Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5c5c40ab-4b19-33fa-9738-d499a1344b76.roa
File:                     5c5c40ab-4b19-33fa-9738-d499a1344b76.roa (raw, json)
Hash identifier:          4MtvEY3rKK27pb+gNQR2PJYPQWDeCPmLlCQNDZrf7pA=
Subject key identifier:   61:A8:FE:B7:69:55:6D:B2:D3:39:6E:CF:86:A9:8D:66:C0:A5:4F:52
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285845490EBBEC535A7D505039B600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5c5c40ab-4b19-33fa-9738-d499a1344b76.roa
Signing time:             Thu 21 Mar 2024 21:49:46 +0000
ROA not before:           Thu 21 Mar 2024 21:49:46 +0000
ROA not after:            Wed 19 Jun 2024 21:49:46 +0000
asID:                     36492
IP address blocks:        64.9.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:0e:bb:ec:53:5a:7d:50:50:39:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:49:46 2024 GMT
            Not After : Jun 19 21:49:46 2024 GMT
        Subject: CN=6e150b48-a4b8-4700-aa8f-6e85ce9b21ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:86:95:32:c6:9a:98:e2:b0:27:25:05:ed:
                    83:7d:9a:ef:7b:27:0d:4e:05:8d:31:5f:d5:c2:2c:
                    c4:d9:d4:52:a5:99:79:ab:32:ba:76:43:f7:d8:38:
                    8d:cc:c2:d9:a0:0e:2e:cd:fb:cf:00:28:eb:81:20:
                    bf:3e:fa:e7:f0:70:0c:73:26:de:22:e3:17:24:22:
                    72:8f:d1:3a:a0:81:fc:cc:e8:53:42:e8:85:a2:c0:
                    ff:0e:2d:2d:4a:50:9b:f7:7e:b2:33:98:83:2d:bf:
                    e3:90:86:e7:18:bd:a7:83:ef:5b:fb:13:9c:d1:53:
                    66:3f:fc:e0:43:18:94:7a:eb:39:0f:8b:97:bf:4f:
                    87:7b:a2:bc:17:d5:fe:de:0c:0e:fc:62:ec:af:43:
                    8a:00:e6:01:7b:eb:7d:82:36:a4:58:75:5b:f9:5a:
                    8b:fd:b3:3b:cd:15:5c:f7:29:2c:7a:84:e0:76:a9:
                    b1:1c:c5:87:aa:6d:7b:c4:5e:03:69:2c:46:91:3d:
                    fe:2b:5a:05:68:08:f1:ca:7e:35:9f:93:bd:24:c6:
                    36:b2:3e:49:5f:1e:16:ee:92:0b:a6:d2:f9:a4:6f:
                    cf:92:00:20:9d:b4:c7:a0:07:82:85:e1:11:63:9f:
                    0f:84:69:67:84:23:13:d2:8b:ae:e1:77:76:81:b6:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A8:FE:B7:69:55:6D:B2:D3:39:6E:CF:86:A9:8D:66:C0:A5:4F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5c5c40ab-4b19-33fa-9738-d499a1344b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:28:65:14:a5:ff:0c:f7:41:1c:33:68:34:f6:48:05:2f:08:
         9a:98:a1:46:a7:2c:0c:0d:f0:4f:73:45:bd:7d:18:4a:95:a4:
         ad:64:6d:1a:5a:5f:7d:a7:88:26:49:41:6b:24:3c:89:08:5f:
         d7:14:83:03:6c:cd:5a:f9:b2:0d:5c:1a:b2:1e:3b:82:4d:30:
         56:ba:c8:81:d8:79:ea:a1:2e:05:8b:cf:d7:a8:98:00:4a:15:
         71:32:32:86:bd:24:fa:0c:f7:21:d0:1e:ea:2e:33:2b:99:ca:
         1c:bc:de:f4:4c:cd:11:cd:34:ff:dc:c8:3e:23:de:92:ad:d6:
         94:69:7c:9f:8d:1d:57:f9:f7:b5:e9:6c:87:67:39:da:ca:a9:
         20:37:e7:3b:cc:52:bb:62:36:16:c2:08:03:7d:9e:e7:75:8b:
         a1:88:e1:1a:e8:01:37:0d:a9:aa:75:07:89:b1:8f:a4:f9:74:
         c4:69:d2:8e:3b:ea:9f:d2:4d:c1:68:81:70:60:3b:8c:b0:56:
         67:fb:50:ee:ac:4f:67:5a:59:24:55:0f:8f:49:7e:e2:02:c2:
         4d:de:49:4f:38:63:4e:83:0f:ad:d3:6a:8a:00:50:1d:d3:16:
         c7:41:55:0a:bc:3d:83:d8:c1:6b:f6:8c:74:c7:a3:bc:40:bb:
         6d:e2:c5:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVJDrvsU1p9UFA5tgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMyMTIxNDk0NloXDTI0MDYxOTIxNDk0NlowLzEtMCsGA1UEAxMk
NmUxNTBiNDgtYTRiOC00NzAwLWFhOGYtNmU4NWNlOWIyMWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR2GlTLGmpjisCclBe2DfZrveycNTgWNMV/V
wizE2dRSpZl5qzK6dkP32DiNzMLZoA4uzfvPACjrgSC/Pvrn8HAMcybeIuMXJCJy
j9E6oIH8zOhTQuiFosD/Di0tSlCb936yM5iDLb/jkIbnGL2ng+9b+xOc0VNmP/zg
QxiUeus5D4uXv0+He6K8F9X+3gwO/GLsr0OKAOYBe+t9gjakWHVb+VqL/bM7zRVc
9ykseoTgdqmxHMWHqm17xF4DaSxGkT3+K1oFaAjxyn41n5O9JMY2sj5JXx4W7pIL
ptL5pG/PkgAgnbTHoAeCheERY58PhGlnhCMT0ouu4Xd2gbbw3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGGo/rdpVW2y0zluz4apjWbApU9SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNWM1YzQwYWItNGIxOS0z
M2ZhLTk3MzgtZDQ5OWExMzQ0Yjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAnuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIoZRSl/wz3QRwzaDT2SAUvCJqYoUanLAwN8E9zRb19GEqVpK1kbRpa
X32niCZJQWskPIkIX9cUgwNszVr5sg1cGrIeO4JNMFa6yIHYeeqhLgWLz9eomABK
FXEyMoa9JPoM9yHQHuouMyuZyhy83vRMzRHNNP/cyD4j3pKt1pRpfJ+NHVf597Xp
bIdnOdrKqSA35zvMUrtiNhbCCAN9nud1i6GI4RroATcNqap1B4mxj6T5dMRp0o47
6p/STcFogXBgO4ywVmf7UO6sT2daWSRVD49JfuICwk3eSU84Y06DD63TaooAUB3T
FsdBVQq8PYPYwWv2jHTHo7xAu23ixX4=
-----END CERTIFICATE-----
Generated at Thu May 2 04:25:38 2024 by rpki-client on console-fra.rpki-client.org