Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/595b2f89-c2f9-306b-af1f-604b01a2bafb.roa
File:                     595b2f89-c2f9-306b-af1f-604b01a2bafb.roa (raw, json)
Hash identifier:          1BE3BuyFc8FNZTMV2v3lGdN/RV1EQLKjSRsx8h+LPiw=
Subject key identifier:   E4:FD:39:E2:F9:6A:A2:9C:88:47:67:85:C4:B0:F7:90:85:17:B4:59
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285844F19AAEB02DD873A04A1FD1A0
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/595b2f89-c2f9-306b-af1f-604b01a2bafb.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        167.234.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:ae:b0:2d:d8:73:a0:4a:1f:d1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=6838ad54-9482-46f5-9f39-db2c5f9101ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:16:2f:c2:27:c8:e1:62:b3:ef:44:46:42:
                    ce:8e:8c:14:10:12:54:66:4c:77:a5:b6:68:ed:38:
                    f9:c8:1f:fa:64:43:97:93:d7:1a:a7:47:60:b1:37:
                    76:3d:0e:0b:5e:9d:51:28:49:e2:bc:ef:e0:38:4d:
                    e0:2c:fc:fd:73:8a:bd:0c:e7:8d:0e:a1:c7:fa:fa:
                    fa:d7:08:cf:e7:c1:5b:5e:a5:6f:59:ff:47:4d:d5:
                    31:ca:8e:83:68:7f:e7:0b:c5:49:4b:8f:74:7f:cc:
                    a8:52:de:b1:39:33:1b:e3:8a:ff:a9:35:68:bc:c5:
                    3a:59:99:43:d8:08:f9:08:db:84:f9:90:d1:cf:ca:
                    0e:b1:96:bb:cb:cd:63:53:c5:c2:82:30:ba:c8:d9:
                    6f:8c:9b:1a:b0:19:6e:8f:63:91:63:9f:11:f2:5e:
                    75:a7:32:6d:09:83:1d:18:d7:41:83:91:13:a9:81:
                    02:69:ac:76:06:37:cc:17:e7:f5:5f:c6:8a:87:b5:
                    42:55:78:f5:eb:e4:e3:ec:18:f5:25:35:0b:af:9d:
                    bb:9c:fd:a8:af:13:93:dc:df:b7:a1:b7:fd:51:61:
                    67:51:26:c0:4e:b6:3b:0c:b4:fb:31:19:a8:88:8a:
                    27:4b:d0:e3:67:72:8d:60:3e:53:7f:6a:e9:3f:fe:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FD:39:E2:F9:6A:A2:9C:88:47:67:85:C4:B0:F7:90:85:17:B4:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/595b2f89-c2f9-306b-af1f-604b01a2bafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ff:eb:de:24:95:64:ef:51:81:e1:13:cb:7f:78:74:fe:cb:
         cd:a1:94:c1:0b:29:15:53:5d:fa:4e:c5:7b:89:c0:25:c2:03:
         d5:79:06:f8:29:6e:51:81:2b:a4:b1:e7:fc:4d:37:e4:6d:4a:
         2e:a7:1f:bd:50:61:fb:4e:8e:91:f3:c6:97:a3:8e:b4:65:a2:
         11:bb:1d:14:8c:56:ce:93:59:50:7d:75:a9:78:19:e1:93:74:
         dd:29:cb:ee:24:4b:b7:d0:f5:7e:a8:f4:a0:02:54:2c:db:4f:
         b0:bf:0b:b1:c1:be:08:24:e3:77:a4:8d:67:4b:d2:36:47:75:
         37:51:a7:49:e3:11:1b:57:38:34:f0:d4:82:0a:df:5d:e1:a5:
         f4:98:bc:f6:2e:65:52:de:e2:89:c1:0b:03:b6:06:c4:2a:5b:
         71:cc:50:69:20:86:84:c6:64:47:df:03:3f:05:07:a3:b7:05:
         cf:63:38:cc:fb:81:ad:86:0b:b2:6f:bb:4d:5c:fe:9a:16:5c:
         3d:8f:b0:6b:6e:46:54:56:a6:a6:c1:20:81:21:b5:29:d8:18:
         5c:40:71:60:49:1c:f3:85:f3:3d:6c:ee:17:f7:1f:75:47:65:
         1c:e2:bf:28:48:e2:bd:6c:f8:79:e0:f1:6b:b8:63:7e:67:32:
         bc:c8:a6:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETxmq6wLdhzoEof0aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI0MDIxOTE0MDAzMVoXDTI0MDUxOTEzMDAzMVowLzEtMCsGA1UEAxMk
NjgzOGFkNTQtOTQ4Mi00NmY1LTlmMzktZGIyYzVmOTEwMWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBEWL8InyOFis+9ERkLOjowUEBJUZkx3pbZo
7Tj5yB/6ZEOXk9cap0dgsTd2PQ4LXp1RKEnivO/gOE3gLPz9c4q9DOeNDqHH+vr6
1wjP58FbXqVvWf9HTdUxyo6DaH/nC8VJS490f8yoUt6xOTMb44r/qTVovMU6WZlD
2Aj5CNuE+ZDRz8oOsZa7y81jU8XCgjC6yNlvjJsasBluj2ORY58R8l51pzJtCYMd
GNdBg5ETqYECaax2BjfMF+f1X8aKh7VCVXj16+Tj7Bj1JTULr527nP2orxOT3N+3
obf9UWFnUSbATrY7DLT7MRmoiIonS9DjZ3KNYD5Tf2rpP/6rUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOT9OeL5aqKciEdnhcSw95CFF7RZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNTk1YjJmODktYzJmOS0z
MDZiLWFmMWYtNjA0YjAxYTJiYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp+o8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAL/694klWTvUYHhE8t/eHT+y82hlMELKRVTXfpOxXuJwCXCA9V5Bvgp
blGBK6Sx5/xNN+RtSi6nH71QYftOjpHzxpejjrRlohG7HRSMVs6TWVB9dal4GeGT
dN0py+4kS7fQ9X6o9KACVCzbT7C/C7HBvggk43ekjWdL0jZHdTdRp0njERtXODTw
1IIK313hpfSYvPYuZVLe4onBCwO2BsQqW3HMUGkghoTGZEffAz8FB6O3Bc9jOMz7
ga2GC7Jvu01c/poWXD2PsGtuRlRWpqbBIIEhtSnYGFxAcWBJHPOF8z1s7hf3H3VH
ZRzivyhI4r1s+Hng8Wu4Y35nMrzIpqY=
-----END CERTIFICATE-----
Generated at Thu May 2 22:30:25 2024 by rpki-client on console-ams.rpki-client.org