Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa
File:                     49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa (raw, json)
Hash identifier:          Cc03WkOFxxzlPsl5wmYxjtvCdp5fihcWTPgn7nY0rJk=
Subject key identifier:   9A:DA:71:B7:9F:29:1D:0C:06:E0:11:5C:7D:EC:FD:70:20:9E:90:92
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285841E46CADE8978B17F6BE9AD0C0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sun 16 Jul 2023 23:31:46 +0000
asID:                     9009
IP address blocks:        198.145.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 May 2023 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:ad:e8:97:8b:17:f6:be:9a:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 16 23:31:46 2023 GMT
        Subject: CN=ab2d4254-fac6-49e6-8b21-6b1e96fb7be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:52:53:79:b1:89:bd:69:59:21:49:a8:7d:ee:
                    39:0c:aa:d5:98:3e:17:26:31:b1:34:05:fd:ee:6f:
                    28:13:34:dc:de:50:a8:3f:fc:f5:27:c2:26:7c:1e:
                    a3:2e:f4:67:b5:e9:3e:96:69:58:c4:94:51:e3:0d:
                    47:50:da:4c:4b:76:0a:5e:5e:da:8c:d9:31:62:b1:
                    3f:bb:23:c6:b0:23:c6:72:c0:35:34:9d:bb:75:3c:
                    f9:49:71:cd:48:80:c8:e1:a7:2a:2c:a8:72:53:2c:
                    9a:89:0c:84:ed:3c:f5:b8:dd:e8:d3:6d:ef:91:7f:
                    32:62:e0:8a:fc:f6:be:29:4f:5d:a4:38:4c:af:6a:
                    d7:3e:8d:80:b5:b9:6c:ce:bb:22:df:b2:13:4a:d4:
                    94:a8:86:83:2d:97:0a:fa:61:3c:a1:51:df:3e:9d:
                    36:14:20:39:15:07:ef:23:b5:72:f0:0c:0d:81:36:
                    91:2a:a9:17:93:b2:a4:fa:41:78:7f:de:ac:64:2e:
                    18:ab:77:90:1b:0b:4e:41:fe:86:08:65:f5:8d:16:
                    ba:07:87:bd:52:ae:78:8e:53:b0:29:3e:d0:71:ff:
                    9e:c0:48:69:76:2a:52:4b:ac:c8:6e:13:67:d9:44:
                    ce:c0:1c:e6:23:06:98:7b:68:50:cd:af:07:62:4c:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DA:71:B7:9F:29:1D:0C:06:E0:11:5C:7D:EC:FD:70:20:9E:90:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/49ae9da2-bdcf-3ffc-9110-a7397bd0dc07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:df:7f:bc:a2:13:94:08:05:ee:1d:18:e5:ca:af:68:cc:
         7d:b7:97:29:15:86:fa:02:f0:de:4e:fd:e4:49:1b:62:12:a3:
         92:9e:bb:fa:ab:73:15:34:f9:9e:ad:fc:28:28:34:18:1c:18:
         9d:1f:66:fc:d0:8d:4e:33:be:34:9c:7d:45:74:dc:72:19:10:
         60:df:88:46:22:d3:2a:ed:f2:f2:8f:82:7c:6b:41:44:b8:2f:
         f3:b8:0d:0f:65:2f:ba:83:f9:58:07:ed:73:da:5d:f6:46:06:
         92:ab:3a:a0:5f:43:78:8c:71:98:00:ed:a9:3a:1e:90:e5:ac:
         ee:8a:e8:a0:88:04:99:5a:4a:41:05:64:6c:fb:65:e1:64:8b:
         bb:74:8a:07:4a:09:9e:14:60:fa:2d:0c:c0:6e:ed:a6:75:3b:
         10:44:55:4a:7d:82:cb:41:e8:ca:90:9b:86:43:67:79:97:51:
         e4:16:95:96:4d:08:c6:bf:86:7a:d7:be:5f:55:da:7d:3d:e9:
         30:47:f9:83:56:ff:56:9b:86:ce:8c:fc:70:db:ce:36:1a:df:
         db:e9:93:17:df:4b:bb:5e:b9:fd:fe:4a:70:3f:7c:c3:e0:fc:
         41:20:d2:c6:f7:10:a2:25:f2:0a:25:3e:8e:46:eb:d5:0c:40:
         9a:00:fd:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbK3ol4sX9r6a0MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcxNjIzMzE0NlowLzEtMCsGA1UEAxMk
YWIyZDQyNTQtZmFjNi00OWU2LThiMjEtNmIxZTk2ZmI3YmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFJTebGJvWlZIUmofe45DKrVmD4XJjGxNAX9
7m8oEzTc3lCoP/z1J8ImfB6jLvRntek+lmlYxJRR4w1HUNpMS3YKXl7ajNkxYrE/
uyPGsCPGcsA1NJ27dTz5SXHNSIDI4acqLKhyUyyaiQyE7Tz1uN3o023vkX8yYuCK
/Pa+KU9dpDhMr2rXPo2Atblszrsi37ITStSUqIaDLZcK+mE8oVHfPp02FCA5FQfv
I7Vy8AwNgTaRKqkXk7Kk+kF4f96sZC4Yq3eQGwtOQf6GCGX1jRa6B4e9Uq54jlOw
KT7Qcf+ewEhpdipSS6zIbhNn2UTOwBzmIwaYe2hQza8HYkxtNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJracbefKR0MBuARXH3s/XAgnpCSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNDlhZTlkYTItYmRjZi0z
ZmZjLTkxMTAtYTczOTdiZDBkYzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1V33+8ohOUCAXuHRjlyq9ozH23lykVhvoC8N5O/eRJG2ISo5Keu/qr
cxU0+Z6t/CgoNBgcGJ0fZvzQjU4zvjScfUV03HIZEGDfiEYi0yrt8vKPgnxrQUS4
L/O4DQ9lL7qD+VgH7XPaXfZGBpKrOqBfQ3iMcZgA7ak6HpDlrO6K6KCIBJlaSkEF
ZGz7ZeFki7t0igdKCZ4UYPotDMBu7aZ1OxBEVUp9gstB6MqQm4ZDZ3mXUeQWlZZN
CMa/hnrXvl9V2n096TBH+YNW/1abhs6M/HDbzjYa39vpkxffS7teuf3+SnA/fMPg
/EEg0sb3EKIl8golPo5G69UMQJoA/aU=
-----END CERTIFICATE-----
Generated at Mon May 15 19:17:46 2023 by rpki-client on console-fra.rpki-client.org