Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da228069-1e57-30ee-abed-61d9283ae7e4.roa
File:                     da228069-1e57-30ee-abed-61d9283ae7e4.roa (raw, json)
Hash identifier:          V3q3SvzvPeL2lna0vqAbV0XdPFiDR8JliQdyBuEqIDo=
Subject key identifier:   73:3D:4B:8E:B3:8A:D3:33:4B:41:23:FC:17:99:E6:C1:05:97:24:5D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858452D8288D1459A07E3583D3700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da228069-1e57-30ee-abed-61d9283ae7e4.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     21723
IP address blocks:        216.123.220.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:88:d1:45:9a:07:e3:58:3d:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=64e541e3-eced-4aac-bfb7-c111a8dece66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b6:ab:f3:f5:f8:30:6e:17:db:0f:12:40:0e:
                    b1:d8:2c:38:4f:27:12:f2:e6:0e:41:ba:26:85:b5:
                    e4:2a:c2:a9:22:de:1d:cc:63:bd:05:9f:66:a8:f6:
                    c8:d3:46:a8:a6:5e:79:89:00:68:52:c8:e1:da:bc:
                    56:0a:ae:00:24:e4:4d:66:18:4c:b6:db:c4:b4:da:
                    d2:77:23:a1:17:b6:56:b1:d2:79:33:66:de:4f:e0:
                    9c:76:2d:6f:e0:1f:98:0c:21:87:0d:7e:7c:98:c0:
                    77:93:fd:36:31:ae:1e:20:d4:a0:31:31:ea:ef:22:
                    37:3a:1b:1f:cf:b1:e4:a5:68:c0:28:9e:c2:d9:0d:
                    24:53:ad:72:37:13:ae:0e:ac:c0:56:13:d3:22:51:
                    9a:80:b8:9e:5f:25:70:10:8d:07:17:f0:0a:d8:ea:
                    f8:87:b8:72:a9:07:77:aa:e8:76:df:a0:0d:4c:82:
                    34:ec:d3:87:3c:c5:cc:1f:81:8b:71:1a:43:9f:3f:
                    dd:39:18:87:c7:ab:5e:3c:db:11:b0:3b:08:aa:b3:
                    93:08:3e:0f:d0:fc:e3:ab:9a:4a:f5:e4:09:30:f5:
                    20:cf:2d:ac:77:08:fd:57:4c:21:2e:92:4a:00:6b:
                    98:e8:06:ff:5f:ec:76:29:4d:df:21:c0:67:6a:51:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3D:4B:8E:B3:8A:D3:33:4B:41:23:FC:17:99:E6:C1:05:97:24:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/da228069-1e57-30ee-abed-61d9283ae7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:78:25:5e:7f:99:88:2a:59:7b:51:95:4d:b7:9a:20:52:
         9a:be:54:1b:d3:d4:a8:7e:64:b6:43:75:2d:1e:98:bd:4c:35:
         dd:2e:dc:f1:a2:7c:2a:b3:18:a2:30:14:c1:49:4e:9d:b5:16:
         e5:b7:2c:9b:26:5a:b7:4f:55:dd:7a:32:03:40:f8:66:0c:dc:
         21:80:e6:e4:05:c0:68:bf:fc:45:19:c1:b2:2a:34:ff:d2:19:
         e4:6c:68:f4:07:02:21:e5:5e:e9:e0:a8:7f:95:d9:c0:3a:0c:
         a6:da:be:6e:e2:04:8d:34:7b:e7:7f:a2:e2:96:63:a3:bf:04:
         f7:28:af:4c:1a:58:96:12:11:43:aa:45:d7:5a:6b:14:db:dd:
         fe:e6:18:c2:14:f0:92:7d:d5:d1:70:18:66:73:d8:d2:99:f6:
         4e:1c:09:6a:e3:b2:f8:9b:f0:45:23:2c:35:78:09:4c:80:d3:
         dc:86:14:f9:68:a6:a1:86:6d:8b:1a:57:70:b5:f1:c1:c1:bc:
         26:b5:7a:67:57:91:9a:3c:36:c8:5d:0e:24:fc:c9:a6:4f:c2:
         55:8c:16:25:ba:8b:04:bb:8a:34:cd:c2:84:c4:9e:50:36:f6:
         db:c9:85:6a:92:74:e3:af:9e:c3:cd:93:c3:c3:0d:42:c1:70:
         19:5e:5e:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUtgojRRZoH41g9NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxMjAxMDAyNVoXDTI0MDYxMDAxMDAyNVowLzEtMCsGA1UEAxMk
NjRlNTQxZTMtZWNlZC00YWFjLWJmYjctYzExMWE4ZGVjZTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7ar8/X4MG4X2w8SQA6x2Cw4TycS8uYOQbom
hbXkKsKpIt4dzGO9BZ9mqPbI00aopl55iQBoUsjh2rxWCq4AJORNZhhMttvEtNrS
dyOhF7ZWsdJ5M2beT+Ccdi1v4B+YDCGHDX58mMB3k/02Ma4eINSgMTHq7yI3Ohsf
z7HkpWjAKJ7C2Q0kU61yNxOuDqzAVhPTIlGagLieXyVwEI0HF/AK2Or4h7hyqQd3
quh236ANTII07NOHPMXMH4GLcRpDnz/dORiHx6tePNsRsDsIqrOTCD4P0Pzjq5pK
9eQJMPUgzy2sdwj9V0whLpJKAGuY6Ab/X+x2KU3fIcBnalFaLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHM9S46zitMzS0Ej/BeZ5sEFlyRdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZGEyMjgwNjktMWU1Ny0z
MGVlLWFiZWQtNjFkOTI4M2FlN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HvcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7WeCVef5mIKll7UZVNt5ogUpq+VBvT1Kh+ZLZDdS0emL1MNd0u3PGi
fCqzGKIwFMFJTp21FuW3LJsmWrdPVd16MgNA+GYM3CGA5uQFwGi//EUZwbIqNP/S
GeRsaPQHAiHlXungqH+V2cA6DKbavm7iBI00e+d/ouKWY6O/BPcor0waWJYSEUOq
RddaaxTb3f7mGMIU8JJ91dFwGGZz2NKZ9k4cCWrjsvib8EUjLDV4CUyA09yGFPlo
pqGGbYsaV3C18cHBvCa1emdXkZo8NshdDiT8yaZPwlWMFiW6iwS7ijTNwoTEnlA2
9tvJhWqSdOOvnsPNk8PDDULBcBleXlo=
-----END CERTIFICATE-----
Generated at Sat May 18 15:36:29 2024 by rpki-client on console-fra.rpki-client.org