Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa
File:                     df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa (raw, json)
Hash identifier:          P8O3sND7CatzajjbakmTZmWOWiUko/wn7W0/CdfW4ww=
Subject key identifier:   7C:0F:29:32:C9:DB:01:77:85:62:11:D6:A0:22:51:AE:5C:C4:41:F5
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584515E592B78E550FB191DB2570
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa
Signing time:             Sun 03 Mar 2024 14:00:31 +0000
ROA not before:           Sun 03 Mar 2024 14:00:31 +0000
ROA not after:            Sat 01 Jun 2024 13:00:31 +0000
asID:                     13213
IP address blocks:        198.145.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:15:e5:92:b7:8e:55:0f:b1:91:db:25:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Mar  3 14:00:31 2024 GMT
            Not After : Jun  1 13:00:31 2024 GMT
        Subject: CN=04f80927-f778-47e5-8651-d313a84fd2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:f9:c4:66:c3:1c:91:36:b0:df:0c:3e:9b:
                    70:5f:9b:aa:ff:bb:95:56:73:24:39:31:a0:35:94:
                    24:19:3a:72:65:1f:99:37:54:81:91:6f:63:ef:bf:
                    5e:a2:df:3c:50:72:29:46:31:0b:96:6a:03:c7:ca:
                    df:03:c5:65:75:07:c6:fe:10:24:07:f3:35:d0:e1:
                    96:a6:20:e4:01:ff:e0:b0:cb:61:00:78:ac:d9:c0:
                    f5:d2:1f:c1:4f:ec:3b:e0:fa:f8:b7:fd:4d:c5:0d:
                    25:22:b8:c2:5f:0b:81:d7:a0:11:c6:bc:c2:1c:7b:
                    dc:90:fc:bd:b6:40:c5:c9:16:ba:36:fb:15:6f:99:
                    71:83:f5:7c:6f:7f:83:ba:ed:4c:43:3d:22:a8:59:
                    83:5e:e5:0e:1b:fe:2b:a5:01:ef:d2:30:1f:b6:86:
                    4d:25:c1:20:b8:8e:8b:ff:50:09:79:1b:ed:a5:56:
                    60:e5:4f:2e:bb:b5:0c:ba:07:15:0a:b5:bc:93:e3:
                    76:2c:8a:b4:e0:c3:43:c7:2d:74:2b:b1:08:c6:14:
                    4b:da:7c:5d:24:55:db:ed:3b:f2:fd:d8:7c:47:24:
                    26:34:1d:e0:49:a3:80:b0:14:9c:e5:0a:a5:9b:1d:
                    1f:93:d3:71:3a:ca:3d:08:30:4f:27:76:9d:5a:aa:
                    ee:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0F:29:32:C9:DB:01:77:85:62:11:D6:A0:22:51:AE:5C:C4:41:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/df4d6f54-7715-3e9a-8c6c-bc5220d3b3da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b0:76:98:7c:35:ef:ea:77:cf:60:c6:34:8b:dd:74:a2:53:
         6d:4d:3e:fc:0b:f9:db:96:bd:39:34:f1:41:31:53:38:6f:e3:
         ac:02:4c:35:10:0a:7a:56:a7:b2:7a:ca:fa:e6:a1:af:01:35:
         a6:75:7a:a0:98:da:4d:c6:0f:a4:06:6e:85:f9:d4:28:ab:7f:
         79:4d:00:13:6b:69:76:cf:84:09:5e:5e:a0:fc:30:57:d9:94:
         ec:73:db:d4:c1:12:22:bf:4f:54:39:94:01:ed:0d:55:53:4d:
         d5:9d:5a:db:56:32:20:45:21:99:c4:01:8f:0e:d6:26:ab:46:
         c3:0d:bc:53:d7:19:9b:19:ab:83:9c:7c:00:e7:d2:e7:4b:e9:
         5c:91:53:39:72:8f:ad:62:68:61:b1:fe:2b:c4:a3:49:63:60:
         d7:62:23:28:0a:e9:d1:35:65:11:d0:21:e2:0a:66:b7:bb:e7:
         11:e9:af:b7:72:a5:bd:b3:0b:9c:ff:f8:77:a4:3a:b9:9f:01:
         5f:16:24:09:7f:ff:1e:1c:08:ed:59:a9:7e:72:de:2f:68:f1:
         81:24:01:49:bf:91:47:3e:b9:ea:c9:ed:9c:ec:27:b3:2c:42:
         c6:ad:fa:09:43:79:e0:05:ea:9d:ad:c2:53:0d:d3:cb:2b:dc:
         2b:e7:09:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUV5ZK3jlUPsZHbJXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk
MDRmODA5MjctZjc3OC00N2U1LTg2NTEtZDMxM2E4NGZkMmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLv5xGbDHJE2sN8MPptwX5uq/7uVVnMkOTGg
NZQkGTpyZR+ZN1SBkW9j779eot88UHIpRjELlmoDx8rfA8VldQfG/hAkB/M10OGW
piDkAf/gsMthAHis2cD10h/BT+w74Pr4t/1NxQ0lIrjCXwuB16ARxrzCHHvckPy9
tkDFyRa6NvsVb5lxg/V8b3+Duu1MQz0iqFmDXuUOG/4rpQHv0jAftoZNJcEguI6L
/1AJeRvtpVZg5U8uu7UMugcVCrW8k+N2LIq04MNDxy10K7EIxhRL2nxdJFXb7Tvy
/dh8RyQmNB3gSaOAsBSc5Qqlmx0fk9NxOso9CDBPJ3adWqruvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwPKTLJ2wF3hWIR1qAiUa5cxEH1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvZGY0ZDZmNTQtNzcxNS0z
ZTlhLThjNmMtYmM1MjIwZDNiM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSwdph8Ne/qd89gxjSL3XSiU21NPvwL+duWvTk08UExUzhv46wCTDUQ
CnpWp7J6yvrmoa8BNaZ1eqCY2k3GD6QGboX51Cirf3lNABNraXbPhAleXqD8MFfZ
lOxz29TBEiK/T1Q5lAHtDVVTTdWdWttWMiBFIZnEAY8O1iarRsMNvFPXGZsZq4Oc
fADn0udL6VyRUzlyj61iaGGx/ivEo0ljYNdiIygK6dE1ZRHQIeIKZre75xHpr7dy
pb2zC5z/+HekOrmfAV8WJAl//x4cCO1ZqX5y3i9o8YEkAUm/kUc+uerJ7ZzsJ7Ms
Qsat+glDeeAF6p2twlMN08sr3CvnCUI=
-----END CERTIFICATE-----
Generated at Thu Apr 25 06:19:20 2024 by rpki-client on console-ams.rpki-client.org