Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
File:                     c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa (raw, json)
Hash identifier:          bHHakpkshlEiBgfMs4c0ZaijZo7wo3UAorZwyeM4fGo=
Subject key identifier:   67:E5:FD:15:3F:DD:CE:6E:9F:19:1D:82:70:E5:46:0F:46:45:28:B2
Certificate issuer:       /CN=16ef2847-f477-40df-9a9e-50bd5864acb7
Certificate serial:       010D0C9F43285845068AC8F80D2F9C69B37B7580
Authority key identifier: 7E:83:15:D8:9C:3F:F4:DE:0F:35:34:4F:AF:E7:29:43:2B:31:30:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     399034
IP address blocks:        134.195.169.0/24 maxlen: 24
                          172.98.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/16ef2847-f477-40df-9a9e-50bd5864acb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/16ef2847-f477-40df-9a9e-50bd5864acb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:c8:f8:0d:2f:9c:69:b3:7b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ef2847-f477-40df-9a9e-50bd5864acb7
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=5e533476-ce9e-4e84-8779-9389a48b54ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f8:e5:4a:ad:c4:3d:da:18:c4:31:bb:b0:a4:
                    67:2b:fe:4b:0e:24:96:96:d2:2b:a4:c2:d8:56:9d:
                    9e:f2:c2:40:d3:6e:a6:f1:86:d7:f4:88:18:f6:cd:
                    66:fc:26:cd:b2:2b:e4:5f:22:7b:df:82:79:b1:c8:
                    e0:7f:e5:30:43:e6:8f:7f:54:54:0f:b4:85:52:96:
                    2a:70:37:02:90:7c:82:ef:a9:3d:6f:3a:23:73:71:
                    fd:53:1f:67:32:52:11:d2:6e:6c:a9:78:86:47:36:
                    92:7a:bf:db:e7:db:fe:e0:32:90:fa:e1:40:78:f2:
                    48:15:a4:1f:db:1a:35:ce:d9:8c:a0:1d:9b:5f:3d:
                    81:ef:f7:7f:37:f9:94:2d:37:26:31:51:2d:f2:45:
                    0a:e2:df:7e:ed:f6:52:dd:09:17:bc:c5:81:38:76:
                    f8:91:ee:b0:7b:93:6d:80:86:ac:9c:b9:04:e3:ba:
                    b1:5f:14:e1:c2:a8:f5:cf:4c:d2:66:d4:9a:af:af:
                    39:0f:77:60:5c:e6:34:58:e0:3d:a8:5d:fc:82:d6:
                    6f:a2:cd:e4:76:b0:7a:de:04:80:47:16:82:b3:3d:
                    73:e4:62:f7:c0:d8:87:fa:13:5f:77:b7:87:b6:84:
                    b5:3b:61:37:17:21:0f:46:ad:d2:79:73:60:c3:bb:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E5:FD:15:3F:DD:CE:6E:9F:19:1D:82:70:E5:46:0F:46:45:28:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/16ef2847-f477-40df-9a9e-50bd5864acb7.crl

            X509v3 Authority Key Identifier:
                keyid:7E:83:15:D8:9C:3F:F4:DE:0F:35:34:4F:AF:E7:29:43:2B:31:30:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.169.0/24
                  172.98.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:5d:1d:d1:15:d9:08:d5:55:89:ed:02:cd:6a:97:db:bc:
         62:f0:70:af:b9:05:eb:f4:4c:e6:f5:6e:b4:b2:2b:13:fc:74:
         60:10:45:1c:f4:d0:e1:3d:db:3d:81:2b:1a:96:55:3b:85:f5:
         9f:34:19:e7:2f:b0:33:c0:8f:31:f1:be:1f:2c:81:72:a9:fc:
         a9:d5:f2:f4:19:93:68:43:b4:f5:71:ff:65:fe:1d:e5:67:4d:
         94:77:33:20:d2:c5:e8:28:6f:d3:24:3f:57:38:40:7c:7e:fe:
         9d:ed:90:67:75:2a:c8:16:40:42:b1:7c:2c:70:65:ce:12:8c:
         c6:8a:1e:ff:a0:db:8f:a3:73:f8:06:76:b6:e7:5c:bb:9b:fd:
         68:c3:68:ed:68:f1:44:3c:7e:be:74:fc:f1:85:e6:13:5d:65:
         dc:02:a9:22:70:ac:92:6a:e0:9b:3b:c4:df:a9:af:94:a2:03:
         aa:d1:3a:f7:b9:f7:e8:23:2e:26:ff:28:fb:04:d8:a2:c0:e6:
         01:e4:21:9b:1b:29:09:9e:5b:1e:27:e2:2e:a8:07:5b:46:b7:
         6d:0c:d0:d3:19:10:1a:36:44:fe:a4:89:bd:5b:f0:c4:e8:bf:
         c3:5a:54:54:29:4e:c1:22:59:67:31:6b:11:58:f9:46:35:8e:
         2b:b0:c1:ab
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEUGisj4DS+cabN7dYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZlZjI4NDctZjQ3Ny00MGRmLTlhOWUtNTBiZDU4NjRh
Y2I3MB4XDTI0MDIyNzAyMDAyNloXDTI0MDUyNzAxMDAyNlowLzEtMCsGA1UEAxMk
NWU1MzM0NzYtY2U5ZS00ZTg0LTg3NzktOTM4OWE0OGI1NGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/jlSq3EPdoYxDG7sKRnK/5LDiSWltIrpMLY
Vp2e8sJA026m8YbX9IgY9s1m/CbNsivkXyJ734J5scjgf+UwQ+aPf1RUD7SFUpYq
cDcCkHyC76k9bzojc3H9Ux9nMlIR0m5sqXiGRzaSer/b59v+4DKQ+uFAePJIFaQf
2xo1ztmMoB2bXz2B7/d/N/mULTcmMVEt8kUK4t9+7fZS3QkXvMWBOHb4ke6we5Nt
gIasnLkE47qxXxThwqj1z0zSZtSar685D3dgXOY0WOA9qF38gtZvos3kdrB63gSA
RxaCsz1z5GL3wNiH+hNfd7eHtoS1O2E3FyEPRq3SeXNgw7tJwwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGfl/RU/3c5unxkdgnDlRg9GRSiyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNmVm
Mjg0Ny1mNDc3LTQwZGYtOWE5ZS01MGJkNTg2NGFjYjcvYzFmZDFmZjEtMWNkOS0z
ZjZlLThiZjItYWFkYjBkNTUxNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTZlZjI4NDctZjQ3Ny00MGRmLTlh
OWUtNTBiZDU4NjRhY2I3LzE2ZWYyODQ3LWY0NzctNDBkZi05YTllLTUwYmQ1ODY0
YWNiNy5jcmwwHwYDVR0jBBgwFoAUfoMV2Jw/9N4PNTRPr+cpQysxMDYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xNmVmMjg0Ny1mNDc3LTQwZGYtOWE5ZS01MGJk
NTg2NGFjYjcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAhsOpAwQB
rGIeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABrKXR3RFdkI1VWJ7QLNapfbvGLwcK+5Bev0TOb1brSyKxP8
dGAQRRz00OE92z2BKxqWVTuF9Z80GecvsDPAjzHxvh8sgXKp/KnV8vQZk2hDtPVx
/2X+HeVnTZR3MyDSxegob9MkP1c4QHx+/p3tkGd1KsgWQEKxfCxwZc4SjMaKHv+g
24+jc/gGdrbnXLub/WjDaO1o8UQ8fr50/PGF5hNdZdwCqSJwrJJq4Js7xN+pr5Si
A6rROve59+gjLib/KPsE2KLA5gHkIZsbKQmeWx4n4i6oB1tGt20M0NMZEBo2RP6k
ib1b8MTov8NaVFQpTsEiWWcxaxFY+UY1jiuwwas=
-----END CERTIFICATE-----
Generated at Wed May 8 15:33:31 2024 by rpki-client on console-fra.rpki-client.org