Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8c5e089a-bfd3-3a39-9f29-f20d00bb8280.roa
File:                     8c5e089a-bfd3-3a39-9f29-f20d00bb8280.roa (raw, json)
Hash identifier:          8wwFBaDULD/dqJ9YWH1bHHMbJdo5RDRAp3K90AtNgSw=
Subject key identifier:   AB:80:B0:C3:8F:7C:DC:D4:5F:BF:48:8E:49:BD:E9:7B:8B:15:C8:E5
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858459368C812616DE8F3535CA680
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8c5e089a-bfd3-3a39-9f29-f20d00bb8280.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     36667
IP address blocks:        63.247.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c8:12:61:6d:e8:f3:53:5c:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=8020b2e7-1f97-4edc-bf58-deb0f62cf8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:2b:dc:f6:4c:d7:57:b5:94:83:34:e2:29:
                    87:24:0e:0e:c7:c0:9c:16:de:a6:d8:9f:95:98:bb:
                    8d:ca:cf:67:a9:af:bc:c3:ab:54:b2:1e:4e:27:93:
                    2b:bd:d5:3e:6d:d2:d6:f5:89:13:24:b8:27:4b:11:
                    70:71:17:5e:fc:f2:47:13:37:3e:ac:4f:4d:75:88:
                    da:1b:3f:90:32:7c:d2:04:55:66:d9:cc:87:5d:cd:
                    bc:be:ed:6e:d7:4b:3e:78:40:1e:e2:fc:f1:30:58:
                    69:e1:89:22:62:35:f6:11:2c:8e:62:04:57:e4:30:
                    94:01:00:79:8c:11:7f:7d:4b:64:b9:fc:20:3e:8a:
                    2f:91:8d:a7:bb:a1:05:b6:d0:f0:a6:ad:2f:8e:79:
                    6b:7a:f9:9c:9c:f0:65:f2:8b:4a:6f:da:f2:1b:2f:
                    59:dd:4a:04:8c:b0:0e:dd:d1:f5:f1:31:08:28:4c:
                    b1:0d:a4:45:7c:75:cf:3e:22:f6:b1:f7:5d:6d:9e:
                    f0:6a:fa:84:c5:12:fd:b5:78:f2:2e:f5:34:46:1b:
                    3b:b6:5a:17:85:f5:b9:8a:a8:dc:3f:19:32:9e:2c:
                    7e:1c:5d:91:08:98:25:00:d4:c2:4f:d8:f1:b0:09:
                    45:6b:fa:4e:66:0c:ea:dd:e4:2c:ce:6c:b2:e8:40:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:80:B0:C3:8F:7C:DC:D4:5F:BF:48:8E:49:BD:E9:7B:8B:15:C8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8c5e089a-bfd3-3a39-9f29-f20d00bb8280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.247.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:6b:e1:35:b1:3d:a6:31:f3:d0:49:be:17:50:23:e6:89:
         16:d6:f6:8c:59:11:43:28:6b:81:7f:33:9f:44:8e:3e:c5:16:
         42:3e:a2:97:17:ec:7a:f5:1d:1a:38:66:48:ad:fe:0e:5f:30:
         3d:c6:4a:08:72:b4:c3:0e:2a:64:c1:46:0f:69:5f:ab:7a:bc:
         25:ff:0f:7c:ab:b2:04:31:f8:93:02:fd:89:9a:c4:3f:eb:d7:
         ff:55:8c:9e:11:9e:ea:ef:44:30:17:4c:0f:72:55:69:5d:06:
         7d:fb:26:34:66:56:6a:73:3c:6d:65:ee:d1:39:66:a5:53:82:
         00:8f:67:f0:1f:64:cf:f0:9b:5e:a6:36:1d:84:35:d5:dc:27:
         ee:7f:e9:1d:e6:2e:a5:14:d5:2c:4a:71:d2:0e:ff:b8:22:a8:
         e5:73:18:d5:9f:b3:3f:e5:e1:6a:4c:c3:96:e5:fe:b0:7c:33:
         16:1e:96:2e:9a:91:31:61:57:99:23:13:2c:f5:ff:ce:b6:32:
         7e:54:b5:31:3b:fe:9e:3a:6b:17:b8:9f:d3:de:a9:a9:5a:e4:
         10:84:ac:96:78:55:c1:2c:1f:3f:5c:5a:aa:35:64:79:6e:4a:
         3a:8e:95:92:54:63:18:3c:30:9f:97:34:06:06:e8:68:81:06:
         6b:7f:bb:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaMgSYW3o81NcpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
ODAyMGIyZTctMWY5Ny00ZWRjLWJmNTgtZGViMGY2MmNmOGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Ar3PZM11e1lIM04imHJA4Ox8CcFt6m2J+V
mLuNys9nqa+8w6tUsh5OJ5MrvdU+bdLW9YkTJLgnSxFwcRde/PJHEzc+rE9NdYja
Gz+QMnzSBFVm2cyHXc28vu1u10s+eEAe4vzxMFhp4YkiYjX2ESyOYgRX5DCUAQB5
jBF/fUtkufwgPoovkY2nu6EFttDwpq0vjnlrevmcnPBl8otKb9ryGy9Z3UoEjLAO
3dH18TEIKEyxDaRFfHXPPiL2sfddbZ7wavqExRL9tXjyLvU0Rhs7tloXhfW5iqjc
Pxkynix+HF2RCJglANTCT9jxsAlFa/pOZgzq3eQszmyy6ECSFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKuAsMOPfNzUX79Ijkm96XuLFcjlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvOGM1ZTA4OWEtYmZkMy0z
YTM5LTlmMjktZjIwZDAwYmI4MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/emMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLia+E1sT2mMfPQSb4XUCPmiRbW9oxZEUMoa4F/M59Ejj7FFkI+opcX
7Hr1HRo4Zkit/g5fMD3GSghytMMOKmTBRg9pX6t6vCX/D3yrsgQx+JMC/YmaxD/r
1/9VjJ4RnurvRDAXTA9yVWldBn37JjRmVmpzPG1l7tE5ZqVTggCPZ/AfZM/wm16m
Nh2ENdXcJ+5/6R3mLqUU1SxKcdIO/7giqOVzGNWfsz/l4WpMw5bl/rB8MxYeli6a
kTFhV5kjEyz1/862Mn5UtTE7/p46axe4n9Peqala5BCErJZ4VcEsHz9cWqo1ZHlu
SjqOlZJUYxg8MJ+XNAYG6GiBBmt/u9U=
-----END CERTIFICATE-----
Generated at Tue May 7 15:27:35 2024 by rpki-client on console-fra.rpki-client.org