Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a972efe2-b857-3fbf-a105-b0c8be4f992a.roa
File:                     a972efe2-b857-3fbf-a105-b0c8be4f992a.roa (raw, json)
Hash identifier:          HjKJLEDtP2xgit+1BzcuwlDaS7CMN9tj+hcYIebVO78=
Subject key identifier:   C2:47:AD:C2:50:E5:AF:8C:AF:86:2A:70:EF:09:93:D4:8A:DD:A1:CA
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F432858456C530B8F2EE62732D3C5FF80
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a972efe2-b857-3fbf-a105-b0c8be4f992a.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        198.176.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0b:8f:2e:e6:27:32:d3:c5:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=994d8eec-e4ad-4b12-bd17-09aee03abb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:ac:63:4c:bc:23:5e:a7:87:b1:c2:39:89:
                    86:52:e5:3d:0a:eb:46:3a:dc:1e:cf:e5:10:0c:69:
                    82:d2:86:33:d4:48:b5:ce:4e:ee:f5:95:d1:2f:19:
                    14:12:6c:eb:e8:5e:92:f7:8d:07:d6:f6:e8:1f:c0:
                    65:49:04:4f:07:a5:c1:ad:07:79:e6:59:63:b5:02:
                    85:27:4d:c8:67:66:ac:19:94:8e:c6:07:1f:ff:1c:
                    27:e5:3e:b9:0e:35:4a:68:0b:4c:c1:55:b0:6f:8d:
                    65:dd:f9:a5:3b:e6:7d:40:fd:42:2c:05:95:6e:f8:
                    5a:e8:ed:3c:01:5c:73:d3:27:8b:51:41:cc:0f:72:
                    2a:30:7b:57:c5:49:d6:48:77:55:58:5f:9d:6c:e8:
                    b7:68:bb:f4:d8:a1:e0:f7:d2:c6:26:0f:10:bd:f3:
                    88:6c:c8:af:07:df:83:98:18:f1:0e:ac:8f:41:8b:
                    cd:10:c5:0f:7e:78:79:d2:49:c6:01:b2:b5:b3:c4:
                    a5:7e:47:9a:c8:ec:b0:04:5f:93:48:17:fb:b2:af:
                    11:d3:23:8d:3a:90:b8:7e:4c:c3:65:47:f1:4d:50:
                    8e:d3:d9:7f:c7:99:c3:48:b0:d7:4a:72:ad:19:4c:
                    74:b1:37:98:1a:56:c0:60:71:61:3f:95:12:a7:75:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:47:AD:C2:50:E5:AF:8C:AF:86:2A:70:EF:09:93:D4:8A:DD:A1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a972efe2-b857-3fbf-a105-b0c8be4f992a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3d:06:60:c0:79:01:8f:44:95:de:13:54:6f:5a:07:7b:8a:
         51:7d:ba:92:2d:b4:39:89:16:b8:79:64:38:85:c6:5e:95:93:
         e4:9a:41:7d:34:7c:dc:29:00:31:59:61:37:8b:2f:ed:30:2d:
         69:b5:84:08:f4:a2:0c:34:1a:b4:b5:38:17:0c:50:36:22:31:
         63:54:b6:ae:7d:54:0e:ed:ba:a2:fd:99:d7:86:81:2c:26:ea:
         a9:c9:3f:4f:6b:71:97:d5:ff:bc:62:50:b3:9f:0f:1d:4d:ac:
         bd:4b:eb:33:a4:9d:15:c7:a9:60:56:f2:ec:09:2d:ab:11:36:
         2c:15:0e:28:90:50:37:f1:3e:45:99:e8:5f:6d:b9:2e:c8:40:
         e1:36:2f:bb:98:7c:0e:10:46:4a:39:22:88:30:cd:de:09:48:
         e0:7d:83:5e:b7:17:33:bb:34:a6:72:a4:a6:1d:2a:7e:cc:8c:
         90:e3:ad:4b:6c:d6:99:2f:be:d4:57:96:79:a3:63:ac:cc:99:
         c0:2a:d0:c7:ab:df:c8:44:fe:c5:6d:28:ae:b6:11:f3:65:2f:
         3e:d7:df:04:d1:c8:31:a3:94:0c:83:36:e1:e5:20:49:45:54:
         29:04:c1:d6:f8:0a:63:8d:2e:de:ad:54:8c:37:22:0b:66:17:
         d4:74:e5:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVsUwuPLuYnMtPF/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyMzkxNDktZmEwYi00MzI1LWI4ZGMtZmQwZTI1MDQ1
NGMyMB4XDTI0MDQwMzEzMDAzN1oXDTI0MDcwMjEzMDAzN1owLzEtMCsGA1UEAxMk
OTk0ZDhlZWMtZTRhZC00YjEyLWJkMTctMDlhZWUwM2FiYjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRasY0y8I16nh7HCOYmGUuU9CutGOtwez+UQ
DGmC0oYz1Ei1zk7u9ZXRLxkUEmzr6F6S940H1vboH8BlSQRPB6XBrQd55lljtQKF
J03IZ2asGZSOxgcf/xwn5T65DjVKaAtMwVWwb41l3fmlO+Z9QP1CLAWVbvha6O08
AVxz0yeLUUHMD3IqMHtXxUnWSHdVWF+dbOi3aLv02KHg99LGJg8QvfOIbMivB9+D
mBjxDqyPQYvNEMUPfnh50knGAbK1s8SlfkeayOywBF+TSBf7sq8R0yONOpC4fkzD
ZUfxTVCO09l/x5nDSLDXSnKtGUx0sTeYGlbAYHFhP5USp3WuIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJHrcJQ5a+Mr4YqcO8Jk9SK3aHKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNjIz
OTE0OS1mYTBiLTQzMjUtYjhkYy1mZDBlMjUwNDU0YzIvYTk3MmVmZTItYjg1Ny0z
ZmJmLWExMDUtYjBjOGJlNGY5OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTYyMzkxNDktZmEwYi00MzI1LWI4
ZGMtZmQwZTI1MDQ1NGMyL2E2MjM5MTQ5LWZhMGItNDMyNS1iOGRjLWZkMGUyNTA0
NTRjMi5jcmwwHwYDVR0jBBgwFoAUXhqfqO2JLdZA54wAofK0/3LXMWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNjIzOTE0OS1mYTBiLTQzMjUtYjhkYy1mZDBl
MjUwNDU0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrB+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAA9BmDAeQGPRJXeE1RvWgd7ilF9upIttDmJFrh5ZDiFxl6Vk+SaQX00
fNwpADFZYTeLL+0wLWm1hAj0ogw0GrS1OBcMUDYiMWNUtq59VA7tuqL9mdeGgSwm
6qnJP09rcZfV/7xiULOfDx1NrL1L6zOknRXHqWBW8uwJLasRNiwVDiiQUDfxPkWZ
6F9tuS7IQOE2L7uYfA4QRko5Iogwzd4JSOB9g163FzO7NKZypKYdKn7MjJDjrUts
1pkvvtRXlnmjY6zMmcAq0Mer38hE/sVtKK62EfNlLz7X3wTRyDGjlAyDNuHlIElF
VCkEwdb4CmONLt6tVIw3IgtmF9R05Tk=
-----END CERTIFICATE-----
Generated at Fri May 3 01:55:50 2024 by rpki-client on console-fra.rpki-client.org