Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa
File:                     21f399c4-9b55-39ef-bed5-884b07932f9f.roa (raw, json)
Hash identifier:          WMG+cPgVXZwo+PgKLjDglj/9HF7nlvw7XQBDzK6nzs0=
Subject key identifier:   FF:8F:FD:CA:CE:CE:D6:B1:AB:0A:1B:59:F8:E8:F0:E1:DE:F9:54:43
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F43285845CB3E53D7B9FCF3707F92ABA8
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     26918
IP address blocks:        204.77.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:53:d7:b9:fc:f3:70:7f:92:ab:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=065a62de-16fb-435e-a72e-852d85148adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ae:e2:97:1c:44:97:7f:7f:c5:b8:56:19:5e:
                    11:43:21:5b:28:18:c9:a2:37:74:b6:9a:b5:e9:9c:
                    9e:c1:64:4f:a6:84:b5:fd:86:5f:70:64:c2:28:e3:
                    70:4c:2b:a0:65:0d:0a:53:e7:0a:35:1b:19:2e:dd:
                    0b:60:05:01:19:5a:bf:06:4e:56:76:b1:2f:84:4e:
                    3e:c6:1b:29:c3:07:3e:01:37:7d:67:cf:7a:8d:1a:
                    ac:f4:01:b3:dc:5a:5c:1c:2f:96:40:81:67:3c:e1:
                    09:dd:e7:e3:73:79:b7:93:e1:fb:64:3b:76:23:18:
                    bd:85:73:ce:28:fd:c0:5c:95:00:b4:5f:66:cb:8e:
                    cd:9a:6f:2f:b7:ce:58:3d:8a:b6:94:99:b4:f3:11:
                    df:12:80:9b:ee:36:37:e4:81:34:5b:2b:c0:6a:1e:
                    34:12:93:d1:e7:b8:ef:31:64:19:c1:72:60:f6:99:
                    ec:5f:da:d1:d5:52:bd:ef:cf:1e:54:ce:b9:2d:a7:
                    d0:74:79:cf:5b:87:ac:de:eb:0c:9c:37:86:86:9d:
                    8f:85:2a:96:aa:1e:c2:ec:37:ff:8b:f4:63:6a:40:
                    18:e9:3f:66:6a:1e:7e:17:ca:74:a8:8e:46:b7:a7:
                    f1:f6:e4:77:ef:0b:60:ca:fe:c8:85:0a:b8:01:93:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:FD:CA:CE:CE:D6:B1:AB:0A:1B:59:F8:E8:F0:E1:DE:F9:54:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:9f:15:d5:27:bb:31:29:26:2c:53:06:34:3d:bb:29:bf:5d:
         4b:8d:52:5e:2d:32:70:4b:60:b6:e5:b0:bb:f1:e0:d6:70:e7:
         78:8f:05:ce:e0:92:05:05:79:4e:5f:6b:f0:34:85:5a:d3:0b:
         02:99:b8:91:2b:d3:b7:a1:5f:de:dd:93:6c:fb:98:26:cd:ac:
         9b:f6:77:80:3a:14:69:d0:5f:33:e5:d8:d3:e5:2d:f5:7b:5d:
         b0:c6:0d:5a:98:98:70:3e:fe:f0:b8:93:0e:68:d9:61:b6:e0:
         f5:d7:77:f8:55:12:a6:5e:f9:d2:69:07:3e:af:8e:58:55:7c:
         65:42:6e:ac:6b:28:f1:5c:b5:f0:5b:c0:c1:7c:e8:06:b4:a8:
         ae:2e:ef:37:b7:76:a7:a0:4b:a5:49:ed:03:35:de:cb:69:b3:
         57:e2:cc:bd:33:12:ec:4c:98:24:6e:f0:39:09:78:d0:a4:91:
         97:f5:a6:19:8a:5e:9f:00:ba:c5:d6:72:29:78:b1:ef:1c:b8:
         f2:15:ce:9a:cb:e7:2b:bc:dc:26:d5:04:39:e9:26:d6:46:66:
         3d:58:3b:6e:f7:fd:ae:32:86:7c:7f:10:ef:8a:67:f1:ed:2f:
         e4:97:3c:ef:a2:43:a9:ef:40:3c:44:46:e4:92:81:d4:b2:64:
         a0:cd:ba:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXLPlPXufzzcH+Sq6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0
M2U4MB4XDTI0MDUwNzEzMDAzNVoXDTI0MDgwNTEzMDAzNVowLzEtMCsGA1UEAxMk
MDY1YTYyZGUtMTZmYi00MzVlLWE3MmUtODUyZDg1MTQ4YWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq7ilxxEl39/xbhWGV4RQyFbKBjJojd0tpq1
6ZyewWRPpoS1/YZfcGTCKONwTCugZQ0KU+cKNRsZLt0LYAUBGVq/Bk5WdrEvhE4+
xhspwwc+ATd9Z896jRqs9AGz3FpcHC+WQIFnPOEJ3efjc3m3k+H7ZDt2Ixi9hXPO
KP3AXJUAtF9my47Nmm8vt85YPYq2lJm08xHfEoCb7jY35IE0WyvAah40EpPR57jv
MWQZwXJg9pnsX9rR1VK9788eVM65LafQdHnPW4es3usMnDeGhp2PhSqWqh7C7Df/
i/RjakAY6T9mah5+F8p0qI5Gt6fx9uR37wtgyv7IhQq4AZPA7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+P/crOztaxqwobWfjo8OHe+VRDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy
Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvMjFmMzk5YzQtOWI1NS0z
OWVmLWJlZDUtODg0YjA3OTMyZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx
YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3
NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi
Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzE2oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKfFdUnuzEpJixTBjQ9uym/XUuNUl4tMnBLYLblsLvx4NZw53iPBc7g
kgUFeU5fa/A0hVrTCwKZuJEr07ehX97dk2z7mCbNrJv2d4A6FGnQXzPl2NPlLfV7
XbDGDVqYmHA+/vC4kw5o2WG24PXXd/hVEqZe+dJpBz6vjlhVfGVCbqxrKPFctfBb
wMF86Aa0qK4u7ze3dqegS6VJ7QM13stps1fizL0zEuxMmCRu8DkJeNCkkZf1phmK
Xp8AusXWcil4se8cuPIVzprL5yu83CbVBDnpJtZGZj1YO273/a4yhnx/EO+KZ/Ht
L+SXPO+iQ6nvQDxERuSSgdSyZKDNujw=
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:32 2024 by rpki-client on console-fra.rpki-client.org