Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e0830e7f-f232-3d91-9109-0a32c4167c72.roa
File:                     e0830e7f-f232-3d91-9109-0a32c4167c72.roa (raw, json)
Hash identifier:          L75Q5eh2DOyCyTaaJ8WDhbnqAyHI7Z36Fgf4mACFqzY=
Subject key identifier:   5D:2A:80:5C:3D:48:0E:4E:48:31:80:DE:DD:32:4C:9A:82:F2:73:59
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858456C532226D80FE9A4A107F880
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e0830e7f-f232-3d91-9109-0a32c4167c72.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     3491
IP address blocks:        205.252.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:22:26:d8:0f:e9:a4:a1:07:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=02a5f995-536e-4019-bacd-c0b4fab6cd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:c2:f9:00:aa:c5:13:b4:be:be:16:91:b9:
                    11:67:a6:4c:26:82:ae:90:89:9b:3a:1f:a3:ce:36:
                    b7:47:67:59:c2:f2:c6:7b:bc:e9:53:61:d4:4f:a3:
                    47:7c:58:51:5c:6e:53:2f:05:69:4b:e0:c5:6d:86:
                    f1:73:e0:e9:5e:6b:eb:f4:dc:bf:ad:02:6a:37:83:
                    43:1d:17:c0:5b:28:90:0f:cf:5e:3c:a2:ae:3a:59:
                    33:6c:2e:6c:95:62:8b:7b:dc:f8:fd:34:cd:fd:ce:
                    57:95:a2:f3:8e:e0:e8:e5:ad:fb:75:b5:9b:48:c4:
                    d0:ff:25:3e:a1:94:49:39:17:d6:2b:e7:1c:4b:6d:
                    89:88:84:70:66:bb:93:d6:41:7b:a1:f6:cd:a1:aa:
                    2d:b6:ca:bb:0c:c6:6f:7d:a6:ba:4b:a5:4e:85:21:
                    e2:e6:5c:62:8c:65:35:1c:9b:63:31:1f:ce:0c:4f:
                    5b:7b:1b:5d:14:8f:95:f7:b9:aa:bd:5f:41:ca:72:
                    72:d9:33:03:11:84:c0:62:63:d7:55:61:07:87:fd:
                    18:6e:2f:12:16:6c:9a:95:1b:2f:d3:71:c9:96:9b:
                    43:01:65:a0:68:01:d5:9f:1d:d6:1d:c3:6c:42:64:
                    56:5e:4c:b0:c6:d5:c6:86:f1:38:f3:9b:26:b8:0e:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:80:5C:3D:48:0E:4E:48:31:80:DE:DD:32:4C:9A:82:F2:73:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e0830e7f-f232-3d91-9109-0a32c4167c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.252.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:05:65:d2:5f:2c:8b:46:3b:80:f8:23:f6:aa:f9:f1:d5:af:
         35:87:65:ac:dc:5e:c6:86:1e:8b:88:18:e8:62:e9:b0:dd:d0:
         93:ab:48:a7:c3:e1:8e:01:85:7a:f5:7e:ee:c4:5c:53:c7:81:
         00:51:d0:e7:40:cb:f0:7f:15:c0:04:b5:d4:28:0c:b6:60:8c:
         85:6c:cf:ba:c0:8d:05:e2:72:cc:33:a4:32:8e:71:a4:fc:14:
         d3:6a:99:a5:46:ba:af:55:90:5d:7b:6c:ab:1f:12:40:aa:c4:
         b0:7a:96:26:99:c2:01:9b:f7:c0:90:0d:3e:7c:35:99:54:1b:
         cc:d1:88:7b:f7:62:6b:77:c4:be:5c:a4:e5:50:05:e9:1e:93:
         57:83:76:8a:d4:cf:3b:c7:65:7b:67:4a:0e:03:b3:6e:21:94:
         fd:c3:b6:f2:5e:d6:01:35:c9:cf:c8:6a:fc:73:08:e9:13:93:
         ea:46:a0:15:d8:2b:6a:6f:8c:23:ad:8b:56:b0:74:36:99:b6:
         1d:19:a2:1e:67:22:f4:8b:b2:25:16:5c:db:bf:fa:09:03:af:
         53:86:3d:55:70:d8:9e:57:8b:e3:f9:c1:62:b1:a7:86:88:1b:
         85:6c:36:d9:2a:ea:d7:69:17:99:4a:6e:ab:0c:33:f6:d1:6a:
         63:71:ba:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUyIm2A/ppKEH+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk
MDJhNWY5OTUtNTM2ZS00MDE5LWJhY2QtYzBiNGZhYjZjZDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/C+QCqxRO0vr4WkbkRZ6ZMJoKukImbOh+j
zja3R2dZwvLGe7zpU2HUT6NHfFhRXG5TLwVpS+DFbYbxc+DpXmvr9Ny/rQJqN4ND
HRfAWyiQD89ePKKuOlkzbC5slWKLe9z4/TTN/c5XlaLzjuDo5a37dbWbSMTQ/yU+
oZRJORfWK+ccS22JiIRwZruT1kF7ofbNoaottsq7DMZvfaa6S6VOhSHi5lxijGU1
HJtjMR/ODE9bextdFI+V97mqvV9BynJy2TMDEYTAYmPXVWEHh/0Ybi8SFmyalRsv
03HJlptDAWWgaAHVnx3WHcNsQmRWXkywxtXGhvE485smuA65XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0qgFw9SA5OSDGA3t0yTJqC8nNZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZTA4MzBlN2YtZjIzMi0z
ZDkxLTkxMDktMGEzMmM0MTY3YzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzfzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMAFZdJfLItGO4D4I/aq+fHVrzWHZazcXsaGHouIGOhi6bDd0JOrSKfD
4Y4BhXr1fu7EXFPHgQBR0OdAy/B/FcAEtdQoDLZgjIVsz7rAjQXicswzpDKOcaT8
FNNqmaVGuq9VkF17bKsfEkCqxLB6liaZwgGb98CQDT58NZlUG8zRiHv3Ymt3xL5c
pOVQBekek1eDdorUzzvHZXtnSg4Ds24hlP3DtvJe1gE1yc/IavxzCOkTk+pGoBXY
K2pvjCOti1awdDaZth0Zoh5nIvSLsiUWXNu/+gkDr1OGPVVw2J5Xi+P5wWKxp4aI
G4VsNtkq6tdpF5lKbqsMM/bRamNxuk0=
-----END CERTIFICATE-----
Generated at Tue May 7 21:40:31 2024 by rpki-client on console-ams.rpki-client.org