Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
File:                     ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa (raw, json)
Hash identifier:          L2I4TzcBDdwwAeIThxBv1UhYiP8To4Bn456JmE9aUvc=
Subject key identifier:   3E:3B:F1:72:EF:61:0E:E9:B4:7B:15:B1:CA:39:D1:0B:8A:40:5C:C6
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F43285845734DB9ED3566AB5929A9E300
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     399628
IP address blocks:        209.188.108.0/24 maxlen: 24
                          2620:96:a001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b9:ed:35:66:ab:59:29:a9:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=57596c67-e251-4536-baa7-49a199afae00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:6c:15:28:38:d9:a2:94:d8:f4:4e:a8:23:
                    20:bd:e2:ea:3a:29:b5:57:44:f9:38:2b:ec:e2:e5:
                    2f:aa:26:2d:52:e5:62:57:04:91:88:4d:2f:da:f9:
                    35:ae:9e:fb:fd:76:79:fd:ba:33:d7:ca:b6:7e:ac:
                    d6:9e:5c:30:e4:36:54:40:31:d4:1a:92:ff:0a:2f:
                    5b:8a:4b:81:05:3e:af:3c:c8:fa:a9:4f:dd:b7:6b:
                    65:99:bb:ac:30:2e:0a:3a:f8:63:5c:df:46:ec:bd:
                    06:63:ad:a3:d2:ab:6b:c4:6b:fc:73:04:df:57:d9:
                    91:b5:dc:0e:97:2d:3f:8e:f7:e7:b0:54:52:fc:17:
                    c5:ae:fb:b7:90:ed:d5:f0:0f:3f:0a:74:d3:4c:dd:
                    bf:50:d3:bd:d0:97:af:ae:4b:df:3e:54:2c:af:36:
                    0d:4f:0e:21:ed:1f:b9:2e:73:35:06:7f:bf:e6:0d:
                    37:34:44:15:69:9d:b4:dc:a1:87:54:a1:3e:25:a2:
                    a5:fc:93:38:0d:72:a7:85:da:16:63:6b:57:45:9e:
                    13:e7:6c:da:59:8b:05:ed:2c:94:c5:b0:d3:50:5a:
                    45:a0:e8:68:f9:51:29:dc:87:1e:9b:aa:47:95:d8:
                    36:be:dc:20:8c:a1:08:04:05:e2:e1:74:a8:73:e6:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3B:F1:72:EF:61:0E:E9:B4:7B:15:B1:CA:39:D1:0B:8A:40:5C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.108.0/24
                IPv6:
                  2620:96:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:68:65:6f:9c:34:f3:81:d4:8e:c2:d7:af:61:52:d4:88:86:
         b0:3d:bd:eb:9b:a8:f6:36:c3:db:33:36:2a:df:f7:cb:75:a1:
         40:15:f4:f4:51:29:23:a3:0e:68:51:58:aa:54:1b:fa:ae:dd:
         7f:f4:b2:60:7b:b2:59:ab:cc:82:fe:51:ef:e4:b5:09:08:3b:
         66:86:01:47:da:41:55:aa:62:1c:17:26:50:35:22:b4:59:5e:
         cf:17:cc:d4:47:2b:b7:53:4e:3c:ca:65:c4:6e:fd:8a:bb:48:
         9a:b8:e2:75:aa:ad:b4:b4:27:21:fe:80:d2:75:b2:43:32:61:
         3a:8d:b0:a8:4f:b8:59:ef:1d:b4:59:07:0b:c5:62:12:18:5e:
         2f:35:e0:56:1a:9b:64:4a:1a:81:9d:77:ac:97:7c:3f:30:72:
         5d:55:0e:a3:73:0b:16:99:6c:74:65:3a:4b:69:a4:f2:f3:a2:
         1d:6e:2b:6d:e8:2e:c3:61:b9:11:9d:72:db:35:a0:56:ca:ad:
         e2:2e:b1:23:3c:b8:e6:b4:d8:4b:1e:b5:70:42:26:67:ca:b4:
         67:bf:27:1d:3f:d9:a7:98:9d:4a:6d:ee:e3:b5:e8:f5:e2:4d:
         fa:a9:be:c0:f0:7c:ef:a3:c7:3e:5d:c4:af:94:d8:d0:8a:4f:
         5e:e0:df:de
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEVzTbntNWarWSmp4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjMxM2E1ZWMtZWRiNS00OWEzLWIzYjMtOTgwZDgwZDhl
NzY2MB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
NTc1OTZjNjctZTI1MS00NTM2LWJhYTctNDlhMTk5YWZhZTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uFsFSg42aKU2PROqCMgveLqOim1V0T5OCvs
4uUvqiYtUuViVwSRiE0v2vk1rp77/XZ5/boz18q2fqzWnlww5DZUQDHUGpL/Ci9b
ikuBBT6vPMj6qU/dt2tlmbusMC4KOvhjXN9G7L0GY62j0qtrxGv8cwTfV9mRtdwO
ly0/jvfnsFRS/BfFrvu3kO3V8A8/CnTTTN2/UNO90JevrkvfPlQsrzYNTw4h7R+5
LnM1Bn+/5g03NEQVaZ203KGHVKE+JaKl/JM4DXKnhdoWY2tXRZ4T52zaWYsF7SyU
xbDTUFpFoOho+VEp3Icem6pHldg2vtwgjKEIBAXi4XSoc+Zx7QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFD478XLvYQ7ptHsVsco50QuKQFzGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEz
YTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBkODBkOGU3NjYvZWQ5ZTU0YTktZWM3NS0z
YzFjLTk1YmItMWI2YzkyZTAxNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjMxM2E1ZWMtZWRiNS00OWEzLWIz
YjMtOTgwZDgwZDhlNzY2LzIzMTNhNWVjLWVkYjUtNDlhMy1iM2IzLTk4MGQ4MGQ4
ZTc2Ni5jcmwwHwYDVR0jBBgwFoAUjxrzeGIjGzrpD8kDBhRRObCYM+4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEzYTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBk
ODBkOGU3NjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0bxsMA8E
AgACMAkDBwAmIACWoAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAB2hlb5w084HUjsLXr2FS1IiGsD2965uo
9jbD2zM2Kt/3y3WhQBX09FEpI6MOaFFYqlQb+q7df/SyYHuyWavMgv5R7+S1CQg7
ZoYBR9pBVapiHBcmUDUitFlezxfM1Ecrt1NOPMplxG79irtImrjidaqttLQnIf6A
0nWyQzJhOo2wqE+4We8dtFkHC8ViEhheLzXgVhqbZEoagZ13rJd8PzByXVUOo3ML
FplsdGU6S2mk8vOiHW4rbeguw2G5EZ1y2zWgVsqt4i6xIzy45rTYSx61cEImZ8q0
Z78nHT/Zp5idSm3u47Xo9eJN+qm+wPB876PHPl3Er5TY0IpPXuDf3g==
-----END CERTIFICATE-----
Generated at Mon May 6 01:58:42 2024 by rpki-client on console-ams.rpki-client.org