Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa
File:                     7489abd9-d972-3502-9bfe-8f60dd4caa20.roa (raw, json)
Hash identifier:          Qj/iVw2mD+/bx0tzKYBOHvw2BfC0G4sEj6uppSyRvsc=
Subject key identifier:   4B:30:41:23:56:1C:79:CF:1C:DE:89:6F:87:D8:F4:97:4C:40:1E:DC
Certificate issuer:       /CN=aac421ae-305b-4a29-aacc-176ba3fca213
Certificate serial:       010D0C9F4328584582A888192ECE46B4604C0F80
Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        168.100.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:88:19:2e:ce:46:b4:60:4c:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=ac65fd88-a5b7-4d94-86af-23b40adc7fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:50:56:d1:72:c2:65:62:58:c4:04:d7:61:
                    1b:4d:64:f6:96:90:c5:8c:68:57:8f:54:44:3a:81:
                    98:5d:8e:bc:b5:f2:44:53:34:da:59:fa:42:7b:b6:
                    00:4e:9e:5a:40:38:d6:95:56:47:ca:64:db:b2:80:
                    09:70:06:fe:48:2b:a2:dc:e1:22:e7:17:b7:2e:d9:
                    9c:26:34:80:2e:74:73:3f:9d:a8:83:85:40:68:08:
                    82:a2:42:45:4d:a3:a9:ac:03:c3:dd:c8:01:03:64:
                    c7:12:bc:69:fd:c8:f9:fb:20:3a:61:3d:8c:8b:d9:
                    68:99:9e:77:aa:70:03:37:9d:89:fa:8c:02:39:51:
                    c1:90:22:cc:b1:b2:74:13:33:27:05:5a:9c:44:49:
                    70:ce:25:ae:0a:9d:ff:d7:b1:18:b1:ed:2f:13:a1:
                    36:d6:d5:17:d0:41:36:53:71:a5:3e:24:d9:8a:58:
                    80:8c:c5:41:22:a5:31:a2:63:23:31:0b:33:5f:cc:
                    98:29:c6:d4:29:26:f1:74:59:7c:47:c5:2b:42:4b:
                    e3:0d:ee:77:6e:ad:2f:83:b6:8c:c5:3c:9e:8f:8b:
                    6e:b1:e7:ff:5e:f4:55:43:4d:5e:cb:e7:0f:c4:fd:
                    d0:c8:2c:d9:75:a7:57:b3:45:44:2a:87:fc:84:fd:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:41:23:56:1C:79:CF:1C:DE:89:6F:87:D8:F4:97:4C:40:1E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl

            X509v3 Authority Key Identifier:
                keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:4c:21:1d:92:05:1f:f2:58:04:0c:2e:8a:fd:b4:97:6b:
         94:8b:a9:88:ee:7f:a5:9d:9b:69:fc:30:f8:7e:b3:c4:69:5a:
         16:da:a2:b7:85:07:1e:7c:44:cc:16:e3:f5:49:3c:1d:81:16:
         4d:e8:78:09:34:b8:67:ca:b4:96:0e:20:b7:56:10:89:b6:3f:
         12:b0:a4:0b:e8:b2:29:0c:90:24:d6:cc:80:c9:a1:f7:23:48:
         c8:b6:70:14:bb:e9:2d:71:4e:f3:e1:22:f3:b8:3b:c7:9a:67:
         15:25:3a:8f:a8:6e:f9:80:8a:be:9c:89:04:d6:ba:be:e2:c7:
         14:e7:0c:88:61:b4:fa:f2:5e:48:b1:f7:3d:82:16:7c:b5:18:
         5c:2a:17:01:c5:5e:1a:38:a2:71:a1:7a:d2:26:ec:d0:df:c2:
         d9:71:8e:48:c0:02:3e:3e:c5:52:2c:8a:f1:08:17:34:ae:d5:
         4c:a8:54:c3:19:ea:22:0a:89:fb:69:45:96:77:e7:c7:0a:8e:
         ee:a2:80:97:3d:ec:3c:d3:40:be:6a:43:9b:95:a3:6e:a8:e6:
         fe:fb:7f:87:31:e3:ef:e9:6c:d7:c4:36:67:a7:40:b8:99:c1:
         c5:4b:0c:c3:88:e5:e3:5e:c6:99:4d:30:2a:95:12:25:df:2f:
         b9:a8:c2:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqIgZLs5GtGBMD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh
MjEzMB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
YWM2NWZkODgtYTViNy00ZDk0LTg2YWYtMjNiNDBhZGM3ZmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycdQVtFywmViWMQE12EbTWT2lpDFjGhXj1RE
OoGYXY68tfJEUzTaWfpCe7YATp5aQDjWlVZHymTbsoAJcAb+SCui3OEi5xe3Ltmc
JjSALnRzP52og4VAaAiCokJFTaOprAPD3cgBA2THErxp/cj5+yA6YT2Mi9lomZ53
qnADN52J+owCOVHBkCLMsbJ0EzMnBVqcRElwziWuCp3/17EYse0vE6E21tUX0EE2
U3GlPiTZiliAjMVBIqUxomMjMQszX8yYKcbUKSbxdFl8R8UrQkvjDe53bq0vg7aM
xTyej4tusef/XvRVQ01ey+cPxP3QyCzZdadXs0VEKof8hP2PMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEswQSNWHHnPHN6Jb4fY9JdMQB7cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0
MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvNzQ4OWFiZDktZDk3Mi0z
NTAyLTliZmUtOGY2MGRkNGNhYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh
Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj
YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi
YTNmY2EyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe2TCEdkgUf8lgEDC6K/bSXa5SLqYjuf6Wdm2n8MPh+s8RpWhbaoreF
Bx58RMwW4/VJPB2BFk3oeAk0uGfKtJYOILdWEIm2PxKwpAvosikMkCTWzIDJofcj
SMi2cBS76S1xTvPhIvO4O8eaZxUlOo+obvmAir6ciQTWur7ixxTnDIhhtPryXkix
9z2CFny1GFwqFwHFXho4onGhetIm7NDfwtlxjkjAAj4+xVIsivEIFzSu1UyoVMMZ
6iIKiftpRZZ358cKju6igJc97DzTQL5qQ5uVo26o5v77f4cx4+/pbNfENmenQLiZ
wcVLDMOI5eNexplNMCqVEiXfL7mowpo=
-----END CERTIFICATE-----
Generated at Thu May 2 17:33:45 2024 by rpki-client on console-ams.rpki-client.org