Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa
File:                     5584634c-07a6-3f85-9f96-cebd2ae0742b.roa (raw, json)
Hash identifier:          64CSTbgspfkMHyGikQErbG5S28jATL35ipsJ9qJL3xo=
Subject key identifier:   C4:93:C3:44:65:B9:DD:41:F2:AE:8D:35:F1:7C:20:77:70:A4:C1:C6
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F4328584571E870652BB50A2C67807980
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     397865
IP address blocks:        216.168.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:70:65:2b:b5:0a:2c:67:80:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=89a6205b-0cd2-4dca-af0b-cb8210707d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2a:2f:0c:c6:f4:6c:80:4c:1e:4d:97:34:87:
                    9f:f6:5d:20:c2:51:c7:b7:1a:e7:34:5d:15:4b:b1:
                    3a:8f:50:08:64:5b:ab:83:3c:74:cb:ac:20:35:ce:
                    c6:43:53:1a:f3:4a:3b:02:fd:ec:6b:14:f0:72:30:
                    5d:42:29:e0:3a:b5:b2:ef:64:06:5a:14:f4:cb:49:
                    ef:b9:14:32:57:0f:37:74:b3:49:ad:c4:70:40:b3:
                    a4:0a:a6:11:e7:2a:34:be:48:9c:c7:fa:a5:51:8c:
                    5e:08:4c:6c:13:7f:42:0e:11:f2:fc:41:25:4b:5d:
                    82:43:fa:19:93:37:57:a7:0e:bd:49:e1:5f:c5:68:
                    91:c8:a6:86:70:91:67:55:d4:74:60:ab:99:41:87:
                    49:60:d2:5a:c9:7c:d7:62:6b:b6:03:97:ba:4f:17:
                    c3:25:04:92:4e:59:61:70:c0:41:27:88:5e:8e:cc:
                    11:cb:13:4e:5a:61:f2:83:04:94:b8:0f:d9:43:67:
                    e4:74:fb:df:81:de:30:60:9a:09:f0:f1:4c:b2:c8:
                    bc:b4:22:97:4e:b7:85:de:f9:c5:98:96:0e:50:cb:
                    c1:ca:ef:e7:dc:4a:8e:3b:8d:f3:88:03:11:d3:1a:
                    57:6d:06:ac:0d:60:76:70:b3:ac:1f:69:05:6b:3c:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:93:C3:44:65:B9:DD:41:F2:AE:8D:35:F1:7C:20:77:70:A4:C1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/5584634c-07a6-3f85-9f96-cebd2ae0742b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:52:f4:10:1d:a9:72:6d:7e:28:47:fa:de:9f:9f:42:45:1d:
         a6:5d:42:48:f7:bc:5d:74:e0:de:2d:7e:ca:01:e1:0c:42:4d:
         04:fd:5e:b5:53:09:33:8f:5d:f0:47:61:74:9d:46:fc:a3:98:
         c0:95:03:6d:b0:6b:bb:40:d5:bf:91:e1:13:91:70:7e:bb:94:
         34:a4:0d:dd:81:54:b3:df:aa:d9:0b:3d:a8:05:b1:40:62:f4:
         da:dd:95:86:e1:b8:40:d7:6f:66:b4:3d:e9:9b:88:e7:6a:97:
         70:54:2e:c9:37:d7:8d:e9:7b:3e:7b:1d:fa:14:ac:84:14:a1:
         d5:4a:cf:c7:10:dd:99:98:e0:d3:1e:65:62:85:df:c4:8c:af:
         b5:49:2d:d7:37:f5:ac:02:87:f5:33:b9:4b:97:de:d2:fb:49:
         88:5c:db:5a:29:61:13:09:b4:b6:ea:af:17:73:aa:08:e4:e2:
         fb:17:0c:61:a2:83:ab:c0:f1:6c:6f:e6:2f:0f:64:78:bd:a0:
         6b:aa:da:46:16:97:87:05:0f:33:48:2c:25:8e:ca:3e:dd:63:
         19:9a:0b:b9:03:db:52:31:83:47:16:84:66:f4:a2:48:00:1e:
         be:46:46:92:54:79:b3:1a:74:76:84:24:44:2a:93:ca:b1:66:
         07:16:af:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVx6HBlK7UKLGeAeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm
ZTE5MB4XDTI0MDQwNTEzMDAzM1oXDTI0MDcwNDEzMDAzM1owLzEtMCsGA1UEAxMk
ODlhNjIwNWItMGNkMi00ZGNhLWFmMGItY2I4MjEwNzA3ZDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyovDMb0bIBMHk2XNIef9l0gwlHHtxrnNF0V
S7E6j1AIZFurgzx0y6wgNc7GQ1Ma80o7Av3saxTwcjBdQingOrWy72QGWhT0y0nv
uRQyVw83dLNJrcRwQLOkCqYR5yo0vkicx/qlUYxeCExsE39CDhHy/EElS12CQ/oZ
kzdXpw69SeFfxWiRyKaGcJFnVdR0YKuZQYdJYNJayXzXYmu2A5e6TxfDJQSSTllh
cMBBJ4hejswRyxNOWmHygwSUuA/ZQ2fkdPvfgd4wYJoJ8PFMssi8tCKXTreF3vnF
mJYOUMvByu/n3EqOO43ziAMR0xpXbQasDWB2cLOsH2kFazxykwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSTw0Rlud1B8q6NNfF8IHdwpMHGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj
NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNTU4NDYzNGMtMDdhNi0z
Zjg1LTlmOTYtY2ViZDJhZTA3NDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3
MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk
ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5
NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5S9BAdqXJtfihH+t6fn0JFHaZdQkj3vF104N4tfsoB4QxCTQT9XrVT
CTOPXfBHYXSdRvyjmMCVA22wa7tA1b+R4RORcH67lDSkDd2BVLPfqtkLPagFsUBi
9NrdlYbhuEDXb2a0PembiOdql3BULsk3143pez57HfoUrIQUodVKz8cQ3ZmY4NMe
ZWKF38SMr7VJLdc39awCh/UzuUuX3tL7SYhc21opYRMJtLbqrxdzqgjk4vsXDGGi
g6vA8Wxv5i8PZHi9oGuq2kYWl4cFDzNILCWOyj7dYxmaC7kD21Ixg0cWhGb0okgA
Hr5GRpJUebMadHaEJEQqk8qxZgcWr8E=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:43 2024 by rpki-client on console-fra.rpki-client.org