Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/157300c6-da4a-32f8-b4d1-fe1e6a768d94.roa
File:                     157300c6-da4a-32f8-b4d1-fe1e6a768d94.roa (raw, json)
Hash identifier:          Yn2KM+MB3Dp1O0y8v0XaodFeTlG+j+SHeLBRxWl2B7A=
Subject key identifier:   76:DC:48:47:F7:6E:A9:E5:3B:03:99:0F:EE:D4:E4:13:6F:94:5B:C9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584762D674B7C7136B3FA190C180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/157300c6-da4a-32f8-b4d1-fe1e6a768d94.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     16625
IP address blocks:        184.28.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:74:b7:c7:13:6b:3f:a1:90:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=4bc7f769-a798-4b49-b844-6a8e48273b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:4f:56:8d:78:0c:d9:be:b5:ef:f9:35:da:
                    df:d5:7b:87:16:7a:15:80:31:d5:3e:06:90:f7:05:
                    97:c4:f1:2a:3f:b0:02:3e:8b:1d:f2:4b:36:87:e5:
                    8f:c4:64:5d:f5:2d:a2:5f:c5:bb:75:52:3d:e3:14:
                    04:16:bd:ed:d8:c5:1e:d8:13:76:e1:68:ab:1f:e1:
                    61:a9:da:4f:26:f2:15:05:23:a3:89:15:2c:ee:15:
                    ee:7e:be:b2:e2:58:1e:cb:95:6d:d1:6d:f8:55:1f:
                    12:1e:7b:de:ae:c4:e3:62:8d:d1:e6:ac:4b:30:eb:
                    de:56:39:97:ed:7d:7f:b9:16:f4:fa:23:3d:46:63:
                    64:d5:fd:63:9d:d1:08:26:41:a8:a3:8a:15:76:20:
                    b8:97:0c:b4:72:14:e2:d0:f6:fd:61:bd:35:fe:14:
                    7a:19:53:c6:4b:6b:28:c9:44:a7:9e:90:f0:10:ee:
                    46:84:18:3b:d1:9c:ca:8a:79:17:01:74:53:34:43:
                    de:11:01:45:7a:52:46:92:8f:4d:1a:da:a5:9b:63:
                    67:4c:2a:22:99:5f:9f:bc:33:ce:6d:cc:64:7f:93:
                    3f:69:8c:c5:4c:7b:15:65:47:20:28:4d:20:bc:cf:
                    b8:55:55:26:6d:05:dc:6a:00:98:b5:4e:cd:09:e6:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DC:48:47:F7:6E:A9:E5:3B:03:99:0F:EE:D4:E4:13:6F:94:5B:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/157300c6-da4a-32f8-b4d1-fe1e6a768d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ac:0c:44:df:83:3b:8d:46:2f:86:21:7f:7d:de:4f:1c:bb:
         28:01:64:39:b0:f2:d5:b2:c0:ff:eb:82:6b:8d:0b:53:b8:cb:
         4a:6a:e5:92:11:fd:41:f7:7f:bc:be:b9:89:f4:fe:a2:62:c1:
         0c:b2:02:61:d7:6d:88:f2:d5:bb:cb:7c:e4:bb:67:05:93:22:
         ce:8a:07:6c:26:2d:97:84:9a:6d:fc:54:7a:97:df:2d:67:d1:
         12:55:3f:de:93:d1:3b:73:00:32:4b:39:05:19:c3:57:84:4c:
         d9:32:19:eb:d6:d4:bf:7d:49:c3:2e:c2:06:45:8a:59:14:f6:
         d9:ab:71:a5:80:ff:cc:16:9d:92:ee:4f:76:24:c8:4e:32:3d:
         27:42:39:3f:c7:aa:a8:53:e1:0e:d1:89:f3:4a:4c:28:6f:9c:
         81:ba:b7:db:a6:f6:66:4e:c8:8a:18:49:76:d3:11:ae:b9:89:
         9f:b9:3a:2c:18:d7:12:4c:10:b9:43:35:ee:da:f6:ac:89:d6:
         02:38:35:ff:40:0f:7f:73:7a:dd:e5:da:0a:79:6c:f6:cb:c8:
         ab:78:1e:98:95:90:4f:c7:b2:e5:7a:fc:b7:1f:a7:de:27:6e:
         2b:c6:af:0e:4d:39:b4:da:da:8b:e6:61:be:b5:d1:7d:e5:af:
         f0:1f:d6:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1nS3xxNrP6GQwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
NGJjN2Y3NjktYTc5OC00YjQ5LWI4NDQtNmE4ZTQ4MjczYjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIdPVo14DNm+te/5Ndrf1XuHFnoVgDHVPgaQ
9wWXxPEqP7ACPosd8ks2h+WPxGRd9S2iX8W7dVI94xQEFr3t2MUe2BN24WirH+Fh
qdpPJvIVBSOjiRUs7hXufr6y4lgey5Vt0W34VR8SHnversTjYo3R5qxLMOveVjmX
7X1/uRb0+iM9RmNk1f1jndEIJkGoo4oVdiC4lwy0chTi0Pb9Yb01/hR6GVPGS2so
yUSnnpDwEO5GhBg70ZzKinkXAXRTNEPeEQFFelJGko9NGtqlm2NnTCoimV+fvDPO
bcxkf5M/aYzFTHsVZUcgKE0gvM+4VVUmbQXcagCYtU7NCeYOrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbcSEf3bqnlOwOZD+7U5BNvlFvJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU3MzAwYzYtZGE0YS0z
MmY4LWI0ZDEtZmUxZTZhNzY4ZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBzEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOsDETfgzuNRi+GIX993k8cuygBZDmw8tWywP/rgmuNC1O4y0pq5ZIR
/UH3f7y+uYn0/qJiwQyyAmHXbYjy1bvLfOS7ZwWTIs6KB2wmLZeEmm38VHqX3y1n
0RJVP96T0TtzADJLOQUZw1eETNkyGevW1L99ScMuwgZFilkU9tmrcaWA/8wWnZLu
T3YkyE4yPSdCOT/HqqhT4Q7RifNKTChvnIG6t9um9mZOyIoYSXbTEa65iZ+5OiwY
1xJMELlDNe7a9qyJ1gI4Nf9AD39zet3l2gp5bPbLyKt4HpiVkE/HsuV6/Lcfp94n
bivGrw5NObTa2ovmYb610X3lr/Af1tQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:16 2024 by rpki-client on console-fra.rpki-client.org