Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa
File:                     a8006d90-9db1-3770-bb6a-a49d4decae45.roa (raw, json)
Hash identifier:          772dJZTGfxaWloqj7bIXAV1IMtt7Ax9m88bdKgya67Y=
Subject key identifier:   0C:2A:AB:2B:FC:F5:56:23:B9:D6:3D:90:45:B7:E7:45:D6:DC:8B:A5
Certificate issuer:       /CN=d92cf10a-b836-4dce-a8f5-f920d630995e
Certificate serial:       010D0C9F43285845840DC983EA665B7DA9582100
Authority key identifier: 08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        146.71.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c9:83:ea:66:5b:7d:a9:58:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92cf10a-b836-4dce-a8f5-f920d630995e
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=c634a6ab-17fc-4046-9af6-d247cdf6e0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:0e:42:d7:e1:22:5a:a3:7d:af:e0:d0:34:
                    2f:cd:8a:8a:cf:b5:dd:33:8a:9f:d3:a8:7a:99:05:
                    25:03:a7:95:ed:a3:63:ea:da:8d:54:e6:62:79:1f:
                    ba:09:f6:bb:27:b7:71:28:14:29:18:9e:df:c6:f3:
                    9e:b6:10:24:8d:01:ff:d5:d3:42:4a:10:cc:fb:05:
                    07:23:a0:87:e5:30:73:4d:81:80:cd:b9:15:56:c7:
                    e3:a2:9d:00:58:35:ca:e7:5e:02:cf:e4:70:27:2c:
                    62:8c:23:f0:af:c6:50:95:8f:a6:dd:32:72:a0:9c:
                    03:88:43:13:52:5a:31:af:84:f4:1e:4a:5f:44:e4:
                    73:d9:bc:10:a1:70:ea:3d:86:2a:47:61:05:52:89:
                    b4:89:cc:35:2c:d7:f7:fd:ac:c5:8f:23:fd:5c:a4:
                    f3:15:22:f5:d1:2c:bd:44:8e:61:3f:f8:46:aa:91:
                    cb:c6:33:72:61:bb:36:e0:35:4c:df:47:e0:b7:79:
                    38:8b:cb:a2:33:34:46:2c:18:93:38:fc:d0:2b:ff:
                    8d:0c:10:35:fe:3a:79:ce:c7:ab:69:1e:57:21:f4:
                    44:33:d7:ec:b6:1b:56:ae:c8:2b:3d:02:48:b6:23:
                    fe:96:93:8d:cd:61:2c:4e:b2:8b:8f:70:bf:8e:61:
                    62:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2A:AB:2B:FC:F5:56:23:B9:D6:3D:90:45:B7:E7:45:D6:DC:8B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/a8006d90-9db1-3770-bb6a-a49d4decae45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl

            X509v3 Authority Key Identifier:
                keyid:08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.71.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:e1:ed:1c:64:cd:5b:89:a5:08:ee:11:9d:d8:2f:b7:32:
         d7:10:88:e2:72:2f:7f:a5:02:7b:2e:89:64:b0:6f:88:f4:46:
         12:b2:46:66:b4:16:7c:05:10:f0:5c:18:69:ca:c2:08:17:ee:
         5b:11:b3:f8:5f:ae:cf:de:02:38:02:68:fa:41:1f:98:ed:1a:
         e3:1e:b0:c1:f7:b0:34:48:f1:a4:20:e2:48:40:c6:b9:9f:9a:
         00:97:6a:1b:dc:dd:23:9e:aa:a1:62:f7:d7:99:b7:f7:fa:1f:
         a9:8b:0c:83:70:64:3e:f8:6c:11:fb:f4:de:12:82:54:03:65:
         8b:11:d0:2e:70:e4:a5:61:ad:9d:f5:6f:06:53:0a:55:1b:c7:
         b7:e8:1c:f9:17:86:86:7c:da:32:61:8c:36:2d:f4:a1:9d:ee:
         44:4e:45:37:c8:0e:ee:17:6f:81:1a:07:a0:2d:19:60:95:03:
         67:1b:00:c2:89:a1:6c:50:00:a8:95:6a:cb:bd:34:49:5b:92:
         48:8a:11:3b:dc:5b:b1:2d:cf:fe:2b:f3:2d:2f:8e:f1:a3:35:
         9a:18:59:77:89:bc:b3:72:c4:3b:fb:bc:f8:7c:46:f1:da:67:
         aa:7f:70:f6:05:d2:55:f7:50:c7:0e:f2:8d:5f:f2:81:09:e4:
         3e:05:c8:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDcmD6mZbfalYIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDkyY2YxMGEtYjgzNi00ZGNlLWE4ZjUtZjkyMGQ2MzA5
OTVlMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk
YzYzNGE2YWItMTdmYy00MDQ2LTlhZjYtZDI0N2NkZjZlMGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra8OQtfhIlqjfa/g0DQvzYqKz7XdM4qf06h6
mQUlA6eV7aNj6tqNVOZieR+6Cfa7J7dxKBQpGJ7fxvOethAkjQH/1dNCShDM+wUH
I6CH5TBzTYGAzbkVVsfjop0AWDXK514Cz+RwJyxijCPwr8ZQlY+m3TJyoJwDiEMT
Uloxr4T0HkpfRORz2bwQoXDqPYYqR2EFUom0icw1LNf3/azFjyP9XKTzFSL10Sy9
RI5hP/hGqpHLxjNyYbs24DVM30fgt3k4i8uiMzRGLBiTOPzQK/+NDBA1/jp5zser
aR5XIfREM9fsthtWrsgrPQJItiP+lpONzWEsTrKLj3C/jmFiowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwqqyv89VYjudY9kEW350XW3IulMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJj
ZjEwYS1iODM2LTRkY2UtYThmNS1mOTIwZDYzMDk5NWUvYTgwMDZkOTAtOWRiMS0z
NzcwLWJiNmEtYTQ5ZDRkZWNhZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDkyY2YxMGEtYjgzNi00ZGNlLWE4
ZjUtZjkyMGQ2MzA5OTVlL2Q5MmNmMTBhLWI4MzYtNGRjZS1hOGY1LWY5MjBkNjMw
OTk1ZS5jcmwwHwYDVR0jBBgwFoAUCCosjPIRs6CkWckU9Yqou6/f76QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJjZjEwYS1iODM2LTRkY2UtYThmNS1mOTIw
ZDYzMDk5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkcDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnP4e0cZM1biaUI7hGd2C+3MtcQiOJyL3+lAnsuiWSwb4j0RhKyRma0
FnwFEPBcGGnKwggX7lsRs/hfrs/eAjgCaPpBH5jtGuMesMH3sDRI8aQg4khAxrmf
mgCXahvc3SOeqqFi99eZt/f6H6mLDINwZD74bBH79N4SglQDZYsR0C5w5KVhrZ31
bwZTClUbx7foHPkXhoZ82jJhjDYt9KGd7kRORTfIDu4Xb4EaB6AtGWCVA2cbAMKJ
oWxQAKiVasu9NElbkkiKETvcW7Etz/4r8y0vjvGjNZoYWXeJvLNyxDv7vPh8RvHa
Z6p/cPYF0lX3UMcO8o1f8oEJ5D4FyFQ=
-----END CERTIFICATE-----
Generated at Thu May 2 21:11:05 2024 by rpki-client on console-fra.rpki-client.org