Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa
File:                     f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa (raw, json)
Hash identifier:          oeR5fRMWfoWBXShromJR2gDerpPnoCQ7VEuhwxZuHNA=
Subject key identifier:   74:06:C8:B6:5D:58:C9:C5:DF:13:B0:C4:D6:97:AC:F7:6B:B3:87:89
Certificate issuer:       /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial:       010D0C9F432858455E5DA15E9BB2B19B23FD4120
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     8987
IP address blocks:        192.16.78.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:a1:5e:9b:b2:b1:9b:23:fd:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=5df9296a-6f7e-45af-890e-b5daedb54387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:62:66:72:e5:45:9e:2a:6d:64:45:3e:5c:29:
                    24:45:19:dd:2d:49:44:57:c7:78:c1:48:ba:7b:a6:
                    48:e1:bf:ea:fb:8a:71:64:57:fd:5e:b6:ae:2f:4d:
                    3e:2d:6b:3e:db:72:5d:d5:10:64:73:46:3c:5a:a3:
                    6b:33:21:bb:89:9a:9e:9d:d4:71:ee:ef:a9:11:ae:
                    9f:3c:18:30:e4:2b:90:fe:60:1b:61:fd:21:2b:d7:
                    0c:dc:80:b6:36:09:c2:c8:a5:27:ad:19:8f:38:f2:
                    a8:8c:a1:f5:cc:05:7e:86:41:d9:90:56:0a:5b:e2:
                    af:21:75:2e:07:65:ed:43:54:c7:2e:78:c8:f3:50:
                    c0:bb:58:41:f9:29:ef:49:b4:29:65:67:31:e0:2f:
                    6e:0f:b3:cb:3d:53:25:47:a0:ff:7e:95:1a:74:36:
                    89:5e:ab:85:6b:66:31:d2:b8:a7:91:48:75:6a:0f:
                    25:dd:61:63:00:f4:67:8c:e0:e0:06:81:c4:75:d0:
                    71:bf:34:56:ea:9d:2b:67:8c:24:18:8c:4d:fd:7d:
                    43:68:5c:37:7b:0c:2b:60:ba:36:5b:e2:56:dd:b9:
                    8e:e4:d8:79:fd:ea:d0:e5:e3:9d:71:b1:7a:a5:6b:
                    b5:c1:a5:2a:fd:25:1f:50:3a:35:6c:63:8d:e7:db:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:C8:B6:5D:58:C9:C5:DF:13:B0:C4:D6:97:AC:F7:6B:B3:87:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl

            X509v3 Authority Key Identifier:
                keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:22:2a:da:88:09:0e:78:a8:ea:b9:1b:37:17:78:2a:f6:
         cb:96:02:2a:e1:62:9b:45:51:19:76:52:94:56:07:8a:5d:fb:
         d0:e4:39:f5:47:db:5f:7a:3d:ef:c1:ea:c4:e8:43:a0:fb:b6:
         7a:21:72:ff:1e:86:64:27:63:66:21:6d:4a:22:09:6f:d0:51:
         fc:e0:73:4c:85:3d:89:21:9d:9e:d7:0e:eb:3b:c6:b3:f3:55:
         81:f4:35:02:94:f2:23:96:c2:82:eb:59:4a:51:1c:6f:6b:5e:
         11:63:5d:b8:42:33:34:29:9c:86:6e:ab:e2:86:34:74:ac:4b:
         0a:32:7e:f4:2e:45:eb:1f:e0:a9:3d:26:3b:08:b4:20:a6:7f:
         b6:ab:61:98:4b:76:ff:d2:a2:fe:79:66:3f:74:5c:c7:99:e6:
         99:49:9d:99:e4:4d:6e:45:84:75:50:45:cb:3d:dd:1b:57:48:
         fc:75:41:84:a4:20:cf:aa:04:58:1d:19:1f:8a:4f:66:88:53:
         03:35:e4:1a:20:52:08:fb:b7:f9:63:b8:4c:e8:39:fe:69:19:
         cf:34:01:a6:fe:1b:42:4b:47:7c:4b:a1:34:5a:3b:2b:c4:a6:
         aa:1f:9c:44:4d:f3:47:bf:1e:02:ce:ce:2d:09:c5:bb:e5:6f:
         4f:0e:06:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVeXaFem7KxmyP9QSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0
NjU4MB4XDTI0MDMyOTEzMDAzN1oXDTI0MDYyNzEzMDAzN1owLzEtMCsGA1UEAxMk
NWRmOTI5NmEtNmY3ZS00NWFmLTg5MGUtYjVkYWVkYjU0Mzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGJmcuVFniptZEU+XCkkRRndLUlEV8d4wUi6
e6ZI4b/q+4pxZFf9XrauL00+LWs+23Jd1RBkc0Y8WqNrMyG7iZqendRx7u+pEa6f
PBgw5CuQ/mAbYf0hK9cM3IC2NgnCyKUnrRmPOPKojKH1zAV+hkHZkFYKW+KvIXUu
B2XtQ1THLnjI81DAu1hB+SnvSbQpZWcx4C9uD7PLPVMlR6D/fpUadDaJXquFa2Yx
0rinkUh1ag8l3WFjAPRnjODgBoHEddBxvzRW6p0rZ4wkGIxN/X1DaFw3ewwrYLo2
W+JW3bmO5Nh5/erQ5eOdcbF6pWu1waUq/SUfUDo1bGON59vcXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQGyLZdWMnF3xOwxNaXrPdrs4eJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh
NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvZjk2NTZiMmYtNmRkMC0z
MTNjLWJhZWEtNGVlOTNiOGUyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3
OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3
NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz
ZTdlNzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBBOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqXIiraiAkOeKjquRs3F3gq9suWAirhYptFURl2UpRWB4pd+9DkOfVH
2196Pe/B6sToQ6D7tnohcv8ehmQnY2YhbUoiCW/QUfzgc0yFPYkhnZ7XDus7xrPz
VYH0NQKU8iOWwoLrWUpRHG9rXhFjXbhCMzQpnIZuq+KGNHSsSwoyfvQuResf4Kk9
JjsItCCmf7arYZhLdv/Sov55Zj90XMeZ5plJnZnkTW5FhHVQRcs93RtXSPx1QYSk
IM+qBFgdGR+KT2aIUwM15BogUgj7t/ljuEzoOf5pGc80Aab+G0JLR3xLoTRaOyvE
pqofnERN80e/HgLOzi0Jxbvlb08OBh4=
-----END CERTIFICATE-----
Generated at Thu May 9 01:32:16 2024 by rpki-client on console-fra.rpki-client.org