Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/94f98b1f-5228-3388-9822-6ef85db08a21.roa
File:                     94f98b1f-5228-3388-9822-6ef85db08a21.roa (raw, json)
Hash identifier:          cdD3e9ATjNq5LGp3rvoA/SGZreyDAWrJD0pTYm7pP3s=
Subject key identifier:   87:4A:67:CF:2D:4B:A0:1B:45:7A:8A:BD:18:66:6D:31:84:AE:A3:6B
Certificate issuer:       /CN=4190a890-d7ce-4ea4-a558-53090be01bab
Certificate serial:       010D0C9F4328584598FE0478E1DADE25C0001935
Authority key identifier: AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/94f98b1f-5228-3388-9822-6ef85db08a21.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     15967
IP address blocks:        185.248.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fe:04:78:e1:da:de:25:c0:00:19:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4190a890-d7ce-4ea4-a558-53090be01bab
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=d9a3ab8f-a564-4d63-af42-215ed3461090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:5a:54:de:62:4e:f8:ee:89:14:35:92:66:
                    42:59:c4:a1:3e:c4:ab:80:1b:8f:e4:2b:98:ac:a2:
                    6d:60:e1:ae:be:7f:35:7f:19:29:e0:7e:79:89:42:
                    79:ff:3c:be:af:17:12:ff:d3:fc:28:6d:01:f5:fb:
                    8a:ad:d6:f5:04:93:27:7f:10:6a:f3:a7:d9:5a:8b:
                    63:10:7d:c2:2f:ef:40:74:fe:53:4b:d5:81:2a:aa:
                    97:03:25:80:d4:34:d2:fa:68:68:69:e0:d4:ba:00:
                    94:58:69:db:a8:02:04:8f:b0:05:b8:1b:21:3a:4f:
                    51:37:8e:cc:68:4a:24:bf:b5:ed:1a:48:58:ca:65:
                    68:05:08:49:42:15:0d:3d:37:db:4c:fe:51:a4:3f:
                    e9:0e:d7:0c:f2:4b:fc:e2:ab:ec:d1:7c:f9:0f:d6:
                    d7:3c:3b:6c:97:c3:1e:af:0f:a5:0a:8e:24:c1:29:
                    c2:a1:54:6a:fb:59:df:4b:72:69:49:b4:95:c8:86:
                    4c:a0:d4:d4:73:fd:76:12:86:10:ff:41:d3:c8:84:
                    04:f8:cb:0a:08:26:c6:04:03:00:32:13:60:ca:f0:
                    73:9f:86:21:f7:ef:92:48:cf:46:25:90:a1:28:45:
                    41:28:61:c4:50:fe:d6:8a:80:e5:c2:20:95:37:95:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:67:CF:2D:4B:A0:1B:45:7A:8A:BD:18:66:6D:31:84:AE:A3:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/94f98b1f-5228-3388-9822-6ef85db08a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.crl

            X509v3 Authority Key Identifier:
                keyid:AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a9:15:d0:d7:3b:be:00:33:35:af:4e:50:9e:71:19:c1:ad:
         43:23:a4:35:ae:97:f6:f2:28:27:6d:9c:07:4b:ee:58:24:20:
         3b:80:2d:9f:25:54:1f:ce:55:93:2b:ad:ed:24:11:39:c1:c9:
         a1:b7:1c:57:a9:66:61:27:74:a2:39:9a:19:c2:94:6b:44:32:
         fa:3e:f9:c5:21:ce:1d:3d:78:63:ef:cf:68:61:97:02:a2:b3:
         7e:ef:2f:50:d4:c3:f7:d1:8b:3b:80:f7:9d:e4:0a:f5:de:09:
         e1:d7:ed:6b:5e:0a:98:ed:e9:6c:18:a7:5f:b2:48:5c:a2:92:
         b7:7a:49:a6:2e:69:87:53:ee:59:8f:a0:2c:e5:75:fc:f7:d9:
         64:46:4e:85:8a:4a:35:7f:b6:86:86:54:22:34:e5:9f:77:e7:
         0f:45:e0:37:96:0d:b9:38:7b:70:7d:19:e4:fa:1a:84:73:10:
         ff:b4:64:f3:b6:f5:61:6a:1f:08:37:ac:27:40:75:38:99:20:
         7e:38:a9:61:b3:29:76:e9:00:62:19:b9:33:6f:95:ae:60:c4:
         c8:7c:d1:82:ce:ba:04:a5:f2:8a:73:64:eb:b6:d2:dc:53:2d:
         cc:2a:a5:d6:d7:cc:5c:61:dd:db:6f:ab:5a:0d:34:e0:ab:ba:
         9e:fc:cf:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWY/gR44dreJcAAGTUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE5MGE4OTAtZDdjZS00ZWE0LWE1NTgtNTMwOTBiZTAx
YmFiMB4XDTI0MDQxOTEzMDAzNloXDTI0MDcxODEzMDAzNlowLzEtMCsGA1UEAxMk
ZDlhM2FiOGYtYTU2NC00ZDYzLWFmNDItMjE1ZWQzNDYxMDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWZaVN5iTvjuiRQ1kmZCWcShPsSrgBuP5CuY
rKJtYOGuvn81fxkp4H55iUJ5/zy+rxcS/9P8KG0B9fuKrdb1BJMnfxBq86fZWotj
EH3CL+9AdP5TS9WBKqqXAyWA1DTS+mhoaeDUugCUWGnbqAIEj7AFuBshOk9RN47M
aEokv7XtGkhYymVoBQhJQhUNPTfbTP5RpD/pDtcM8kv84qvs0Xz5D9bXPDtsl8Me
rw+lCo4kwSnCoVRq+1nfS3JpSbSVyIZMoNTUc/12EoYQ/0HTyIQE+MsKCCbGBAMA
MhNgyvBzn4Yh9++SSM9GJZChKEVBKGHEUP7WioDlwiCVN5WW3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIdKZ88tS6AbRXqKvRhmbTGErqNrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MTkw
YTg5MC1kN2NlLTRlYTQtYTU1OC01MzA5MGJlMDFiYWIvOTRmOThiMWYtNTIyOC0z
Mzg4LTk4MjItNmVmODVkYjA4YTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDE5MGE4OTAtZDdjZS00ZWE0LWE1
NTgtNTMwOTBiZTAxYmFiLzQxOTBhODkwLWQ3Y2UtNGVhNC1hNTU4LTUzMDkwYmUw
MWJhYi5jcmwwHwYDVR0jBBgwFoAUqqiYuKebRtSbTh2iWwPItLEh4KswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MTkwYTg5MC1kN2NlLTRlYTQtYTU1OC01MzA5
MGJlMDFiYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufjUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSpFdDXO74AMzWvTlCecRnBrUMjpDWul/byKCdtnAdL7lgkIDuALZ8l
VB/OVZMrre0kETnByaG3HFepZmEndKI5mhnClGtEMvo++cUhzh09eGPvz2hhlwKi
s37vL1DUw/fRizuA953kCvXeCeHX7WteCpjt6WwYp1+ySFyikrd6SaYuaYdT7lmP
oCzldfz32WRGToWKSjV/toaGVCI05Z935w9F4DeWDbk4e3B9GeT6GoRzEP+0ZPO2
9WFqHwg3rCdAdTiZIH44qWGzKXbpAGIZuTNvla5gxMh80YLOugSl8opzZOu20txT
LcwqpdbXzFxh3dtvq1oNNOCrup78z+Q=
-----END CERTIFICATE-----
Generated at Sun Jun 2 17:02:10 2024 by rpki-client on console-fra.rpki-client.org