Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/30696268-5078-3dbd-8376-a7af67b37ef8.roa
File:                     30696268-5078-3dbd-8376-a7af67b37ef8.roa (raw, json)
Hash identifier:          p5q+l17TEiXx0NM6Aul7JYsLpsdp4/Xm50nmR75NqUo=
Subject key identifier:   A7:50:1A:2B:A2:25:B5:C9:B5:40:68:D1:CF:61:4E:F5:84:2C:06:05
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2FEFC7D0D1752D2B69E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/30696268-5078-3dbd-8376-a7af67b37ef8.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        172.223.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:fe:fc:7d:0d:17:52:d2:b6:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=15aa681b-025b-4fc0-9200-a56d2de8547a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:35:c6:c8:5a:36:a4:69:72:35:58:87:ab:
                    5c:94:3e:09:11:19:9a:ce:94:5a:8d:0f:dc:16:a5:
                    ba:1c:47:42:87:7d:06:c0:ca:ac:05:13:45:68:08:
                    07:95:d9:ea:0f:20:df:8a:c1:5f:a0:43:77:40:15:
                    9e:06:f0:b0:84:74:0b:4c:cd:9d:e4:ae:cf:7e:3e:
                    e4:a2:6b:04:db:c4:b6:59:37:b8:b1:a0:d6:e4:3c:
                    c0:60:13:ac:5a:82:e4:c1:a2:fa:56:e5:12:55:35:
                    07:03:0c:a7:10:f4:9c:78:46:3f:97:3e:8f:d3:70:
                    c0:e5:89:34:81:64:0b:3f:fa:79:96:b1:57:b5:c5:
                    81:df:46:19:bb:04:35:4e:7d:9e:9b:a6:74:af:1c:
                    7a:b2:9f:67:c7:78:04:08:e0:84:48:b7:94:b1:c8:
                    be:43:ee:bf:ff:47:a7:a6:df:0a:2f:49:87:85:19:
                    39:ca:66:a1:30:6b:84:60:46:81:81:05:f8:5c:db:
                    5e:14:29:b4:eb:42:12:b7:5d:1f:2f:de:34:eb:da:
                    38:cf:0c:a6:29:6e:14:49:a0:35:4b:94:c6:ea:c9:
                    99:14:6b:c3:c9:b0:16:64:28:33:24:45:c5:84:cd:
                    a0:35:2e:23:ac:2e:38:d9:d3:9b:4f:ec:23:94:5a:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:1A:2B:A2:25:B5:C9:B5:40:68:D1:CF:61:4E:F5:84:2C:06:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/30696268-5078-3dbd-8376-a7af67b37ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.223.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:24:18:8a:07:6c:8f:41:6d:15:c1:15:c2:23:32:de:f5:48:
         f9:74:ef:fa:fa:b6:24:f6:b1:b1:61:38:f6:94:f7:af:6a:19:
         47:4b:76:64:6c:3e:48:0e:76:c2:db:3b:bc:0f:03:84:b1:fc:
         4e:b8:55:98:32:ff:48:f6:54:4a:4a:dc:75:50:67:60:8f:d5:
         d9:90:ab:48:7f:ac:e9:4f:ea:0f:ca:bc:11:00:c8:b3:42:ae:
         96:35:46:c1:49:fa:19:e0:20:44:04:40:b6:0a:9b:b5:3e:6c:
         26:5b:64:d0:dd:90:7a:50:c2:64:b6:4f:97:74:37:10:e6:91:
         d8:d8:32:f8:88:2d:47:1e:c4:65:0f:a2:5c:e1:31:9c:4d:db:
         5a:49:8a:88:71:ed:04:d5:a3:6a:4b:91:a2:19:eb:44:c6:82:
         e1:be:9c:dd:07:b4:97:f5:f8:18:18:4c:ee:d3:e9:6d:e9:15:
         98:40:b4:4e:2f:42:f6:a3:0d:1c:8a:6c:00:82:0c:7b:a3:87:
         65:44:5d:6b:96:5e:51:3d:be:33:2b:91:bd:e1:dd:2d:42:8e:
         be:db:90:9e:fd:ce:72:e7:74:72:5c:0f:24:75:d7:89:ab:82:
         3c:0d:00:d4:d2:17:e6:24:a4:bf:63:37:1f:85:45:66:2b:c5:
         bf:9e:8e:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfwv78fQ0XUtK2ngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
MTVhYTY4MWItMDI1Yi00ZmMwLTkyMDAtYTU2ZDJkZTg1NDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthQ1xshaNqRpcjVYh6tclD4JERmazpRajQ/c
FqW6HEdCh30GwMqsBRNFaAgHldnqDyDfisFfoEN3QBWeBvCwhHQLTM2d5K7Pfj7k
omsE28S2WTe4saDW5DzAYBOsWoLkwaL6VuUSVTUHAwynEPSceEY/lz6P03DA5Yk0
gWQLP/p5lrFXtcWB30YZuwQ1Tn2em6Z0rxx6sp9nx3gECOCESLeUsci+Q+6//0en
pt8KL0mHhRk5ymahMGuEYEaBgQX4XNteFCm060ISt10fL94069o4zwymKW4USaA1
S5TG6smZFGvDybAWZCgzJEXFhM2gNS4jrC442dObT+wjlFrrnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdQGiuiJbXJtUBo0c9hTvWELAYFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzA2OTYyNjgtNTA3OC0z
ZGJkLTgzNzYtYTdhZjY3YjM3ZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgkGIoHbI9BbRXBFcIjMt71SPl07/r6tiT2sbFhOPaU969qGUdLdmRs
PkgOdsLbO7wPA4Sx/E64VZgy/0j2VEpK3HVQZ2CP1dmQq0h/rOlP6g/KvBEAyLNC
rpY1RsFJ+hngIEQEQLYKm7U+bCZbZNDdkHpQwmS2T5d0NxDmkdjYMviILUcexGUP
olzhMZxN21pJiohx7QTVo2pLkaIZ60TGguG+nN0HtJf1+BgYTO7T6W3pFZhAtE4v
QvajDRyKbACCDHujh2VEXWuWXlE9vjMrkb3h3S1Cjr7bkJ79znLndHJcDyR114mr
gjwNANTSF+YkpL9jNx+FRWYrxb+ejns=
-----END CERTIFICATE-----
Generated at Thu May 9 15:34:10 2024 by rpki-client on console-fra.rpki-client.org