Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/35a38427-81a5-3139-98de-73a36dba268f.roa
File:                     35a38427-81a5-3139-98de-73a36dba268f.roa (raw, json)
Hash identifier:          yg9IGkkjt/cFv2s0Y5jz1jlKX/LLIcelz6Y2EsBDDmI=
Subject key identifier:   77:41:8B:73:55:B4:61:A3:D8:DC:84:86:59:70:A3:B5:21:F5:0B:83
Certificate issuer:       /CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
Certificate serial:       010D0C9F43285845D503C516894854B1F8889000
Authority key identifier: 69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/35a38427-81a5-3139-98de-73a36dba268f.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     10466
IP address blocks:        216.27.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c5:16:89:48:54:b1:f8:88:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=8d2f7584-3fb7-4f8d-b95d-ed80d4874295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:05:f8:21:e1:17:49:1d:a9:b9:95:6f:50:
                    8f:d4:36:d3:b1:1f:15:65:ea:b9:27:44:f4:6a:1d:
                    68:fb:fe:35:87:66:93:28:a3:4e:db:07:b8:a3:ea:
                    7e:1a:76:bf:30:c1:db:28:76:30:2c:73:d2:00:c3:
                    ae:d7:8b:ee:df:75:a5:ba:fa:9e:dd:cf:e7:98:e2:
                    36:b4:12:87:88:1a:c3:8c:99:e2:15:be:5f:ee:61:
                    93:85:b0:79:fc:22:1c:c6:1a:58:64:3a:f8:f7:1a:
                    85:75:6e:fd:76:3f:69:6e:67:38:18:fd:3a:88:32:
                    a5:c8:d0:62:ea:b7:4b:8d:ae:ee:a3:e7:66:44:7f:
                    48:11:05:1d:ad:cb:99:df:c4:a8:53:fc:8e:13:f9:
                    f6:ee:20:2a:9e:97:d6:43:79:74:5e:dc:07:7e:fb:
                    48:68:e1:63:8a:86:21:1a:27:07:51:74:32:76:f6:
                    2e:c7:83:b3:8f:8c:b3:79:81:19:b0:19:06:9e:45:
                    62:f0:4e:65:05:1b:98:fe:49:e1:38:88:85:ae:2e:
                    8b:c7:35:2a:96:f8:1e:dd:e1:f0:18:fd:76:34:d4:
                    d6:aa:e2:ca:d4:9c:94:b1:fe:c4:bd:a5:b1:14:c4:
                    69:f0:da:46:5e:ae:24:d7:9c:b7:8b:1d:ba:c4:04:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:41:8B:73:55:B4:61:A3:D8:DC:84:86:59:70:A3:B5:21:F5:0B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/35a38427-81a5-3139-98de-73a36dba268f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl

            X509v3 Authority Key Identifier:
                keyid:69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.27.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:04:9e:df:c4:ab:b7:bc:10:0b:62:80:b1:b5:49:4e:f3:9c:
         a5:d3:71:19:2f:65:ad:3d:15:4e:80:77:1b:07:85:74:84:79:
         e5:e0:3c:ac:7e:65:00:e4:2e:c4:6a:66:73:70:5f:df:06:a3:
         e5:78:26:0b:a9:23:f4:68:79:0b:88:6a:92:7c:fa:ec:ba:1a:
         c5:f9:db:fb:30:ad:73:6e:f6:79:3b:37:88:cf:13:fc:34:83:
         03:bf:35:90:b2:a2:4d:fb:c3:f6:bc:90:77:82:90:0e:c7:5f:
         0d:31:8d:4b:e7:80:9c:84:61:18:fd:a4:1c:db:ea:5e:28:ce:
         bf:5b:c6:9a:3b:85:df:4c:cb:f7:b5:1c:3b:34:33:c4:c3:60:
         34:69:7b:37:88:b8:2e:d4:02:d8:ce:a8:71:e5:10:e8:35:f0:
         e8:9f:05:68:65:6b:eb:86:1b:3f:8e:f9:c0:c7:71:56:3b:2f:
         21:e0:fa:f7:82:3a:0f:34:ef:9d:8e:70:44:09:21:5a:d5:1f:
         f5:e4:8c:e1:b5:6e:94:f8:02:4a:05:a3:26:c7:58:b4:9f:42:
         15:01:05:d9:cd:13:f0:61:9f:93:cf:25:b3:d9:ff:7c:af:72:
         a9:1c:9c:d9:7f:fd:66:20:f2:04:2f:43:e9:7f:15:05:24:16:
         8e:1b:86:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA8UWiUhUsfiIkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2MDdkMjMtOGM5Mi00ZmZjLTljNTQtOTA0MThhNGM0
NTQ0MB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
OGQyZjc1ODQtM2ZiNy00ZjhkLWI5NWQtZWQ4MGQ0ODc0Mjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqoF+CHhF0kdqbmVb1CP1DbTsR8VZeq5J0T0
ah1o+/41h2aTKKNO2we4o+p+Gna/MMHbKHYwLHPSAMOu14vu33Wluvqe3c/nmOI2
tBKHiBrDjJniFb5f7mGThbB5/CIcxhpYZDr49xqFdW79dj9pbmc4GP06iDKlyNBi
6rdLja7uo+dmRH9IEQUdrcuZ38SoU/yOE/n27iAqnpfWQ3l0XtwHfvtIaOFjioYh
GicHUXQydvYux4Ozj4yzeYEZsBkGnkVi8E5lBRuY/knhOIiFri6LxzUqlvge3eHw
GP12NNTWquLK1JyUsf7EvaWxFMRp8NpGXq4k15y3ix26xATRzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdBi3NVtGGj2NyEhllwo7Uh9QuDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjYw
N2QyMy04YzkyLTRmZmMtOWM1NC05MDQxOGE0YzQ1NDQvMzVhMzg0MjctODFhNS0z
MTM5LTk4ZGUtNzNhMzZkYmEyNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2MDdkMjMtOGM5Mi00ZmZjLTlj
NTQtOTA0MThhNGM0NTQ0LzNmNjA3ZDIzLThjOTItNGZmYy05YzU0LTkwNDE4YTRj
NDU0NC5jcmwwHwYDVR0jBBgwFoAUaTjMka986+bkHCCBh/FqEpFiQPEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjYwN2QyMy04YzkyLTRmZmMtOWM1NC05MDQx
OGE0YzQ1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BtgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK4Ent/Eq7e8EAtigLG1SU7znKXTcRkvZa09FU6AdxsHhXSEeeXgPKx+
ZQDkLsRqZnNwX98Go+V4JgupI/RoeQuIapJ8+uy6GsX52/swrXNu9nk7N4jPE/w0
gwO/NZCyok37w/a8kHeCkA7HXw0xjUvngJyEYRj9pBzb6l4ozr9bxpo7hd9My/e1
HDs0M8TDYDRpezeIuC7UAtjOqHHlEOg18OifBWhla+uGGz+O+cDHcVY7LyHg+veC
Og80752OcEQJIVrVH/XkjOG1bpT4AkoFoybHWLSfQhUBBdnNE/Bhn5PPJbPZ/3yv
cqkcnNl//WYg8gQvQ+l/FQUkFo4bhvY=
-----END CERTIFICATE-----
Generated at Sat May 18 20:16:53 2024 by rpki-client on console-ams.rpki-client.org