Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa
File:                     8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa (raw, json)
Hash identifier:          M48gyjRfWYpXfZGUVkZZszmhEBSTQGX3SW2FLLFFN5Q=
Subject key identifier:   74:2C:60:1D:BD:29:E6:51:FA:70:68:0E:0B:9C:2D:B8:7E:4E:7D:85
Certificate issuer:       /CN=0d51e326-4804-4f59-a629-20153f71b7fe
Certificate serial:       010D0C9F43285844F035465D785EA2A0C9961100
Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        204.239.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:46:5d:78:5e:a2:a0:c9:96:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=d59fa953-61b3-4713-8f35-21e577b5f988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:18:21:7b:7c:10:f5:c3:85:59:3e:e8:83:
                    32:16:ec:05:15:e5:d8:d4:61:f7:93:8c:af:0c:3f:
                    3f:fa:2b:9f:7e:22:96:de:ec:37:be:67:73:08:5b:
                    6a:43:77:53:7c:41:56:0c:3e:f7:68:79:61:3f:e7:
                    12:10:49:13:12:7e:7e:80:e0:fa:b6:43:f3:2d:61:
                    1e:66:97:bc:3e:a6:8a:b9:07:65:10:38:2f:3e:44:
                    e3:01:c9:fa:15:ad:f1:83:c6:73:33:7a:a0:5d:8e:
                    05:97:9f:8b:20:18:ee:4b:f4:30:25:d3:25:35:fe:
                    e4:72:d0:aa:1d:8d:d0:fd:d8:02:42:64:d2:62:fd:
                    1c:e9:81:e8:fd:2c:fd:e9:1f:b2:13:20:30:f6:01:
                    78:d8:1b:56:91:c7:df:f1:ee:15:11:d0:01:49:a2:
                    8e:63:99:70:bb:4c:b7:e3:3e:80:be:f8:93:85:d2:
                    fc:eb:80:a3:61:44:53:43:8d:67:cc:1b:1a:06:3f:
                    63:f6:ab:f0:05:0c:5c:42:c7:4e:99:2f:74:dd:0b:
                    de:d2:07:f0:43:e6:7d:77:0b:07:81:bf:19:a3:37:
                    87:c6:2a:05:8f:bb:31:79:e4:38:2b:d3:bd:fc:d3:
                    ee:7a:10:51:8b:e4:c8:26:73:af:4b:e5:8f:ff:e0:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2C:60:1D:BD:29:E6:51:FA:70:68:0E:0B:9C:2D:B8:7E:4E:7D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/8814c9b5-8847-3d1a-aa54-0ab7429b273d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.239.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:66:ae:2e:29:bc:a7:e5:3e:27:f9:85:09:55:19:7d:78:17:
         69:ad:20:dc:91:ac:a1:00:e6:69:e6:43:c6:b9:0d:6d:c8:08:
         d6:cf:42:71:a1:95:07:42:b7:eb:ab:31:a1:83:27:f9:0d:fb:
         d4:74:d6:73:c2:31:a3:1c:76:39:74:f9:68:46:01:77:6d:89:
         77:a8:3d:5e:57:3b:27:2e:b3:0b:62:1c:50:47:e3:37:cf:17:
         04:29:5c:5b:fd:35:05:81:bd:bf:e1:ce:a4:af:0b:8a:50:83:
         a5:66:46:8f:51:46:a1:81:c8:48:75:1b:17:a0:5a:8c:80:ac:
         68:4c:28:43:94:9d:2f:50:3d:d2:2e:e2:48:90:f4:d2:42:3f:
         5d:20:73:b2:6d:ef:6e:10:7b:25:53:6b:a5:6b:e9:f1:0c:7a:
         10:88:72:dd:91:a4:f9:ca:8b:a6:e4:58:a9:19:05:15:b5:d0:
         da:6c:6b:41:01:44:95:b8:85:87:a9:1c:c8:f9:76:57:0d:ce:
         43:97:1c:e0:6e:37:f2:fe:a4:f8:b2:d4:b5:ee:62:f5:73:d5:
         c3:fe:c0:11:1e:11:e5:ad:77:85:0f:54:70:ba:23:2e:86:f6:
         f8:e7:50:2d:9f:aa:f6:8d:39:92:d4:d1:ce:ee:fe:c8:d5:78:
         66:a3:aa:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETwNUZdeF6ioMmWEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi
N2ZlMB4XDTI0MDIxOTAyMDAyNVoXDTI0MDUxOTAxMDAyNVowLzEtMCsGA1UEAxMk
ZDU5ZmE5NTMtNjFiMy00NzEzLThmMzUtMjFlNTc3YjVmOTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59wYIXt8EPXDhVk+6IMyFuwFFeXY1GH3k4yv
DD8/+iuffiKW3uw3vmdzCFtqQ3dTfEFWDD73aHlhP+cSEEkTEn5+gOD6tkPzLWEe
Zpe8PqaKuQdlEDgvPkTjAcn6Fa3xg8ZzM3qgXY4Fl5+LIBjuS/QwJdMlNf7kctCq
HY3Q/dgCQmTSYv0c6YHo/Sz96R+yEyAw9gF42BtWkcff8e4VEdABSaKOY5lwu0y3
4z6AvviThdL864CjYURTQ41nzBsaBj9j9qvwBQxcQsdOmS903Qve0gfwQ+Z9dwsH
gb8ZozeHxioFj7sxeeQ4K9O9/NPuehBRi+TIJnOvS+WP/+C5/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQsYB29KeZR+nBoDgucLbh+Tn2FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx
ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvODgxNGM5YjUtODg0Ny0z
ZDFhLWFhNTQtMGFiNzQyOWIyNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2
MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx
YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1
M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRmri4pvKflPif5hQlVGX14F2mtINyRrKEA5mnmQ8a5DW3ICNbPQnGh
lQdCt+urMaGDJ/kN+9R01nPCMaMcdjl0+WhGAXdtiXeoPV5XOycuswtiHFBH4zfP
FwQpXFv9NQWBvb/hzqSvC4pQg6VmRo9RRqGByEh1GxegWoyArGhMKEOUnS9QPdIu
4kiQ9NJCP10gc7Jt724QeyVTa6Vr6fEMehCIct2RpPnKi6bkWKkZBRW10Npsa0EB
RJW4hYepHMj5dlcNzkOXHOBuN/L+pPiy1LXuYvVz1cP+wBEeEeWtd4UPVHC6Iy6G
9vjnUC2fqvaNOZLU0c7u/sjVeGajquI=
-----END CERTIFICATE-----
Generated at Fri May 3 01:53:33 2024 by rpki-client on console-fra.rpki-client.org