Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4964d9f7-0834-33f1-917e-ba00e4a689d0.roa
File:                     4964d9f7-0834-33f1-917e-ba00e4a689d0.roa (raw, json)
Hash identifier:          l9fwXLhL6IWv+c1WTtzj4qHG0VgoEThSdzekDLGZTjo=
Subject key identifier:   59:1D:C0:31:17:77:46:D4:43:D4:BA:15:47:D3:65:0C:90:9D:2B:6B
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584582A87E9FCFCC625068E4DA80
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4964d9f7-0834-33f1-917e-ba00e4a689d0.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     36445
IP address blocks:        149.248.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:7e:9f:cf:cc:62:50:68:e4:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=0cb7043f-4963-4414-af36-711cedfdc315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:fb:59:28:ef:3c:50:65:0c:42:0f:91:35:
                    c7:4a:cb:90:73:93:68:ff:70:ed:c7:79:57:1c:83:
                    aa:81:d7:0f:72:83:a4:8f:e3:e7:86:8c:c3:b7:43:
                    ba:ae:52:b5:0f:39:9a:18:ef:c9:f4:59:1d:ee:f9:
                    1e:3a:6c:4d:d9:af:44:91:bf:51:d3:c4:20:f9:db:
                    27:9c:1d:ea:82:a0:b5:84:9a:15:9a:60:1d:c1:9c:
                    bf:4b:59:07:be:16:c1:f8:92:cd:72:da:3e:ce:a3:
                    28:0b:b3:58:05:45:02:9f:0a:46:af:32:ec:1d:06:
                    f3:2f:24:81:5a:f9:4c:a6:41:7e:f1:9e:91:76:f0:
                    ef:32:b5:70:e4:61:f6:af:dd:0e:11:60:14:92:e8:
                    64:2d:f1:be:fc:59:17:47:7f:3a:0c:8e:7b:9e:01:
                    0f:45:b7:96:59:e9:d5:16:76:3c:47:42:45:2d:0e:
                    49:30:00:a3:92:ca:4e:47:22:c1:54:fb:9d:e1:07:
                    33:60:02:1d:57:71:8d:5c:1d:63:7a:77:0c:95:55:
                    81:9f:f0:98:f8:d9:c3:98:7a:29:39:cf:d8:0b:a4:
                    43:d3:90:25:74:92:0d:82:9f:d5:30:de:00:1d:99:
                    15:1a:1f:0b:7d:66:6b:62:5a:74:ef:38:d4:8e:40:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1D:C0:31:17:77:46:D4:43:D4:BA:15:47:D3:65:0C:90:9D:2B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4964d9f7-0834-33f1-917e-ba00e4a689d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:59:4b:4b:49:ee:df:47:91:f6:9e:6d:c1:46:99:49:7c:
         be:d0:cc:85:c5:28:3b:1f:cd:d8:0c:98:66:bd:c3:7a:cc:6c:
         6c:13:85:a5:cb:bf:35:ad:80:3c:38:4a:f9:22:d7:38:3c:ff:
         d1:a6:72:4c:62:2f:d8:e1:a5:fc:f2:68:48:49:47:4b:df:7f:
         57:f4:11:8f:9f:0e:29:68:3b:11:a6:9d:46:4f:74:99:aa:e2:
         38:99:71:c8:f4:5c:cf:1a:6e:d3:80:63:da:f3:b7:13:6e:4f:
         5c:bc:91:20:90:e5:37:86:39:7e:8e:6e:8a:a3:b3:08:7c:c7:
         3f:91:3f:f1:98:e1:10:b1:4d:62:3e:b7:77:53:30:48:f4:60:
         a7:00:5e:a6:b8:7c:0d:c2:ff:b2:14:b7:e7:8c:94:42:9b:f0:
         b0:f9:c9:ff:89:b4:33:9a:da:b5:f0:c1:af:28:21:21:91:e1:
         5d:a2:ad:ec:d1:d8:f6:5d:ef:c5:bc:bc:10:83:ea:f9:db:81:
         97:7f:2e:ef:e4:8f:d7:9e:0a:58:7a:d7:0d:3b:d7:88:e7:73:
         7a:11:42:9e:46:48:fe:89:97:8d:b6:b2:34:72:61:b8:99:e1:
         88:e5:cd:53:9c:8f:a7:0a:86:b3:ec:c3:7f:26:b6:e4:13:1c:
         c3:0a:38:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqH6fz8xiUGjk2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0
Zjg0MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
MGNiNzA0M2YtNDk2My00NDE0LWFmMzYtNzExY2VkZmRjMzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzT7WSjvPFBlDEIPkTXHSsuQc5No/3Dtx3lX
HIOqgdcPcoOkj+PnhozDt0O6rlK1DzmaGO/J9Fkd7vkeOmxN2a9Ekb9R08Qg+dsn
nB3qgqC1hJoVmmAdwZy/S1kHvhbB+JLNcto+zqMoC7NYBUUCnwpGrzLsHQbzLySB
WvlMpkF+8Z6RdvDvMrVw5GH2r90OEWAUkuhkLfG+/FkXR386DI57ngEPRbeWWenV
FnY8R0JFLQ5JMACjkspORyLBVPud4QczYAIdV3GNXB1jencMlVWBn/CY+NnDmHop
Oc/YC6RD05AldJINgp/VMN4AHZkVGh8LfWZrYlp07zjUjkDPBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkdwDEXd0bUQ9S6FUfTZQyQnStrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz
ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNDk2NGQ5ZjctMDgzNC0z
M2YxLTkxN2UtYmEwMGU0YTY4OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx
MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj
NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0
ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlfh0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0pWUtLSe7fR5H2nm3BRplJfL7QzIXFKDsfzdgMmGa9w3rMbGwThaXL
vzWtgDw4Svki1zg8/9GmckxiL9jhpfzyaEhJR0vff1f0EY+fDiloOxGmnUZPdJmq
4jiZccj0XM8abtOAY9rztxNuT1y8kSCQ5TeGOX6Oboqjswh8xz+RP/GY4RCxTWI+
t3dTMEj0YKcAXqa4fA3C/7IUt+eMlEKb8LD5yf+JtDOa2rXwwa8oISGR4V2irezR
2PZd78W8vBCD6vnbgZd/Lu/kj9eeClh61w0714jnc3oRQp5GSP6Jl422sjRyYbiZ
4YjlzVOcj6cKhrPsw38mtuQTHMMKOFA=
-----END CERTIFICATE-----
Generated at Thu May 16 01:33:00 2024 by rpki-client on console-fra.rpki-client.org