Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa
File:                     068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa (raw, json)
Hash identifier:          Jcgigo1/2pC0dWRxOOBIZ+8gJP9yP6x95YQHx2JXvRU=
Subject key identifier:   9D:BD:1B:5E:DB:87:3B:18:BF:CE:BD:1E:2D:43:27:4C:3F:CE:04:25
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584648DF04BA0CE9AC9E55734EC0
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa
Signing time:             Fri 21 Jun 2024 13:00:33 +0000
ROA not before:           Fri 21 Jun 2024 13:00:33 +0000
ROA not after:            Thu 19 Sep 2024 13:00:33 +0000
asID:                     55178
IP address blocks:        192.230.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:48:df:04:ba:0c:e9:ac:9e:55:73:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Jun 21 13:00:33 2024 GMT
            Not After : Sep 19 13:00:33 2024 GMT
        Subject: CN=84beced6-c1d3-460e-a85f-2f2e930adb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f3:35:e3:7a:cb:f5:7c:f4:26:f6:3f:f6:68:
                    20:22:c4:ff:fc:32:2b:76:60:2b:18:ee:66:89:ed:
                    2c:13:6c:89:4e:2d:dc:ef:31:54:a6:3f:32:e6:38:
                    bf:c5:d5:03:b6:34:2b:0b:ff:49:84:22:e6:06:8c:
                    1c:98:fd:b4:21:31:e6:e3:ee:34:aa:c4:4e:58:50:
                    fc:1c:b1:09:1b:df:c3:0e:bc:08:14:6a:7c:d1:76:
                    21:4d:aa:42:33:b6:89:09:a7:b2:da:32:c8:a7:ff:
                    a8:6d:a1:3b:47:79:0b:78:be:df:a6:64:4f:bd:08:
                    be:81:66:7d:de:81:f9:ba:9d:57:65:75:86:9f:c9:
                    65:6c:9e:39:bf:bd:09:90:07:68:8e:6f:5d:c1:71:
                    d5:66:f3:f1:ab:de:6d:af:45:4c:57:6e:58:45:d3:
                    7f:a9:3d:0d:07:99:05:4d:4d:76:54:7b:34:e5:27:
                    62:8b:96:cc:47:fb:60:90:60:4d:a1:e9:06:9d:45:
                    5d:b5:59:0f:92:86:d1:97:bd:82:77:ef:a7:5b:67:
                    52:4b:c4:c2:9b:4d:dc:b7:4c:03:0e:fc:6c:75:a7:
                    95:52:d3:b6:81:2b:d1:39:32:e9:44:b7:da:91:b4:
                    61:35:a8:6f:fe:8f:6d:47:df:cc:18:f7:0c:65:fd:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BD:1B:5E:DB:87:3B:18:BF:CE:BD:1E:2D:43:27:4C:3F:CE:04:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:14:75:96:4c:e1:3f:b9:97:12:db:27:d4:8a:47:79:79:c3:
         5c:8e:c5:89:bf:d6:94:32:39:9b:75:c5:74:61:1f:92:3f:76:
         56:6b:12:20:aa:81:25:10:4a:48:bc:de:b1:ba:20:cf:52:50:
         08:58:6a:5d:b2:4b:9c:a3:b8:c6:fe:54:2a:57:5d:60:10:b6:
         ea:26:2a:12:48:cc:f4:9c:d2:d6:55:5a:a6:44:60:42:9b:d7:
         0d:8e:5f:4d:9c:1d:dc:e0:58:73:80:9b:fd:f4:d0:b4:1c:1f:
         93:5c:80:cc:0e:c9:be:b9:9f:28:a8:fb:11:bd:c2:8f:5a:57:
         cb:fd:70:3d:f1:cb:1b:4c:c7:3e:80:83:ea:e9:b9:92:e9:f3:
         00:39:47:c1:2c:e3:5f:0a:94:c3:4d:f7:17:cb:ff:90:99:72:
         65:96:b9:c9:22:b1:55:c3:f4:73:7e:d9:ff:75:3d:d5:5f:dd:
         69:94:99:92:85:dd:07:99:44:46:e5:4e:45:82:d7:f3:0a:bf:
         eb:08:fd:d9:6d:cb:37:d9:e2:e2:c3:b8:69:8c:41:6c:96:ab:
         cb:ab:85:5a:31:c6:e2:e2:88:e5:92:b9:aa:ae:21:7d:88:e4:
         cb:74:27:e2:b7:0b:e2:ce:71:36:9f:7f:be:ff:2d:f4:76:a6:
         54:4c:6c:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZI3wS6DOmsnlVzTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2
MWE5MB4XDTI0MDYyMTEzMDAzM1oXDTI0MDkxOTEzMDAzM1owLzEtMCsGA1UEAxMk
ODRiZWNlZDYtYzFkMy00NjBlLWE4NWYtMmYyZTkzMGFkYjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvM143rL9Xz0JvY/9mggIsT//DIrdmArGO5m
ie0sE2yJTi3c7zFUpj8y5ji/xdUDtjQrC/9JhCLmBowcmP20ITHm4+40qsROWFD8
HLEJG9/DDrwIFGp80XYhTapCM7aJCaey2jLIp/+obaE7R3kLeL7fpmRPvQi+gWZ9
3oH5up1XZXWGn8llbJ45v70JkAdojm9dwXHVZvPxq95tr0VMV25YRdN/qT0NB5kF
TU12VHs05Sdii5bMR/tgkGBNoekGnUVdtVkPkobRl72Cd++nW2dSS8TCm03ct0wD
DvxsdaeVUtO2gSvROTLpRLfakbRhNahv/o9tR9/MGPcMZf3wfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ29G17bhzsYv869Hi1DJ0w/zgQlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw
M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvMDY4Y2RkNjUtM2MxNS0z
NzJmLWIzZTMtMGQzMDFkN2MzN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2
OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj
NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0
OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwUdZZM4T+5lxLbJ9SKR3l5w1yOxYm/1pQyOZt1xXRhH5I/dlZrEiCq
gSUQSki83rG6IM9SUAhYal2yS5yjuMb+VCpXXWAQtuomKhJIzPSc0tZVWqZEYEKb
1w2OX02cHdzgWHOAm/300LQcH5NcgMwOyb65nyio+xG9wo9aV8v9cD3xyxtMxz6A
g+rpuZLp8wA5R8Es418KlMNN9xfL/5CZcmWWuckisVXD9HN+2f91PdVf3WmUmZKF
3QeZREblTkWC1/MKv+sI/dltyzfZ4uLDuGmMQWyWq8urhVoxxuLiiOWSuaquIX2I
5Mt0J+K3C+LOcTaff77/LfR2plRMbAU=
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:14:32 2024 by rpki-client on console-ams.rpki-client.org