Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/331c5e4b-2bed-3398-a0ef-545daf95d0f5.roa
File:                     331c5e4b-2bed-3398-a0ef-545daf95d0f5.roa (raw, json)
Hash identifier:          gZcEFjsLqbkeV/+uf3anw9rF9X6i92RbnJJ/fTKC/eg=
Subject key identifier:   E8:B8:D1:5D:6E:C2:49:1C:39:EB:0E:33:E3:92:1F:1C:BB:F0:EB:EF
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584571E870E9687D9CF20A78CE40
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/331c5e4b-2bed-3398-a0ef-545daf95d0f5.roa
Signing time:             Fri 05 Apr 2024 13:00:33 +0000
ROA not before:           Fri 05 Apr 2024 13:00:33 +0000
ROA not after:            Thu 04 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        198.251.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:71:e8:70:e9:68:7d:9c:f2:0a:78:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr  5 13:00:33 2024 GMT
            Not After : Jul  4 13:00:33 2024 GMT
        Subject: CN=4cad2637-0a2c-4b4f-82a6-fdff94a7f9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:5f:8d:92:da:9c:ba:bd:01:b4:51:6f:98:
                    c9:cf:b2:28:82:17:23:3d:f3:23:08:43:b3:90:54:
                    99:e8:33:0c:f0:f9:63:02:10:02:1a:d0:e9:09:35:
                    c1:3a:35:d7:aa:30:06:73:25:03:23:1c:85:60:05:
                    be:d4:b1:38:91:9e:54:36:07:48:ad:1b:99:05:6f:
                    3a:e3:17:8d:2c:f5:eb:b3:a8:bb:e4:3c:63:67:6c:
                    e8:8a:ac:10:43:8f:7f:b7:1c:5d:16:40:1f:68:c2:
                    75:e3:78:18:27:4d:fc:c3:dc:e9:6d:ea:49:fe:31:
                    11:c7:b1:a2:d9:01:20:36:43:d1:a4:1d:62:18:d2:
                    d4:32:27:ad:4f:04:0c:da:e2:4e:b9:ae:7c:e8:7c:
                    2e:85:7f:d2:a0:41:23:e9:4e:78:29:84:b7:47:af:
                    ff:ac:ad:5c:ad:a1:6c:ff:b1:34:f3:49:fa:3e:ea:
                    f1:d5:6c:ad:6c:2c:ac:b6:85:4f:cb:b9:75:0b:7f:
                    56:4b:7e:e7:5f:85:f0:02:d0:c2:58:68:50:31:bf:
                    6e:61:6e:48:28:3a:71:70:18:3d:18:37:b4:df:61:
                    f5:5a:b5:67:8e:ce:43:b2:4c:5b:94:eb:2d:38:92:
                    4f:6e:63:fa:39:c5:06:46:e4:67:2d:a2:96:94:82:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B8:D1:5D:6E:C2:49:1C:39:EB:0E:33:E3:92:1F:1C:BB:F0:EB:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/331c5e4b-2bed-3398-a0ef-545daf95d0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:18:3d:8c:07:dc:a0:6f:0d:13:ef:e5:0e:b9:c4:94:a8:fd:
         d7:90:49:3b:ff:ec:2d:f0:f8:0d:18:72:f2:52:4d:60:85:f4:
         bc:6e:0f:7b:5c:36:c6:92:ff:d1:2f:e6:46:72:0b:e8:73:22:
         d8:71:76:42:c5:9f:56:6d:d8:10:06:25:4d:27:52:86:8c:1c:
         4f:4e:46:ec:39:c5:64:35:ad:68:1b:8a:04:ab:10:ad:ba:7b:
         28:4b:15:8b:a0:b6:ea:e2:53:cf:a2:a9:03:dd:a2:fc:f2:cb:
         e4:0f:a8:b7:19:d2:35:ef:58:d6:c2:92:9e:40:2c:97:09:62:
         23:f7:7d:3b:cd:99:fc:4f:0c:1e:36:ff:ba:28:9e:74:0e:12:
         39:ad:54:dd:eb:90:0d:05:5f:86:bd:c9:16:a2:1e:37:03:37:
         1e:0a:f6:a4:87:64:f2:83:5f:9b:82:d6:d4:f5:79:20:e0:69:
         df:83:87:d9:ca:74:98:6f:fd:e8:32:ab:43:9f:ef:c6:40:35:
         fc:cd:6e:d0:a6:1e:4f:60:71:08:e2:e1:ee:48:e8:7f:cf:13:
         00:c0:21:89:ce:95:5a:51:c7:05:ed:31:4d:93:78:a2:b2:c3:
         ae:39:20:37:44:4c:8d:25:ce:8e:b5:6f:02:dc:35:40:89:51:
         d2:56:40:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVx6HDpaH2c8gp4zkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI0MDQwNTEzMDAzM1oXDTI0MDcwNDEzMDAzM1owLzEtMCsGA1UEAxMk
NGNhZDI2MzctMGEyYy00YjRmLTgyYTYtZmRmZjk0YTdmOWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL5fjZLanLq9AbRRb5jJz7IoghcjPfMjCEOz
kFSZ6DMM8PljAhACGtDpCTXBOjXXqjAGcyUDIxyFYAW+1LE4kZ5UNgdIrRuZBW86
4xeNLPXrs6i75DxjZ2zoiqwQQ49/txxdFkAfaMJ143gYJ038w9zpbepJ/jERx7Gi
2QEgNkPRpB1iGNLUMietTwQM2uJOua586HwuhX/SoEEj6U54KYS3R6//rK1craFs
/7E080n6Purx1WytbCystoVPy7l1C39WS37nX4XwAtDCWGhQMb9uYW5IKDpxcBg9
GDe032H1WrVnjs5DskxblOstOJJPbmP6OcUGRuRnLaKWlIJjfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOi40V1uwkkcOesOM+OSHxy78OvvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMzMxYzVlNGItMmJlZC0z
Mzk4LWEwZWYtNTQ1ZGFmOTVkMGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxvvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcYPYwH3KBvDRPv5Q65xJSo/deQSTv/7C3w+A0YcvJSTWCF9LxuD3tc
NsaS/9Ev5kZyC+hzIthxdkLFn1Zt2BAGJU0nUoaMHE9ORuw5xWQ1rWgbigSrEK26
eyhLFYugturiU8+iqQPdovzyy+QPqLcZ0jXvWNbCkp5ALJcJYiP3fTvNmfxPDB42
/7oonnQOEjmtVN3rkA0FX4a9yRaiHjcDNx4K9qSHZPKDX5uC1tT1eSDgad+Dh9nK
dJhv/egyq0Of78ZANfzNbtCmHk9gcQji4e5I6H/PEwDAIYnOlVpRxwXtMU2TeKKy
w645IDdETI0lzo61bwLcNUCJUdJWQBk=
-----END CERTIFICATE-----
Generated at Thu May 2 03:30:10 2024 by rpki-client on console-ams.rpki-client.org