Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa
File:                     9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa (raw, json)
Hash identifier:          FX7g1YB5qxCYTYX7XR1H73nmdaceS/NmeUm9HSMJDGc=
Subject key identifier:   97:6A:30:45:89:F6:34:36:AF:94:03:85:5C:FE:AD:B6:24:F6:AF:FB
Certificate issuer:       /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Certificate serial:       010D0C9F43285845D0D3A1E4BB4DE05D4D65E700
Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa
Signing time:             Thu 09 May 2024 13:00:33 +0000
ROA not before:           Thu 09 May 2024 13:00:33 +0000
ROA not after:            Wed 07 Aug 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        199.43.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:d3:a1:e4:bb:4d:e0:5d:4d:65:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
        Validity
            Not Before: May  9 13:00:33 2024 GMT
            Not After : Aug  7 13:00:33 2024 GMT
        Subject: CN=005f788f-3e75-4ce6-8533-43a96bcdd6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e1:3a:18:25:b8:72:f9:d9:ab:67:8c:0d:fa:
                    bf:a9:26:29:5e:35:f7:0f:cd:cf:64:6f:1e:bb:72:
                    8f:4c:87:85:8a:60:3d:c1:2e:e7:4f:c0:79:7a:4d:
                    86:8d:f3:45:fc:94:6b:fa:19:d0:aa:b8:4c:23:e4:
                    1b:e9:a9:16:84:75:59:42:c8:be:95:c5:c3:e9:d4:
                    1c:39:ec:97:27:b1:dc:e9:30:c2:6a:75:a0:10:eb:
                    08:4e:d3:04:df:70:27:9b:4a:bf:18:b1:ae:f0:9c:
                    54:19:6d:a4:1f:f9:f1:9a:26:e1:ec:38:d2:f3:9f:
                    7f:a7:85:0b:65:ee:ed:24:ef:c1:bc:c0:95:33:df:
                    94:66:cd:4a:7d:dd:8c:30:fd:57:0e:f1:d2:53:ca:
                    7e:f9:f1:56:97:29:6c:a7:e7:08:47:68:bc:3c:37:
                    14:02:7d:3a:0c:7f:8d:a5:5a:2b:1a:01:c1:89:52:
                    5b:fc:24:d1:2a:da:b4:2c:29:55:aa:c2:c9:83:94:
                    d6:03:53:b6:4b:81:fb:4f:8c:4c:d7:cb:0a:de:5d:
                    14:3a:2c:af:28:3f:50:58:b6:ae:a8:73:59:eb:72:
                    e3:8d:bd:e7:88:2f:8b:ff:06:35:3b:62:53:1b:a6:
                    c3:86:c6:eb:9d:07:11:15:c7:0b:56:bb:61:15:33:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6A:30:45:89:F6:34:36:AF:94:03:85:5C:FE:AD:B6:24:F6:AF:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl

            X509v3 Authority Key Identifier:
                keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a7:24:d6:47:84:51:52:d2:1d:61:9f:f5:7a:34:5f:2f:b8:
         8d:38:ff:e4:32:39:e2:34:86:f8:11:cf:53:bd:47:f4:d3:c0:
         97:18:9e:4b:fd:d2:aa:36:9e:8d:7d:2f:be:ac:72:23:89:83:
         ce:1d:fc:d9:7f:14:d8:05:10:f0:fe:8d:97:c4:58:20:46:bb:
         07:84:d2:9e:d2:39:be:13:4d:42:0f:72:d6:2b:86:48:66:24:
         a6:38:96:21:38:45:98:6d:03:6d:d5:84:71:ac:8a:60:c8:8a:
         24:8f:89:8f:2d:35:b8:09:59:67:6b:68:7e:c6:ed:18:02:dc:
         ac:9b:9f:d8:0c:af:a1:81:b7:d5:29:ce:94:7c:e2:53:4d:4c:
         5b:74:83:7d:8e:ee:ab:ab:a4:13:8e:7d:75:a5:fb:df:3a:d4:
         62:88:e5:f7:3e:cf:43:c0:6b:c4:7d:34:79:c8:b1:8c:e7:df:
         3e:db:bf:37:4b:15:1c:4b:57:1d:4d:d2:46:e9:95:a2:80:b4:
         71:43:01:12:f3:e8:d9:a0:10:65:2f:0e:b7:17:1e:1d:00:ce:
         d2:52:6a:dd:4b:bd:29:51:6c:ac:34:9e:df:74:9f:41:c6:40:
         70:2a:e7:00:93:6b:6f:19:2b:80:87:bc:70:2a:bb:f9:cd:cd:
         9b:54:cd:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXQ06Hku03gXU1l5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWNjODdlNGYtN2UzYS00MzdiLTlmNTktMmYyODYzYjk3
NGRkMB4XDTI0MDUwOTEzMDAzM1oXDTI0MDgwNzEzMDAzM1owLzEtMCsGA1UEAxMk
MDA1Zjc4OGYtM2U3NS00Y2U2LTg1MzMtNDNhOTZiY2RkNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+E6GCW4cvnZq2eMDfq/qSYpXjX3D83PZG8e
u3KPTIeFimA9wS7nT8B5ek2GjfNF/JRr+hnQqrhMI+Qb6akWhHVZQsi+lcXD6dQc
OeyXJ7Hc6TDCanWgEOsITtME33Anm0q/GLGu8JxUGW2kH/nxmibh7DjS859/p4UL
Ze7tJO/BvMCVM9+UZs1Kfd2MMP1XDvHSU8p++fFWlylsp+cIR2i8PDcUAn06DH+N
pVorGgHBiVJb/CTRKtq0LClVqsLJg5TWA1O2S4H7T4xM18sK3l0UOiyvKD9QWLau
qHNZ63Ljjb3niC+L/wY1O2JTG6bDhsbrnQcRFccLVrthFTNGyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdqMEWJ9jQ2r5QDhVz+rbYk9q/7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lY2M4
N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4NjNiOTc0ZGQvOWIwMjhkZjAtZWYzNS0z
OTg3LWFlODctNmNmYzMwMDFhOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWNjODdlNGYtN2UzYS00MzdiLTlm
NTktMmYyODYzYjk3NGRkL2VjYzg3ZTRmLTdlM2EtNDM3Yi05ZjU5LTJmMjg2M2I5
NzRkZC5jcmwwHwYDVR0jBBgwFoAUtMUYnWx6mzzIW3WmbcOKovDxwOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lY2M4N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4
NjNiOTc0ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyu6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWnJNZHhFFS0h1hn/V6NF8vuI04/+QyOeI0hvgRz1O9R/TTwJcYnkv9
0qo2no19L76sciOJg84d/Nl/FNgFEPD+jZfEWCBGuweE0p7SOb4TTUIPctYrhkhm
JKY4liE4RZhtA23VhHGsimDIiiSPiY8tNbgJWWdraH7G7RgC3Kybn9gMr6GBt9Up
zpR84lNNTFt0g32O7qurpBOOfXWl+9861GKI5fc+z0PAa8R9NHnIsYzn3z7bvzdL
FRxLVx1N0kbplaKAtHFDARLz6NmgEGUvDrcXHh0AztJSat1LvSlRbKw0nt90n0HG
QHAq5wCTa28ZK4CHvHAqu/nNzZtUzec=
-----END CERTIFICATE-----
Generated at Wed May 22 16:23:45 2024 by rpki-client on console-ams.rpki-client.org