Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
File:                     030641f0-0c4d-36be-9742-c8311f8aac47.roa (raw, json)
Hash identifier:          ktOuKZk4BGfe0mZ8JmaIepAYRxSGQtSHss5j2+71/7o=
Subject key identifier:   F7:D9:48:47:22:11:61:6E:17:6A:61:0C:15:B5:3C:ED:3E:C2:38:4C
Certificate issuer:       /CN=ede01171-c7fd-4563-acce-6f9c23457a8f
Certificate serial:       010D0C9F4328584571E8642F6A9A1505277A4880
Authority key identifier: 73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     397394
IP address blocks:        204.194.184.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:64:2f:6a:9a:15:05:27:7a:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede01171-c7fd-4563-acce-6f9c23457a8f
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=b1e9f627-fab3-4295-8c3b-a3657194f3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c3:38:df:04:32:38:fc:92:07:7f:2b:41:f5:
                    32:70:a3:64:89:33:c0:b1:0f:03:54:6d:a9:0b:a8:
                    f9:57:86:9a:d1:6d:e0:a3:4a:ad:51:02:23:a6:fa:
                    e1:15:2b:6c:63:16:55:92:c0:c6:23:aa:c1:4e:f9:
                    34:09:9f:11:af:60:2f:d9:6e:22:69:07:2a:b8:b1:
                    02:02:9d:8b:c5:4d:3a:de:ab:0a:a0:3d:78:b1:45:
                    e1:06:84:19:5d:2a:03:45:f2:82:bb:a4:d3:81:6b:
                    e4:11:4c:61:56:38:20:88:80:73:0c:86:8f:c0:6a:
                    c9:1c:88:47:fa:c7:9c:4e:11:69:b0:81:98:4c:f5:
                    4e:ab:85:4e:26:f3:c5:73:4c:b4:54:16:02:07:7f:
                    db:94:b8:cf:9b:37:9a:2c:e2:d0:d6:03:c0:61:dd:
                    03:3a:19:9d:2d:21:1c:31:30:a2:ad:24:9b:d8:cf:
                    72:73:a5:0d:52:87:c6:f2:96:3b:41:2f:d1:95:09:
                    1f:27:2d:ba:fb:9c:6e:28:1f:79:2c:d2:c8:ce:d1:
                    00:83:61:d3:f5:7b:3d:b6:41:c0:fa:e9:58:80:f7:
                    4d:c6:b2:5b:16:76:20:2b:a5:0a:7d:43:37:e3:85:
                    f4:e8:f3:8f:01:b6:47:ba:23:bd:be:36:66:21:f2:
                    28:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D9:48:47:22:11:61:6E:17:6A:61:0C:15:B5:3C:ED:3E:C2:38:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/030641f0-0c4d-36be-9742-c8311f8aac47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.crl

            X509v3 Authority Key Identifier:
                keyid:73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:be:72:41:d3:9a:c0:2c:db:fd:b0:b9:68:ff:a7:1b:98:6b:
         d4:ce:72:9a:e7:a9:d2:bf:bf:54:a1:d1:56:46:c4:e5:16:b6:
         7d:c2:07:02:16:ae:23:36:dd:a8:08:2e:86:d8:7a:bb:b4:4c:
         26:d0:a2:a3:3d:f4:02:c5:ec:00:03:29:28:8e:2b:f1:5b:21:
         0c:ae:5f:d3:ea:ab:8b:dc:de:fd:0d:62:46:e1:61:4d:b5:88:
         d1:32:e2:15:6d:21:ef:3e:ae:21:df:0d:bb:fe:aa:6b:e6:2e:
         2c:3f:70:ec:1c:6a:ed:28:5f:c5:54:21:a0:39:3d:bb:95:27:
         42:d3:7a:df:bc:44:18:98:c6:fa:2e:a6:f1:83:54:7b:e6:51:
         ad:98:81:1d:ed:7d:d1:89:98:55:a5:6d:32:6d:39:0f:40:7c:
         fd:f2:a3:6a:64:7c:7a:48:33:c8:c1:b5:76:08:d6:52:e9:a0:
         d3:23:a8:dd:1d:1a:07:42:5b:3f:43:1d:ea:43:21:61:90:ff:
         1d:2b:5a:ee:dc:ff:90:94:be:0f:67:85:4c:73:bd:17:97:5c:
         c8:e1:a3:84:61:d4:44:7b:8e:2a:ac:9c:75:d8:d6:f6:0f:26:
         0a:6d:71:00:7e:21:7e:4e:d4:5e:03:53:20:cc:db:55:34:41:
         93:f3:94:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVx6GQvapoVBSd6SIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWRlMDExNzEtYzdmZC00NTYzLWFjY2UtNmY5YzIzNDU3
YThmMB4XDTI0MDQwNTEzMDAzM1oXDTI0MDcwNDEzMDAzM1owLzEtMCsGA1UEAxMk
YjFlOWY2MjctZmFiMy00Mjk1LThjM2ItYTM2NTcxOTRmM2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8M43wQyOPySB38rQfUycKNkiTPAsQ8DVG2p
C6j5V4aa0W3go0qtUQIjpvrhFStsYxZVksDGI6rBTvk0CZ8Rr2Av2W4iaQcquLEC
Ap2LxU063qsKoD14sUXhBoQZXSoDRfKCu6TTgWvkEUxhVjggiIBzDIaPwGrJHIhH
+secThFpsIGYTPVOq4VOJvPFc0y0VBYCB3/blLjPmzeaLOLQ1gPAYd0DOhmdLSEc
MTCirSSb2M9yc6UNUofG8pY7QS/RlQkfJy26+5xuKB95LNLIztEAg2HT9Xs9tkHA
+ulYgPdNxrJbFnYgK6UKfUM344X06POPAbZHuiO9vjZmIfIoMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPfZSEciEWFuF2phDBW1PO0+wjhMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZGUw
MTE3MS1jN2ZkLTQ1NjMtYWNjZS02ZjljMjM0NTdhOGYvMDMwNjQxZjAtMGM0ZC0z
NmJlLTk3NDItYzgzMTFmOGFhYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWRlMDExNzEtYzdmZC00NTYzLWFj
Y2UtNmY5YzIzNDU3YThmL2VkZTAxMTcxLWM3ZmQtNDU2My1hY2NlLTZmOWMyMzQ1
N2E4Zi5jcmwwHwYDVR0jBBgwFoAUc3TqS3svdAqyeKw5uwXF6aSnUr8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZGUwMTE3MS1jN2ZkLTQ1NjMtYWNjZS02Zjlj
MjM0NTdhOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzMK4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGK+ckHTmsAs2/2wuWj/pxuYa9TOcprnqdK/v1Sh0VZGxOUWtn3CBwIW
riM23agILobYeru0TCbQoqM99ALF7AADKSiOK/FbIQyuX9Pqq4vc3v0NYkbhYU21
iNEy4hVtIe8+riHfDbv+qmvmLiw/cOwcau0oX8VUIaA5PbuVJ0LTet+8RBiYxvou
pvGDVHvmUa2YgR3tfdGJmFWlbTJtOQ9AfP3yo2pkfHpIM8jBtXYI1lLpoNMjqN0d
GgdCWz9DHepDIWGQ/x0rWu7c/5CUvg9nhUxzvReXXMjho4Rh1ER7jiqsnHXY1vYP
JgptcQB+IX5O1F4DUyDM21U0QZPzlHU=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:05 2024 by rpki-client on console-fra.rpki-client.org