Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6d49050d-1eaf-33de-a66c-2eecc8f794c8.roa
File:                     6d49050d-1eaf-33de-a66c-2eecc8f794c8.roa (raw, json)
Hash identifier:          SaOUUiRK5v/7dLdO/dJeMPntRNnbqpg4mqnPS/uQDL4=
Subject key identifier:   F8:16:BA:98:BB:B3:12:D8:65:BF:27:91:DA:16:99:CF:A9:83:32:C7
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285845227597AD656F4A14F0A8B100
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6d49050d-1eaf-33de-a66c-2eecc8f794c8.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     212669
IP address blocks:        140.228.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:97:ad:65:6f:4a:14:f0:a8:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=d88e2afc-04e1-4f73-91a3-125d7af2c616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:90:7d:29:a1:10:5c:50:36:31:03:2f:4a:
                    8f:31:ce:c5:37:0d:92:46:1c:b0:ad:16:93:e9:59:
                    bd:55:c8:2c:28:9d:d5:d3:60:a2:38:9a:19:a2:70:
                    bb:d7:28:c5:4c:cc:be:28:5d:cb:ba:d8:af:91:84:
                    d1:19:b6:65:49:ef:db:60:57:24:1e:3b:62:a1:7d:
                    67:83:58:ef:65:d9:18:d7:34:43:de:5e:67:2d:46:
                    54:c8:20:7d:5a:81:76:e2:92:18:f9:06:d0:1e:ee:
                    cc:08:e7:cb:6d:6b:8e:d5:1e:55:b2:ed:29:b1:e6:
                    bf:5e:be:de:e4:7c:60:78:1d:89:37:bc:78:11:73:
                    8e:64:8a:81:e6:db:15:ec:1a:64:c6:73:12:0a:9b:
                    bd:99:23:b7:e3:d8:40:9a:d0:6a:00:08:bf:13:dc:
                    e5:01:38:43:cb:6e:57:91:8e:1b:4f:30:a2:ff:bd:
                    8e:cd:14:3d:7b:f7:ee:b4:31:05:ec:40:a3:4d:e9:
                    8b:9e:b2:c8:2e:2b:6d:a1:3d:dc:5b:18:c2:d1:25:
                    d0:fc:d0:52:d3:7a:93:f3:e6:8f:f3:ba:4e:1a:c5:
                    a4:6f:8d:e1:66:23:18:4f:71:3f:70:c0:99:ca:09:
                    a8:06:1d:b5:59:a9:03:34:50:66:bd:50:07:c5:cc:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:16:BA:98:BB:B3:12:D8:65:BF:27:91:DA:16:99:CF:A9:83:32:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6d49050d-1eaf-33de-a66c-2eecc8f794c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c4:6f:18:28:8c:73:48:c7:ca:d8:15:1c:09:38:af:15:19:
         be:eb:fd:f8:90:72:c9:3f:f3:93:af:5b:c6:6d:72:f7:76:6b:
         f7:eb:6a:ed:50:eb:93:7f:9b:5a:13:04:a4:35:7f:20:8f:aa:
         0f:0a:53:7a:95:07:e9:d5:00:4b:fc:2d:81:4d:88:11:b2:87:
         9b:6b:2b:5c:8f:50:5e:f1:8f:1f:fe:dc:31:77:6b:e9:61:ec:
         02:85:ee:47:70:a5:6f:cb:4e:53:33:0c:d3:ce:01:1a:f2:95:
         ee:32:c7:fd:78:07:b9:9f:56:66:0d:2e:fc:e6:02:24:92:2b:
         3a:d4:20:e2:50:ef:ef:81:06:b4:0d:fa:a0:33:ed:10:27:33:
         f0:d7:1b:95:cb:ea:58:e1:f1:cb:84:7d:88:20:56:e3:54:2d:
         fa:33:59:fb:a0:9c:a0:b7:fc:77:62:db:07:1d:e3:e6:26:bf:
         05:c5:c7:34:ac:09:81:17:02:cc:cb:08:a2:70:28:79:f8:39:
         73:00:cb:6e:49:94:4a:1c:96:e5:75:f9:d2:18:7c:14:b0:7a:
         9e:8a:cf:3e:90:2a:33:5f:60:73:f6:76:f8:31:be:64:2f:ad:
         e7:37:6b:7e:07:31:72:28:50:24:30:af:f0:29:fd:d9:4c:a3:
         53:15:c7:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUidZetZW9KFPCosQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MDMwODAyMDAyNloXDTI0MDYwNjAxMDAyNlowLzEtMCsGA1UEAxMk
ZDg4ZTJhZmMtMDRlMS00ZjczLTkxYTMtMTI1ZDdhZjJjNjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxOQfSmhEFxQNjEDL0qPMc7FNw2SRhywrRaT
6Vm9VcgsKJ3V02CiOJoZonC71yjFTMy+KF3LutivkYTRGbZlSe/bYFckHjtioX1n
g1jvZdkY1zRD3l5nLUZUyCB9WoF24pIY+QbQHu7MCOfLbWuO1R5Vsu0psea/Xr7e
5HxgeB2JN7x4EXOOZIqB5tsV7BpkxnMSCpu9mSO349hAmtBqAAi/E9zlAThDy25X
kY4bTzCi/72OzRQ9e/futDEF7ECjTemLnrLILittoT3cWxjC0SXQ/NBS03qT8+aP
87pOGsWkb43hZiMYT3E/cMCZygmoBh21WakDNFBmvVAHxcxmgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPgWupi7sxLYZb8nkdoWmc+pgzLHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNmQ0OTA1MGQtMWVhZi0z
M2RlLWE2NmMtMmVlY2M4Zjc5NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXEbxgojHNIx8rYFRwJOK8VGb7r/fiQcsk/85OvW8Ztcvd2a/frau1Q
65N/m1oTBKQ1fyCPqg8KU3qVB+nVAEv8LYFNiBGyh5trK1yPUF7xjx/+3DF3a+lh
7AKF7kdwpW/LTlMzDNPOARryle4yx/14B7mfVmYNLvzmAiSSKzrUIOJQ7++BBrQN
+qAz7RAnM/DXG5XL6ljh8cuEfYggVuNULfozWfugnKC3/Hdi2wcd4+YmvwXFxzSs
CYEXAszLCKJwKHn4OXMAy25JlEocluV1+dIYfBSwep6Kzz6QKjNfYHP2dvgxvmQv
rec3a34HMXIoUCQwr/Ap/dlMo1MVx/8=
-----END CERTIFICATE-----
Generated at Sat May 4 13:37:33 2024 by rpki-client on console-fra.rpki-client.org