Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/fbdb4fb6-f252-35e8-a11b-4dbcea574ad3.roa
File:                     fbdb4fb6-f252-35e8-a11b-4dbcea574ad3.roa (raw, json)
Hash identifier:          X95avKj5bgQRy4UYSXQnSPu+9shrtO45JCfhU9izenM=
Subject key identifier:   CC:A7:82:D4:E9:A0:F7:76:B9:4F:3F:71:5C:AC:79:09:D3:D6:1F:AC
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F432858457FDDCA8BD5853AED7C26E000
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/fbdb4fb6-f252-35e8-a11b-4dbcea574ad3.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     49915
IP address blocks:        162.43.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:ca:8b:d5:85:3a:ed:7c:26:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=f38b68a3-7e13-4b1a-b2be-fd74ec9ec7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:18:56:58:6e:c5:55:3d:25:2f:a1:b5:0b:b2:
                    b0:f1:4e:36:73:e2:60:6e:51:8d:e5:31:52:93:58:
                    3c:31:df:cd:99:07:00:d7:61:14:7a:9f:9d:10:63:
                    bb:9f:a7:69:2c:b8:8b:ea:a3:72:73:8a:32:25:27:
                    4d:48:5d:38:26:5a:ac:c7:48:19:38:48:d2:9c:c0:
                    0a:b2:01:6f:a4:f9:27:24:fb:9d:98:ae:83:e8:0f:
                    82:ad:59:3a:e9:6e:9d:35:4f:c2:ac:67:8a:44:cd:
                    af:2e:af:45:9e:c9:c0:bf:0c:d6:62:15:0f:c7:90:
                    b3:b0:92:53:44:7c:a5:a9:2e:a9:ed:56:d7:a1:68:
                    74:e8:43:af:fd:ee:a2:8a:f1:c2:51:77:11:44:10:
                    04:e3:c3:ca:0c:8e:6d:11:b7:fc:42:e1:ff:29:f5:
                    8c:08:ae:d6:75:81:f3:5f:26:b8:83:69:9e:06:35:
                    33:f1:b2:33:f6:ea:59:d6:57:32:5d:f1:6c:01:ab:
                    f7:37:b4:d6:25:bc:30:5b:ce:04:c0:9e:c2:79:67:
                    1c:a6:ca:24:5d:3b:f0:af:90:96:95:aa:29:fa:5b:
                    61:1b:b5:e3:9f:fc:a8:e7:0f:ae:04:d5:02:d6:ea:
                    5f:6b:11:dd:73:94:5d:3a:5c:95:fe:01:d1:de:0e:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A7:82:D4:E9:A0:F7:76:B9:4F:3F:71:5C:AC:79:09:D3:D6:1F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/fbdb4fb6-f252-35e8-a11b-4dbcea574ad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.43.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a0:f1:ee:89:8f:de:aa:b8:b3:6a:0a:3b:d2:32:28:33:71:
         b9:7c:30:9d:a8:c9:e5:0f:f1:a8:be:b2:6c:82:60:5d:31:f3:
         b8:61:d9:3a:ba:81:5f:51:c6:f8:44:66:71:23:18:15:04:03:
         93:b8:44:e6:b0:80:b4:cc:6c:32:3b:40:4e:d3:d8:46:f8:5b:
         ad:f6:37:4a:35:6b:a6:fd:99:1a:1d:c2:35:ef:95:8d:af:d0:
         c4:60:f5:30:c4:70:74:84:2c:b6:42:2f:39:d8:27:4a:ff:cb:
         07:15:6c:b6:f3:96:65:3e:f9:bd:a2:e7:c8:c5:33:84:83:1e:
         15:7a:0e:0f:b6:9c:1c:78:58:12:00:6f:0b:ca:a5:f2:96:70:
         4e:e7:11:16:ca:57:fe:00:cd:cb:71:b3:50:5b:9f:ae:2d:ca:
         44:a8:d0:86:b4:b4:0a:ac:37:f2:96:56:55:d4:ee:64:78:b0:
         88:29:aa:b7:3f:fa:b0:d0:fe:02:c6:94:a4:e1:21:86:ec:8e:
         4c:42:e2:e4:da:10:02:82:9a:58:2e:23:54:1e:3a:ca:34:21:
         2e:d8:1d:f8:be:6e:ca:38:3e:7e:c4:00:d9:3d:ed:6b:3a:e5:
         8b:30:9d:ab:dc:0f:4e:f7:a3:da:1e:31:e4:83:d9:91:5d:78:
         ab:38:7c:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV/3cqL1YU67Xwm4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJkYWEyMTctZjAwZi00NmM1LWExMDItZTVmZjJhY2Ix
MDViMB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
ZjM4YjY4YTMtN2UxMy00YjFhLWIyYmUtZmQ3NGVjOWVjN2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBhWWG7FVT0lL6G1C7Kw8U42c+JgblGN5TFS
k1g8Md/NmQcA12EUep+dEGO7n6dpLLiL6qNyc4oyJSdNSF04Jlqsx0gZOEjSnMAK
sgFvpPknJPudmK6D6A+CrVk66W6dNU/CrGeKRM2vLq9FnsnAvwzWYhUPx5CzsJJT
RHylqS6p7VbXoWh06EOv/e6iivHCUXcRRBAE48PKDI5tEbf8QuH/KfWMCK7WdYHz
Xya4g2meBjUz8bIz9upZ1lcyXfFsAav3N7TWJbwwW84EwJ7CeWccpsokXTvwr5CW
laop+lthG7Xjn/yo5w+uBNUC1upfaxHdc5RdOlyV/gHR3g4i6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMyngtTpoPd2uU8/cVyseQnT1h+sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRh
YTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZmMmFjYjEwNWIvZmJkYjRmYjYtZjI1Mi0z
NWU4LWExMWItNGRiY2VhNTc0YWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmJkYWEyMTctZjAwZi00NmM1LWEx
MDItZTVmZjJhY2IxMDViLzJiZGFhMjE3LWYwMGYtNDZjNS1hMTAyLWU1ZmYyYWNi
MTA1Yi5jcmwwHwYDVR0jBBgwFoAUwIjTWY7ATOSXd4i3N52Puz3pHqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRhYTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZm
MmFjYjEwNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoiuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6g8e6Jj96quLNqCjvSMigzcbl8MJ2oyeUP8ai+smyCYF0x87hh2Tq6
gV9RxvhEZnEjGBUEA5O4ROawgLTMbDI7QE7T2Eb4W632N0o1a6b9mRodwjXvlY2v
0MRg9TDEcHSELLZCLznYJ0r/ywcVbLbzlmU++b2i58jFM4SDHhV6Dg+2nBx4WBIA
bwvKpfKWcE7nERbKV/4Azctxs1Bbn64tykSo0Ia0tAqsN/KWVlXU7mR4sIgpqrc/
+rDQ/gLGlKThIYbsjkxC4uTaEAKCmlguI1QeOso0IS7YHfi+bso4Pn7EANk97Ws6
5YswnavcD073o9oeMeSD2ZFdeKs4fKo=
-----END CERTIFICATE-----