Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa
File:                     2a008e47-d7ee-388f-8dd0-00eec15271e8.roa (raw, json)
Hash identifier:          jZyVlMttT+6JiKUngTFTdZbY59fewsHrnwkkSMkhZ1Y=
Subject key identifier:   F5:B7:EB:CF:76:92:67:A1:84:A6:A2:2A:E6:52:7B:53:75:3E:66:BF
Certificate issuer:       /CN=143c0e16-c384-40db-8cbd-7b2f4a55e007
Certificate serial:       010D0C9F432858459368BEDA9435F0A500D9CEC0
Authority key identifier: 8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     15154
IP address blocks:        198.232.166.0/24 maxlen: 24
                          64.113.32.0/20 maxlen: 24
                          198.232.165.0/24 maxlen: 24
                          2604:e780::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:be:da:94:35:f0:a5:00:d9:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143c0e16-c384-40db-8cbd-7b2f4a55e007
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=b9b1ecb3-6a7e-46dc-b50f-3a599590366f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:cd:89:58:51:ea:1f:9a:57:c3:19:dd:14:
                    d9:99:81:d5:48:12:b1:8c:04:d9:81:f2:e6:b5:02:
                    dc:e2:c3:9f:20:69:06:71:25:0a:eb:32:17:54:51:
                    f9:3f:1d:c6:29:26:e5:a9:f5:54:5d:e1:d8:02:90:
                    12:57:1e:08:c9:ff:21:92:3c:5a:11:3c:1f:ce:a5:
                    f9:ca:bd:19:b3:54:76:f7:43:37:83:8b:70:fe:01:
                    5b:54:11:54:28:24:9d:73:70:95:48:11:94:43:57:
                    92:b6:41:76:d0:a7:05:ff:dc:47:72:90:17:65:76:
                    00:11:4e:7e:f2:67:5b:48:b5:0d:64:9f:61:58:e2:
                    a3:c1:53:78:33:90:6a:7b:c8:6d:c9:b3:7f:51:2c:
                    6c:04:4c:ac:75:a4:08:2b:2c:cb:a2:bf:49:87:b1:
                    7d:1c:7a:66:09:41:9d:1b:c4:ba:d2:b5:4d:9e:f4:
                    22:6f:9a:b1:da:c1:f9:44:b7:b8:9c:61:38:01:e9:
                    3b:bb:74:10:8e:41:5e:c6:73:7f:99:86:92:ce:12:
                    df:ef:f5:59:ec:25:a8:dc:92:a5:0a:e6:2c:f1:02:
                    82:c4:bf:b9:14:a7:d7:fc:af:42:9b:73:75:60:79:
                    67:29:48:96:44:d8:11:35:5a:5b:ed:a9:81:05:fb:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B7:EB:CF:76:92:67:A1:84:A6:A2:2A:E6:52:7B:53:75:3E:66:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/2a008e47-d7ee-388f-8dd0-00eec15271e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007/143c0e16-c384-40db-8cbd-7b2f4a55e007.crl

            X509v3 Authority Key Identifier:
                keyid:8B:D3:DF:B3:87:7D:6A:C1:E1:D8:C2:C7:BF:CF:A1:37:02:8D:7C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/143c0e16-c384-40db-8cbd-7b2f4a55e007.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.32.0/20
                  198.232.165.0-198.232.166.255
                IPv6:
                  2604:e780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:24:50:0f:69:05:44:9d:6f:e0:32:84:2a:c0:7c:5b:7b:e9:
         23:34:ce:eb:7e:22:bf:01:b7:41:04:54:66:0c:f5:91:74:18:
         66:3a:58:9d:a0:5d:fe:ec:ed:c9:04:48:97:da:29:63:97:25:
         7f:1b:98:9f:60:41:c8:ce:76:9c:52:cd:a2:17:46:c8:cb:0c:
         6d:ad:c4:7a:45:d2:83:b4:75:7b:ac:65:05:20:c6:f4:73:a2:
         5a:d3:9e:9c:3b:6a:38:e4:e7:8b:9f:46:9d:26:ca:5a:a2:4c:
         37:d4:8f:30:f4:d5:18:7b:17:68:d0:ae:55:43:72:b8:b3:5d:
         3e:e5:50:9c:c2:44:73:fb:01:88:f5:34:c3:db:cf:11:30:2f:
         f7:26:9a:1f:f7:1a:47:2b:c3:52:4c:00:f4:ea:40:6c:45:be:
         92:97:74:4a:8b:96:9e:b4:0d:15:14:c9:0c:7a:36:a4:b1:d3:
         21:6b:98:69:b2:41:26:10:6b:77:e8:c4:b3:fa:8a:37:44:96:
         c3:e5:24:8e:7e:66:d6:6a:d3:cd:2b:f8:f6:ba:16:24:d1:05:
         ed:e6:cf:d3:58:df:75:f4:3c:5a:65:c8:80:28:fb:ef:6c:93:
         aa:39:c7:e5:dd:a4:7f:93:94:d4:b8:d2:50:f7:29:37:08:35:
         58:ad:1a:67
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWEWTaL7alDXwpQDZzsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzYzBlMTYtYzM4NC00MGRiLThjYmQtN2IyZjRhNTVl
MDA3MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
YjliMWVjYjMtNmE3ZS00NmRjLWI1MGYtM2E1OTk1OTAzNjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZzNiVhR6h+aV8MZ3RTZmYHVSBKxjATZgfLm
tQLc4sOfIGkGcSUK6zIXVFH5Px3GKSblqfVUXeHYApASVx4Iyf8hkjxaETwfzqX5
yr0Zs1R290M3g4tw/gFbVBFUKCSdc3CVSBGUQ1eStkF20KcF/9xHcpAXZXYAEU5+
8mdbSLUNZJ9hWOKjwVN4M5Bqe8htybN/USxsBEysdaQIKyzLor9Jh7F9HHpmCUGd
G8S60rVNnvQib5qx2sH5RLe4nGE4Aek7u3QQjkFexnN/mYaSzhLf7/VZ7CWo3JKl
CuYs8QKCxL+5FKfX/K9Cm3N1YHlnKUiWRNgRNVpb7amBBfuQZQIDAQABo4IDcjCC
A24wHQYDVR0OBBYEFPW36892kmehhKaiKuZSe1N1Pma/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNj
MGUxNi1jMzg0LTQwZGItOGNiZC03YjJmNGE1NWUwMDcvMmEwMDhlNDctZDdlZS0z
ODhmLThkZDAtMDBlZWMxNTI3MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTQzYzBlMTYtYzM4NC00MGRiLThj
YmQtN2IyZjRhNTVlMDA3LzE0M2MwZTE2LWMzODQtNDBkYi04Y2JkLTdiMmY0YTU1
ZTAwNy5jcmwwHwYDVR0jBBgwFoAUi9Pfs4d9asHh2MLHv8+hNwKNfB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xNDNjMGUxNi1jMzg0LTQwZGItOGNiZC03YjJm
NGE1NWUwMDcuY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQEQHEgMAwD
BADG6KUDBADG6KYwDQQCAAIwBwMFACYE54AwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARyRQD2kFRJ1v4DKE
KsB8W3vpIzTO634ivwG3QQRUZgz1kXQYZjpYnaBd/uztyQRIl9opY5clfxuYn2BB
yM52nFLNohdGyMsMba3EekXSg7R1e6xlBSDG9HOiWtOenDtqOOTni59GnSbKWqJM
N9SPMPTVGHsXaNCuVUNyuLNdPuVQnMJEc/sBiPU0w9vPETAv9yaaH/caRyvDUkwA
9OpAbEW+kpd0SouWnrQNFRTJDHo2pLHTIWuYabJBJhBrd+jEs/qKN0SWw+Ukjn5m
1mrTzSv49roWJNEF7ebP01jfdfQ8WmXIgCj772yTqjnH5d2kf5OU1LjSUPcpNwg1
WK0aZw==
-----END CERTIFICATE-----
Generated at Fri May 17 06:49:20 2024 by rpki-client on console-ams.rpki-client.org