Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
File:                     acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa (raw, json)
Hash identifier:          diPEPmlerzo/nzv5vK1o+8/YQQvACC6BusIvbiMk0zg=
Subject key identifier:   60:99:8F:6B:77:2A:18:51:91:C9:A9:D2:E1:CE:BD:12:32:2A:BE:CC
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F43285845734DB23C4709CE2E88C9F180
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        205.201.42.0/24 maxlen: 24
                          205.201.41.0/24 maxlen: 24
                          205.201.43.0/24 maxlen: 24
                          205.201.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b2:3c:47:09:ce:2e:88:c9:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=a6fe8ebe-b939-447b-9fd4-5b1460eb9b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:81:40:99:5d:f2:ac:0a:8e:b0:4e:de:92:
                    36:a5:66:ef:19:98:09:c2:d3:2c:12:a1:4b:7f:ef:
                    ad:fd:db:2a:5e:4e:3a:7e:91:90:69:b1:36:5f:0b:
                    9b:79:4f:07:71:bf:86:74:36:e8:54:16:08:b4:74:
                    29:9e:8f:1f:88:44:95:f4:64:c1:8b:d3:cd:cd:62:
                    2d:f5:14:50:a3:b8:3f:dd:1a:bd:01:59:af:b4:90:
                    d2:aa:9e:c3:17:54:e2:52:bd:7b:82:5c:d2:4d:c3:
                    dd:ae:be:a3:40:5e:e4:a9:67:d6:92:fe:fb:c0:a0:
                    e3:3a:bf:52:aa:31:09:07:35:28:7b:14:84:d0:3b:
                    c8:95:de:e4:a5:eb:5d:55:dd:a2:27:40:19:cc:4e:
                    78:ad:90:5b:4a:3d:b8:81:e7:14:3c:ed:01:fd:a2:
                    9a:90:f9:7b:d4:48:3e:8c:f7:e3:6d:b9:47:96:d5:
                    5c:4f:d0:88:db:6c:d7:69:14:27:ef:5a:e9:ca:9b:
                    ec:2e:fd:de:f6:d1:e5:22:e7:45:eb:ed:6c:ce:45:
                    bc:74:48:fa:9a:29:8f:12:22:3d:a7:f7:ce:6f:2b:
                    3e:3b:9d:1d:76:bf:b0:b9:00:1b:cc:28:5b:b9:3e:
                    bb:cf:37:4f:ac:c1:a9:5c:c7:dc:d7:09:10:e7:de:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:99:8F:6B:77:2A:18:51:91:C9:A9:D2:E1:CE:BD:12:32:2A:BE:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:32:16:49:32:63:ba:00:9a:c4:32:93:6e:dc:63:99:7f:
         05:9f:9e:25:20:37:53:a9:f1:46:f9:ea:71:5e:56:ee:fb:89:
         8b:5a:43:b1:bd:e6:41:71:50:2c:02:31:7b:c0:67:0f:e5:12:
         3c:fa:0e:57:0d:d2:4f:35:71:49:d7:39:5b:a0:81:d8:93:6c:
         01:6d:c5:c8:d4:e0:5e:ab:68:66:57:91:7f:1f:f2:6c:1a:6b:
         7d:fe:c4:71:3a:35:0d:b7:e0:c6:1b:59:c6:f3:ac:45:29:db:
         38:cb:f3:66:4d:b7:e8:44:21:2e:26:9f:8c:d7:e5:9f:9e:cf:
         97:70:41:01:ae:0b:ec:67:ca:63:a1:34:28:2c:fb:82:32:d2:
         8e:c5:cf:d9:bf:36:13:e2:71:84:b4:fa:2f:d0:13:26:46:39:
         5c:da:08:b2:00:33:60:0e:9e:ca:24:07:c7:0d:3e:70:87:0e:
         9d:c3:6d:61:bf:e9:cd:65:91:25:23:a3:3e:fd:60:7c:57:6d:
         5c:2c:8a:10:2c:47:fe:a9:1e:f8:c6:a7:c2:b9:36:11:48:20:
         21:0a:7a:ad:d4:11:4d:e0:21:37:cf:43:37:38:4d:cb:05:70:
         ea:3e:65:7d:e2:92:3f:f0:0c:5f:43:1a:85:73:f9:0a:b4:fd:
         89:dd:c4:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVzTbI8RwnOLojJ8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlYTcwOTktZDJlNS00NWUxLThjMWUtYTgyMDZmNTQ5
NTM5MB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
YTZmZThlYmUtYjkzOS00NDdiLTlmZDQtNWIxNDYwZWI5YjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYOBQJld8qwKjrBO3pI2pWbvGZgJwtMsEqFL
f++t/dsqXk46fpGQabE2XwubeU8Hcb+GdDboVBYItHQpno8fiESV9GTBi9PNzWIt
9RRQo7g/3Rq9AVmvtJDSqp7DF1TiUr17glzSTcPdrr6jQF7kqWfWkv77wKDjOr9S
qjEJBzUoexSE0DvIld7kpetdVd2iJ0AZzE54rZBbSj24gecUPO0B/aKakPl71Eg+
jPfjbblHltVcT9CI22zXaRQn71rpypvsLv3e9tHlIudF6+1szkW8dEj6mimPEiI9
p/fObys+O50ddr+wuQAbzChbuT67zzdPrMGpXMfc1wkQ5950SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCZj2t3KhhRkcmp0uHOvRIyKr7MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVh
NzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIwNmY1NDk1MzkvYWNhYWUxMDAtMGM1Ni0z
NmQ5LTk3YTYtYWE4N2NjN2EzZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmRlYTcwOTktZDJlNS00NWUxLThj
MWUtYTgyMDZmNTQ5NTM5L2ZkZWE3MDk5LWQyZTUtNDVlMS04YzFlLWE4MjA2ZjU0
OTUzOS5jcmwwHwYDVR0jBBgwFoAUUxlbQ+NFauATsk2o+FU2Z/wB9SgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVhNzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIw
NmY1NDk1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzckoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvkMhZJMmO6AJrEMpNu3GOZfwWfniUgN1Op8Ub56nFeVu77iYtaQ7G9
5kFxUCwCMXvAZw/lEjz6DlcN0k81cUnXOVuggdiTbAFtxcjU4F6raGZXkX8f8mwa
a33+xHE6NQ234MYbWcbzrEUp2zjL82ZNt+hEIS4mn4zX5Z+ez5dwQQGuC+xnymOh
NCgs+4Iy0o7Fz9m/NhPicYS0+i/QEyZGOVzaCLIAM2AOnsokB8cNPnCHDp3DbWG/
6c1lkSUjoz79YHxXbVwsihAsR/6pHvjGp8K5NhFIICEKeq3UEU3gITfPQzc4TcsF
cOo+ZX3ikj/wDF9DGoVz+Qq0/YndxAc=
-----END CERTIFICATE-----
Generated at Thu May 2 03:28:45 2024 by rpki-client on console-ams.rpki-client.org