Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa
File:                     44fa7203-10fb-3394-93c5-802539bacbc6.roa (raw, json)
Hash identifier:          ncHbDr/pxqwTQsDSCq6SiBu0Iq37+F5Jk0dyEJkQdgg=
Subject key identifier:   1D:08:C6:D1:F6:D0:5C:00:48:93:47:EF:85:EA:1F:B7:A2:D1:04:81
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F43285845408B4BAC2BFC2F22DD6FD700
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa
Signing time:             Mon 18 Mar 2024 20:38:28 +0000
ROA not before:           Mon 18 Mar 2024 20:38:28 +0000
ROA not after:            Sun 16 Jun 2024 20:38:28 +0000
asID:                     16509
IP address blocks:        216.31.33.0/24 maxlen: 24
                          216.31.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:8b:4b:ac:2b:fc:2f:22:dd:6f:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: Mar 18 20:38:28 2024 GMT
            Not After : Jun 16 20:38:28 2024 GMT
        Subject: CN=d9dd6c56-1eec-4db3-81d3-17998d41cf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:70:b9:92:0e:52:34:84:58:5c:2f:e9:65:
                    32:f3:5f:23:27:54:35:ef:d3:29:d9:8c:f5:65:96:
                    40:ca:6e:f1:ab:cf:61:00:65:67:39:10:2c:7d:2c:
                    aa:9e:cf:28:a6:f4:db:40:40:53:d7:20:d2:7e:9d:
                    74:21:f7:0b:31:2b:54:58:53:f0:13:d6:db:4a:cc:
                    fd:e8:ff:ae:48:c1:0a:cd:d2:4f:e1:bf:71:00:bb:
                    d8:ba:02:99:0b:82:49:1c:e2:f1:e4:36:0d:5e:6a:
                    c7:42:c6:b0:43:09:9e:e0:29:64:8d:ca:a2:47:c0:
                    c2:b0:4f:e9:6b:46:39:28:12:33:c9:ac:ae:95:0f:
                    46:d2:7e:0c:dd:23:3f:cb:b0:de:5e:dc:05:77:61:
                    84:e5:17:98:65:2b:2b:b0:ce:26:8e:7a:a1:a9:bf:
                    4c:ab:fb:60:39:f0:70:bf:ab:9e:b8:89:c8:77:1f:
                    54:14:2e:e7:38:70:f1:fb:d9:ab:30:22:fd:61:61:
                    a3:d2:6d:3e:c0:36:db:5e:10:3b:70:eb:35:f4:a6:
                    3c:2a:a9:4c:51:64:e7:aa:eb:d9:11:4b:12:5b:0d:
                    bf:4d:d3:37:08:96:af:7d:7b:b6:79:08:b5:e6:ca:
                    a4:93:3b:02:94:73:ff:43:c6:78:95:fe:3c:8d:71:
                    71:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:08:C6:D1:F6:D0:5C:00:48:93:47:EF:85:EA:1F:B7:A2:D1:04:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.33.0-216.31.35.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:01:00:ff:37:0e:f1:08:5a:d4:f8:b7:ff:bf:e8:99:b1:07:
         10:4b:2b:8e:be:ad:8b:77:11:aa:52:51:16:92:26:f7:54:7b:
         28:cf:f3:80:06:a6:b1:22:a9:4c:1a:ef:d6:2c:65:c3:32:ca:
         b1:42:73:a9:15:ca:52:09:66:77:54:8a:18:69:b9:04:bd:6a:
         af:a5:ae:42:bb:e4:ca:38:40:06:b0:5d:d9:2d:f4:82:94:94:
         94:20:2b:2d:bb:c9:99:73:c9:a5:af:86:39:4e:14:bb:88:73:
         26:22:74:61:32:3b:8f:b6:41:95:00:d6:e9:01:21:a4:a6:42:
         55:bb:6e:09:c1:57:dc:ad:dd:79:f7:c5:65:e0:47:38:c1:39:
         fe:87:43:8c:a7:be:d3:db:2e:90:e6:14:be:37:16:64:4f:5f:
         32:ac:53:8a:03:88:27:9d:8d:01:ec:06:2d:8d:81:07:1b:90:
         01:42:49:94:a0:74:89:e6:91:a2:11:fd:14:6e:c1:ce:6f:e2:
         7d:c8:d0:c6:f6:b1:15:ce:2f:9b:e6:c3:7d:2f:19:a2:8a:c7:
         ee:95:22:ce:a3:c3:b1:62:71:85:80:69:e6:e4:0f:37:db:7b:
         4f:69:d0:43:2c:85:07:44:09:ae:e0:3a:49:84:f6:b6:3c:21:
         a7:dd:29:ab
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEVAi0usK/wvIt1v1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz
MDVhMB4XDTI0MDMxODIwMzgyOFoXDTI0MDYxNjIwMzgyOFowLzEtMCsGA1UEAxMk
ZDlkZDZjNTYtMWVlYy00ZGIzLTgxZDMtMTc5OThkNDFjZjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhNwuZIOUjSEWFwv6WUy818jJ1Q179Mp2Yz1
ZZZAym7xq89hAGVnORAsfSyqns8opvTbQEBT1yDSfp10IfcLMStUWFPwE9bbSsz9
6P+uSMEKzdJP4b9xALvYugKZC4JJHOLx5DYNXmrHQsawQwme4ClkjcqiR8DCsE/p
a0Y5KBIzyayulQ9G0n4M3SM/y7DeXtwFd2GE5ReYZSsrsM4mjnqhqb9Mq/tgOfBw
v6ueuInIdx9UFC7nOHDx+9mrMCL9YWGj0m0+wDbbXhA7cOs19KY8KqlMUWTnquvZ
EUsSWw2/TdM3CJavfXu2eQi15sqkkzsClHP/Q8Z4lf48jXFxQwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFB0IxtH20FwASJNH74XqH7ei0QSBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5
MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvNDRmYTcyMDMtMTBmYi0z
Mzk0LTkzYzUtODAyNTM5YmFjYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1
NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl
MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl
MGMwZTMwNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYHyED
BALYHyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAPQEA/zcO8Qha1Pi3/7/ombEHEEsrjr6ti3cRqlJRFpIm
91R7KM/zgAamsSKpTBrv1ixlwzLKsUJzqRXKUglmd1SKGGm5BL1qr6WuQrvkyjhA
BrBd2S30gpSUlCArLbvJmXPJpa+GOU4Uu4hzJiJ0YTI7j7ZBlQDW6QEhpKZCVbtu
CcFX3K3deffFZeBHOME5/odDjKe+09sukOYUvjcWZE9fMqxTigOIJ52NAewGLY2B
BxuQAUJJlKB0ieaRohH9FG7Bzm/ifcjQxvaxFc4vm+bDfS8ZoorH7pUizqPDsWJx
hYBp5uQPN9t7T2nQQyyFB0QJruA6SYT2tjwhp90pqw==
-----END CERTIFICATE-----
Generated at Fri May 3 01:54:12 2024 by rpki-client on console-fra.rpki-client.org