Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa
File:                     86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa (raw, json)
Hash identifier:          EZtgxYJw3eEUXH+h7t33KChYUy1HMK3+J2oxnAiTpng=
Subject key identifier:   E9:D6:FA:9D:ED:50:A1:1D:6C:44:41:71:EB:A7:10:AB:4C:82:58:0E
Certificate issuer:       /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial:       010D0C9F43285845D503C45954E8F8EFBC3ABE00
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     23241
IP address blocks:        170.89.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c4:59:54:e8:f8:ef:bc:3a:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=851d739a-cd48-4ccd-bb4b-f4cc89289493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:b6:e5:0c:f4:6e:74:14:47:15:8e:73:76:
                    06:f1:d1:e7:b6:a7:ef:01:d3:e0:fc:20:9d:47:62:
                    98:12:74:8a:b9:eb:3e:55:9f:d2:ec:b2:be:2f:52:
                    3d:4f:df:ee:c2:d1:89:41:36:9d:63:4d:bd:7f:2b:
                    35:77:e9:65:35:91:fe:4a:d7:7a:92:11:d6:84:09:
                    99:d1:01:83:07:e5:f4:8d:0d:c8:ca:0b:8b:6e:af:
                    76:49:34:cb:88:5c:12:dc:c7:72:a2:d9:af:8f:ec:
                    30:91:36:3f:f8:a5:d4:8f:51:04:49:6a:90:c7:c2:
                    68:9f:1e:25:c5:ec:51:c9:0f:14:3f:5e:6f:93:58:
                    80:fb:d4:80:27:be:0f:6d:b8:68:aa:7d:4a:9e:28:
                    de:5f:f8:33:60:68:88:2e:00:94:3c:27:99:c9:37:
                    61:50:88:4b:c9:ae:ad:be:bd:db:78:a9:75:9c:48:
                    66:d2:4f:95:12:2c:4a:c0:44:4b:c3:73:6c:31:43:
                    34:f9:0b:54:2c:05:c1:c6:55:a7:fb:54:44:c1:9b:
                    d7:4f:a5:03:42:80:15:fa:06:5b:af:13:5e:ae:f1:
                    d5:3e:0f:ad:a9:4f:2a:62:75:5a:40:ff:77:21:5a:
                    01:c4:90:1b:a9:6e:bf:84:55:39:51:f3:bc:91:4a:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D6:FA:9D:ED:50:A1:1D:6C:44:41:71:EB:A7:10:AB:4C:82:58:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/86d2125a-8d57-3d4a-913f-a10e84f8dbae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl

            X509v3 Authority Key Identifier:
                keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.89.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:33:53:3b:38:50:e9:81:2e:b3:0f:a7:49:2e:30:03:ff:f4:
         d7:ac:97:3c:d3:e1:65:7b:bb:74:42:9e:9d:1b:03:7f:f7:c9:
         68:cb:98:2a:23:c5:b2:01:b4:75:c3:73:c1:a9:00:d9:46:8f:
         f0:b9:f5:2e:e0:6c:cf:33:e0:64:7e:4d:db:ba:28:63:64:ca:
         e6:c4:5f:40:d7:dd:29:5e:89:e9:01:45:bf:ed:00:fe:35:91:
         24:87:19:c0:49:83:86:aa:6e:50:6d:3b:67:02:eb:dd:75:6f:
         32:97:4a:79:99:de:15:04:9b:f0:99:29:74:00:f2:4b:9f:2f:
         28:f5:75:9a:f4:d0:cb:a9:0a:03:89:14:68:e4:f4:ac:38:3b:
         63:9b:eb:38:1a:97:82:1b:3a:05:0b:1a:6c:d8:75:11:64:c1:
         f1:6f:a1:6e:98:00:3f:d2:3b:3d:05:8c:a5:04:f8:2f:fb:86:
         66:de:c1:37:34:fc:7c:a8:40:e1:41:28:fa:3d:da:79:a0:06:
         12:2a:f7:9f:96:67:2b:22:21:08:e8:fc:9f:6c:55:81:85:ca:
         bf:d8:de:3c:fb:47:db:b1:32:45:27:db:2f:65:2a:9f:94:f8:
         26:c2:91:af:9c:77:99:d0:a6:7b:17:6f:e3:fb:02:48:ed:e2:
         10:4a:37:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA8RZVOj477w6vgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUzZmYxMGQtOWFjNS00NmE5LThlYjQtODIzMDI3NjA3
Y2ExMB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
ODUxZDczOWEtY2Q0OC00Y2NkLWJiNGItZjRjYzg5Mjg5NDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQq25Qz0bnQURxWOc3YG8dHntqfvAdPg/CCd
R2KYEnSKues+VZ/S7LK+L1I9T9/uwtGJQTadY029fys1d+llNZH+Std6khHWhAmZ
0QGDB+X0jQ3IyguLbq92STTLiFwS3Mdyotmvj+wwkTY/+KXUj1EESWqQx8Jonx4l
xexRyQ8UP15vk1iA+9SAJ74Pbbhoqn1KnijeX/gzYGiILgCUPCeZyTdhUIhLya6t
vr3beKl1nEhm0k+VEixKwERLw3NsMUM0+QtULAXBxlWn+1REwZvXT6UDQoAV+gZb
rxNervHVPg+tqU8qYnVaQP93IVoBxJAbqW6/hFU5UfO8kUqSFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOnW+p3tUKEdbERBceunEKtMglgOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNm
ZjEwZC05YWM1LTQ2YTktOGViNC04MjMwMjc2MDdjYTEvODZkMjEyNWEtOGQ1Ny0z
ZDRhLTkxM2YtYTEwZTg0ZjhkYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmUzZmYxMGQtOWFjNS00NmE5LThl
YjQtODIzMDI3NjA3Y2ExL2JlM2ZmMTBkLTlhYzUtNDZhOS04ZWI0LTgyMzAyNzYw
N2NhMS5jcmwwHwYDVR0jBBgwFoAUxf1vzdJ0mgAFn0XVSeFHrl2VZcYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTNmZjEwZC05YWM1LTQ2YTktOGViNC04MjMw
Mjc2MDdjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqlkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgzUzs4UOmBLrMPp0kuMAP/9NeslzzT4WV7u3RCnp0bA3/3yWjLmCoj
xbIBtHXDc8GpANlGj/C59S7gbM8z4GR+Tdu6KGNkyubEX0DX3SleiekBRb/tAP41
kSSHGcBJg4aqblBtO2cC6911bzKXSnmZ3hUEm/CZKXQA8kufLyj1dZr00MupCgOJ
FGjk9Kw4O2Ob6zgal4IbOgULGmzYdRFkwfFvoW6YAD/SOz0FjKUE+C/7hmbewTc0
/HyoQOFBKPo92nmgBhIq95+WZysiIQjo/J9sVYGFyr/Y3jz7R9uxMkUn2y9lKp+U
+CbCka+cd5nQpnsXb+P7Akjt4hBKNyA=
-----END CERTIFICATE-----
Generated at Wed May 29 03:16:57 2024 by rpki-client on console-ams.rpki-client.org