Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/ff991b74-3673-336f-90a4-4663655d56fc.roa
File:                     ff991b74-3673-336f-90a4-4663655d56fc.roa (raw, json)
Hash identifier:          AFBeTGV3DT5DpG+R1Kja9GiXtittEg/2V3VMXK6tlXQ=
Subject key identifier:   A7:C8:FD:35:53:BD:C5:B9:82:36:6D:57:D3:0D:90:FE:28:DC:8E:1C
Certificate issuer:       /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial:       010D0C9F4328584551CD6CCB206DCFE722BD9200
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/ff991b74-3673-336f-90a4-4663655d56fc.roa
Signing time:             Mon 25 Mar 2024 01:00:25 +0000
ROA not before:           Mon 25 Mar 2024 01:00:25 +0000
ROA not after:            Sun 23 Jun 2024 01:00:25 +0000
asID:                     6939
IP address blocks:        192.197.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:51:cd:6c:cb:20:6d:cf:e7:22:bd:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
        Validity
            Not Before: Mar 25 01:00:25 2024 GMT
            Not After : Jun 23 01:00:25 2024 GMT
        Subject: CN=4e17b5bd-2506-4589-9a13-53b01e23d25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d7:3f:a6:17:63:e4:a1:04:46:69:5a:8b:e5:
                    11:33:cb:77:f0:a0:1c:3f:25:b9:54:11:89:f4:d5:
                    0f:e6:e1:ee:0d:51:5d:ba:79:3d:fa:04:62:36:27:
                    a8:5e:de:35:3e:6c:82:bd:9f:84:94:cc:41:d3:1a:
                    ae:f6:a5:aa:c2:9b:2f:46:73:13:4f:81:4b:0b:1a:
                    77:7e:b6:96:24:bc:02:e2:be:eb:c4:dd:f0:40:94:
                    2f:c2:6a:63:fb:ae:81:61:2e:8f:8d:94:e7:ff:dc:
                    ce:74:51:f4:d5:de:d0:58:f6:f0:ec:88:05:c5:c3:
                    32:9f:b3:3a:21:71:72:f2:7c:eb:d4:58:17:51:23:
                    a0:87:95:48:ba:0b:bd:58:b0:d1:9d:b1:9c:cb:01:
                    cb:fa:da:72:cf:14:f1:32:2c:50:14:19:a5:06:07:
                    92:e7:e1:c0:6e:58:77:3d:34:6f:b4:99:b5:20:d1:
                    f1:a7:e8:a7:19:ca:10:79:2f:c2:9e:8d:14:6c:5a:
                    ab:4a:99:2d:e2:b5:ce:77:0d:d6:01:49:6b:42:30:
                    d9:fd:74:4a:a1:b9:59:bb:fc:8d:48:2a:51:6d:ee:
                    bf:f8:29:59:76:00:30:ab:20:a3:3d:f6:92:8b:53:
                    28:83:db:2e:8f:ff:5c:35:ac:46:b4:95:13:c2:6b:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C8:FD:35:53:BD:C5:B9:82:36:6D:57:D3:0D:90:FE:28:DC:8E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/ff991b74-3673-336f-90a4-4663655d56fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl

            X509v3 Authority Key Identifier:
                keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:84:0c:cf:b2:e9:ad:cd:a1:de:42:27:01:dd:25:1d:c6:
         ed:21:2d:8c:50:69:ba:0f:75:43:29:97:8e:68:d4:88:32:78:
         b7:36:af:b4:78:5b:0c:ca:95:f3:7c:b5:55:b2:b8:87:83:e6:
         a7:d5:3a:8c:59:b1:75:d9:c1:63:03:6c:3c:f2:0a:06:d8:5e:
         93:ff:19:48:5c:16:44:1c:f0:9f:ac:30:71:76:9d:4e:d4:95:
         b4:0c:2d:6f:e5:38:ce:ea:72:61:f5:dc:73:78:5a:b5:2c:db:
         9e:66:d9:fc:1d:d1:fd:aa:8f:19:09:22:d5:93:e2:49:36:d5:
         b9:ef:86:60:4a:b2:9f:64:5c:65:d8:0b:27:2b:a8:80:60:64:
         dd:81:09:d5:7c:03:cf:0e:02:02:16:2d:5c:10:23:07:33:4a:
         4a:78:d0:40:46:34:13:c7:ce:5e:7b:84:dd:5d:86:30:46:28:
         5c:a1:df:f8:8e:ac:60:b1:96:55:1b:c1:9c:5e:3b:f9:32:fb:
         34:bd:6b:62:e7:86:18:8a:f8:9f:bc:62:e6:5e:55:3e:79:d6:
         5f:f8:54:d1:c3:7c:d9:64:af:eb:37:d1:a4:d4:15:fd:43:86:
         86:02:32:89:27:8c:a1:33:95:0f:c2:0a:32:40:ca:f6:d2:4c:
         e9:ac:34:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVRzWzLIG3P5yK9kgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUzNzlkZWUtNTU1Ni00MmI0LThiOGQtNjNkYmZhZjRm
MGVkMB4XDTI0MDMyNTAxMDAyNVoXDTI0MDYyMzAxMDAyNVowLzEtMCsGA1UEAxMk
NGUxN2I1YmQtMjUwNi00NTg5LTlhMTMtNTNiMDFlMjNkMjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79c/phdj5KEERmlai+URM8t38KAcPyW5VBGJ
9NUP5uHuDVFdunk9+gRiNieoXt41PmyCvZ+ElMxB0xqu9qWqwpsvRnMTT4FLCxp3
fraWJLwC4r7rxN3wQJQvwmpj+66BYS6PjZTn/9zOdFH01d7QWPbw7IgFxcMyn7M6
IXFy8nzr1FgXUSOgh5VIugu9WLDRnbGcywHL+tpyzxTxMixQFBmlBgeS5+HAblh3
PTRvtJm1INHxp+inGcoQeS/Cno0UbFqrSpkt4rXOdw3WAUlrQjDZ/XRKoblZu/yN
SCpRbe6/+ClZdgAwqyCjPfaSi1Mog9suj/9cNaxGtJUTwms7PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfI/TVTvcW5gjZtV9MNkP4o3I4cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTM3
OWRlZS01NTU2LTQyYjQtOGI4ZC02M2RiZmFmNGYwZWQvZmY5OTFiNzQtMzY3My0z
MzZmLTkwYTQtNDY2MzY1NWQ1NmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmUzNzlkZWUtNTU1Ni00MmI0LThi
OGQtNjNkYmZhZjRmMGVkLzZlMzc5ZGVlLTU1NTYtNDJiNC04YjhkLTYzZGJmYWY0
ZjBlZC5jcmwwHwYDVR0jBBgwFoAU6ZuIwn9yDKts61oS7GF5pd5ThCIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTM3OWRlZS01NTU2LTQyYjQtOGI4ZC02M2Ri
ZmFmNGYwZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMVZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItWhAzPsumtzaHeQicB3SUdxu0hLYxQaboPdUMpl45o1IgyeLc2r7R4
WwzKlfN8tVWyuIeD5qfVOoxZsXXZwWMDbDzyCgbYXpP/GUhcFkQc8J+sMHF2nU7U
lbQMLW/lOM7qcmH13HN4WrUs255m2fwd0f2qjxkJItWT4kk21bnvhmBKsp9kXGXY
CycrqIBgZN2BCdV8A88OAgIWLVwQIwczSkp40EBGNBPHzl57hN1dhjBGKFyh3/iO
rGCxllUbwZxeO/ky+zS9a2LnhhiK+J+8YuZeVT551l/4VNHDfNlkr+s30aTUFf1D
hoYCMoknjKEzlQ/CCjJAyvbSTOmsNFY=
-----END CERTIFICATE-----
Generated at Sun May 5 15:31:41 2024 by rpki-client on console-fra.rpki-client.org