Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e3f5f83f-75d1-3094-8b7a-52489dd6dda4.roa
File:                     e3f5f83f-75d1-3094-8b7a-52489dd6dda4.roa (raw, json)
Hash identifier:          dRmC+vEqhS1l0TajUfIxh6X9oU70j0UYv2PCP/J/nfs=
Subject key identifier:   94:2F:37:54:F3:58:13:23:44:45:C8:6A:3D:A7:3B:86:3E:18:3F:FD
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED00A1E8AC3BC28E37F8FC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e3f5f83f-75d1-3094-8b7a-52489dd6dda4.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     54858
IP address blocks:        162.208.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:0a:1e:8a:c3:bc:28:e3:7f:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=287e7ec9-e5e3-4916-8346-b91d1268da85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7f:29:31:e6:b6:48:c5:d3:6b:56:88:be:0a:
                    1b:3d:d3:79:fd:ad:66:59:59:63:cb:12:98:b9:7a:
                    55:46:8b:5f:d4:c6:fa:be:12:7a:97:1c:55:6c:ed:
                    2a:12:ee:eb:0e:f3:0d:86:04:48:68:d6:29:e7:6d:
                    85:e9:8e:9e:7e:87:5d:1b:a0:c3:f0:62:0d:d1:d6:
                    e9:6e:4d:7a:f0:7e:b9:21:36:27:27:41:46:eb:85:
                    d0:13:14:d5:53:77:28:3e:76:e9:d7:d0:f0:db:b5:
                    9d:7a:61:5d:18:31:7e:d6:0d:f5:5d:56:f3:a5:67:
                    45:0f:38:c1:a9:73:11:3b:a3:3c:8e:2f:85:d0:31:
                    a7:55:9c:10:f7:f3:54:4f:ef:2c:6c:61:f2:7b:ac:
                    87:56:c1:77:ab:73:02:b6:ea:c0:ad:be:7b:95:65:
                    5e:87:83:9e:e0:98:fe:c9:98:8c:92:78:49:9f:c6:
                    9c:88:d7:d9:ca:ab:d1:29:6d:c0:15:41:41:2c:a7:
                    2d:df:b6:6d:92:2d:5a:1d:63:ca:55:59:d3:72:d4:
                    5f:b7:fa:0c:66:6e:d2:d0:6f:cc:1f:79:d6:ea:b7:
                    a2:c3:42:69:7c:03:79:e9:25:b7:23:85:e6:03:40:
                    e6:b8:36:2d:28:52:2b:74:02:07:8b:00:3e:50:51:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2F:37:54:F3:58:13:23:44:45:C8:6A:3D:A7:3B:86:3E:18:3F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e3f5f83f-75d1-3094-8b7a-52489dd6dda4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:2a:ee:ee:d7:d9:5d:e7:1a:40:c6:56:91:0a:16:0f:a4:99:
         2f:ad:e9:53:48:b7:8d:b4:bf:63:89:a3:bf:a3:5b:14:78:21:
         11:64:86:2a:16:64:7e:bd:2e:1f:8a:97:dd:d7:b3:12:92:8a:
         68:b2:df:2c:c5:e3:b9:e1:ee:32:1b:e6:1b:a1:51:e6:a2:82:
         a2:2d:92:73:56:5b:25:1b:e3:b7:bf:97:c9:4d:eb:61:5b:b8:
         81:5c:40:55:ae:7a:3e:9b:0b:97:7e:a1:5b:75:f1:ea:84:f6:
         48:d0:f3:d4:18:9e:40:ae:37:10:06:cb:c1:7c:37:ae:ad:73:
         3e:00:0d:63:a5:2c:81:f9:e2:72:0d:03:b4:ac:ad:a9:cb:f7:
         0e:79:5f:41:fb:5c:4f:9a:7c:43:68:79:ec:c6:6f:f6:49:e5:
         55:d7:ff:11:71:12:cf:f9:5a:a1:af:1e:d5:d9:2d:9f:22:e2:
         f5:7e:03:bc:13:e7:98:3e:3a:41:de:ba:46:99:e8:93:ae:2d:
         7e:19:6c:6c:63:06:eb:24:b4:c2:ee:89:ca:39:6f:36:42:e5:
         46:83:bc:37:9c:18:9c:dc:31:87:9e:51:b3:37:5a:26:5a:d5:
         ae:9c:a1:6f:10:43:35:18:d6:ec:84:76:f7:89:fc:7e:ee:4b:
         ae:01:c1:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AoeisO8KON/j8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk
Mjg3ZTdlYzktZTVlMy00OTE2LTgzNDYtYjkxZDEyNjhkYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn8pMea2SMXTa1aIvgobPdN5/a1mWVljyxKY
uXpVRotf1Mb6vhJ6lxxVbO0qEu7rDvMNhgRIaNYp522F6Y6efoddG6DD8GIN0dbp
bk168H65ITYnJ0FG64XQExTVU3coPnbp19Dw27WdemFdGDF+1g31XVbzpWdFDzjB
qXMRO6M8ji+F0DGnVZwQ9/NUT+8sbGHye6yHVsF3q3MCturArb57lWVeh4Oe4Jj+
yZiMknhJn8aciNfZyqvRKW3AFUFBLKct37Ztki1aHWPKVVnTctRft/oMZm7S0G/M
H3nW6reiw0JpfAN56SW3I4XmA0DmuDYtKFIrdAIHiwA+UFGNmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJQvN1TzWBMjREXIaj2nO4Y+GD/9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZTNmNWY4M2YtNzVkMS0z
MDk0LThiN2EtNTI0ODlkZDZkZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEq7u7X2V3nGkDGVpEKFg+kmS+t6VNIt420v2OJo7+jWxR4IRFkhioW
ZH69Lh+Kl93XsxKSimiy3yzF47nh7jIb5huhUeaigqItknNWWyUb47e/l8lN62Fb
uIFcQFWuej6bC5d+oVt18eqE9kjQ89QYnkCuNxAGy8F8N66tcz4ADWOlLIH54nIN
A7SsranL9w55X0H7XE+afENoeezGb/ZJ5VXX/xFxEs/5WqGvHtXZLZ8i4vV+A7wT
55g+OkHeukaZ6JOuLX4ZbGxjBusktMLuico5bzZC5UaDvDecGJzcMYeeUbM3WiZa
1a6coW8QQzUY1uyEdveJ/H7uS64BwSA=
-----END CERTIFICATE-----
Generated at Thu May 2 15:00:02 2024 by rpki-client on console-ams.rpki-client.org