Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa
File:                     c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa (raw, json)
Hash identifier:          Csl7QcK7VJGKgYchKxJEJolfV+LQ0AO+sbcMYu4Ah1o=
Subject key identifier:   80:D6:E7:99:81:0E:3C:2F:AA:80:D7:2C:78:9F:68:09:01:47:7B:8F
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F43285845DBFE642157BCDB09F53332C0
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        216.250.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:64:21:57:bc:db:09:f5:33:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=34da7b46-e221-4c0b-a5c6-6fb2e26fa5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:ff:77:fb:5f:3e:1a:dc:72:d4:d9:fc:ae:
                    fc:44:55:df:d1:a6:bc:86:7c:08:e0:33:06:e8:c8:
                    7c:50:82:11:52:62:92:9d:20:ec:63:a0:14:64:55:
                    07:0c:a8:ed:d6:e1:63:e8:e8:ee:2b:8d:e2:44:11:
                    5e:ef:1b:6e:f3:6b:4d:c3:f3:fa:6a:57:e2:66:26:
                    f9:5e:dd:a1:0c:25:2f:c2:1b:c8:84:00:98:0d:49:
                    89:d7:ff:b6:be:57:31:8a:e9:e4:35:a3:17:1c:0a:
                    4c:92:82:2e:e0:01:ab:06:9a:19:dd:d3:6f:33:0e:
                    eb:b8:2b:62:8f:0c:b8:d9:4b:26:5e:8c:83:cb:43:
                    4b:c7:68:bd:6e:32:cb:7d:c4:46:68:62:46:88:8d:
                    10:68:8e:dc:e1:08:d8:40:70:a3:ad:6d:28:c1:3f:
                    e3:5c:c2:56:20:84:f5:15:93:b3:a5:63:a5:56:74:
                    b1:3c:a2:df:98:4a:17:7a:44:a2:0e:2c:2d:0b:2f:
                    6c:28:7b:ec:ff:b8:fd:db:d9:1d:55:cf:60:79:02:
                    bb:7f:0a:3a:27:f9:21:7d:6b:03:b9:4c:0f:51:b6:
                    e3:c7:8b:cd:c8:ae:97:e6:65:87:13:cc:6d:b5:53:
                    c2:bb:56:63:65:2f:2e:e8:43:f7:e3:49:c9:fa:10:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D6:E7:99:81:0E:3C:2F:AA:80:D7:2C:78:9F:68:09:01:47:7B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/c691cfa1-fff7-31ab-81e0-49c485b3b87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:11:1c:d6:1d:66:f5:70:3c:04:08:19:5b:9a:b4:54:4b:50:
         46:45:17:4c:15:9a:cc:2a:c8:81:9f:d7:64:d9:66:12:03:ae:
         1a:c8:76:12:1a:1a:5f:b9:0b:30:de:b4:b2:53:bf:72:4f:0a:
         a7:b2:4b:6c:8c:b2:15:ad:2e:27:fc:9a:92:1c:a5:7f:60:cc:
         0e:cc:7f:2b:05:45:94:7b:66:bb:cf:41:5e:05:43:76:7f:24:
         0f:b3:2e:2e:02:e3:87:ed:51:5d:9c:4f:ae:d2:e1:71:d0:ff:
         38:62:0c:58:32:c4:ab:7a:e0:15:e8:22:53:3d:6b:2a:70:21:
         c0:cf:12:5e:5a:18:d8:a3:f0:fc:65:ac:0c:8e:9d:cd:60:da:
         88:50:f3:dd:d9:1f:a3:53:72:0d:7d:92:77:5b:bc:af:67:2c:
         8d:22:31:8f:28:aa:12:1c:19:2d:00:b4:fd:24:2a:43:31:33:
         f0:f6:37:0a:85:5b:92:d3:ec:2b:77:49:f7:db:5f:d5:33:2b:
         63:4c:f2:19:07:b3:33:25:62:a4:31:b6:f3:35:25:33:fc:c2:
         de:d9:e3:a4:bf:79:8d:d7:aa:ea:37:2d:c3:8a:df:0d:4c:fb:
         2e:e2:98:42:c7:17:42:5a:de:91:90:fe:c6:b6:7d:91:4d:0d:
         c1:fd:97:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb/mQhV7zbCfUzMsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVlNTJiMGQtYjE1Yy00YjljLWFhM2EtM2Q0YTRkMzZh
ZDIxMB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk
MzRkYTdiNDYtZTIyMS00YzBiLWE1YzYtNmZiMmUyNmZhNWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzL/d/tfPhrcctTZ/K78RFXf0aa8hnwI4DMG
6Mh8UIIRUmKSnSDsY6AUZFUHDKjt1uFj6OjuK43iRBFe7xtu82tNw/P6alfiZib5
Xt2hDCUvwhvIhACYDUmJ1/+2vlcxiunkNaMXHApMkoIu4AGrBpoZ3dNvMw7ruCti
jwy42UsmXoyDy0NLx2i9bjLLfcRGaGJGiI0QaI7c4QjYQHCjrW0owT/jXMJWIIT1
FZOzpWOlVnSxPKLfmEoXekSiDiwtCy9sKHvs/7j929kdVc9geQK7fwo6J/khfWsD
uUwPUbbjx4vNyK6X5mWHE8xttVPCu1ZjZS8u6EP340nJ+hCXTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDW55mBDjwvqoDXLHifaAkBR3uPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1
MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQzNmFkMjEvYzY5MWNmYTEtZmZmNy0z
MWFiLTgxZTAtNDljNDg1YjNiODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGVlNTJiMGQtYjE1Yy00YjljLWFh
M2EtM2Q0YTRkMzZhZDIxLzhlZTUyYjBkLWIxNWMtNGI5Yy1hYTNhLTNkNGE0ZDM2
YWQyMS5jcmwwHwYDVR0jBBgwFoAU4HQ5KtuU5tQjNF2pYbsPKOSydtgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRh
NGQzNmFkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMRHNYdZvVwPAQIGVuatFRLUEZFF0wVmswqyIGf12TZZhIDrhrIdhIa
Gl+5CzDetLJTv3JPCqeyS2yMshWtLif8mpIcpX9gzA7MfysFRZR7ZrvPQV4FQ3Z/
JA+zLi4C44ftUV2cT67S4XHQ/zhiDFgyxKt64BXoIlM9aypwIcDPEl5aGNij8Pxl
rAyOnc1g2ohQ893ZH6NTcg19kndbvK9nLI0iMY8oqhIcGS0AtP0kKkMxM/D2NwqF
W5LT7Ct3SffbX9UzK2NM8hkHszMlYqQxtvM1JTP8wt7Z46S/eY3Xquo3LcOK3w1M
+y7imELHF0Ja3pGQ/sa2fZFNDcH9l7Q=
-----END CERTIFICATE-----
Generated at Sun Jun 2 20:01:40 2024 by rpki-client on console-fra.rpki-client.org