Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa
File:                     f890b188-b610-38a0-89b0-8a1a62d249f7.roa (raw, json)
Hash identifier:          TLBgRUWrSlh4MuOgSXJGjpBuVVvLWuKiETv4fZYeogw=
Subject key identifier:   1F:F7:95:53:4E:C0:FD:53:C7:7B:A3:13:59:D9:34:A5:71:C7:1F:1F
Certificate issuer:       /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial:       010D0C9F43285845AC88C5AAFA67F8611F757B40
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     14618
IP address blocks:        216.245.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:c5:aa:fa:67:f8:61:1f:75:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=9926faae-fcb3-4aae-8321-99fe1cb5040b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:d8:44:d0:5d:a1:62:57:fd:39:b7:d5:5f:
                    7d:a7:08:67:92:7a:cd:83:55:e8:50:dc:a0:ee:1c:
                    21:9c:9b:5d:ac:b0:54:14:ca:1a:24:02:a8:dd:de:
                    72:5d:ed:be:95:13:ce:91:11:36:c2:6e:ba:7c:d7:
                    29:e2:2e:8e:78:64:12:61:06:4f:91:19:7c:41:71:
                    08:4d:0c:41:24:64:4d:f4:a7:81:8e:47:33:d0:a1:
                    6b:6a:fa:99:8e:99:bc:f7:44:dd:98:da:cf:6d:e2:
                    e8:39:08:b3:89:06:02:ad:05:42:ba:e9:55:be:55:
                    b2:b2:b2:2f:93:86:ff:81:f2:4a:8c:64:0a:2b:d9:
                    55:f8:b9:71:3a:cd:32:1f:89:84:95:df:2b:1e:17:
                    b4:6c:12:42:fe:c9:cd:0c:e4:57:fa:da:b2:dc:52:
                    8f:0e:b8:ec:eb:ec:80:d9:b8:a4:1b:51:a5:da:53:
                    af:a8:ba:24:b9:80:14:3f:20:2c:e0:38:19:9f:ff:
                    4c:ac:63:e9:6a:3b:4a:76:e9:b5:f8:59:34:b7:60:
                    a6:0a:8f:1d:ff:4a:c6:68:e0:44:e0:b5:bf:c1:8a:
                    96:23:c8:e7:97:5a:73:64:a6:59:30:41:b0:45:29:
                    e6:6e:ae:0c:f5:05:57:63:37:5c:43:c0:1c:02:dd:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F7:95:53:4E:C0:FD:53:C7:7B:A3:13:59:D9:34:A5:71:C7:1F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl

            X509v3 Authority Key Identifier:
                keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0c:4f:47:de:b9:cd:d9:a0:94:70:61:57:59:2c:dc:cb:38:
         2d:0e:04:05:e9:2c:dc:8d:a0:88:7c:f1:13:ae:62:12:c1:32:
         c7:be:ba:61:f9:6c:0b:36:69:05:bb:15:ce:5c:6d:91:6f:3f:
         ee:31:c0:cb:ab:01:da:37:ad:80:0f:17:7b:41:c0:be:c3:6a:
         df:11:5a:82:72:f8:23:fc:8b:8f:f7:7b:a0:78:6f:fa:e3:de:
         a4:02:ea:da:48:7f:30:d9:aa:0f:de:d0:d0:20:c2:7a:38:2f:
         60:ce:42:d5:f4:cc:ab:e1:f4:94:7d:c3:e5:dc:63:fe:23:c4:
         78:3c:5d:39:1e:8f:6a:dd:45:c2:ef:e7:26:3f:95:14:d0:35:
         0f:98:1c:f4:50:39:02:76:bf:c6:37:42:e3:c9:35:f5:2e:82:
         c5:89:48:72:29:dd:c9:b9:18:29:5f:10:ab:67:b9:90:9c:49:
         03:e5:48:e8:c7:82:11:ac:5e:a5:db:96:7e:ec:74:90:02:6d:
         43:bc:af:85:29:ed:91:2f:c4:cb:a9:6a:18:88:c9:7a:b8:fd:
         c2:06:22:a1:5b:15:77:e6:cc:f0:d9:a8:6b:ee:59:1a:a2:85:
         bf:8d:ed:a2:43:39:1b:ab:6d:30:3b:c6:21:72:48:7b:08:e2:
         5c:e7:30:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiMWq+mf4YR91e0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3
NWY5MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
OTkyNmZhYWUtZmNiMy00YWFlLTgzMjEtOTlmZTFjYjUwNDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMDYRNBdoWJX/Tm31V99pwhnknrNg1XoUNyg
7hwhnJtdrLBUFMoaJAKo3d5yXe2+lRPOkRE2wm66fNcp4i6OeGQSYQZPkRl8QXEI
TQxBJGRN9KeBjkcz0KFravqZjpm890TdmNrPbeLoOQiziQYCrQVCuulVvlWysrIv
k4b/gfJKjGQKK9lV+LlxOs0yH4mEld8rHhe0bBJC/snNDORX+tqy3FKPDrjs6+yA
2bikG1Gl2lOvqLokuYAUPyAs4DgZn/9MrGPpajtKdum1+Fk0t2CmCo8d/0rGaOBE
4LW/wYqWI8jnl1pzZKZZMEGwRSnmbq4M9QVXYzdcQ8AcAt0KWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/3lVNOwP1Tx3ujE1nZNKVxxx8fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx
MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvZjg5MGIxODgtYjYxMC0z
OGEwLTg5YjAtOGExYTYyZDI0OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5
M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx
NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0
Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJEMT0feuc3ZoJRwYVdZLNzLOC0OBAXpLNyNoIh88ROuYhLBMse+umH5
bAs2aQW7Fc5cbZFvP+4xwMurAdo3rYAPF3tBwL7Dat8RWoJy+CP8i4/3e6B4b/rj
3qQC6tpIfzDZqg/e0NAgwno4L2DOQtX0zKvh9JR9w+XcY/4jxHg8XTkej2rdRcLv
5yY/lRTQNQ+YHPRQOQJ2v8Y3QuPJNfUugsWJSHIp3cm5GClfEKtnuZCcSQPlSOjH
ghGsXqXbln7sdJACbUO8r4Up7ZEvxMupahiIyXq4/cIGIqFbFXfmzPDZqGvuWRqi
hb+N7aJDORurbTA7xiFySHsI4lznMKA=
-----END CERTIFICATE-----
Generated at Wed May 1 22:28:51 2024 by rpki-client on console-fra.rpki-client.org