Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa
File:                     8443b0db-29e2-35db-b8e1-34359b0b5e82.roa (raw, json)
Hash identifier:          rLtfZHB0USSF9VD2/+/nA9LKLEUgwhjPnRutNe9F8gM=
Subject key identifier:   40:02:79:8D:24:63:46:3C:F7:AC:B2:4B:AE:5B:A3:41:C2:28:17:8D
Certificate issuer:       /CN=a38ff47f-825f-4455-b429-60f899d42ec6
Certificate serial:       010D0C9F4328584582A89D4DCCA6998A4EA69B80
Authority key identifier: 5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     399840
IP address blocks:        192.43.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:9d:4d:cc:a6:99:8a:4e:a6:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38ff47f-825f-4455-b429-60f899d42ec6
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=5fceb6c7-72f2-4314-9726-69c719cfeace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:d8:e6:eb:f7:04:36:a0:65:4e:fa:78:ba:
                    52:ae:72:01:5e:4a:08:4f:e4:00:be:71:15:16:67:
                    7f:7c:02:11:e5:2b:ae:6c:0f:b6:b6:7c:6e:44:1a:
                    de:56:4e:1a:8b:16:53:6f:db:09:95:ab:ec:66:86:
                    d9:46:b8:17:cf:a0:cb:e5:11:2e:be:25:87:24:fe:
                    29:fb:e1:ef:93:58:f5:4a:b0:8e:88:38:2c:24:fc:
                    49:46:de:40:14:b6:70:bd:7a:f5:d4:eb:9d:8a:79:
                    f8:24:4a:92:f5:ad:7c:e0:da:8b:83:24:25:ce:66:
                    d9:f3:cf:a7:3d:f5:59:f5:e9:60:c9:8f:8c:bc:20:
                    e5:52:b2:a1:fc:bf:7b:29:33:b0:ef:16:28:d6:51:
                    5d:17:40:13:fc:50:2e:f0:4a:64:fa:49:d9:95:46:
                    73:21:6e:38:dd:a3:47:93:05:2f:dc:d2:a4:f2:a7:
                    82:5b:7f:4a:d4:18:04:74:cf:96:ef:a0:c9:7f:43:
                    79:fb:6e:fe:23:41:83:1d:a9:ca:9b:d1:fb:07:f5:
                    91:cc:64:7a:0f:15:28:48:78:41:d9:ec:10:61:91:
                    9d:ee:4d:ce:97:47:2d:ff:7b:76:c3:cb:6d:8e:20:
                    a1:14:72:61:4b:7d:c6:78:d6:f6:e6:bf:36:77:1b:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:02:79:8D:24:63:46:3C:F7:AC:B2:4B:AE:5B:A3:41:C2:28:17:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/8443b0db-29e2-35db-b8e1-34359b0b5e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.crl

            X509v3 Authority Key Identifier:
                keyid:5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:a5:6f:68:65:4c:d4:0e:5c:b5:fc:77:8d:06:c1:97:35:
         6e:aa:de:6c:46:47:b4:8b:4b:f3:8e:6e:95:4d:90:13:3e:be:
         cb:8b:7d:4d:7b:2d:7a:84:c4:79:0e:fb:ca:75:2b:95:ba:b1:
         8d:8e:d8:2d:4f:bb:09:9a:f9:49:65:ee:b6:34:30:4c:40:5d:
         e9:cc:80:fe:9d:ce:ad:a6:c2:bc:14:99:65:c6:e7:7a:3f:86:
         c7:7d:9a:6c:1d:95:49:79:3f:b0:a1:7e:3a:79:2a:90:4d:b7:
         5a:e7:6d:3d:f3:57:39:6b:27:82:f9:91:0e:1c:d0:e8:23:fa:
         7e:a1:b4:82:5e:b1:f4:a1:b5:84:72:61:ee:a0:f1:3c:70:1e:
         c0:0f:70:53:8f:67:aa:0f:02:1a:4a:80:d4:26:34:d6:e3:75:
         27:f5:0f:2b:f7:2f:e2:5f:d1:f0:d4:c9:3e:02:70:91:cd:79:
         11:f7:06:16:26:8b:af:d1:c2:20:6d:1c:37:0e:51:6e:cd:c8:
         05:4a:d3:9c:29:10:16:58:7c:39:d8:00:27:b3:db:17:b2:67:
         cf:30:e3:93:cd:07:76:31:c2:2b:92:16:b4:9a:39:11:19:30:
         8d:0b:fb:51:f6:c2:8c:df:0c:d2:8f:57:b5:96:c0:fb:55:aa:
         fb:2d:d3:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqJ1NzKaZik6mm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM4ZmY0N2YtODI1Zi00NDU1LWI0MjktNjBmODk5ZDQy
ZWM2MB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
NWZjZWI2YzctNzJmMi00MzE0LTk3MjYtNjljNzE5Y2ZlYWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaTY5uv3BDagZU76eLpSrnIBXkoIT+QAvnEV
Fmd/fAIR5SuubA+2tnxuRBreVk4aixZTb9sJlavsZobZRrgXz6DL5REuviWHJP4p
++Hvk1j1SrCOiDgsJPxJRt5AFLZwvXr11Oudinn4JEqS9a184NqLgyQlzmbZ88+n
PfVZ9elgyY+MvCDlUrKh/L97KTOw7xYo1lFdF0AT/FAu8Epk+knZlUZzIW443aNH
kwUv3NKk8qeCW39K1BgEdM+W76DJf0N5+27+I0GDHanKm9H7B/WRzGR6DxUoSHhB
2ewQYZGd7k3Ol0ct/3t2w8ttjiChFHJhS33GeNb25r82dxtn7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEACeY0kY0Y896yyS65bo0HCKBeNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMzhm
ZjQ3Zi04MjVmLTQ0NTUtYjQyOS02MGY4OTlkNDJlYzYvODQ0M2IwZGItMjllMi0z
NWRiLWI4ZTEtMzQzNTliMGI1ZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTM4ZmY0N2YtODI1Zi00NDU1LWI0
MjktNjBmODk5ZDQyZWM2L2EzOGZmNDdmLTgyNWYtNDQ1NS1iNDI5LTYwZjg5OWQ0
MmVjNi5jcmwwHwYDVR0jBBgwFoAUWzyP2EiFClYUqC5lRFnJvaAUW2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hMzhmZjQ3Zi04MjVmLTQ0NTUtYjQyOS02MGY4
OTlkNDJlYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCv2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvUpW9oZUzUDly1/HeNBsGXNW6q3mxGR7SLS/OObpVNkBM+vsuLfU17
LXqExHkO+8p1K5W6sY2O2C1Puwma+Ull7rY0MExAXenMgP6dzq2mwrwUmWXG53o/
hsd9mmwdlUl5P7Chfjp5KpBNt1rnbT3zVzlrJ4L5kQ4c0Ogj+n6htIJesfShtYRy
Ye6g8TxwHsAPcFOPZ6oPAhpKgNQmNNbjdSf1Dyv3L+Jf0fDUyT4CcJHNeRH3BhYm
i6/RwiBtHDcOUW7NyAVK05wpEBZYfDnYACez2xeyZ88w45PNB3YxwiuSFrSaOREZ
MI0L+1H2wozfDNKPV7WWwPtVqvst00U=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:42:29 2024 by rpki-client on console-ams.rpki-client.org