Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/8cc7d26a-793d-3064-848e-1c2d02982b8b.roa
File:                     8cc7d26a-793d-3064-848e-1c2d02982b8b.roa (raw, json)
Hash identifier:          LnyuYBpcAPO4WqYm5AE8nlqmAAIfQfROgfRGaT2z7O0=
Subject key identifier:   E6:BD:34:FF:FD:A7:45:1E:29:A1:E4:F8:3A:AD:26:26:18:67:36:80
Certificate issuer:       /CN=d51877be-b85b-4cf7-ae49-18c7da88238f
Certificate serial:       010D0C9F43285845DCE3FD1BA86D7218F4892740
Authority key identifier: 76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/8cc7d26a-793d-3064-848e-1c2d02982b8b.roa
Signing time:             Mon 13 May 2024 20:43:17 +0000
ROA not before:           Mon 13 May 2024 20:43:17 +0000
ROA not after:            Sun 11 Aug 2024 20:43:17 +0000
asID:                     8360
IP address blocks:        205.167.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:e3:fd:1b:a8:6d:72:18:f4:89:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51877be-b85b-4cf7-ae49-18c7da88238f
        Validity
            Not Before: May 13 20:43:17 2024 GMT
            Not After : Aug 11 20:43:17 2024 GMT
        Subject: CN=2b7e18ad-4e57-4eaa-810e-00f6f3ff95b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2d:fa:08:34:0f:13:13:f9:81:11:b1:96:2d:
                    c7:43:1a:27:f6:cb:00:c3:da:77:f7:80:93:b4:19:
                    d9:bc:9e:39:10:3b:da:d8:26:04:a4:ed:be:50:b1:
                    57:bf:b0:0f:6c:b5:69:08:be:7b:a3:f2:4e:df:8f:
                    33:3e:6d:31:6b:68:40:19:9e:ef:1e:1e:93:74:f2:
                    50:03:39:b0:f5:c8:b5:37:4b:03:cb:a2:40:4b:56:
                    ff:50:bb:1e:8a:89:48:a7:c2:34:5f:2e:64:91:0d:
                    3e:b9:f0:a2:ed:f7:a7:26:dc:03:30:3c:d3:12:63:
                    84:c9:37:70:9e:04:1d:1e:2b:3a:15:12:6a:97:5b:
                    69:bc:3a:82:2a:e0:7e:e9:56:fd:e7:da:02:6f:c4:
                    f5:50:18:8f:5e:96:c0:ae:af:40:26:45:14:f4:52:
                    43:0d:5c:93:28:81:b3:4e:15:d4:c9:47:0d:23:9f:
                    ab:4c:a3:1e:ad:39:6d:cb:eb:a0:eb:a7:d9:ee:6c:
                    82:c1:56:bd:83:95:5e:c2:3f:9c:6e:7b:5f:30:2e:
                    9a:58:a0:40:bc:7d:32:ac:67:92:65:6d:7d:57:52:
                    d3:69:49:e7:87:02:0d:61:52:6d:af:a0:c9:7c:75:
                    31:5b:5e:c4:2c:cb:7d:11:23:84:32:c6:6c:d2:4c:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BD:34:FF:FD:A7:45:1E:29:A1:E4:F8:3A:AD:26:26:18:67:36:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/8cc7d26a-793d-3064-848e-1c2d02982b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.crl

            X509v3 Authority Key Identifier:
                keyid:76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.167.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:75:e7:e3:ae:7a:9d:8e:c4:f8:f0:79:32:f5:8e:20:29:
         20:17:8c:92:cf:65:f4:a7:d1:35:a4:bb:24:3d:8c:8d:de:29:
         45:c8:12:72:8b:23:99:61:f4:29:66:29:c5:30:4e:95:b5:37:
         a5:22:84:6d:fa:0c:65:2d:65:89:b5:37:2a:6d:03:2d:09:ad:
         3f:d9:b3:52:5b:15:39:a8:50:df:8c:2f:c9:01:ba:29:8f:dd:
         78:19:e0:1d:43:ca:25:64:3b:4c:03:c1:2d:f4:6a:65:8b:7f:
         a4:0e:5e:e6:70:a8:cb:82:06:f1:2c:e0:55:20:01:32:7f:50:
         5d:80:67:c4:68:97:88:10:f9:3d:45:0e:41:a9:f0:7e:03:05:
         f2:1b:b7:09:69:9c:82:fd:51:00:c6:f8:25:e7:15:a0:b1:09:
         77:51:32:b1:de:01:60:18:ae:aa:6f:3d:45:7c:c1:4c:b7:75:
         10:3c:b7:d0:38:96:45:2c:d4:10:ba:96:6d:6c:1b:1d:16:54:
         20:90:d2:8e:4e:74:23:6e:f8:9c:eb:04:3b:b5:83:7d:87:92:
         4b:11:4b:1a:64:10:9a:b0:bd:59:dc:c9:29:20:56:ab:65:3f:
         73:63:d5:f0:d2:be:65:84:f5:19:73:03:cc:e0:9a:a0:14:cc:
         6c:e7:1e:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXc4/0bqG1yGPSJJ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDUxODc3YmUtYjg1Yi00Y2Y3LWFlNDktMThjN2RhODgy
MzhmMB4XDTI0MDUxMzIwNDMxN1oXDTI0MDgxMTIwNDMxN1owLzEtMCsGA1UEAxMk
MmI3ZTE4YWQtNGU1Ny00ZWFhLTgxMGUtMDBmNmYzZmY5NWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC36CDQPExP5gRGxli3HQxon9ssAw9p394CT
tBnZvJ45EDva2CYEpO2+ULFXv7APbLVpCL57o/JO348zPm0xa2hAGZ7vHh6TdPJQ
Azmw9ci1N0sDy6JAS1b/ULseiolIp8I0Xy5kkQ0+ufCi7fenJtwDMDzTEmOEyTdw
ngQdHis6FRJql1tpvDqCKuB+6Vb959oCb8T1UBiPXpbArq9AJkUU9FJDDVyTKIGz
ThXUyUcNI5+rTKMerTlty+ug66fZ7myCwVa9g5Vewj+cbntfMC6aWKBAvH0yrGeS
ZW19V1LTaUnnhwINYVJtr6DJfHUxW17ELMt9ESOEMsZs0kxbQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOa9NP/9p0UeKaHk+DqtJiYYZzaAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNTE4
NzdiZS1iODViLTRjZjctYWU0OS0xOGM3ZGE4ODIzOGYvOGNjN2QyNmEtNzkzZC0z
MDY0LTg0OGUtMWMyZDAyOTgyYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDUxODc3YmUtYjg1Yi00Y2Y3LWFl
NDktMThjN2RhODgyMzhmL2Q1MTg3N2JlLWI4NWItNGNmNy1hZTQ5LTE4YzdkYTg4
MjM4Zi5jcmwwHwYDVR0jBBgwFoAUdvYfPPeVIfUqbCZ/OMEyPdR+PJcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kNTE4NzdiZS1iODViLTRjZjctYWU0OS0xOGM3
ZGE4ODIzOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzadHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXQdefjrnqdjsT48Hky9Y4gKSAXjJLPZfSn0TWkuyQ9jI3eKUXIEnKL
I5lh9ClmKcUwTpW1N6UihG36DGUtZYm1NyptAy0JrT/Zs1JbFTmoUN+ML8kBuimP
3XgZ4B1DyiVkO0wDwS30amWLf6QOXuZwqMuCBvEs4FUgATJ/UF2AZ8Rol4gQ+T1F
DkGp8H4DBfIbtwlpnIL9UQDG+CXnFaCxCXdRMrHeAWAYrqpvPUV8wUy3dRA8t9A4
lkUs1BC6lm1sGx0WVCCQ0o5OdCNu+JzrBDu1g32HkksRSxpkEJqwvVncySkgVqtl
P3Nj1fDSvmWE9RlzA8zgmqAUzGznHuw=
-----END CERTIFICATE-----
Generated at Thu Jun 27 21:55:08 2024 by rpki-client on console-ams.rpki-client.org