Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/332b0f3d-3736-3c31-87bb-c94dca0110a0.roa
File:                     332b0f3d-3736-3c31-87bb-c94dca0110a0.roa (raw, json)
Hash identifier:          fwbfIvOnrSTfrX6Bla1sOwTX6Upwu1XwNA3H9inJak8=
Subject key identifier:   42:A1:A4:B1:4E:75:7F:58:3F:7F:45:DC:EE:79:B9:C0:43:7A:C9:5D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858453E42AAE9EB8739B98691DEA6
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/332b0f3d-3736-3c31-87bb-c94dca0110a0.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     63440
IP address blocks:        67.227.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:aa:e9:eb:87:39:b9:86:91:de:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=d76b5cae-6dee-4a53-aee0-b9037fe6b11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fa:35:24:11:83:2c:3a:49:0d:48:07:28:36:
                    00:31:dd:30:ea:3d:82:a6:18:16:aa:cd:4e:72:08:
                    7b:b5:74:d0:84:99:a7:8a:7e:e1:31:f3:aa:4a:21:
                    64:c4:75:0c:b7:bd:bd:56:5f:9d:87:2c:70:a7:dc:
                    9c:54:79:95:97:ae:20:b6:dd:90:34:d4:09:d0:64:
                    72:b0:81:29:6b:35:7d:e3:02:3e:12:90:c3:99:6e:
                    5d:90:c4:f1:1f:69:35:3a:69:2d:8a:03:7f:46:58:
                    f8:0b:c1:bf:53:07:c3:3c:42:6f:bf:84:88:a1:db:
                    08:e9:42:61:1e:0a:0a:98:15:eb:e3:3e:e2:cc:4a:
                    0a:81:42:8d:74:f0:79:ac:16:6b:d2:9f:c2:d4:47:
                    44:e3:ea:83:98:ce:40:c6:f3:cd:77:39:fd:cd:8d:
                    4e:cc:25:3c:27:ca:a0:e0:56:3b:bb:42:60:69:0f:
                    48:18:f7:69:83:50:6b:40:78:93:ee:45:3b:3e:a0:
                    d1:3d:c8:4a:c6:b4:d9:73:40:86:fd:6b:85:ef:7f:
                    ee:52:72:21:57:eb:98:78:ec:ca:45:98:fc:28:cc:
                    13:47:be:4c:8b:17:8f:08:d7:aa:fa:5e:1b:fd:2e:
                    13:6a:37:e3:f5:c9:e8:9f:c2:94:59:a4:4f:8b:0f:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A1:A4:B1:4E:75:7F:58:3F:7F:45:DC:EE:79:B9:C0:43:7A:C9:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/332b0f3d-3736-3c31-87bb-c94dca0110a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b9:db:21:a9:bd:fa:5e:01:0a:1a:a3:42:4a:70:f8:09:ff:
         27:44:82:41:53:36:fb:25:3d:38:f8:1c:8e:05:70:9b:a4:a7:
         91:23:ae:0d:4e:6b:85:99:e1:af:d6:c1:ec:70:41:55:f5:d8:
         33:09:01:bd:12:75:b6:16:e9:fa:d5:01:19:74:b6:bb:9a:17:
         51:c5:47:31:d2:38:fc:b3:af:36:3c:84:44:db:1b:54:b6:92:
         e2:c9:31:f4:17:a3:42:60:51:ed:30:93:3f:cc:6e:70:71:38:
         81:5f:58:02:d7:89:5c:50:f3:b1:dd:aa:63:83:01:c2:6b:dd:
         04:7f:f0:26:aa:d6:5d:b1:70:64:65:34:42:b4:6a:9a:08:8c:
         f3:d3:e3:96:e5:ea:ba:13:5f:6a:e4:83:f3:04:f4:c8:e8:24:
         b8:c2:2f:93:11:02:85:d1:34:ab:19:e3:9b:9b:1f:5a:de:97:
         98:aa:d9:ba:c9:66:b5:45:9e:bf:5f:a3:62:f8:9d:0d:d7:f4:
         fa:1f:f1:f3:7d:26:c3:c1:e9:a1:ad:1c:e3:91:b6:ce:65:42:
         eb:97:a4:57:ab:1d:69:da:23:c6:5e:ff:7c:b6:a5:67:82:55:
         b1:e2:a6:3b:b8:b5:05:6b:84:97:32:f3:8f:a9:34:4c:66:84:
         01:d1:e9:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU+Qqrp64c5uYaR3qYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDMxODAxMDAyNVoXDTI0MDYxNjAxMDAyNVowLzEtMCsGA1UEAxMk
ZDc2YjVjYWUtNmRlZS00YTUzLWFlZTAtYjkwMzdmZTZiMTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfo1JBGDLDpJDUgHKDYAMd0w6j2CphgWqs1O
cgh7tXTQhJmnin7hMfOqSiFkxHUMt729Vl+dhyxwp9ycVHmVl64gtt2QNNQJ0GRy
sIEpazV94wI+EpDDmW5dkMTxH2k1OmktigN/Rlj4C8G/UwfDPEJvv4SIodsI6UJh
HgoKmBXr4z7izEoKgUKNdPB5rBZr0p/C1EdE4+qDmM5AxvPNdzn9zY1OzCU8J8qg
4FY7u0JgaQ9IGPdpg1BrQHiT7kU7PqDRPchKxrTZc0CG/WuF73/uUnIhV+uYeOzK
RZj8KMwTR75MixePCNeq+l4b/S4Tajfj9cnon8KUWaRPiw8dgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKhpLFOdX9YP39F3O55ucBDesldMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMzMyYjBmM2QtMzczNi0z
YzMxLTg3YmItYzk0ZGNhMDExMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+MEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC252yGpvfpeAQoao0JKcPgJ/ydEgkFTNvslPTj4HI4FcJukp5Ejrg1O
a4WZ4a/WwexwQVX12DMJAb0SdbYW6frVARl0truaF1HFRzHSOPyzrzY8hETbG1S2
kuLJMfQXo0JgUe0wkz/MbnBxOIFfWALXiVxQ87HdqmODAcJr3QR/8Caq1l2xcGRl
NEK0apoIjPPT45bl6roTX2rkg/ME9MjoJLjCL5MRAoXRNKsZ45ubH1rel5iq2brJ
ZrVFnr9fo2L4nQ3X9Pof8fN9JsPB6aGtHOORts5lQuuXpFerHWnaI8Ze/3y2pWeC
VbHipju4tQVrhJcy84+pNExmhAHR6Rk=
-----END CERTIFICATE-----
Generated at Sat May 4 15:04:43 2024 by rpki-client on console-fra.rpki-client.org