Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa
File:                     7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa (raw, json)
Hash identifier:          UmbsDNtksRt8jFzmipwYfcx7NSxa0E3zHnEplak2K+Q=
Subject key identifier:   71:A4:A4:54:AA:FB:A2:AB:C7:F6:B2:57:60:FC:4C:4D:D3:51:11:77
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584589A3230B9628CEC653FADDC0
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        65.37.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:23:0b:96:28:ce:c6:53:fa:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=e789aeaa-dbcc-4fde-8c98-7f7118fbf0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:51:3f:40:71:be:66:b7:ea:40:51:a6:8a:
                    27:17:01:40:9d:04:a2:56:c7:58:93:f5:5f:6f:a5:
                    8b:b9:73:0e:7c:5e:3f:bc:ba:83:4b:44:d8:a8:5c:
                    67:3a:b2:ab:a1:00:8e:a2:ee:18:d0:4c:96:58:1e:
                    28:02:99:db:02:5f:42:12:ce:f2:55:8a:57:26:cc:
                    6a:29:e7:75:8f:bb:89:b5:66:d2:aa:af:8a:ad:c5:
                    10:5f:b9:20:91:e6:30:47:4c:64:70:00:78:81:75:
                    58:40:e8:a7:91:da:59:57:70:12:2c:cb:14:9a:09:
                    7a:81:58:8f:86:cc:2b:e2:6d:f9:10:18:f3:a4:18:
                    35:7e:3c:3d:27:07:f4:8f:d9:cf:69:7b:d7:de:75:
                    1f:07:d9:02:c3:e0:e0:ca:c7:af:84:b9:c7:b6:2b:
                    8a:bf:8f:27:04:f3:55:0e:ce:c9:4e:c1:7e:f8:9d:
                    68:34:d5:2a:78:b7:55:78:59:22:18:dc:fe:c0:a5:
                    44:57:f5:0f:46:19:b0:24:cc:cd:32:37:43:36:fc:
                    d8:57:6e:d0:ad:80:34:32:15:57:0e:2a:b0:63:de:
                    68:66:61:8e:2d:b3:81:2d:07:bc:97:13:de:62:08:
                    32:28:1f:87:43:7c:9e:0e:72:ad:24:a3:1d:71:ab:
                    22:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A4:A4:54:AA:FB:A2:AB:C7:F6:B2:57:60:FC:4C:4D:D3:51:11:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b5:e0:bd:4d:1e:ca:82:6e:2f:aa:2e:47:47:25:d4:2e:6a:
         f2:d2:19:4a:b8:af:48:74:0d:5c:65:b6:b7:37:ef:a8:4a:c6:
         e2:8c:e1:b6:86:a6:d1:03:d5:92:c8:ff:5c:0f:63:ec:a9:3a:
         24:9b:9b:f3:ef:39:8a:ab:a0:e6:18:24:6b:74:26:24:88:84:
         fe:d2:5b:fa:fb:e3:0f:04:0a:d7:18:35:da:2d:bd:01:4b:9a:
         95:2b:9a:29:d2:e6:07:83:91:c1:fe:62:6a:16:5c:2e:82:b7:
         e8:4a:1a:86:9b:57:4e:9b:fa:53:34:f9:b5:48:40:86:e9:a1:
         53:f4:e6:9c:5d:2d:5a:aa:02:ac:c9:dc:71:37:7c:79:bf:33:
         20:18:79:d5:22:e9:fb:46:97:59:53:e6:4f:2c:22:68:76:92:
         7f:56:fb:90:ce:ee:1c:2f:bd:4d:fe:32:a1:8d:65:0f:b9:1b:
         d1:96:76:0a:ff:40:4f:f5:5b:5c:73:97:a6:60:c0:d7:82:ca:
         fb:bb:17:a1:91:2e:5a:87:82:98:a7:bf:fd:bd:c7:b2:d3:36:
         e7:fe:8b:28:e8:9e:3f:15:e0:fd:27:5d:93:20:eb:aa:06:5d:
         58:d1:ef:e4:ff:90:18:90:98:1b:57:61:10:c2:28:d5:53:3c:
         7d:5b:80:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWJoyMLlijOxlP63cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw
MjhiMB4XDTI0MDQxNDAxMDAyNFoXDTI0MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
ZTc4OWFlYWEtZGJjYy00ZmRlLThjOTgtN2Y3MTE4ZmJmMGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG9RP0Bxvma36kBRpoonFwFAnQSiVsdYk/Vf
b6WLuXMOfF4/vLqDS0TYqFxnOrKroQCOou4Y0EyWWB4oApnbAl9CEs7yVYpXJsxq
Ked1j7uJtWbSqq+KrcUQX7kgkeYwR0xkcAB4gXVYQOinkdpZV3ASLMsUmgl6gViP
hswr4m35EBjzpBg1fjw9Jwf0j9nPaXvX3nUfB9kCw+DgysevhLnHtiuKv48nBPNV
Ds7JTsF++J1oNNUqeLdVeFkiGNz+wKVEV/UPRhmwJMzNMjdDNvzYV27QrYA0MhVX
DiqwY95oZmGOLbOBLQe8lxPeYggyKB+HQ3yeDnKtJKMdcasi7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGkpFSq+6Krx/ayV2D8TE3TURF3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk
ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNzAyMWFiNmEtNmUzYS0z
OWM0LThhMDAtNTFlNmU3N2EwYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk
Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3
MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0
NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHW14L1NHsqCbi+qLkdHJdQuavLSGUq4r0h0DVxltrc376hKxuKM4baG
ptED1ZLI/1wPY+ypOiSbm/PvOYqroOYYJGt0JiSIhP7SW/r74w8ECtcYNdotvQFL
mpUrminS5geDkcH+YmoWXC6Ct+hKGoabV06b+lM0+bVIQIbpoVP05pxdLVqqAqzJ
3HE3fHm/MyAYedUi6ftGl1lT5k8sImh2kn9W+5DO7hwvvU3+MqGNZQ+5G9GWdgr/
QE/1W1xzl6ZgwNeCyvu7F6GRLlqHgpinv/29x7LTNuf+iyjonj8V4P0nXZMg66oG
XVjR7+T/kBiQmBtXYRDCKNVTPH1bgA4=
-----END CERTIFICATE-----
Generated at Thu May 2 15:00:23 2024 by rpki-client on console-ams.rpki-client.org