Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b4eacfe3-bd9d-341d-8e97-1c74c119e428.roa
File:                     b4eacfe3-bd9d-341d-8e97-1c74c119e428.roa (raw, json)
Hash identifier:          FbHIc7B3D2p6jiVEWRc9WGSl5mnx1C8wHeMpNhgSOI0=
Subject key identifier:   BF:24:45:E6:3E:D5:86:D2:A1:2F:97:58:4C:0E:84:09:0D:BC:5A:53
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858455B92EFB49C8B343659099380
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b4eacfe3-bd9d-341d-8e97-1c74c119e428.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     64267
IP address blocks:        216.185.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:ef:b4:9c:8b:34:36:59:09:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=7dc26cee-e5be-4091-aafa-c7bc8cb30644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:b2:76:98:cc:02:54:4c:bd:30:be:36:27:
                    11:0b:1f:76:85:df:66:58:f7:b6:d4:85:f6:9f:65:
                    6e:71:c5:20:7f:72:e5:d0:69:a5:4f:50:41:ac:15:
                    4c:64:a4:d5:e1:52:0f:ab:c3:52:6f:2a:69:55:c8:
                    b0:36:a5:82:b5:16:3e:ad:c2:23:d0:d8:f9:4e:0c:
                    b4:90:a4:21:cd:ca:2c:15:d0:b3:05:e0:78:d2:5b:
                    aa:6a:ae:2a:ab:03:9f:e8:8a:42:06:b3:0c:b9:06:
                    63:0f:d0:4f:85:e4:48:40:f7:f7:fb:31:ad:ab:3e:
                    13:80:e7:a7:a7:28:d6:4e:9b:a5:b2:06:69:ec:da:
                    73:cf:fe:c9:7a:b7:f2:12:23:14:bb:1e:91:ff:09:
                    1a:e1:3c:ba:38:99:90:5b:d1:4f:4b:15:fd:f4:18:
                    08:fb:33:5b:53:94:50:78:10:b5:cd:3f:13:73:a2:
                    c2:b6:f9:2b:6e:af:36:a7:4c:aa:eb:84:88:7b:33:
                    d9:01:04:e0:9a:b7:26:20:90:4c:c7:26:c9:e8:53:
                    3c:f2:2a:6b:10:a2:e6:0e:fb:96:51:bd:36:2e:37:
                    3f:51:a1:be:e3:c9:02:76:5b:18:bc:cd:9c:ea:0d:
                    d0:d9:0b:0b:08:88:46:c8:04:fa:33:13:71:df:73:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:24:45:E6:3E:D5:86:D2:A1:2F:97:58:4C:0E:84:09:0D:BC:5A:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b4eacfe3-bd9d-341d-8e97-1c74c119e428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b8:fc:fe:b8:6b:4f:3e:34:1c:3b:7d:7f:f8:25:77:8a:66:
         87:ba:aa:dd:f5:69:44:be:76:c6:fe:f5:6c:3b:86:6c:bd:36:
         7b:ab:ae:2c:48:cc:75:f9:8b:b0:07:8b:d5:14:9d:9c:6f:25:
         65:38:a7:8c:d0:78:a9:14:78:89:2a:e5:ab:25:d1:86:62:e5:
         e4:3e:52:82:f4:51:c0:e0:04:74:14:d9:bd:a7:de:43:8d:2a:
         e2:8d:4e:c5:55:d6:5b:4f:ac:0b:89:8c:19:ae:a9:d9:2d:46:
         d7:b2:7f:80:45:23:93:be:dc:b4:db:2a:8e:ac:d7:38:f4:5f:
         20:24:04:17:ee:b3:6a:a2:d7:f0:c2:b2:34:dd:d7:0d:75:79:
         f9:bb:4e:33:c2:c9:6f:b2:56:f9:54:a9:a5:be:2f:96:a2:df:
         8c:a9:76:b3:b4:52:80:9a:68:dc:db:52:3d:52:7a:57:c4:29:
         0c:78:9b:cd:f4:6c:a3:92:6a:0c:de:04:87:32:5e:c4:f1:55:
         64:a2:82:bb:94:e7:84:e5:ce:0b:72:34:ed:63:f7:fd:a3:a7:
         7a:66:54:38:f5:7a:96:16:fa:f4:95:0e:02:65:55:49:ad:15:
         ac:d0:97:af:cf:b6:b8:cf:06:90:57:a8:53:bc:03:22:cf:cc:
         22:dd:98:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVbku+0nIs0NlkJk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk
N2RjMjZjZWUtZTViZS00MDkxLWFhZmEtYzdiYzhjYjMwNjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmCydpjMAlRMvTC+NicRCx92hd9mWPe21IX2
n2VuccUgf3Ll0GmlT1BBrBVMZKTV4VIPq8NSbyppVciwNqWCtRY+rcIj0Nj5Tgy0
kKQhzcosFdCzBeB40luqaq4qqwOf6IpCBrMMuQZjD9BPheRIQPf3+zGtqz4TgOen
pyjWTpulsgZp7Npzz/7JerfyEiMUux6R/wka4Ty6OJmQW9FPSxX99BgI+zNbU5RQ
eBC1zT8Tc6LCtvkrbq82p0yq64SIezPZAQTgmrcmIJBMxybJ6FM88iprEKLmDvuW
Ub02Ljc/UaG+48kCdlsYvM2c6g3Q2QsLCIhGyAT6MxNx33Nm7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8kReY+1YbSoS+XWEwOhAkNvFpTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYjRlYWNmZTMtYmQ5ZC0z
NDFkLThlOTctMWM3NGMxMTllNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Lk1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFu4/P64a08+NBw7fX/4JXeKZoe6qt31aUS+dsb+9Ww7hmy9NnurrixI
zHX5i7AHi9UUnZxvJWU4p4zQeKkUeIkq5asl0YZi5eQ+UoL0UcDgBHQU2b2n3kON
KuKNTsVV1ltPrAuJjBmuqdktRteyf4BFI5O+3LTbKo6s1zj0XyAkBBfus2qi1/DC
sjTd1w11efm7TjPCyW+yVvlUqaW+L5ai34ypdrO0UoCaaNzbUj1SelfEKQx4m830
bKOSagzeBIcyXsTxVWSigruU54TlzgtyNO1j9/2jp3pmVDj1epYW+vSVDgJlVUmt
FazQl6/PtrjPBpBXqFO8AyLPzCLdmIk=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:46 2024 by rpki-client on console-ams.rpki-client.org