Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa
File:                     684afc08-241d-3133-9300-b05e5c02b68f.roa (raw, json)
Hash identifier:          LxHt3oRcHrObis+1992xVmTictz6InpQnqVEEhR53HM=
Subject key identifier:   21:3E:2D:D0:C0:DD:D0:BF:7C:57:B5:6A:58:2F:E9:BF:FB:D1:C7:CE
Certificate issuer:       /CN=15b30dd1-216d-4b82-87ee-44becb2d20c7
Certificate serial:       010D0C9F43285846126EBD5E74CD38353697D380
Authority key identifier: 4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa
Signing time:             Sun 02 Jun 2024 01:00:26 +0000
ROA not before:           Sun 02 Jun 2024 01:00:26 +0000
ROA not after:            Sat 31 Aug 2024 01:00:26 +0000
asID:                     32852
IP address blocks:        204.10.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:12:6e:bd:5e:74:cd:38:35:36:97:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b30dd1-216d-4b82-87ee-44becb2d20c7
        Validity
            Not Before: Jun  2 01:00:26 2024 GMT
            Not After : Aug 31 01:00:26 2024 GMT
        Subject: CN=b4911ae0-d7f9-46bf-bdc6-5777a2ec8485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:47:d2:e7:d8:dc:75:2d:67:60:c1:f0:70:
                    12:d3:73:64:66:21:59:d8:93:70:6c:5d:6b:99:f6:
                    02:e5:57:f8:f2:d5:4d:41:66:78:aa:eb:32:57:f0:
                    51:df:6a:5f:59:f6:a3:2f:86:b5:d7:c7:91:a1:0e:
                    89:68:c2:a5:fd:ba:50:a7:67:dc:4e:ab:cb:11:2a:
                    45:41:fb:a1:e1:4e:6f:72:34:57:93:18:cd:44:46:
                    6d:90:15:23:c1:57:a0:7f:7b:48:1d:77:16:ca:7f:
                    68:97:37:73:3c:8d:84:2c:f7:fa:30:3c:e0:de:a7:
                    f9:5a:47:42:c1:cd:ce:bb:0c:d9:5f:1c:3e:71:0a:
                    ab:e0:80:ec:87:8a:f9:7c:99:8e:42:5b:89:44:0a:
                    b8:e5:99:50:5a:07:60:df:68:fe:3c:e0:02:54:38:
                    d1:e7:0c:90:62:a3:0b:d8:7c:89:09:74:f5:4d:88:
                    9d:b2:38:e7:83:50:9f:6c:6d:d5:71:56:15:cb:7a:
                    8c:cd:4a:3c:34:27:02:52:3a:dd:ae:f3:ea:de:3a:
                    5c:63:df:82:59:d1:11:4f:78:9b:11:64:8e:e9:28:
                    af:4a:53:88:05:f8:c5:7e:cb:5b:79:57:4a:3f:71:
                    b3:4f:a7:ce:ac:3d:3c:a3:ca:17:06:82:66:99:9c:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3E:2D:D0:C0:DD:D0:BF:7C:57:B5:6A:58:2F:E9:BF:FB:D1:C7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl

            X509v3 Authority Key Identifier:
                keyid:4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8f:d9:22:68:0b:87:d0:44:02:55:b6:a9:ba:62:07:b2:e9:
         29:9b:57:39:d6:c8:eb:e2:13:21:1e:aa:70:d1:9d:a1:47:63:
         7a:88:89:56:14:ae:f7:4f:50:18:16:97:2b:c1:31:18:0b:8b:
         32:e3:48:78:5c:cc:78:54:c0:56:cc:8e:d0:17:9d:7f:7f:37:
         42:83:9a:e0:df:58:4a:8f:43:6c:5d:a8:52:a2:07:86:0c:fc:
         1d:90:e8:aa:8a:57:8c:80:4c:70:82:fb:74:56:1f:76:78:7d:
         25:8e:6d:de:10:ea:d2:ac:23:74:d0:19:0d:4a:0d:97:c0:5a:
         35:26:5b:3f:a3:fa:62:7c:91:39:87:91:12:c8:1f:06:b7:9c:
         9a:55:e7:fe:06:27:7c:76:0d:24:68:a4:ef:4e:60:6f:33:a7:
         34:84:f4:50:ab:2d:93:0b:85:b0:92:af:1b:70:7f:2b:b2:d8:
         03:cb:1c:4f:51:39:f7:46:0f:85:d9:f1:4f:db:12:d2:5e:75:
         14:47:cd:d6:a7:3c:3d:b7:92:64:94:56:8d:6c:e8:5d:c1:09:
         ae:3f:ba:50:5b:98:c5:e6:f7:c1:84:05:91:05:a1:78:75:9a:
         62:91:be:fa:06:61:8e:2d:6d:18:e1:70:d0:35:15:9d:e9:bd:
         b8:f3:54:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYSbr1edM04NTaX04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTViMzBkZDEtMjE2ZC00YjgyLTg3ZWUtNDRiZWNiMmQy
MGM3MB4XDTI0MDYwMjAxMDAyNloXDTI0MDgzMTAxMDAyNlowLzEtMCsGA1UEAxMk
YjQ5MTFhZTAtZDdmOS00NmJmLWJkYzYtNTc3N2EyZWM4NDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX9H0ufY3HUtZ2DB8HAS03NkZiFZ2JNwbF1r
mfYC5Vf48tVNQWZ4qusyV/BR32pfWfajL4a118eRoQ6JaMKl/bpQp2fcTqvLESpF
Qfuh4U5vcjRXkxjNREZtkBUjwVegf3tIHXcWyn9olzdzPI2ELPf6MDzg3qf5WkdC
wc3OuwzZXxw+cQqr4IDsh4r5fJmOQluJRAq45ZlQWgdg32j+POACVDjR5wyQYqML
2HyJCXT1TYidsjjng1CfbG3VcVYVy3qMzUo8NCcCUjrdrvPq3jpcY9+CWdERT3ib
EWSO6SivSlOIBfjFfstbeVdKP3GzT6fOrD08o8oXBoJmmZyE7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCE+LdDA3dC/fFe1algv6b/70cfOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIz
MGRkMS0yMTZkLTRiODItODdlZS00NGJlY2IyZDIwYzcvNjg0YWZjMDgtMjQxZC0z
MTMzLTkzMDAtYjA1ZTVjMDJiNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTViMzBkZDEtMjE2ZC00YjgyLTg3
ZWUtNDRiZWNiMmQyMGM3LzE1YjMwZGQxLTIxNmQtNGI4Mi04N2VlLTQ0YmVjYjJk
MjBjNy5jcmwwHwYDVR0jBBgwFoAUTjhQMD+vrYkvte6IsNsBPCDDV/YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIzMGRkMS0yMTZkLTRiODItODdlZS00NGJl
Y2IyZDIwYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAqoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmP2SJoC4fQRAJVtqm6Ygey6SmbVznWyOviEyEeqnDRnaFHY3qIiVYU
rvdPUBgWlyvBMRgLizLjSHhczHhUwFbMjtAXnX9/N0KDmuDfWEqPQ2xdqFKiB4YM
/B2Q6KqKV4yATHCC+3RWH3Z4fSWObd4Q6tKsI3TQGQ1KDZfAWjUmWz+j+mJ8kTmH
kRLIHwa3nJpV5/4GJ3x2DSRopO9OYG8zpzSE9FCrLZMLhbCSrxtwfyuy2APLHE9R
OfdGD4XZ8U/bEtJedRRHzdanPD23kmSUVo1s6F3BCa4/ulBbmMXm98GEBZEFoXh1
mmKRvvoGYY4tbRjhcNA1FZ3pvbjzVDI=
-----END CERTIFICATE-----
Generated at Tue Jun 4 21:14:57 2024 by rpki-client on console-ams.rpki-client.org