Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa
File:                     e95e7009-bba1-3d4c-907f-59184c496169.roa (raw, json)
Hash identifier:          IAzRUCALJIIcd1ZAuiMMkUutVDrXk+0E6I0ml1h/36o=
Subject key identifier:   82:9F:9B:05:73:A4:84:26:6A:28:A4:DF:EF:75:1E:BE:6D:DB:14:A0
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285845777DCA9FC0DF591D4290E580
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        143.244.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:ca:9f:c0:df:59:1d:42:90:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=94164fbf-79d0-41b8-8ee0-1c078239bb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:f7:07:9b:00:1b:31:6f:de:36:a0:25:25:
                    fc:bc:f5:b2:17:1b:58:dc:9e:0a:40:40:db:0b:63:
                    c8:b1:77:c5:f1:05:c3:bb:b7:ac:2c:8a:0f:eb:e8:
                    a7:f8:45:62:e4:83:34:4a:1b:54:21:cd:2a:0b:4a:
                    fd:d6:0a:13:d4:d6:10:34:17:d0:85:aa:35:81:f5:
                    7d:ff:45:42:94:7b:a1:4f:52:15:7b:e0:e4:cb:0e:
                    99:7a:e0:aa:59:39:51:41:9a:e8:51:fe:30:14:88:
                    04:e5:79:ad:88:bc:6b:27:cc:7c:a5:83:ff:68:2a:
                    f6:b4:81:3f:84:66:ee:fc:02:6d:16:48:5e:47:f6:
                    d3:11:44:43:cb:1c:42:ae:ce:e3:0b:6f:23:8c:1f:
                    8e:11:48:5a:2d:ca:6a:c5:6a:68:b4:74:47:3f:29:
                    d7:51:32:e6:77:7e:30:26:af:e4:fa:68:2b:80:ba:
                    8a:57:da:1c:62:2a:7f:ae:4c:14:b2:1a:9f:d5:37:
                    a8:27:08:64:36:47:3e:4d:1e:94:ef:b6:c1:c1:a8:
                    ec:3b:8e:9f:71:e5:f3:47:aa:31:64:7c:6a:d6:d2:
                    37:aa:6d:a4:eb:1a:0c:8f:b5:0c:5a:99:0f:ac:0c:
                    55:dc:4c:88:54:9e:f2:fb:b7:1c:8f:17:cf:8e:a0:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9F:9B:05:73:A4:84:26:6A:28:A4:DF:EF:75:1E:BE:6D:DB:14:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e95e7009-bba1-3d4c-907f-59184c496169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:34:13:a4:12:63:a8:2f:be:65:04:28:0c:b0:af:3e:09:
         1d:03:67:cd:a0:68:cc:cc:29:a8:97:58:15:3e:dd:6a:cb:a2:
         0e:5b:21:e1:c2:a5:87:73:f1:23:81:dc:14:b6:2a:ac:60:33:
         d4:5c:b0:c2:6b:d3:c0:86:d4:57:be:5d:16:c0:fb:44:0c:c2:
         69:53:16:7e:de:f0:79:4f:44:61:d0:49:50:a4:3b:16:13:cb:
         3e:de:64:20:27:59:8f:00:94:dd:22:f4:89:c6:07:9e:6f:7a:
         da:e3:6d:94:9d:6c:92:4a:0e:ed:aa:0b:7b:73:3f:a1:3f:a8:
         12:ec:10:fc:b9:a2:79:29:54:91:8a:93:38:7b:15:d1:c2:43:
         54:c7:b4:fb:c3:bd:66:6a:f4:43:44:31:32:d1:73:e2:df:bf:
         4c:41:a9:1a:91:66:c1:de:e2:d6:60:66:41:37:17:8e:47:e6:
         1c:05:52:ef:b1:23:ad:36:ad:12:5e:b6:27:be:36:1c:46:b4:
         df:63:8a:e6:d4:76:98:32:9c:cf:88:c8:71:71:c3:24:41:e3:
         83:8d:ac:aa:ad:53:9e:59:71:15:58:d4:31:fb:7a:6e:f0:c7:
         20:6e:44:f8:ec:99:a5:e2:df:ee:8f:b8:5e:89:d1:12:25:e8:
         bc:55:ff:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fcqfwN9ZHUKQ5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
OTQxNjRmYmYtNzlkMC00MWI4LThlZTAtMWMwNzgyMzliYjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6v3B5sAGzFv3jagJSX8vPWyFxtY3J4KQEDb
C2PIsXfF8QXDu7esLIoP6+in+EVi5IM0ShtUIc0qC0r91goT1NYQNBfQhao1gfV9
/0VClHuhT1IVe+Dkyw6ZeuCqWTlRQZroUf4wFIgE5XmtiLxrJ8x8pYP/aCr2tIE/
hGbu/AJtFkheR/bTEURDyxxCrs7jC28jjB+OEUhaLcpqxWpotHRHPynXUTLmd34w
Jq/k+mgrgLqKV9ocYip/rkwUshqf1TeoJwhkNkc+TR6U77bBwajsO46fceXzR6ox
ZHxq1tI3qm2k6xoMj7UMWpkPrAxV3EyIVJ7y+7ccjxfPjqAt4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKfmwVzpIQmaiik3+91Hr5t2xSgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZTk1ZTcwMDktYmJhMS0z
ZDRjLTkwN2YtNTkxODRjNDk2MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj/RQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXGNBOkEmOoL75lBCgMsK8+CR0DZ82gaMzMKaiXWBU+3WrLog5bIeHC
pYdz8SOB3BS2KqxgM9RcsMJr08CG1Fe+XRbA+0QMwmlTFn7e8HlPRGHQSVCkOxYT
yz7eZCAnWY8AlN0i9InGB55vetrjbZSdbJJKDu2qC3tzP6E/qBLsEPy5onkpVJGK
kzh7FdHCQ1THtPvDvWZq9ENEMTLRc+Lfv0xBqRqRZsHe4tZgZkE3F45H5hwFUu+x
I602rRJetie+NhxGtN9jiubUdpgynM+IyHFxwyRB44ONrKqtU55ZcRVY1DH7em7w
xyBuRPjsmaXi3+6PuF6J0RIl6LxV/2U=
-----END CERTIFICATE-----
Generated at Sun May 5 15:31:43 2024 by rpki-client on console-fra.rpki-client.org