Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa
File:                     f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa (raw, json)
Hash identifier:          8IT6Z3ns/n8PajNeQm/6EXwO/WFolO1NT/5K+6z9sO8=
Subject key identifier:   AB:AB:1E:60:C4:0D:D2:F9:46:34:12:70:D0:99:53:A1:88:38:B9:EB
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F432858453317EA7F80A3C0C88ABAE840
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        216.205.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:ea:7f:80:a3:c0:c8:8a:ba:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=05622b75-2f50-48e6-8494-9570aa749d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:41:58:40:a3:b5:8c:f6:23:7b:03:b7:ac:
                    d8:8b:9f:b6:c5:6f:8e:dc:73:32:36:7e:e6:5e:d4:
                    74:56:5d:ee:75:c7:f8:1f:97:6a:2e:0f:c5:47:34:
                    f7:3d:66:45:5e:19:09:6d:8e:06:6c:a4:25:c6:ae:
                    cd:f9:71:62:4e:83:45:25:3b:7e:f3:f6:dc:8f:a5:
                    62:8e:24:d7:4f:fc:45:22:e1:db:6e:e3:ef:f8:af:
                    64:20:d1:9f:06:61:59:a1:92:3a:10:92:b8:0a:7e:
                    11:a7:f5:2b:e1:40:a7:2f:ea:fa:f1:90:17:56:98:
                    8b:3f:bf:62:8a:fd:61:c2:82:fd:e4:7e:ef:c0:ff:
                    c1:49:22:52:4e:18:83:d5:ee:44:2c:e3:a4:2e:3b:
                    66:67:14:9c:2b:79:a0:33:fc:97:41:2f:3a:97:93:
                    b5:dd:e7:c0:76:dd:f2:af:4e:72:d1:25:fd:ec:2e:
                    0e:c1:48:e4:ca:c0:3c:ff:f9:ef:05:1e:61:59:95:
                    63:38:f2:fb:71:cf:94:7b:54:71:36:86:48:1b:60:
                    be:f8:09:0b:d1:16:c8:7b:a0:46:73:f0:a6:ba:79:
                    a4:e7:77:20:d5:0f:10:19:3e:1f:8b:c5:a9:ca:af:
                    69:3f:4f:0d:7b:1d:28:cd:ae:bb:fc:27:a5:fc:57:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:1E:60:C4:0D:D2:F9:46:34:12:70:D0:99:53:A1:88:38:B9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:83:cc:f5:64:c5:12:b1:97:79:66:2a:ce:53:ec:21:fb:6a:
         be:f6:e0:19:92:19:57:bd:1b:f1:15:21:a7:73:9c:61:5c:93:
         62:01:ef:7f:a8:6e:d0:66:03:39:01:44:96:b4:d2:26:33:a6:
         74:97:d1:57:ba:27:a4:c3:01:eb:4c:e8:a2:fe:4e:1d:16:86:
         63:fd:a5:20:ab:8f:4b:9c:e5:d7:a1:46:5e:74:7e:85:27:15:
         31:32:65:ed:dc:36:4e:01:b3:2f:35:49:b1:de:1d:25:5e:a9:
         93:6f:70:e6:f9:ea:85:55:3c:d8:2f:08:90:0f:71:29:dc:81:
         66:10:50:e3:0f:99:df:9b:6c:12:cd:45:7b:bf:5e:ec:ac:2a:
         4d:de:17:de:e5:30:e7:5e:bf:63:38:92:d7:66:c4:33:02:bf:
         fd:33:47:fe:f7:65:e4:d9:bd:f4:bb:af:66:76:a0:12:80:af:
         4a:34:c1:b1:e4:1a:b6:2c:59:a3:69:7a:cd:a1:62:1d:85:ed:
         21:05:7d:6b:00:90:ab:a9:52:83:d6:e7:3f:e6:68:d7:77:d8:
         77:1a:a9:1b:01:97:f2:85:1f:19:2d:fc:1d:48:85:5e:74:9d:
         f9:2b:8f:ef:cd:a6:d5:45:fb:6a:41:97:82:b0:91:82:b7:80:
         a4:03:01:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzF+p/gKPAyIq66EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl
YTJiMB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk
MDU2MjJiNzUtMmY1MC00OGU2LTg0OTQtOTU3MGFhNzQ5ZDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMdBWECjtYz2I3sDt6zYi5+2xW+O3HMyNn7m
XtR0Vl3udcf4H5dqLg/FRzT3PWZFXhkJbY4GbKQlxq7N+XFiToNFJTt+8/bcj6Vi
jiTXT/xFIuHbbuPv+K9kINGfBmFZoZI6EJK4Cn4Rp/Ur4UCnL+r68ZAXVpiLP79i
iv1hwoL95H7vwP/BSSJSThiD1e5ELOOkLjtmZxScK3mgM/yXQS86l5O13efAdt3y
r05y0SX97C4OwUjkysA8//nvBR5hWZVjOPL7cc+Ue1RxNoZIG2C++AkL0RbIe6BG
c/Cmunmk53cg1Q8QGT4fi8Wpyq9pP08Nex0oza67/Cel/FfaHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKurHmDEDdL5RjQScNCZU6GIOLnrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2
OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvZjBhN2M3OWItYjkzOC0z
ZjlkLTllMTItN2Y0N2MzZWU1YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj
NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi
ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3
NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M01MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECDzPVkxRKxl3lmKs5T7CH7ar724BmSGVe9G/EVIadznGFck2IB73+o
btBmAzkBRJa00iYzpnSX0Ve6J6TDAetM6KL+Th0WhmP9pSCrj0uc5dehRl50foUn
FTEyZe3cNk4Bsy81SbHeHSVeqZNvcOb56oVVPNgvCJAPcSncgWYQUOMPmd+bbBLN
RXu/XuysKk3eF97lMOdev2M4ktdmxDMCv/0zR/73ZeTZvfS7r2Z2oBKAr0o0wbHk
GrYsWaNpes2hYh2F7SEFfWsAkKupUoPW5z/maNd32HcaqRsBl/KFHxkt/B1IhV50
nfkrj+/NptVF+2pBl4KwkYK3gKQDAUI=
-----END CERTIFICATE-----
Generated at Wed May 1 19:31:48 2024 by rpki-client on console-fra.rpki-client.org