Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa
File:                     b08fdd2d-93d3-3967-9389-1c862db30c2b.roa (raw, json)
Hash identifier:          935qko+HdgUaXap71SIDSfm3UZEyEA+sgRg0wPDWzl8=
Subject key identifier:   50:A6:0B:BA:16:8B:B4:E7:22:FD:A1:4D:87:DF:9B:02:4A:B1:78:41
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858455A2D81F959FF77D3E0475EC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     397422
IP address blocks:        199.91.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:81:f9:59:ff:77:d3:e0:47:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=b60688a8-7084-45af-8843-04765df6f148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:b8:ac:4c:44:44:b4:cf:1f:58:42:1c:b3:
                    d0:1c:49:f8:d4:b4:1c:ec:6b:e4:62:e3:2f:b5:f7:
                    7b:1c:85:bb:5a:ac:d8:95:30:7c:0f:06:9e:7c:b2:
                    2f:6e:15:0a:83:f0:b4:19:46:df:a4:39:83:91:15:
                    b7:15:99:9e:46:07:6e:4a:15:5a:88:7c:d2:ba:ad:
                    c0:3d:53:d9:b5:12:a5:74:36:49:07:ef:0f:d2:5d:
                    98:fc:71:d3:13:de:ef:2f:9a:85:52:48:13:e2:6b:
                    cc:db:67:3a:a8:75:38:77:54:f0:d3:e8:33:f7:98:
                    78:3c:bc:33:55:33:93:2e:1c:9d:13:74:ce:23:f4:
                    b3:3d:be:43:50:15:35:99:41:3a:c7:46:e0:4c:ee:
                    ab:0e:97:02:af:5c:be:cf:11:57:03:fe:03:cb:24:
                    52:c6:02:ca:41:54:b5:4f:30:ca:82:c6:76:61:9d:
                    62:f0:55:45:8f:8e:78:b3:94:8f:fd:a7:cf:ab:85:
                    32:f3:ed:4c:0e:50:fe:96:15:fb:7e:d7:55:70:dd:
                    82:46:07:c2:f2:fe:6e:0c:ef:1c:ae:05:0c:26:71:
                    0b:ea:57:9c:91:47:5f:6f:4b:95:a3:7f:39:d2:9e:
                    84:7b:50:fe:1e:2b:c1:bc:41:33:5e:63:8b:00:3c:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A6:0B:BA:16:8B:B4:E7:22:FD:A1:4D:87:DF:9B:02:4A:B1:78:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b08fdd2d-93d3-3967-9389-1c862db30c2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:3d:5d:df:c2:cb:2a:4d:a6:24:c4:66:03:2a:50:7a:68:a3:
         1a:f8:d0:31:cc:8f:43:0c:71:eb:1d:bd:70:1c:2a:63:2b:59:
         1d:70:50:37:0d:6d:b3:b9:41:67:a3:70:3b:4c:98:00:70:6f:
         5d:dd:6d:6f:24:e1:07:db:cb:44:50:04:ea:d6:80:d1:c6:d4:
         47:87:f1:52:0c:4d:9b:53:99:34:05:a6:7d:a1:eb:7a:e6:96:
         d3:d2:fe:92:4d:c6:2c:e8:f8:e4:29:c0:f9:3f:d1:35:cd:6c:
         1c:f0:e0:20:54:d5:cc:82:e7:a7:b2:31:87:7d:66:b6:e0:32:
         b3:7d:1c:72:5a:3c:9d:ae:bb:cb:c4:00:47:c7:b4:ce:cb:d0:
         3c:91:ed:0b:44:2e:0d:0a:4b:ca:c1:b3:8d:2a:d9:f9:d9:18:
         f0:eb:72:b9:a0:e7:db:be:00:93:1e:6e:c8:f6:6e:c3:2d:a8:
         0d:ce:1e:b2:b5:b3:86:53:49:40:61:bd:e1:f2:ed:69:38:b6:
         b1:25:e0:e3:30:4e:89:8a:0a:58:94:9f:e0:24:75:71:58:e3:
         86:73:c4:21:ce:09:9b:27:c7:a7:8e:75:de:80:7a:b7:10:00:
         98:ba:11:8a:0c:35:5d:86:3d:96:14:10:1c:36:d9:c7:3f:f5:
         d6:f5:23:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVaLYH5Wf930+BHXsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk
YjYwNjg4YTgtNzA4NC00NWFmLTg4NDMtMDQ3NjVkZjZmMTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RS4rExERLTPH1hCHLPQHEn41LQc7GvkYuMv
tfd7HIW7WqzYlTB8DwaefLIvbhUKg/C0GUbfpDmDkRW3FZmeRgduShVaiHzSuq3A
PVPZtRKldDZJB+8P0l2Y/HHTE97vL5qFUkgT4mvM22c6qHU4d1Tw0+gz95h4PLwz
VTOTLhydE3TOI/SzPb5DUBU1mUE6x0bgTO6rDpcCr1y+zxFXA/4DyyRSxgLKQVS1
TzDKgsZ2YZ1i8FVFj454s5SP/afPq4Uy8+1MDlD+lhX7ftdVcN2CRgfC8v5uDO8c
rgUMJnEL6leckUdfb0uVo3850p6Ee1D+HivBvEEzXmOLADzecQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCmC7oWi7TnIv2hTYffmwJKsXhBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYjA4ZmRkMmQtOTNkMy0z
OTY3LTkzODktMWM4NjJkYjMwYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEU9Xd/CyypNpiTEZgMqUHpooxr40DHMj0MMcesdvXAcKmMrWR1wUDcN
bbO5QWejcDtMmABwb13dbW8k4Qfby0RQBOrWgNHG1EeH8VIMTZtTmTQFpn2h63rm
ltPS/pJNxizo+OQpwPk/0TXNbBzw4CBU1cyC56eyMYd9ZrbgMrN9HHJaPJ2uu8vE
AEfHtM7L0DyR7QtELg0KS8rBs40q2fnZGPDrcrmg59u+AJMebsj2bsMtqA3OHrK1
s4ZTSUBhveHy7Wk4trEl4OMwTomKCliUn+AkdXFY44ZzxCHOCZsnx6eOdd6AercQ
AJi6EYoMNV2GPZYUEBw22cc/9db1I3I=
-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:20 2024 by rpki-client on console-fra.rpki-client.org