Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa
File:                     6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa (raw, json)
Hash identifier:          Kp9Y3g2lzNM3bul6Kzy4nA/2/DmAiObCZAY5glrm2/Y=
Subject key identifier:   17:0F:13:76:E1:58:45:29:6E:AD:B2:76:24:96:EA:80:70:FD:CB:83
Certificate issuer:       /CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db
Certificate serial:       010D0C9F4328584551CD6D88D75E33223E728740
Authority key identifier: 82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa
Signing time:             Mon 25 Mar 2024 01:00:25 +0000
ROA not before:           Mon 25 Mar 2024 01:00:25 +0000
ROA not after:            Sun 23 Jun 2024 01:00:25 +0000
asID:                     3066
IP address blocks:        192.148.252.0/23 maxlen: 23
                          192.148.252.0/24 maxlen: 24
                          192.148.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:51:cd:6d:88:d7:5e:33:22:3e:72:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db
        Validity
            Not Before: Mar 25 01:00:25 2024 GMT
            Not After : Jun 23 01:00:25 2024 GMT
        Subject: CN=7e3d5134-54cb-4b60-abe1-587e5ddfb564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ad:e9:3c:a7:74:40:37:c0:63:e9:a6:6c:c3:
                    86:70:01:c2:86:9a:e6:ee:76:76:17:3d:d2:f7:52:
                    4b:7a:6d:f5:a2:e9:7a:27:d6:27:d9:42:92:30:b3:
                    39:9b:b1:00:ae:33:16:21:30:b5:ab:47:9b:16:9d:
                    60:41:52:a4:ba:53:ce:ac:f0:8e:0e:43:33:0d:f6:
                    21:fe:f9:6f:5b:86:2a:63:76:d6:84:c2:ca:b7:e6:
                    f2:a0:81:b5:99:63:9c:db:80:0d:b5:17:20:b9:0a:
                    9c:46:83:08:7e:56:93:1e:d5:31:d1:79:44:75:12:
                    ca:d5:00:5f:06:e9:12:c6:d7:e7:a3:e0:46:04:4a:
                    ce:73:79:d3:07:62:b0:7f:0d:e0:bd:67:ab:64:28:
                    3b:0a:e7:4b:d1:f1:11:3d:61:bf:09:42:7c:97:3a:
                    04:cc:ec:1c:04:f1:cf:a7:8b:8f:99:b3:f9:cc:95:
                    5c:44:c8:f2:2f:4f:f2:3d:54:ff:29:16:51:da:70:
                    79:78:eb:cb:c8:92:3c:db:0b:f6:60:50:b5:22:e8:
                    a7:ea:8f:41:77:82:4e:ed:db:46:5d:56:d3:e8:9c:
                    10:9d:17:43:ee:2e:e5:8f:0b:55:fc:73:ca:5d:78:
                    2c:6c:5e:6d:ec:16:0b:ea:b0:05:c9:eb:25:f7:c7:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0F:13:76:E1:58:45:29:6E:AD:B2:76:24:96:EA:80:70:FD:CB:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl

            X509v3 Authority Key Identifier:
                keyid:82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:db:1a:0f:57:39:7e:55:fd:55:34:4b:94:21:84:17:2d:3a:
         72:96:53:47:40:8f:17:16:d1:26:94:41:87:80:07:c5:2f:17:
         47:a6:82:31:6f:f8:80:0e:bc:e8:d8:a5:3d:e2:02:fe:17:44:
         c7:2b:4e:09:6e:ce:c4:0e:ed:97:cd:0c:d3:dd:69:0b:7b:95:
         fc:ee:e3:b8:ad:0e:c5:fc:51:fd:85:6c:f0:44:1f:16:48:51:
         8f:8a:6a:31:ce:e6:0d:0f:bf:f5:cb:39:9e:e7:23:e8:93:46:
         17:b0:35:fb:9a:2f:f8:55:8d:8a:e3:eb:6f:c5:b2:2a:08:0f:
         33:37:54:b8:16:17:81:dc:0f:ce:50:4d:a2:a6:8f:e3:d3:2e:
         55:2c:40:b3:52:10:47:74:8b:69:53:8d:59:63:bc:6b:7e:06:
         b7:d0:f5:ee:ef:db:a0:ac:f8:c5:58:7b:46:4b:7e:b1:87:4b:
         8f:6e:be:62:dd:68:31:a0:18:20:68:db:8d:4f:59:c2:43:a5:
         7f:71:b5:c2:95:94:d0:98:c5:d6:03:3f:4f:83:07:2f:70:d4:
         30:69:86:35:e5:03:fa:91:b8:61:b4:4e:f1:c1:d4:15:d5:b9:
         94:00:09:67:87:1b:7b:0f:55:cc:7c:b0:51:2f:ef:5c:fd:5e:
         07:59:a1:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVRzW2I114zIj5yh0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTExZTBmNDMtN2Q4NC00ZWNjLWE2OTQtODczYjNkOTJh
OGRiMB4XDTI0MDMyNTAxMDAyNVoXDTI0MDYyMzAxMDAyNVowLzEtMCsGA1UEAxMk
N2UzZDUxMzQtNTRjYi00YjYwLWFiZTEtNTg3ZTVkZGZiNTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a3pPKd0QDfAY+mmbMOGcAHChprm7nZ2Fz3S
91JLem31oul6J9Yn2UKSMLM5m7EArjMWITC1q0ebFp1gQVKkulPOrPCODkMzDfYh
/vlvW4YqY3bWhMLKt+byoIG1mWOc24ANtRcguQqcRoMIflaTHtUx0XlEdRLK1QBf
BukSxtfno+BGBErOc3nTB2Kwfw3gvWerZCg7CudL0fERPWG/CUJ8lzoEzOwcBPHP
p4uPmbP5zJVcRMjyL0/yPVT/KRZR2nB5eOvLyJI82wv2YFC1Iuin6o9Bd4JO7dtG
XVbT6JwQnRdD7i7ljwtV/HPKXXgsbF5t7BYL6rAFyesl98fZFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcPE3bhWEUpbq2ydiSW6oBw/cuDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMTFl
MGY0My03ZDg0LTRlY2MtYTY5NC04NzNiM2Q5MmE4ZGIvNmYyMGEwNWQtN2NiMi0z
OTI1LTgwMTUtMGQxMDBiYzg3YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTExZTBmNDMtN2Q4NC00ZWNjLWE2
OTQtODczYjNkOTJhOGRiL2UxMWUwZjQzLTdkODQtNGVjYy1hNjk0LTg3M2IzZDky
YThkYi5jcmwwHwYDVR0jBBgwFoAUgmtHOUBlXkI/M9GOPXo9rLS58t4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lMTFlMGY0My03ZDg0LTRlY2MtYTY5NC04NzNi
M2Q5MmE4ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJT8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3bGg9XOX5V/VU0S5QhhBctOnKWU0dAjxcW0SaUQYeAB8UvF0emgjFv
+IAOvOjYpT3iAv4XRMcrTgluzsQO7ZfNDNPdaQt7lfzu47itDsX8Uf2FbPBEHxZI
UY+KajHO5g0Pv/XLOZ7nI+iTRhewNfuaL/hVjYrj62/FsioIDzM3VLgWF4HcD85Q
TaKmj+PTLlUsQLNSEEd0i2lTjVljvGt+BrfQ9e7v26Cs+MVYe0ZLfrGHS49uvmLd
aDGgGCBo241PWcJDpX9xtcKVlNCYxdYDP0+DBy9w1DBphjXlA/qRuGG0TvHB1BXV
uZQACWeHG3sPVcx8sFEv71z9XgdZoWc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 02:41:08 2024 by rpki-client on console-ams.rpki-client.org