Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/a80a3c0e-1133-35db-add5-bff9b4473009.roa
File:                     a80a3c0e-1133-35db-add5-bff9b4473009.roa (raw, json)
Hash identifier:          qlt+LO5gAeaezFNdFlhSK4K+iDtDr0BFPBAXPMWJ5UI=
Subject key identifier:   7E:60:B3:60:DD:8D:FD:F4:EC:75:70:23:39:23:82:E8:BA:F2:4C:A3
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F432858455B92EB0D10C74866E9B14160
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/a80a3c0e-1133-35db-add5-bff9b4473009.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     32519
IP address blocks:        65.49.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:eb:0d:10:c7:48:66:e9:b1:41:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=551d3f6c-b8d4-4f14-a3b9-2ad520890ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:a8:aa:c7:cb:4a:c3:bc:a2:cd:ed:18:57:
                    e5:4c:99:80:0f:cb:f1:0e:9c:89:33:d1:aa:fd:16:
                    5b:44:77:97:3c:13:b7:3f:ea:a8:cf:3c:61:3f:2d:
                    77:ce:a6:32:cf:db:32:4f:f0:ce:0f:7e:1a:ff:96:
                    d9:93:9e:d6:77:e9:40:4b:f0:ba:ba:d1:cb:55:a5:
                    90:7e:84:9b:e9:49:99:e8:34:9b:2b:22:04:79:c6:
                    f6:ae:33:24:6c:ed:7c:8f:09:ae:9d:f0:c1:02:63:
                    a4:3b:b2:30:c1:cd:a8:90:1e:ce:2c:43:ad:4e:e9:
                    0f:bb:7c:09:e8:0f:2f:27:71:aa:04:dd:bd:d4:e9:
                    18:26:5e:97:2c:f1:60:26:51:5d:94:70:df:06:45:
                    88:df:c2:3f:59:c5:1d:58:25:82:de:aa:b4:69:2b:
                    f6:8d:72:99:f6:af:60:67:35:78:24:41:dc:9a:66:
                    8b:cb:3d:4c:0b:96:b1:4a:61:1d:c2:32:d2:3f:7f:
                    83:92:f9:e0:44:0f:74:77:65:79:de:30:8a:e9:3f:
                    c0:81:7b:d4:1c:22:10:09:f5:06:cd:f1:ff:0b:f0:
                    bb:77:e6:2b:6f:41:91:cb:ad:5a:28:26:28:2a:81:
                    94:f8:ad:4d:65:b2:61:56:73:0d:b5:65:c7:f8:9b:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:60:B3:60:DD:8D:FD:F4:EC:75:70:23:39:23:82:E8:BA:F2:4C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/a80a3c0e-1133-35db-add5-bff9b4473009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:88:90:77:e4:45:26:26:13:a1:a7:fa:47:a5:c4:4d:b3:c2:
         e7:d4:e9:de:9f:4f:8f:61:42:7d:31:59:34:24:36:41:6e:17:
         dd:e5:d7:df:2d:d1:3b:4f:54:16:b4:dc:ad:72:dd:b2:21:5e:
         64:b5:34:bf:68:7f:9a:cc:4a:3b:c2:0d:e2:f0:2c:0a:f4:e9:
         f5:e5:65:af:98:5f:60:24:d5:21:34:a8:bd:8e:b3:35:8a:15:
         cb:63:28:f4:bd:ec:97:f9:15:6b:19:61:19:bc:1e:40:01:5c:
         cc:e2:fe:26:e0:71:7d:22:de:2b:0b:57:2f:85:f5:55:aa:d0:
         5f:85:b7:fb:4f:49:e3:e0:9c:9b:8f:12:c5:be:86:c3:fe:86:
         2f:14:77:f9:1d:7d:f0:6c:45:46:66:7f:96:8e:15:60:75:3f:
         d8:52:a9:3b:e2:ce:a6:1a:ac:6e:57:c9:59:ca:f5:66:52:17:
         a0:fe:7b:d5:37:1a:c6:ac:bd:3c:52:19:b4:e8:e7:57:47:e6:
         56:a0:f9:0e:cf:08:d4:4e:07:74:e6:dc:00:2b:b0:36:4c:97:
         c8:a5:72:79:17:fb:a1:d1:72:a5:bc:7c:af:7c:1b:65:23:85:
         4d:73:3e:12:6f:a9:22:81:94:d0:c2:a0:44:8e:73:ba:f1:f0:
         40:f1:0f:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVbkusNEMdIZumxQWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IwMWIyOGEtNDM2ZC00MmRkLTg3NTAtNTM2MWYyMzA5
Mjk3MB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk
NTUxZDNmNmMtYjhkNC00ZjE0LWEzYjktMmFkNTIwODkwZmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF6oqsfLSsO8os3tGFflTJmAD8vxDpyJM9Gq
/RZbRHeXPBO3P+qozzxhPy13zqYyz9syT/DOD34a/5bZk57Wd+lAS/C6utHLVaWQ
foSb6UmZ6DSbKyIEecb2rjMkbO18jwmunfDBAmOkO7Iwwc2okB7OLEOtTukPu3wJ
6A8vJ3GqBN291OkYJl6XLPFgJlFdlHDfBkWI38I/WcUdWCWC3qq0aSv2jXKZ9q9g
ZzV4JEHcmmaLyz1MC5axSmEdwjLSP3+DkvngRA90d2V53jCK6T/AgXvUHCIQCfUG
zfH/C/C7d+Yrb0GRy61aKCYoKoGU+K1NZbJhVnMNtWXH+JtuLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5gs2Ddjf307HVwIzkjgui68kyjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAx
YjI4YS00MzZkLTQyZGQtODc1MC01MzYxZjIzMDkyOTcvYTgwYTNjMGUtMTEzMy0z
NWRiLWFkZDUtYmZmOWI0NDczMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2IwMWIyOGEtNDM2ZC00MmRkLTg3
NTAtNTM2MWYyMzA5Mjk3L2NiMDFiMjhhLTQzNmQtNDJkZC04NzUwLTUzNjFmMjMw
OTI5Ny5jcmwwHwYDVR0jBBgwFoAUoD/XgfdrhiAFQLOw8V5XSYqIHsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAxYjI4YS00MzZkLTQyZGQtODc1MC01MzYx
ZjIzMDkyOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISIkHfkRSYmE6Gn+kelxE2zwufU6d6fT49hQn0xWTQkNkFuF93l198t
0TtPVBa03K1y3bIhXmS1NL9of5rMSjvCDeLwLAr06fXlZa+YX2Ak1SE0qL2OszWK
FctjKPS97Jf5FWsZYRm8HkABXMzi/ibgcX0i3isLVy+F9VWq0F+Ft/tPSePgnJuP
EsW+hsP+hi8Ud/kdffBsRUZmf5aOFWB1P9hSqTvizqYarG5XyVnK9WZSF6D+e9U3
GsasvTxSGbTo51dH5lag+Q7PCNROB3Tm3AArsDZMl8ilcnkX+6HRcqW8fK98G2Uj
hU1zPhJvqSKBlNDCoESOc7rx8EDxD0o=
-----END CERTIFICATE-----
Generated at Sun Apr 28 14:34:14 2024 by rpki-client on console-ams.rpki-client.org