Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87d6073-d113-3d6c-a8ca-b75af538c39d.roa
File:                     c87d6073-d113-3d6c-a8ca-b75af538c39d.roa (raw, json)
Hash identifier:          9yA0mGOQRSaMZNK0CiQzIPh1UmaXwt8Fzewbp4ymOFg=
Subject key identifier:   13:D1:F6:3C:51:4A:4D:8E:B1:A0:9E:97:F3:06:B1:8F:71:C6:A0:E5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858455B92E6ADA5DF01807D43A700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87d6073-d113-3d6c-a8ca-b75af538c39d.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     36183
IP address blocks:        172.225.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:e6:ad:a5:df:01:80:7d:43:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=248411c0-683d-42d5-9b21-3feaadbd21cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:3e:70:2f:0f:4a:f2:0a:c1:54:4f:30:21:
                    1c:1a:cd:75:cc:56:11:97:0e:e6:67:6b:f6:ad:6d:
                    eb:4a:82:46:ed:bd:ab:2b:a3:09:b6:11:d3:1f:73:
                    57:65:32:30:21:4d:97:8f:ee:23:b4:2f:e1:68:d4:
                    43:66:65:0d:fe:bc:24:cb:b7:f5:c5:d6:a6:2a:9d:
                    62:78:13:a4:e3:68:24:5e:b4:71:28:97:5d:9c:f9:
                    ec:83:58:0e:a7:4f:2a:bb:6b:94:ec:bf:49:93:dc:
                    2c:2a:5b:33:7d:1b:27:a8:c3:76:4a:3b:1a:ed:f8:
                    43:7e:d5:89:36:26:9c:08:86:9f:48:6a:6c:db:a5:
                    32:6a:1b:bf:31:68:6a:5b:30:f5:14:65:e2:a9:74:
                    48:48:d6:25:bb:04:0a:70:a1:0b:3d:3d:d1:b0:d1:
                    8c:19:4d:1e:52:f3:49:0b:7a:d2:df:5d:24:df:bb:
                    e4:fb:67:76:ce:bd:5a:9c:d1:c4:a6:43:e6:bf:c3:
                    d9:bc:9c:ce:c7:32:e7:c0:43:f5:b5:06:9e:22:4c:
                    79:61:41:f6:97:28:00:fc:ef:a0:06:23:bb:44:f0:
                    5b:87:1a:b6:01:d3:64:11:8f:ce:5f:34:03:57:74:
                    82:ae:72:f5:3e:c9:e4:bc:ac:1c:af:92:63:7b:2e:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D1:F6:3C:51:4A:4D:8E:B1:A0:9E:97:F3:06:B1:8F:71:C6:A0:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87d6073-d113-3d6c-a8ca-b75af538c39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e6:15:fc:29:b5:34:a7:13:33:77:08:64:d5:a8:6b:1b:c6:
         3d:0f:95:a6:1b:a4:7c:b2:9d:31:7b:2f:18:36:12:26:5b:89:
         66:8f:db:69:06:77:33:23:3d:76:38:97:17:ff:37:93:7a:ff:
         5b:65:eb:f9:3c:19:d0:d2:60:ce:7c:ac:9d:60:10:56:75:a7:
         2c:ca:d4:72:d6:86:16:66:c3:1e:61:6a:ac:ce:54:d2:4b:13:
         13:e5:f4:88:41:fa:83:3e:d3:6d:f9:e2:85:f4:b6:c5:8d:65:
         07:0f:ec:62:f4:a7:a4:69:88:4b:5c:25:7f:f7:21:5d:fd:7c:
         42:54:1e:f4:d5:41:e0:30:c7:91:ee:99:62:5a:3c:0c:33:67:
         9a:37:93:70:83:5c:06:e9:c7:66:c5:17:64:77:6a:d8:7b:e1:
         6b:7b:67:a9:dc:3f:94:ce:83:e4:5a:2f:c2:ee:08:c9:c3:a2:
         8e:7a:10:1a:b5:c5:67:30:df:3f:29:89:29:ce:6b:6e:b6:ca:
         19:e0:ee:04:5d:80:31:53:fb:a0:26:36:6c:74:f7:b4:2a:02:
         8e:cb:54:22:0f:9b:34:83:ef:72:f7:a1:43:30:aa:6e:39:bb:
         84:a6:69:24:68:88:80:f7:14:35:db:a9:7b:4e:63:30:0f:73:
         75:8a:57:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVbkuatpd8BgH1DpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk
MjQ4NDExYzAtNjgzZC00MmQ1LTliMjEtM2ZlYWFkYmQyMWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqI+cC8PSvIKwVRPMCEcGs11zFYRlw7mZ2v2
rW3rSoJG7b2rK6MJthHTH3NXZTIwIU2Xj+4jtC/haNRDZmUN/rwky7f1xdamKp1i
eBOk42gkXrRxKJddnPnsg1gOp08qu2uU7L9Jk9wsKlszfRsnqMN2Sjsa7fhDftWJ
NiacCIafSGps26Uyahu/MWhqWzD1FGXiqXRISNYluwQKcKELPT3RsNGMGU0eUvNJ
C3rS310k37vk+2d2zr1anNHEpkPmv8PZvJzOxzLnwEP1tQaeIkx5YUH2lygA/O+g
BiO7RPBbhxq2AdNkEY/OXzQDV3SCrnL1PsnkvKwcr5Jjey4t6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPR9jxRSk2OsaCel/MGsY9xxqDlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg3ZDYwNzMtZDExMy0z
ZDZjLWE4Y2EtYjc1YWY1MzhjMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHmFfwptTSnEzN3CGTVqGsbxj0PlaYbpHyynTF7Lxg2EiZbiWaP22kG
dzMjPXY4lxf/N5N6/1tl6/k8GdDSYM58rJ1gEFZ1pyzK1HLWhhZmwx5haqzOVNJL
ExPl9IhB+oM+02354oX0tsWNZQcP7GL0p6RpiEtcJX/3IV39fEJUHvTVQeAwx5Hu
mWJaPAwzZ5o3k3CDXAbpx2bFF2R3ath74Wt7Z6ncP5TOg+RaL8LuCMnDoo56EBq1
xWcw3z8piSnOa262yhng7gRdgDFT+6AmNmx097QqAo7LVCIPmzSD73L3oUMwqm45
u4SmaSRoiID3FDXbqXtOYzAPc3WKV2A=
-----END CERTIFICATE-----
Generated at Fri May 17 22:03:17 2024 by rpki-client on console-ams.rpki-client.org