Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/61c36f2d-9b10-32ab-b83f-63c32570908d.roa
File:                     61c36f2d-9b10-32ab-b83f-63c32570908d.roa (raw, json)
Hash identifier:          jki9NfpKtEVXfpchsdsiuEf4gCZXNGwK5PkkN0cmd54=
Subject key identifier:   DF:AB:FD:5B:CC:E3:F6:42:FE:12:F9:D1:26:D9:FA:BE:82:CE:5A:41
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F432858451480325528117659316B17C0
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/61c36f2d-9b10-32ab-b83f-63c32570908d.roa
Signing time:             Sun 03 Mar 2024 02:00:27 +0000
ROA not before:           Sun 03 Mar 2024 02:00:27 +0000
ROA not after:            Sat 01 Jun 2024 01:00:27 +0000
asID:                     35950
IP address blocks:        204.156.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:80:32:55:28:11:76:59:31:6b:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Mar  3 02:00:27 2024 GMT
            Not After : Jun  1 01:00:27 2024 GMT
        Subject: CN=0ae1645c-5733-477f-9b8d-12028cf4575d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:3d:4b:bb:18:57:35:d7:00:89:dd:b0:f3:
                    cb:10:1e:97:51:3b:1f:b6:4f:b1:6b:9a:c2:c1:80:
                    59:53:56:c4:fc:50:b6:ba:60:72:dc:3d:1d:61:6f:
                    90:1f:aa:bc:83:53:c6:3c:dd:48:9f:74:1b:ef:2a:
                    ae:45:09:b2:af:a8:ca:db:33:1e:14:e9:e5:27:19:
                    ab:ab:f8:63:c2:c7:95:c4:ed:43:53:5b:56:be:51:
                    e7:6f:6f:54:f9:aa:78:dd:22:78:4a:45:08:be:9b:
                    76:1b:86:de:9f:1d:93:98:9e:c6:9c:84:87:d4:aa:
                    a3:f4:3a:74:e8:26:c5:39:3b:72:39:b3:7d:62:85:
                    22:be:c0:9b:f1:8a:5d:b9:40:f2:4d:76:ba:29:31:
                    ef:cb:10:67:d8:10:ba:81:f1:67:58:b0:29:65:d7:
                    ad:3c:0e:47:2d:bd:8e:51:b3:6d:d2:69:ff:70:8d:
                    69:2e:e1:f5:5f:d7:ac:8e:50:7a:47:77:ce:3b:ff:
                    cc:18:78:a1:6d:ca:d3:a9:fa:c9:f9:cc:77:86:e4:
                    bc:46:45:dc:4b:c9:66:b8:0c:30:48:3d:77:25:c1:
                    3f:ef:20:12:4c:cd:8e:f3:1e:d6:25:5d:ed:2f:2d:
                    56:3b:3a:7b:47:c7:c6:12:fb:6d:be:f3:75:b5:18:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AB:FD:5B:CC:E3:F6:42:FE:12:F9:D1:26:D9:FA:BE:82:CE:5A:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/61c36f2d-9b10-32ab-b83f-63c32570908d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:be:4c:a7:1d:6b:af:31:81:bd:f7:b4:24:ab:97:1a:06:31:
         6b:e4:18:82:30:5b:7d:40:d9:05:57:8d:ff:86:45:8d:41:96:
         67:82:da:8e:71:2d:c6:20:82:b3:9d:e4:9e:ad:b4:aa:51:65:
         d0:1f:a4:28:2d:91:9e:c5:69:a7:52:6d:5c:24:7b:52:2f:7e:
         bf:79:0c:db:29:70:26:da:87:10:36:95:36:2f:93:5a:8d:44:
         68:bd:b6:06:fe:4e:af:1b:bb:ab:38:b2:14:94:d0:99:75:62:
         40:02:c3:71:36:08:04:fe:13:f2:b8:f3:b2:8a:fa:ec:3d:cc:
         a3:1c:84:59:15:e9:02:ca:9c:77:b0:5e:8c:98:38:36:4e:39:
         f3:b9:19:0e:78:15:94:c9:7c:78:18:01:cd:bd:8c:e3:93:eb:
         45:92:97:85:2a:0d:48:de:37:3b:ac:f7:54:44:6b:8b:69:a8:
         c9:f6:14:ee:f3:f9:b1:ee:ab:c1:2d:eb:8b:1d:6a:f0:63:de:
         fb:36:28:c3:4a:b4:b3:c7:82:77:fa:b3:a2:80:d2:e3:91:0d:
         5e:2c:cb:61:dc:ed:ea:3a:16:55:f8:99:65:70:3d:24:ca:e6:
         db:86:35:dc:cf:86:f1:2f:41:36:85:c4:64:ea:e2:93:32:cb:
         ae:81:48:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUUgDJVKBF2WTFrF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JjNzM0ODMtNjAzNC00ZGMwLWJiZjUtZTRkODJiZjI4
YWY5MB4XDTI0MDMwMzAyMDAyN1oXDTI0MDYwMTAxMDAyN1owLzEtMCsGA1UEAxMk
MGFlMTY0NWMtNTczMy00NzdmLTliOGQtMTIwMjhjZjQ1NzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn09S7sYVzXXAIndsPPLEB6XUTsftk+xa5rC
wYBZU1bE/FC2umBy3D0dYW+QH6q8g1PGPN1In3Qb7yquRQmyr6jK2zMeFOnlJxmr
q/hjwseVxO1DU1tWvlHnb29U+ap43SJ4SkUIvpt2G4benx2TmJ7GnISH1Kqj9Dp0
6CbFOTtyObN9YoUivsCb8YpduUDyTXa6KTHvyxBn2BC6gfFnWLApZdetPA5HLb2O
UbNt0mn/cI1pLuH1X9esjlB6R3fOO//MGHihbcrTqfrJ+cx3huS8RkXcS8lmuAww
SD13JcE/7yASTM2O8x7WJV3tLy1WOzp7R8fGEvttvvN1tRhqzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN+r/VvM4/ZC/hL50SbZ+r6CzlpBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3
MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4MmJmMjhhZjkvNjFjMzZmMmQtOWIxMC0z
MmFiLWI4M2YtNjNjMzI1NzA5MDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2JjNzM0ODMtNjAzNC00ZGMwLWJi
ZjUtZTRkODJiZjI4YWY5L2NiYzczNDgzLTYwMzQtNGRjMC1iYmY1LWU0ZDgyYmYy
OGFmOS5jcmwwHwYDVR0jBBgwFoAUXtsNbM5NizgqaOXw+ekRwi1IZsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYmM3MzQ4My02MDM0LTRkYzAtYmJmNS1lNGQ4
MmJmMjhhZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJxQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADO+TKcda68xgb33tCSrlxoGMWvkGIIwW31A2QVXjf+GRY1BlmeC2o5x
LcYggrOd5J6ttKpRZdAfpCgtkZ7FaadSbVwke1Ivfr95DNspcCbahxA2lTYvk1qN
RGi9tgb+Tq8bu6s4shSU0Jl1YkACw3E2CAT+E/K487KK+uw9zKMchFkV6QLKnHew
XoyYODZOOfO5GQ54FZTJfHgYAc29jOOT60WSl4UqDUjeNzus91REa4tpqMn2FO7z
+bHuq8Et64sdavBj3vs2KMNKtLPHgnf6s6KA0uORDV4sy2Hc7eo6FlX4mWVwPSTK
5tuGNdzPhvEvQTaFxGTq4pMyy66BSMU=
-----END CERTIFICATE-----
Generated at Sat May 18 16:58:13 2024 by rpki-client on console-fra.rpki-client.org