Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa
File:                     cfe1da32-8410-369b-8311-ea32b3bd8657.roa (raw, json)
Hash identifier:          MxE9+kVMQjZL51pBCuM9P8lksxsNsn5kwBNkADzNnBE=
Subject key identifier:   34:86:DD:16:53:54:87:D1:F7:D1:D1:FE:CB:4F:54:4C:30:2A:EA:55
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F43285845EF89294E04F5D2BE3F086A40
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa
Signing time:             Mon 20 May 2024 13:00:35 +0000
ROA not before:           Mon 20 May 2024 13:00:35 +0000
ROA not after:            Sun 18 Aug 2024 13:00:35 +0000
asID:                     559
IP address blocks:        66.180.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ef:89:29:4e:04:f5:d2:be:3f:08:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: May 20 13:00:35 2024 GMT
            Not After : Aug 18 13:00:35 2024 GMT
        Subject: CN=d34b8e9a-a832-4e7d-a7ea-dc460aee3d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:d6:67:81:1e:8c:c6:27:fe:76:21:71:f0:
                    b3:22:d8:e2:87:db:9c:7d:d2:12:65:01:5a:be:14:
                    ec:db:b3:5d:f3:c8:8e:5e:8f:22:79:cf:3e:4a:3c:
                    4d:a5:49:cb:a1:5d:a9:e0:e8:b0:39:23:46:d1:f6:
                    bc:53:1d:04:29:40:ad:e4:9f:b0:7f:b0:41:a8:65:
                    0f:95:c2:f3:e1:1f:4f:c3:8c:28:85:a8:9c:14:c0:
                    95:0b:3a:be:aa:aa:9c:e0:83:50:ec:d9:b5:d4:d0:
                    c9:54:9f:e6:71:32:0e:d4:b6:48:ed:20:86:45:57:
                    c8:fa:18:d8:a5:0e:d9:d0:18:c7:38:99:9f:56:58:
                    d8:4d:62:1e:e2:83:03:64:d2:5c:f8:b4:bd:e8:b1:
                    8f:dc:57:28:df:4e:00:9a:d3:01:08:89:f2:1c:55:
                    ad:53:58:2f:08:ee:2a:0b:19:f0:6c:73:1e:f5:ee:
                    6c:ee:a0:2a:31:ee:08:78:b9:ce:5f:78:96:4e:49:
                    5f:2b:ad:fa:0d:fe:68:ee:ca:02:bb:40:2f:d4:f6:
                    9d:40:e5:86:c5:2c:0f:79:16:75:08:09:16:0d:c9:
                    67:03:88:8b:9d:82:44:d9:4d:47:76:45:b7:9d:4c:
                    98:c6:15:c6:21:82:1e:c4:b8:10:4c:fb:5f:4f:d5:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:86:DD:16:53:54:87:D1:F7:D1:D1:FE:CB:4F:54:4C:30:2A:EA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/cfe1da32-8410-369b-8311-ea32b3bd8657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:80:74:b4:87:62:a4:94:c7:32:4e:0c:e4:4b:95:3b:eb:b7:
         d7:5d:b0:5a:cd:40:f1:9b:78:f2:09:c3:ab:bf:d9:2b:05:25:
         2c:ad:75:cc:95:30:53:f1:42:a9:42:da:c5:47:3b:d9:47:52:
         ab:62:45:d1:6b:66:e2:f6:3c:91:e0:88:02:1a:5f:fc:3d:6f:
         ee:e7:15:9a:b4:7d:6a:22:22:ca:f2:d1:7f:0a:69:30:e4:4e:
         cc:49:72:91:c7:42:6f:61:4d:40:f5:3d:e8:2e:fd:3f:ff:45:
         ab:8f:29:d8:69:17:33:c5:bf:f5:81:5d:e2:d1:4d:c8:5d:5b:
         8a:e9:8e:ac:6f:85:4c:8c:83:78:9b:94:22:3f:97:26:52:74:
         2f:7e:2c:c1:27:13:20:9a:1b:7c:e3:12:d4:fc:0b:de:ca:f5:
         50:51:64:fe:77:2d:3d:48:5c:e7:b1:41:f9:79:bc:d9:80:f1:
         73:f1:28:30:3c:f4:da:85:ef:bc:72:c2:bd:9c:ce:b8:5e:f7:
         07:da:35:38:8f:f0:2d:a2:37:9c:70:8b:34:11:d6:a0:e7:29:
         4f:8c:2e:bf:b2:01:4e:09:12:3e:a0:da:35:3a:f3:d3:fb:43:
         78:48:a6:3b:da:79:1a:04:e2:0d:d2:ec:7b:ec:04:da:72:76:
         3c:8d:d4:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXviSlOBPXSvj8IakAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz
ZWNkMB4XDTI0MDUyMDEzMDAzNVoXDTI0MDgxODEzMDAzNVowLzEtMCsGA1UEAxMk
ZDM0YjhlOWEtYTgzMi00ZTdkLWE3ZWEtZGM0NjBhZWUzZDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxHWZ4EejMYn/nYhcfCzItjih9ucfdISZQFa
vhTs27Nd88iOXo8iec8+SjxNpUnLoV2p4OiwOSNG0fa8Ux0EKUCt5J+wf7BBqGUP
lcLz4R9Pw4wohaicFMCVCzq+qqqc4INQ7Nm11NDJVJ/mcTIO1LZI7SCGRVfI+hjY
pQ7Z0BjHOJmfVljYTWIe4oMDZNJc+LS96LGP3Fco304AmtMBCInyHFWtU1gvCO4q
CxnwbHMe9e5s7qAqMe4IeLnOX3iWTklfK636Df5o7soCu0Av1PadQOWGxSwPeRZ1
CAkWDclnA4iLnYJE2U1HdkW3nUyYxhXGIYIexLgQTPtfT9V67wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSG3RZTVIfR99HR/stPVEwwKupVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj
MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvY2ZlMWRhMzItODQxMC0z
NjliLTgzMTEtZWEzMmIzYmQ4NjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2
NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj
M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk
OGY4YzNlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrS+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSAdLSHYqSUxzJODORLlTvrt9ddsFrNQPGbePIJw6u/2SsFJSytdcyV
MFPxQqlC2sVHO9lHUqtiRdFrZuL2PJHgiAIaX/w9b+7nFZq0fWoiIsry0X8KaTDk
TsxJcpHHQm9hTUD1Pegu/T//RauPKdhpFzPFv/WBXeLRTchdW4rpjqxvhUyMg3ib
lCI/lyZSdC9+LMEnEyCaG3zjEtT8C97K9VBRZP53LT1IXOexQfl5vNmA8XPxKDA8
9NqF77xywr2czrhe9wfaNTiP8C2iN5xwizQR1qDnKU+MLr+yAU4JEj6g2jU689P7
Q3hIpjvaeRoE4g3S7HvsBNpydjyN1Cg=
-----END CERTIFICATE-----
Generated at Mon May 27 06:57:56 2024 by rpki-client on console-fra.rpki-client.org