Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/58969507-ca7c-32cb-9fc9-7c8ea7ddcc2d.roa
File:                     58969507-ca7c-32cb-9fc9-7c8ea7ddcc2d.roa (raw, json)
Hash identifier:          dqsvqKXXomisILnZids9E8lDBgy8uhzBgzHS0fTQGug=
Subject key identifier:   5A:85:75:1E:D9:DA:50:F8:5F:91:16:58:71:C4:15:03:DB:43:9D:07
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F4328584554982135DAB0329FD0413600
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/58969507-ca7c-32cb-9fc9-7c8ea7ddcc2d.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     19437
IP address blocks:        136.175.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:21:35:da:b0:32:9f:d0:41:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=7c0cc0f6-3a6a-4cdc-87af-5de38adefcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:c0:e0:f1:9c:96:7d:fb:e9:24:63:99:1c:
                    46:df:15:6a:4c:37:69:59:2c:af:11:6c:37:64:71:
                    ac:f2:68:07:f4:11:1b:7f:d3:79:0d:ae:2a:60:c3:
                    07:6f:56:80:a7:a6:b2:27:af:5a:da:a8:dd:d7:a5:
                    d4:eb:bb:90:0b:e9:34:0b:6f:e0:a3:d0:04:19:00:
                    21:c3:52:52:f7:33:bd:88:1b:d2:3d:5c:db:35:6c:
                    de:44:fa:7f:40:60:e9:b1:86:ee:97:96:e7:d5:dd:
                    c4:a3:d5:42:9f:ad:b4:c7:0e:de:6a:08:23:44:49:
                    7a:bf:94:a3:2e:2e:80:bd:76:0f:83:64:1f:a1:c2:
                    0d:b6:37:4f:10:e1:e5:ab:8f:2d:96:67:0e:b0:40:
                    05:a9:4d:ea:7d:a9:02:91:f5:90:78:f7:d0:ae:20:
                    e7:1b:6c:2d:1c:43:be:80:75:00:42:ce:85:41:ff:
                    da:ae:64:3b:e3:11:99:cd:ac:5e:59:e9:ff:65:5c:
                    4a:d0:00:fb:35:32:b9:dc:0f:52:c9:f0:78:0c:52:
                    b7:31:54:18:dc:4d:17:c0:25:42:f0:11:4a:53:e8:
                    3a:f0:0e:9c:dd:33:03:27:c2:eb:0e:12:0e:44:93:
                    4d:c3:73:62:d5:35:1b:7c:ea:d0:cf:01:a3:cf:01:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:85:75:1E:D9:DA:50:F8:5F:91:16:58:71:C4:15:03:DB:43:9D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/58969507-ca7c-32cb-9fc9-7c8ea7ddcc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d4:6a:27:27:cb:b6:49:b5:f9:8e:66:b9:f5:62:8c:b9:d9:
         37:a7:25:be:c3:ea:b7:da:30:b5:f4:af:d1:a7:1c:a8:d7:b8:
         38:8f:e9:0a:40:4e:e3:bf:96:74:77:95:25:89:51:45:e0:96:
         35:de:3d:b0:6f:b4:9b:d0:35:5c:23:f2:d7:7b:a3:de:98:f2:
         7a:98:98:c9:20:18:43:a7:70:60:ad:22:39:df:98:f4:81:5e:
         1d:6e:04:92:07:ae:e4:78:5f:fc:14:67:96:f6:7b:c5:18:23:
         88:a7:63:6d:70:f6:7d:1a:38:8c:f3:44:50:da:fb:b9:5f:bd:
         8a:2a:e9:56:11:36:77:d8:8c:fa:d0:ce:46:29:3e:70:c6:fd:
         73:31:22:70:11:d3:ce:a4:5d:2c:a0:f5:4b:8e:7f:d6:1f:2f:
         f3:28:5b:da:71:75:af:9a:56:ab:ce:73:ad:14:9a:bc:e8:c4:
         80:74:07:0e:db:1c:47:87:13:e5:54:ee:ba:78:e4:f3:2f:ca:
         c8:2e:08:0b:c1:42:26:59:bc:b3:4e:2e:8f:29:1f:c6:9f:29:
         e4:1b:53:8c:6e:85:ab:c3:ca:23:64:3c:30:84:a0:e6:18:26:
         31:03:75:a4:4d:93:c0:7a:e1:4f:55:b0:31:3f:e2:72:ec:25:
         11:c2:74:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVUmCE12rAyn9BBNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyZGI3NDMtYjQ0Mi00MDY2LThlMDItMGRjZDQ3NDcx
ZGNlMB4XDTI0MDMyNjAxMDAyNVoXDTI0MDYyNDAxMDAyNVowLzEtMCsGA1UEAxMk
N2MwY2MwZjYtM2E2YS00Y2RjLTg3YWYtNWRlMzhhZGVmY2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntzA4PGcln376SRjmRxG3xVqTDdpWSyvEWw3
ZHGs8mgH9BEbf9N5Da4qYMMHb1aAp6ayJ69a2qjd16XU67uQC+k0C2/go9AEGQAh
w1JS9zO9iBvSPVzbNWzeRPp/QGDpsYbul5bn1d3Eo9VCn620xw7eaggjREl6v5Sj
Li6AvXYPg2QfocINtjdPEOHlq48tlmcOsEAFqU3qfakCkfWQePfQriDnG2wtHEO+
gHUAQs6FQf/armQ74xGZzaxeWen/ZVxK0AD7NTK53A9SyfB4DFK3MVQY3E0XwCVC
8BFKU+g68A6c3TMDJ8LrDhIORJNNw3Ni1TUbfOrQzwGjzwFnAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFqFdR7Z2lD4X5EWWHHEFQPbQ50HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTJk
Yjc0My1iNDQyLTQwNjYtOGUwMi0wZGNkNDc0NzFkY2UvNTg5Njk1MDctY2E3Yy0z
MmNiLTlmYzktN2M4ZWE3ZGRjYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTUyZGI3NDMtYjQ0Mi00MDY2LThl
MDItMGRjZDQ3NDcxZGNlLzU1MmRiNzQzLWI0NDItNDA2Ni04ZTAyLTBkY2Q0NzQ3
MWRjZS5jcmwwHwYDVR0jBBgwFoAU6m0i4+Sxndvay/Dik7AYgek/mbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTJkYjc0My1iNDQyLTQwNjYtOGUwMi0wZGNk
NDc0NzFkY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK/iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTUaicny7ZJtfmOZrn1Yoy52TenJb7D6rfaMLX0r9GnHKjXuDiP6QpA
TuO/lnR3lSWJUUXgljXePbBvtJvQNVwj8td7o96Y8nqYmMkgGEOncGCtIjnfmPSB
Xh1uBJIHruR4X/wUZ5b2e8UYI4inY21w9n0aOIzzRFDa+7lfvYoq6VYRNnfYjPrQ
zkYpPnDG/XMxInAR086kXSyg9UuOf9YfL/MoW9pxda+aVqvOc60UmrzoxIB0Bw7b
HEeHE+VU7rp45PMvysguCAvBQiZZvLNOLo8pH8afKeQbU4xuhavDyiNkPDCEoOYY
JjEDdaRNk8B64U9VsDE/4nLsJRHCdDI=
-----END CERTIFICATE-----
Generated at Sat May 11 15:33:29 2024 by rpki-client on console-fra.rpki-client.org