Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa
File:                     96377f13-9828-377f-8847-5a9e522ad52d.roa (raw, json)
Hash identifier:          JbsP6eZHlnNJvzqIEr/llC03oy09b6xhYrwJmDdLXrM=
Subject key identifier:   F3:E8:F2:30:D0:45:98:9C:70:81:A5:DF:4B:D7:96:CB:8E:07:16:AA
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584598FE0196903B1CBF7C10A200
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     11260
IP address blocks:        216.167.224.0/19 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:01:96:90:3b:1c:bf:7c:10:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=d7c55129-d52a-42d9-b175-4a4e0904d712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0e:68:75:08:b0:3e:92:d6:22:80:26:c5:63:
                    9e:90:34:1c:7f:be:8e:36:60:66:92:62:36:19:5f:
                    f4:30:c6:0c:b1:05:df:b8:67:7f:08:03:43:8d:bc:
                    61:fd:42:c9:6b:c0:18:1c:59:6a:07:63:b7:e7:22:
                    e1:d1:09:14:f0:fb:ae:b7:37:48:31:a7:8d:51:ec:
                    23:54:6d:7e:98:e0:dd:79:c4:9d:cb:2c:e9:3c:6f:
                    a7:2d:7c:46:b0:3a:30:48:b9:eb:d0:95:a8:35:51:
                    71:c8:e4:0a:6f:7d:89:19:ed:10:ff:e0:c7:a8:c9:
                    5c:95:91:fa:90:40:da:fb:c4:69:bf:07:c5:b2:d6:
                    0b:70:a3:a1:76:e3:4d:f6:8f:52:e4:3b:a2:cd:8d:
                    4e:87:8b:7c:7e:d1:0f:fa:0a:1f:7b:c4:08:89:ed:
                    be:b6:bf:02:ba:bc:cd:ca:c8:60:7a:0c:58:cc:5e:
                    b3:4b:64:67:33:4a:3b:ed:36:3b:69:b5:fa:28:b3:
                    1d:8e:9a:09:de:f6:81:62:dc:db:e0:54:e7:31:da:
                    99:87:d1:6e:db:4c:aa:61:99:40:a8:8e:79:2a:89:
                    85:b9:1e:bf:b1:f3:8d:58:f3:d1:d5:b9:ab:93:d2:
                    08:52:6f:d2:5b:70:a0:79:64:75:57:8b:42:dc:1c:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:F2:30:D0:45:98:9C:70:81:A5:DF:4B:D7:96:CB:8E:07:16:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/96377f13-9828-377f-8847-5a9e522ad52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.167.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:c8:d3:91:30:4b:b9:9f:4a:0f:9f:88:e7:ae:77:c5:e0:d1:
         66:7f:e7:ee:3b:55:e2:fb:18:de:6d:12:f6:54:71:a1:9f:62:
         b8:4c:c4:d9:00:d0:fe:1b:eb:16:6e:4a:73:40:a4:80:5f:8a:
         11:3f:4e:e8:f8:f8:84:42:13:9f:69:ad:0d:96:b6:1c:f6:3c:
         4c:d4:0c:49:6f:93:57:83:34:b6:90:54:67:90:1a:71:cd:1a:
         44:62:9c:25:f1:f7:b8:18:b2:75:94:fc:9b:73:f9:f3:84:e9:
         53:b2:dd:d7:af:89:43:ab:ed:10:29:cf:b0:78:3f:87:d9:28:
         97:ca:b2:7a:84:88:29:c8:58:34:68:e8:95:d6:16:05:3f:92:
         e3:ed:ed:97:a6:f5:6d:95:08:be:b2:fe:07:54:cf:b9:d4:31:
         48:a4:c9:b6:5f:8a:1b:13:70:62:de:31:9a:10:a2:b3:4a:87:
         9a:f1:18:8b:45:4b:ce:50:a7:a7:80:a5:9b:8d:d8:f3:e6:23:
         60:49:a6:2d:01:25:c5:69:00:64:63:8b:9d:c2:c6:93:97:b1:
         c9:ea:16:87:48:f5:1f:84:2e:d6:46:58:67:e0:76:f4:69:36:
         36:64:39:6e:e6:9f:fc:e6:da:5a:69:e2:87:cb:13:fd:eb:49:
         7f:b1:78:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWY/gGWkDscv3wQogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj
MDU0MB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk
ZDdjNTUxMjktZDUyYS00MmQ5LWIxNzUtNGE0ZTA5MDRkNzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA5odQiwPpLWIoAmxWOekDQcf76ONmBmkmI2
GV/0MMYMsQXfuGd/CANDjbxh/ULJa8AYHFlqB2O35yLh0QkU8PuutzdIMaeNUewj
VG1+mODdecSdyyzpPG+nLXxGsDowSLnr0JWoNVFxyOQKb32JGe0Q/+DHqMlclZH6
kEDa+8RpvwfFstYLcKOhduNN9o9S5DuizY1Oh4t8ftEP+gofe8QIie2+tr8CurzN
yshgegxYzF6zS2RnM0o77TY7abX6KLMdjpoJ3vaBYtzb4FTnMdqZh9Fu20yqYZlA
qI55KomFuR6/sfONWPPR1bmrk9IIUm/SW3CgeWR1V4tC3BwTKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPo8jDQRZiccIGl30vXlsuOBxaqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4
ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvOTYzNzdmMTMtOTgyOC0z
NzdmLTg4NDctNWE5ZTUyMmFkNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw
NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz
YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3
YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2KfgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK3I05EwS7mfSg+fiOeud8Xg0WZ/5+47VeL7GN5tEvZUcaGfYrhMxNkA
0P4b6xZuSnNApIBfihE/Tuj4+IRCE59prQ2Wthz2PEzUDElvk1eDNLaQVGeQGnHN
GkRinCXx97gYsnWU/Jtz+fOE6VOy3deviUOr7RApz7B4P4fZKJfKsnqEiCnIWDRo
6JXWFgU/kuPt7Zem9W2VCL6y/gdUz7nUMUikybZfihsTcGLeMZoQorNKh5rxGItF
S85Qp6eApZuN2PPmI2BJpi0BJcVpAGRji53CxpOXscnqFodI9R+ELtZGWGfgdvRp
NjZkOW7mn/zm2lpp4ofLE/3rSX+xeAw=
-----END CERTIFICATE-----
Generated at Wed Jun 5 16:10:29 2024 by rpki-client on console-fra.rpki-client.org