Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa
File:                     8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa (raw, json)
Hash identifier:          Pok+TAdR0IpGX96hLfhHlny8BcQ+gLNXxdqxaXW8WQ0=
Subject key identifier:   58:D7:79:B9:84:9F:8B:29:8C:A1:B9:DA:62:70:30:7D:CE:42:25:9D
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584576184F96757480636C08A400
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa
Signing time:             Sun 07 Apr 2024 01:00:24 +0000
ROA not before:           Sun 07 Apr 2024 01:00:24 +0000
ROA not after:            Sat 06 Jul 2024 01:00:24 +0000
asID:                     13335
IP address blocks:        169.196.18.0/24 maxlen: 24
                          169.196.19.0/24 maxlen: 24
                          169.196.96.0/24 maxlen: 24
                          169.196.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:76:18:4f:96:75:74:80:63:6c:08:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Apr  7 01:00:24 2024 GMT
            Not After : Jul  6 01:00:24 2024 GMT
        Subject: CN=42d55f8f-c224-424c-baa9-9a548c509ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:b8:e0:f8:fe:d2:97:13:c4:43:f7:2a:e3:
                    55:4b:27:28:47:3c:e0:b0:ca:8d:67:45:ed:cf:05:
                    69:f4:61:1a:bf:8e:10:35:11:a9:36:26:a4:26:7c:
                    ee:18:1f:93:a9:0f:65:10:19:89:f5:3e:16:9d:28:
                    2c:bc:65:20:ea:e1:2c:c9:4b:a6:2f:55:cc:b8:f6:
                    fc:c1:1a:6a:9c:10:b4:05:15:2c:7a:c4:03:21:d0:
                    3e:71:63:0a:f2:3a:95:50:4f:19:2d:e1:48:16:da:
                    f1:1d:a4:3a:4d:29:28:1b:dd:14:c8:0d:4c:fc:2d:
                    27:b3:4f:76:e9:d6:de:b1:10:9e:b5:93:0f:db:cd:
                    6a:dc:fa:79:22:15:cb:e9:eb:3a:86:28:06:8f:29:
                    c1:57:ae:cf:ba:8a:d3:00:42:fc:49:c4:2c:28:07:
                    23:1b:c0:46:91:df:79:a4:09:cb:1b:e5:2d:7f:ca:
                    eb:8f:75:c1:d8:4d:5e:c6:83:f3:46:46:50:68:fb:
                    f7:69:20:ca:10:ab:a3:a3:73:67:bc:d8:e3:2c:2a:
                    dc:e7:60:42:c3:c5:33:f4:12:b4:7e:aa:ed:f2:fc:
                    e9:b8:e5:3c:10:a6:1c:12:43:91:cd:f6:a2:59:95:
                    1c:4f:c0:f5:ad:60:6d:5e:95:2a:47:fc:6b:7d:be:
                    b0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D7:79:B9:84:9F:8B:29:8C:A1:B9:DA:62:70:30:7D:CE:42:25:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/8378b3c9-0a0b-3d3e-b6a2-5eddccaeeb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.18.0/23
                  169.196.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5e:26:bb:f9:fa:94:49:2b:6a:af:f8:5f:ad:ab:94:c4:40:
         6f:38:95:02:5d:74:b5:a6:b6:28:3b:ba:71:c7:68:5e:f9:4a:
         49:f6:e7:41:5d:28:ab:21:66:ba:bb:d5:60:53:65:6c:2d:be:
         cc:8b:04:fc:f3:4b:02:e2:dd:3f:51:3a:91:b9:c7:9f:bc:e4:
         da:13:91:a0:20:7d:4e:b9:f0:9e:cd:e7:18:e4:2f:b7:ac:2e:
         24:f4:14:0a:71:01:d9:26:e1:30:77:37:d6:78:7d:8f:12:35:
         20:72:90:fb:37:55:ea:9b:f8:fb:55:de:d5:cf:be:7f:e4:f2:
         bc:33:4c:56:00:7e:e4:7a:40:9a:10:69:b8:a2:37:21:da:09:
         19:45:b7:0e:b2:93:e6:a3:46:fb:51:12:bf:08:e9:51:7f:09:
         2b:83:ea:a0:f1:42:66:71:fd:cd:c4:dc:f8:39:a2:db:8f:87:
         c5:e8:86:26:41:1f:dc:de:aa:64:c7:55:57:a3:47:9b:5f:d4:
         1d:62:7e:19:11:e2:51:1b:0a:2e:72:40:c1:d8:36:21:95:8d:
         04:c9:a4:88:cd:ae:0b:61:05:ab:70:6d:53:51:5c:67:95:9b:
         1c:2f:fa:43:16:09:b2:1a:7d:ad:bd:9d:a4:19:5b:29:64:67:
         07:46:ea:59
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEV2GE+WdXSAY2wIpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTczZWUxYmItYmI2Yi00Y2M2LWJjYTEtNGMxNjIyZGM0
ZWRiMB4XDTI0MDQwNzAxMDAyNFoXDTI0MDcwNjAxMDAyNFowLzEtMCsGA1UEAxMk
NDJkNTVmOGYtYzIyNC00MjRjLWJhYTktOWE1NDhjNTA5Y2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Zy44Pj+0pcTxEP3KuNVSycoRzzgsMqNZ0Xt
zwVp9GEav44QNRGpNiakJnzuGB+TqQ9lEBmJ9T4WnSgsvGUg6uEsyUumL1XMuPb8
wRpqnBC0BRUsesQDIdA+cWMK8jqVUE8ZLeFIFtrxHaQ6TSkoG90UyA1M/C0ns092
6dbesRCetZMP281q3Pp5IhXL6es6higGjynBV67PuorTAEL8ScQsKAcjG8BGkd95
pAnLG+Utf8rrj3XB2E1exoPzRkZQaPv3aSDKEKujo3NnvNjjLCrc52BCw8Uz9BK0
fqrt8vzpuOU8EKYcEkORzfaiWZUcT8D1rWBtXpUqR/xrfb6w0wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFjXebmEn4spjKG52mJwMH3OQiWdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzNl
ZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJkYzRlZGIvODM3OGIzYzktMGEwYi0z
ZDNlLWI2YTItNWVkZGNjYWVlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTczZWUxYmItYmI2Yi00Y2M2LWJj
YTEtNGMxNjIyZGM0ZWRiLzU3M2VlMWJiLWJiNmItNGNjNi1iY2ExLTRjMTYyMmRj
NGVkYi5jcmwwHwYDVR0jBBgwFoAU5bcwnII1o67jk7VvPhVOUUksQ+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2
MjJkYzRlZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBqcQSAwQB
qcRgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAG1eJrv5+pRJK2qv+F+tq5TEQG84lQJddLWmtig7unHHaF75
Skn250FdKKshZrq71WBTZWwtvsyLBPzzSwLi3T9ROpG5x5+85NoTkaAgfU658J7N
5xjkL7esLiT0FApxAdkm4TB3N9Z4fY8SNSBykPs3Veqb+PtV3tXPvn/k8rwzTFYA
fuR6QJoQabiiNyHaCRlFtw6yk+ajRvtREr8I6VF/CSuD6qDxQmZx/c3E3Pg5otuP
h8XohiZBH9zeqmTHVVejR5tf1B1ifhkR4lEbCi5yQMHYNiGVjQTJpIjNrgthBatw
bVNRXGeVmxwv+kMWCbIafa29naQZWylkZwdG6lk=
-----END CERTIFICATE-----
Generated at Sat May 11 07:52:15 2024 by rpki-client on console-ams.rpki-client.org