Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa
File:                     67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa (raw, json)
Hash identifier:          dExD9N1JsfJLcxcbTXJ265k//2R5eNpgh8kDUy2Wt/0=
Subject key identifier:   55:55:E9:A7:78:C0:2B:30:90:5D:B8:8E:0C:34:F6:A8:81:6F:6A:43
Certificate issuer:       /CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1
Certificate serial:       010D0C9F43285845AB23568963AF0A6EF0BCE580
Authority key identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa
Signing time:             Fri 26 Apr 2024 01:00:25 +0000
ROA not before:           Fri 26 Apr 2024 01:00:25 +0000
ROA not after:            Thu 25 Jul 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        208.75.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ab:23:56:89:63:af:0a:6e:f0:bc:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1
        Validity
            Not Before: Apr 26 01:00:25 2024 GMT
            Not After : Jul 25 01:00:25 2024 GMT
        Subject: CN=61ca102d-3dfb-4e92-a66e-4bf553116a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5c:52:de:a9:77:d1:6e:90:da:7f:d1:52:0d:
                    ef:47:2a:f9:17:e2:98:fb:a9:b0:2f:e8:38:bc:9f:
                    cb:4b:e3:5a:87:c6:f3:3e:66:e5:74:34:69:48:7d:
                    9b:75:d0:1f:cb:8c:cc:03:9c:b6:1f:17:8e:e3:e3:
                    0e:09:b3:f4:1f:4a:6b:ac:e8:d4:8f:3b:95:80:4d:
                    db:9a:9d:83:59:5a:1e:89:de:f1:6a:c7:31:aa:10:
                    e2:14:ef:69:15:82:d2:53:00:e0:7b:ff:7e:fe:6e:
                    5b:1e:cc:66:6a:40:22:99:2c:85:9d:19:af:ce:da:
                    c0:65:a9:ce:77:ae:71:25:0c:87:e9:81:d4:b1:7a:
                    fd:0a:69:bd:e4:30:1d:92:26:d4:90:72:45:d3:1f:
                    e1:33:a9:40:9b:c2:22:27:5a:89:f4:3d:db:ec:b5:
                    6f:6f:25:f8:73:f2:6c:43:80:8e:90:81:65:58:8a:
                    ef:5e:e5:b7:3a:a6:10:18:7e:b0:c1:fd:f2:61:a9:
                    d3:1d:cd:88:1a:85:b4:0b:23:8f:d4:ec:ba:be:72:
                    76:a2:08:b3:52:e7:e4:e3:53:b1:6a:27:14:14:71:
                    da:f4:d3:2e:62:3b:e5:02:d6:73:28:be:27:b1:a5:
                    24:1f:19:43:6d:f9:2e:55:b9:4d:64:0f:61:0f:e8:
                    10:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:55:E9:A7:78:C0:2B:30:90:5D:B8:8E:0C:34:F6:A8:81:6F:6A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl

            X509v3 Authority Key Identifier:
                keyid:86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:e8:d9:7a:bd:d7:25:0a:2f:a2:78:72:5a:b4:3b:48:0b:
         39:b4:35:1d:45:31:bf:34:13:b9:f3:52:c1:14:a3:d8:67:c3:
         75:77:48:a3:e5:7a:84:75:da:8a:b3:99:b3:2e:13:39:c9:03:
         18:cd:9d:2d:a2:09:76:a5:fc:8d:d1:7d:fd:82:30:75:fe:84:
         68:9e:f1:2c:c9:9f:fd:ad:f4:dd:7f:e4:db:df:37:29:54:df:
         ec:35:e7:b0:9d:6e:a2:f6:c9:35:d5:02:b7:54:e0:b3:84:e5:
         f4:30:30:4c:31:73:bd:0a:d1:b2:d6:10:5f:8a:9b:eb:21:b4:
         5c:f5:0b:aa:b7:31:33:63:ff:b4:d4:6d:34:2a:6e:79:83:96:
         ff:29:de:09:65:6a:3e:26:41:2d:09:6b:da:d4:6e:ce:1e:0b:
         9c:3c:e9:36:cf:d8:14:80:84:66:b4:d5:df:11:83:60:d4:a2:
         f4:87:a0:06:76:b7:ac:87:5e:21:ab:49:cf:36:ff:4d:36:2f:
         09:df:e7:b4:d8:e5:47:ca:07:c8:08:24:cf:cc:a3:47:ed:04:
         b5:c0:41:e8:2c:5a:7e:40:43:82:f9:9b:ed:bb:dd:17:0b:cf:
         d2:4b:a7:d2:28:21:53:06:76:8c:73:e2:76:c5:d0:b4:8e:65:
         cb:ab:b1:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWrI1aJY68KbvC85YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWVkODFhNjYtZjQ5ZS00YTE2LWE2NDctZjcwOWU1NWNi
ZGIxMB4XDTI0MDQyNjAxMDAyNVoXDTI0MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
NjFjYTEwMmQtM2RmYi00ZTkyLWE2NmUtNGJmNTUzMTE2YTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVxS3ql30W6Q2n/RUg3vRyr5F+KY+6mwL+g4
vJ/LS+Nah8bzPmbldDRpSH2bddAfy4zMA5y2HxeO4+MOCbP0H0prrOjUjzuVgE3b
mp2DWVoeid7xascxqhDiFO9pFYLSUwDge/9+/m5bHsxmakAimSyFnRmvztrAZanO
d65xJQyH6YHUsXr9Cmm95DAdkibUkHJF0x/hM6lAm8IiJ1qJ9D3b7LVvbyX4c/Js
Q4COkIFlWIrvXuW3OqYQGH6wwf3yYanTHc2IGoW0CyOP1Oy6vnJ2ogizUufk41Ox
aicUFHHa9NMuYjvlAtZzKL4nsaUkHxlDbfkuVblNZA9hD+gQ6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFVV6ad4wCswkF24jgw09qiBb2pDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4
MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5ZTU1Y2JkYjEvNjdmZDJmMjgtOGMzZi0z
ZTE1LThjZTAtMTU0NWVhZDkwNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWVkODFhNjYtZjQ5ZS00YTE2LWE2
NDctZjcwOWU1NWNiZGIxLzVlZDgxYTY2LWY0OWUtNGExNi1hNjQ3LWY3MDllNTVj
YmRiMS5jcmwwHwYDVR0jBBgwFoAUhl2GbrVevcccGEb+LchoJQCwn44wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5
ZTU1Y2JkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Es4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwB6Nl6vdclCi+ieHJatDtICzm0NR1FMb80E7nzUsEUo9hnw3V3SKPl
eoR12oqzmbMuEznJAxjNnS2iCXal/I3Rff2CMHX+hGie8SzJn/2t9N1/5NvfNylU
3+w157CdbqL2yTXVArdU4LOE5fQwMEwxc70K0bLWEF+Km+shtFz1C6q3MTNj/7TU
bTQqbnmDlv8p3gllaj4mQS0Ja9rUbs4eC5w86TbP2BSAhGa01d8Rg2DUovSHoAZ2
t6yHXiGrSc82/002Lwnf57TY5UfKB8gIJM/Mo0ftBLXAQegsWn5AQ4L5m+273RcL
z9JLp9IoIVMGdoxz4nbF0LSOZcursR4=
-----END CERTIFICATE-----
Generated at Wed May 1 20:52:02 2024 by rpki-client on console-ams.rpki-client.org