Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/f1a750bf-04f3-3a19-b63f-5fac2470b105.roa
File:                     f1a750bf-04f3-3a19-b63f-5fac2470b105.roa (raw, json)
Hash identifier:          BkrSErwd6iX7tKEMlWVq7Sn2QbEqL1Q/ViljzDbJEXw=
Subject key identifier:   E0:F0:74:97:52:33:3A:19:FB:2C:E3:26:86:19:20:ED:83:05:9B:34
Certificate issuer:       /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial:       010D0C9F43285844E70681A38146E5B952C5FA00
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/f1a750bf-04f3-3a19-b63f-5fac2470b105.roa
Signing time:             Thu 15 Feb 2024 19:03:59 +0000
ROA not before:           Thu 15 Feb 2024 19:03:59 +0000
ROA not after:            Wed 15 May 2024 18:03:59 +0000
asID:                     14618
IP address blocks:        192.88.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:06:81:a3:81:46:e5:b9:52:c5:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
        Validity
            Not Before: Feb 15 19:03:59 2024 GMT
            Not After : May 15 18:03:59 2024 GMT
        Subject: CN=e29af966-842e-497d-b7cb-6ebf9a45504c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:d2:58:d0:33:02:f9:27:aa:e2:a3:53:74:
                    47:ba:7e:89:e6:fb:f5:8a:c1:55:13:d9:8a:bb:8c:
                    b6:73:13:d6:8d:b5:09:e8:32:f3:44:7a:52:55:3a:
                    69:95:cf:ab:23:d3:95:b6:b3:18:f0:07:c1:27:b7:
                    c4:eb:1a:05:dd:65:86:45:16:c0:17:f3:44:09:91:
                    e4:57:1d:e3:c0:c1:65:c3:56:21:12:3b:e7:31:58:
                    34:75:5c:6a:7c:b9:8a:78:8e:99:d7:4e:7f:14:71:
                    e9:6f:8f:7b:83:07:e6:31:64:2f:6a:eb:4f:ed:74:
                    f8:30:51:14:a3:d3:34:fc:b9:e2:32:7d:83:ec:ec:
                    5a:fb:27:19:d6:4d:46:fa:ff:0d:ee:dd:d6:05:ad:
                    28:45:5d:8b:cc:f8:f8:df:c7:e4:e6:97:ee:f4:dc:
                    fc:a1:c2:14:bb:36:04:84:e9:2c:f2:02:f9:53:bf:
                    b4:9e:f0:51:32:66:8e:36:e9:ef:dd:9f:ba:4f:88:
                    07:de:a6:0b:93:60:f6:4e:f6:6b:f7:f1:ae:4f:0e:
                    31:a4:f7:d8:79:d8:29:35:c5:ee:19:1a:dc:27:e2:
                    ba:01:ee:2c:db:37:ea:6e:27:71:64:03:ff:14:18:
                    b0:68:54:0c:51:46:5e:ab:5a:8b:f9:ce:ed:df:0b:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F0:74:97:52:33:3A:19:FB:2C:E3:26:86:19:20:ED:83:05:9B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/f1a750bf-04f3-3a19-b63f-5fac2470b105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:de:e8:69:e3:08:30:1e:2d:3d:3b:dc:e2:ed:ca:27:4f:9b:
         9e:54:e6:be:f9:d0:de:ad:f5:f8:3f:01:34:a1:ac:f7:4f:bb:
         ac:71:7e:bb:88:01:50:eb:8f:41:b0:bd:84:e4:ac:86:82:d2:
         83:d6:db:8e:1c:34:1b:80:01:f8:f4:34:f9:04:d0:99:23:3e:
         ee:97:41:35:30:b3:db:32:d0:15:a0:ee:19:de:83:3c:2c:0a:
         91:dd:b4:37:39:fb:ba:25:59:83:29:13:a8:e8:be:45:44:ee:
         cc:06:6a:19:a8:82:e0:ef:6b:c1:42:d7:77:1c:fc:9d:f6:ea:
         0a:8a:3b:6c:5a:85:14:56:83:3e:42:15:75:3e:47:b0:72:49:
         b3:25:88:9b:bc:cd:ac:64:7a:d8:9d:e6:dd:0f:d7:de:23:81:
         a1:26:4c:7c:49:ac:73:1d:c2:bc:0b:3e:83:c9:f4:b2:16:9e:
         4c:ed:1a:36:3d:af:ca:bd:de:9e:a0:46:c7:15:70:9f:62:c0:
         f1:67:1e:50:48:5b:e3:33:59:3d:cb:a1:83:a7:f2:2e:d6:65:
         25:1d:c5:92:31:f0:64:45:0b:be:c6:8c:25:2c:5c:78:49:ba:
         c1:b3:2e:7c:d6:d0:6c:93:cf:0e:bd:29:9d:e6:35:b0:83:09:
         cb:81:04:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETnBoGjgUbluVLF+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy
N2EwMB4XDTI0MDIxNTE5MDM1OVoXDTI0MDUxNTE4MDM1OVowLzEtMCsGA1UEAxMk
ZTI5YWY5NjYtODQyZS00OTdkLWI3Y2ItNmViZjlhNDU1MDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv/SWNAzAvknquKjU3RHun6J5vv1isFVE9mK
u4y2cxPWjbUJ6DLzRHpSVTpplc+rI9OVtrMY8AfBJ7fE6xoF3WWGRRbAF/NECZHk
Vx3jwMFlw1YhEjvnMVg0dVxqfLmKeI6Z105/FHHpb497gwfmMWQvautP7XT4MFEU
o9M0/LniMn2D7Oxa+ycZ1k1G+v8N7t3WBa0oRV2LzPj438fk5pfu9Nz8ocIUuzYE
hOks8gL5U7+0nvBRMmaONunv3Z+6T4gH3qYLk2D2TvZr9/GuTw4xpPfYedgpNcXu
GRrcJ+K6Ae4s2zfqbidxZAP/FBiwaFQMUUZeq1qL+c7t3wvqWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODwdJdSMzoZ+yzjJoYZIO2DBZs0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5
ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvZjFhNzUwYmYtMDRmMy0z
YTE5LWI2M2YtNWZhYzI0NzBiMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz
YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0
MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3
MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFiHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXe6GnjCDAeLT073OLtyidPm55U5r750N6t9fg/ATShrPdPu6xxfruI
AVDrj0GwvYTkrIaC0oPW244cNBuAAfj0NPkE0JkjPu6XQTUws9sy0BWg7hnegzws
CpHdtDc5+7olWYMpE6jovkVE7swGahmoguDva8FC13cc/J326gqKO2xahRRWgz5C
FXU+R7BySbMliJu8zaxketid5t0P194jgaEmTHxJrHMdwrwLPoPJ9LIWnkztGjY9
r8q93p6gRscVcJ9iwPFnHlBIW+MzWT3LoYOn8i7WZSUdxZIx8GRFC77GjCUsXHhJ
usGzLnzW0GyTzw69KZ3mNbCDCcuBBPM=
-----END CERTIFICATE-----
Generated at Thu May 2 08:56:07 2024 by rpki-client on console-fra.rpki-client.org