Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa
File:                     1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa (raw, json)
Hash identifier:          Dm5y2JoMXG1umdYPgDcBg/ZoYKfbp45OxByuP9FKb5c=
Subject key identifier:   C7:99:7F:AA:0B:4B:40:34:88:61:76:D5:CF:C7:C2:0A:80:6E:1E:4C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584535E29746E8626294FB074600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     852
IP address blocks:        199.84.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:97:46:e8:62:62:94:fb:07:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=4feaece9-a295-4b04-97c0-fe6c51cdcb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4b:d1:9a:0e:f3:c6:6f:c0:ce:aa:53:db:78:
                    cd:84:46:a6:ab:5b:af:78:b2:ab:19:d5:f7:b3:72:
                    3f:23:98:2a:38:f1:18:55:61:d2:08:95:91:2a:a2:
                    70:db:52:41:eb:20:a3:20:74:50:05:39:51:d2:aa:
                    fb:67:9f:57:b4:38:ef:67:60:ae:d3:85:0d:56:64:
                    44:04:ba:2e:a6:98:9f:dd:92:4d:8d:b9:2a:46:67:
                    dd:a8:54:79:9d:66:9b:86:5d:1a:db:d7:6b:fa:24:
                    6b:c2:7c:b8:d3:b2:af:ba:e7:11:45:0c:1a:14:b4:
                    d3:72:e4:17:95:ac:a6:1a:37:7c:73:12:15:28:01:
                    c8:4d:35:dd:99:a7:78:3f:04:f1:1a:ac:ff:29:06:
                    f8:e5:2a:22:58:7f:62:5d:14:d5:5c:64:49:24:43:
                    3b:fe:04:96:62:31:89:3e:b9:07:ff:8f:4c:08:df:
                    c3:f0:b2:1e:82:68:ed:c1:a7:24:6e:71:f9:3f:89:
                    dc:c1:c0:5a:82:8d:93:12:8e:25:d0:de:3b:d5:28:
                    73:c1:2c:0e:3f:ed:6b:f8:08:cc:f2:c1:fb:18:f9:
                    45:d8:bb:9a:2e:f5:c4:4c:19:45:27:cd:5f:4c:bf:
                    59:97:bc:ce:a2:57:f5:8b:ac:89:12:50:4a:0b:ae:
                    c8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:99:7F:AA:0B:4B:40:34:88:61:76:D5:CF:C7:C2:0A:80:6E:1E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1d5ccce0-3d9c-3565-8482-9f9e6d67c048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.84.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:65:07:f3:30:72:11:ec:dd:57:ec:da:b9:f4:9c:e9:8a:
         15:71:28:0f:bc:20:a1:37:9d:c5:8a:cf:a4:eb:18:88:e2:e0:
         d9:c2:2d:0a:28:2f:68:7c:4b:98:a4:7e:b4:c5:72:2d:b4:57:
         de:5c:88:78:53:c6:a5:a0:54:ce:fd:0a:1f:ac:3b:ee:b5:5d:
         02:51:33:79:76:92:ec:0f:9c:31:5b:ae:8a:80:77:e1:9a:c9:
         4a:63:3c:83:ea:6d:68:b0:10:42:6c:ac:45:93:44:d9:ac:3f:
         78:83:b5:05:bf:0b:81:56:32:7f:69:03:65:0e:2d:e7:0b:06:
         43:fb:91:77:c3:69:92:6e:c7:70:fe:4b:f6:df:65:2a:84:62:
         3c:a5:ca:6f:86:e1:99:92:a8:b0:53:bf:7b:ee:33:d6:c6:b6:
         3c:77:54:54:ff:09:29:00:04:3b:c7:c5:e9:71:32:6f:db:7c:
         8c:fb:72:ce:2f:c0:50:06:0f:fd:86:f0:e1:3d:5a:4d:a3:91:
         89:e3:55:98:d8:fb:80:0c:30:78:41:18:48:23:5f:0d:9c:a8:
         7d:71:0d:a5:a6:ca:7d:38:16:a0:08:01:8c:59:07:49:c9:41:
         f6:5f:32:59:cd:aa:93:27:0a:1c:55:be:47:a7:4b:23:3f:81:
         73:4c:d4:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU14pdG6GJilPsHRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNTAxMDAyNloXDTI0MDYxMzAxMDAyNlowLzEtMCsGA1UEAxMk
NGZlYWVjZTktYTI5NS00YjA0LTk3YzAtZmU2YzUxY2RjYjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUvRmg7zxm/AzqpT23jNhEamq1uveLKrGdX3
s3I/I5gqOPEYVWHSCJWRKqJw21JB6yCjIHRQBTlR0qr7Z59XtDjvZ2Cu04UNVmRE
BLouppif3ZJNjbkqRmfdqFR5nWabhl0a29dr+iRrwny407KvuucRRQwaFLTTcuQX
laymGjd8cxIVKAHITTXdmad4PwTxGqz/KQb45SoiWH9iXRTVXGRJJEM7/gSWYjGJ
PrkH/49MCN/D8LIegmjtwackbnH5P4ncwcBago2TEo4l0N471ShzwSwOP+1r+AjM
8sH7GPlF2LuaLvXETBlFJ81fTL9Zl7zOolf1i6yJElBKC67IvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMeZf6oLS0A0iGF21c/HwgqAbh5MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWQ1Y2NjZTAtM2Q5Yy0z
NTY1LTg0ODItOWY5ZTZkNjdjMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1TyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXCZQfzMHIR7N1X7Nq59JzpihVxKA+8IKE3ncWKz6TrGIji4NnCLQoo
L2h8S5ikfrTFci20V95ciHhTxqWgVM79Ch+sO+61XQJRM3l2kuwPnDFbroqAd+Ga
yUpjPIPqbWiwEEJsrEWTRNmsP3iDtQW/C4FWMn9pA2UOLecLBkP7kXfDaZJux3D+
S/bfZSqEYjylym+G4ZmSqLBTv3vuM9bGtjx3VFT/CSkABDvHxelxMm/bfIz7cs4v
wFAGD/2G8OE9Wk2jkYnjVZjY+4AMMHhBGEgjXw2cqH1xDaWmyn04FqAIAYxZB0nJ
QfZfMlnNqpMnChxVvkenSyM/gXNM1K0=
-----END CERTIFICATE-----
Generated at Sun May 19 01:55:02 2024 by rpki-client on console-fra.rpki-client.org