Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa
File:                     54777a52-8422-366b-87a2-b6e3af1ba3db.roa (raw, json)
Hash identifier:          DtK4laqRjNTpWw4g3/grnXFLeIuO6d5AIbrfOkLApVU=
Subject key identifier:   CF:E7:67:68:AE:71:81:FA:0E:C7:DB:33:E7:8D:9A:3F:39:22:BF:00
Certificate issuer:       /CN=f8920ef3-7d53-43c3-8266-318adf8495b4
Certificate serial:       010D0C9F43285845410D5107D81106B345420240
Authority key identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa
Signing time:             Tue 19 Mar 2024 01:00:24 +0000
ROA not before:           Tue 19 Mar 2024 01:00:24 +0000
ROA not after:            Mon 17 Jun 2024 01:00:24 +0000
asID:                     8100
IP address blocks:        199.7.211.0/24 maxlen: 24
                          199.7.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:41:0d:51:07:d8:11:06:b3:45:42:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8920ef3-7d53-43c3-8266-318adf8495b4
        Validity
            Not Before: Mar 19 01:00:24 2024 GMT
            Not After : Jun 17 01:00:24 2024 GMT
        Subject: CN=f734e2bb-0812-43fa-9a3a-0e0b54cd1b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0e:87:bd:18:90:e4:48:34:d7:32:f3:f5:71:
                    63:c5:63:77:35:77:af:1f:d7:c3:26:bd:f1:14:11:
                    fa:6d:69:57:13:72:22:a5:9b:f1:fc:71:88:42:2c:
                    bc:64:1e:04:11:5e:d6:35:a7:f6:0b:e7:66:de:53:
                    93:6e:93:f8:86:18:c5:70:68:fa:db:fa:1a:8b:18:
                    45:c1:98:60:c4:0b:cd:76:16:6a:cb:86:56:08:34:
                    4d:a4:47:f4:7a:53:d2:94:a3:da:1a:c0:6b:a5:f4:
                    ca:05:e4:71:4f:b2:ec:54:77:01:a2:fe:a2:8f:18:
                    ac:34:41:84:e8:ce:26:9c:0f:63:95:db:06:24:25:
                    3d:0c:b6:c5:36:21:6f:69:60:bf:0c:5d:5f:06:e3:
                    d4:b5:7f:e2:24:ef:11:17:12:99:66:5e:27:94:61:
                    78:eb:dd:26:d0:21:96:0e:c6:d1:2c:69:ef:39:5b:
                    c4:e5:ba:20:83:8e:e8:ea:c0:82:2f:a3:5c:ef:a6:
                    97:5b:55:61:78:10:b4:82:3b:3d:63:18:62:7b:29:
                    e3:c9:9a:ac:79:ee:ea:1c:bf:20:ef:d9:a8:85:8b:
                    f8:70:0b:fd:ed:41:f7:1b:99:21:90:a9:fe:e7:7c:
                    de:db:04:2d:71:c9:da:a1:58:57:36:13:94:db:7e:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E7:67:68:AE:71:81:FA:0E:C7:DB:33:E7:8D:9A:3F:39:22:BF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl

            X509v3 Authority Key Identifier:
                keyid:E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:83:9b:5c:73:1e:32:db:76:ce:32:2e:af:ea:61:e9:26:c8:
         7d:59:83:8f:d3:a2:54:f6:73:51:51:fd:94:40:c3:f7:b0:33:
         6f:b9:4a:f9:1c:96:c4:5b:f5:37:ea:47:6f:81:ad:8e:46:f0:
         57:2d:5b:28:0f:cd:53:d2:bb:4c:9b:08:ed:04:45:9f:58:76:
         e5:99:ce:bb:43:1e:87:8a:84:f3:73:ba:43:c4:09:49:e2:bd:
         09:d5:1c:10:b0:99:68:2b:77:b3:f2:b8:ce:97:43:f8:c8:f1:
         bb:5b:4f:77:cf:91:6d:8a:d2:d8:0a:4a:3c:bc:1e:a9:1e:a3:
         4a:2b:2a:41:d5:79:db:fa:a1:7b:12:36:98:78:2e:ff:ed:80:
         0c:37:2f:63:59:d1:db:08:36:eb:7b:37:b2:af:f1:62:76:14:
         59:3d:1f:ec:71:3e:dc:4f:3d:3d:34:9e:c3:f3:7e:f3:44:de:
         af:8a:e1:da:83:fd:42:0a:64:2e:e0:1f:04:73:f9:b2:a3:04:
         e4:c2:28:55:bd:05:8a:07:8f:ff:db:7e:da:77:2c:36:ff:c4:
         3a:c8:87:ca:15:94:ab:cd:e8:32:d6:7b:12:01:80:21:4d:62:
         d3:ec:dc:05:37:9a:86:14:da:ac:97:45:3e:a5:c1:6e:aa:6a:
         5f:fa:ed:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVBDVEH2BEGs0VCAkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg5MjBlZjMtN2Q1My00M2MzLTgyNjYtMzE4YWRmODQ5
NWI0MB4XDTI0MDMxOTAxMDAyNFoXDTI0MDYxNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZjczNGUyYmItMDgxMi00M2ZhLTlhM2EtMGUwYjU0Y2QxYjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg6HvRiQ5Eg01zLz9XFjxWN3NXevH9fDJr3x
FBH6bWlXE3IipZvx/HGIQiy8ZB4EEV7WNaf2C+dm3lOTbpP4hhjFcGj62/oaixhF
wZhgxAvNdhZqy4ZWCDRNpEf0elPSlKPaGsBrpfTKBeRxT7LsVHcBov6ijxisNEGE
6M4mnA9jldsGJCU9DLbFNiFvaWC/DF1fBuPUtX/iJO8RFxKZZl4nlGF4690m0CGW
DsbRLGnvOVvE5bogg47o6sCCL6Nc76aXW1VheBC0gjs9YxhieynjyZqsee7qHL8g
79mohYv4cAv97UH3G5khkKn+53ze2wQtccnaoVhXNhOU234pFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/nZ2iucYH6DsfbM+eNmj85Ir8AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODky
MGVmMy03ZDUzLTQzYzMtODI2Ni0zMThhZGY4NDk1YjQvNTQ3NzdhNTItODQyMi0z
NjZiLTg3YTItYjZlM2FmMWJhM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjg5MjBlZjMtN2Q1My00M2MzLTgy
NjYtMzE4YWRmODQ5NWI0L2Y4OTIwZWYzLTdkNTMtNDNjMy04MjY2LTMxOGFkZjg0
OTViNC5jcmwwHwYDVR0jBBgwFoAU4JQSwIvtRPjdrKPeL8OJAmgg1PswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mODkyMGVmMy03ZDUzLTQzYzMtODI2Ni0zMThh
ZGY4NDk1YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxwfSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmDm1xzHjLbds4yLq/qYekmyH1Zg4/TolT2c1FR/ZRAw/ewM2+5Svkc
lsRb9TfqR2+BrY5G8FctWygPzVPSu0ybCO0ERZ9YduWZzrtDHoeKhPNzukPECUni
vQnVHBCwmWgrd7PyuM6XQ/jI8btbT3fPkW2K0tgKSjy8Hqkeo0orKkHVedv6oXsS
Nph4Lv/tgAw3L2NZ0dsINut7N7Kv8WJ2FFk9H+xxPtxPPT00nsPzfvNE3q+K4dqD
/UIKZC7gHwRz+bKjBOTCKFW9BYoHj//bftp3LDb/xDrIh8oVlKvN6DLWexIBgCFN
YtPs3AU3moYU2qyXRT6lwW6qal/67ec=
-----END CERTIFICATE-----
Generated at Thu May 2 15:00:12 2024 by rpki-client on console-ams.rpki-client.org