZddutmAX3vTygRVArGOjmIDt
ZAEyFLseb75W8BHxG8RMCKMNcounOfF4+dGISz33FkG+92aoLoERobDh2uj6gro9
ZRUyLZanJ1Sfuh7wPgzXV4eQbP8D8mSqi0CY3WXBgJpgz9bWsx8TMNa401z/4tK3
hOfveTxQhJpZVdgKN/o0gqh6ntVkmps=
-----END CERTIFICATE-----
Generated at Sat May 18 15:36:28 2024 by rpki-client on console-fra.rpki-client.org