Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6d70cc53-b157-3df4-baf6-a493f1610869.roa
File:                     6d70cc53-b157-3df4-baf6-a493f1610869.roa (raw, json)
Hash identifier:          GJchkelFZJ6Axs1ZJq7Yp+Et+w5niaJThHFYNkr2KZ0=
Subject key identifier:   FE:2F:8D:E3:E6:EF:F9:99:4F:98:60:53:16:3F:B6:DA:6F:49:C6:70
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328583B4568E20BB470A69C355F9300
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6d70cc53-b157-3df4-baf6-a493f1610869.roa
Signing time:             Fri 14 Aug 2020 04:00:00 +0000
ROA not before:           Fri 14 Aug 2020 04:00:00 +0000
ROA not after:            Wed 14 Aug 2030 04:00:00 +0000
asID:                     398324
IP address blocks:        167.94.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Mar 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:45:68:e2:0b:b4:70:a6:9c:35:5f:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Aug 14 04:00:00 2020 GMT
            Not After : Aug 14 04:00:00 2030 GMT
        Subject: CN=10535cec-29d5-48fc-b7d0-9295457d1d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:a0:0d:13:49:0b:8d:31:b7:d2:c1:f4:fd:
                    6a:06:98:ca:75:44:1e:89:67:78:86:14:46:53:fa:
                    81:f1:f4:43:c3:79:2c:ec:84:18:54:98:fd:ae:11:
                    bd:6c:5a:b5:69:4e:0d:c9:80:49:91:dc:bf:01:ef:
                    76:78:39:38:da:7b:2b:db:3a:6a:c8:a3:65:bf:a0:
                    6d:9f:bb:12:51:2e:38:94:45:ff:7e:31:ea:a8:05:
                    74:6a:3a:b3:c5:4e:7a:b6:ae:fb:cb:8f:a5:cb:d3:
                    f5:fd:88:2a:70:c0:11:2b:37:6e:c4:7b:4a:24:c4:
                    f4:73:06:c2:cd:76:eb:f1:d0:63:7b:79:3a:75:fb:
                    5d:65:81:b4:dc:70:5f:62:1e:70:24:d8:c1:4f:1f:
                    76:e5:a2:74:27:7b:6a:82:a0:e6:32:9f:1f:1f:19:
                    ea:41:0a:72:6d:0f:b8:a5:0b:0b:25:46:5a:63:58:
                    de:24:ee:60:3c:de:16:31:a1:25:70:17:7e:90:90:
                    29:43:91:b7:08:ed:a1:84:1c:c0:91:6a:98:5e:8c:
                    cc:1b:8d:90:d5:fa:79:f0:36:4a:de:8b:30:ca:83:
                    41:52:84:1a:82:28:73:14:f9:fb:85:81:9b:ac:db:
                    e5:4b:7a:61:66:e7:14:6d:90:5f:41:ac:e0:6a:29:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FE:2F:8D:E3:E6:EF:F9:99:4F:98:60:53:16:3F:B6:DA:6F:49:C6:70
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6d70cc53-b157-3df4-baf6-a493f1610869.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier: 
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:30:cc:63:08:e9:0a:de:7f:63:ae:37:00:f6:2b:70:13:46:
         bb:f4:4b:d2:45:99:e1:0e:5a:0c:84:97:fa:d8:a6:ea:29:97:
         8a:65:cf:77:68:f6:9f:41:14:ea:ed:55:10:ca:57:89:fb:ea:
         08:b3:14:26:10:09:3d:19:ec:1c:59:80:61:a5:c6:3b:cc:a0:
         a3:dc:41:ed:9e:24:94:37:68:dd:5f:ee:24:89:88:1a:d8:25:
         5c:2a:5b:35:01:1a:1c:43:fe:9d:b3:b7:69:6e:0a:6b:54:62:
         8c:0d:e5:a5:a1:60:20:d5:06:e5:33:c4:18:48:a5:7a:7b:00:
         09:44:b1:e9:2c:89:65:51:7b:be:82:cd:24:22:cf:e6:5c:dc:
         9d:36:5e:b9:84:3b:7e:0c:58:18:34:15:3a:b1:34:2b:29:71:
         0f:33:02:a6:80:79:cc:db:2e:b1:85:9c:69:a3:98:6b:e6:51:
         cb:fc:35:75:14:a5:62:e2:07:23:54:e9:77:2a:02:6a:3a:8a:
         72:6d:b2:aa:77:14:ba:dd:46:b2:93:5a:de:e8:3a:19:1b:7a:
         f1:00:95:3d:ca:0d:13:98:15:66:72:f6:47:5f:f2:84:c8:e8:
         7d:4b:ed:73:d4:67:d7:03:66:12:4b:96:69:7b:0f:49:d2:b1:
         58:bc:91:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDtFaOILtHCmnDVfkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5
ODY5MB4XDTIwMDgxNDA0MDAwMFoXDTMwMDgxNDA0MDAwMFowLzEtMCsGA1UEAxMk
MTA1MzVjZWMtMjlkNS00OGZjLWI3ZDAtOTI5NTQ1N2QxZDU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfWgDRNJC40xt9LB9P1qBpjKdUQeiWd4hhRG
U/qB8fRDw3ks7IQYVJj9rhG9bFq1aU4NyYBJkdy/Ae92eDk42nsr2zpqyKNlv6Bt
n7sSUS44lEX/fjHqqAV0ajqzxU56tq77y4+ly9P1/YgqcMARKzduxHtKJMT0cwbC
zXbr8dBje3k6dftdZYG03HBfYh5wJNjBTx925aJ0J3tqgqDmMp8fHxnqQQpybQ+4
pQsLJUZaY1jeJO5gPN4WMaElcBd+kJApQ5G3CO2hhBzAkWqYXozMG42Q1fp58DZK
3oswyoNBUoQagihzFPn7hYGbrNvlS3phZucUbZBfQazgaimpkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4vjePm7/mZT5hgUxY/ttpvScZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4
ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvNmQ3MGNjNTMtYjE1Ny0z
ZGY0LWJhZjYtYTQ5M2YxNjEwODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj
NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk
OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3
Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp16KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgwzGMI6Qref2OuNwD2K3ATRrv0S9JFmeEOWgyEl/rYpuopl4plz3do
9p9BFOrtVRDKV4n76gizFCYQCT0Z7BxZgGGlxjvMoKPcQe2eJJQ3aN1f7iSJiBrY
JVwqWzUBGhxD/p2zt2luCmtUYowN5aWhYCDVBuUzxBhIpXp7AAlEseksiWVRe76C
zSQiz+Zc3J02XrmEO34MWBg0FTqxNCspcQ8zAqaAeczbLrGFnGmjmGvmUcv8NXUU
pWLiByNU6XcqAmo6inJtsqp3FLrdRrKTWt7oOhkbevEAlT3KDROYFWZy9kdf8oTI
6H1L7XPUZ9cDZhJLlml7D0nSsVi8kd4=
-----END CERTIFICATE-----
Generated at Wed Mar 15 11:59:02 2023 by rpki-client on console-fra.rpki-client.org