Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa
File:                     2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa (raw, json)
Hash identifier:          9kD0qZfHPnmMcSyJu8DfYHg+itEsAMilz7xy42AlapM=
Subject key identifier:   16:4A:39:2F:C1:DC:03:BE:C1:93:45:AC:4D:6B:21:F6:5E:BD:D5:59
Certificate issuer:       /CN=8cf8807c-494e-41ab-842c-c0672d6283b1
Certificate serial:       010D0C9F432858457A488EA0E1D85B2A4C88F480
Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     22251
IP address blocks:        208.68.27.0/24 maxlen: 24
                          208.68.26.0/24 maxlen: 24
                          208.68.24.0/24 maxlen: 24
                          208.68.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8e:a0:e1:d8:5b:2a:4c:88:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=c2d108e7-9e39-49de-9c7c-06b44d61c1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:bf:76:29:e9:0f:79:53:83:77:f1:ea:ed:
                    66:d5:40:95:d7:5f:65:c9:34:29:8e:0b:21:20:e8:
                    f4:3a:2b:ea:7f:f9:85:c0:78:a6:39:ea:e1:36:ee:
                    82:28:a3:16:dc:3c:01:4c:e1:48:ae:cf:7c:06:d4:
                    61:35:c5:97:fd:ff:ec:d9:23:cc:76:8a:5e:91:b3:
                    e3:5f:a6:cb:d9:8c:a9:b0:13:0b:77:fa:a3:1f:eb:
                    55:64:1a:98:07:a2:47:74:43:8a:5e:dc:a7:fd:0c:
                    91:40:91:de:17:9e:26:be:aa:65:4f:60:65:c9:82:
                    d1:ea:44:7e:1f:a6:f7:80:50:02:9b:8d:b9:0d:fe:
                    15:4b:14:38:ce:02:d5:6a:8e:4a:e9:df:c1:73:5b:
                    ea:e9:a7:fb:97:cd:1b:8b:d8:ad:50:50:ec:6d:bb:
                    fe:bd:16:44:c9:61:5c:7a:13:98:2e:7e:7f:b4:21:
                    70:d1:4a:76:1d:90:f3:2d:df:36:ee:56:6a:cb:fd:
                    4b:0b:eb:9c:46:f3:11:aa:d8:44:6e:b4:aa:d4:66:
                    fd:c1:54:6e:d1:8e:5c:65:03:f0:70:a5:31:c6:89:
                    ce:70:3a:24:2b:4e:fb:a4:6d:24:38:e9:3a:7e:3a:
                    81:b3:b1:ed:ba:f9:54:c6:1d:2b:37:e6:6e:1b:3b:
                    08:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4A:39:2F:C1:DC:03:BE:C1:93:45:AC:4D:6B:21:F6:5E:BD:D5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl

            X509v3 Authority Key Identifier:
                keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:e8:5d:45:ba:17:36:af:65:78:33:f8:1e:23:b3:1e:09:
         e7:94:54:be:83:29:8a:1e:88:a8:cc:05:4e:0c:bf:c7:56:b9:
         35:da:ca:f7:32:55:0d:68:ac:75:db:f3:ac:64:6a:c4:2d:92:
         ea:b9:7a:75:7c:4c:4f:ca:4c:80:c7:75:eb:7b:ff:ff:49:ba:
         0b:1d:98:c5:e2:90:df:3c:c2:60:10:46:47:3a:13:01:f3:3a:
         3c:4a:c2:03:eb:05:3d:a2:6d:50:f0:17:70:11:55:53:ef:6f:
         94:42:7b:38:b7:56:2d:ef:2b:77:54:18:95:82:27:1c:05:98:
         d2:39:7e:69:5d:8c:db:da:49:47:b4:19:49:40:b0:92:6d:34:
         89:bc:c0:be:f9:57:b2:9f:eb:c7:e1:4f:f8:7b:1a:3f:d0:da:
         9d:0d:a9:7e:0b:e8:3e:0b:50:33:c3:31:3a:8a:31:22:69:e0:
         f3:a5:d5:03:80:73:e2:c4:f5:da:89:6b:4d:dc:43:a8:2d:fa:
         fe:76:2b:44:ea:92:3a:37:68:ff:d0:c1:3b:1a:5f:91:95:95:
         01:24:39:ec:b3:0a:9f:93:3a:e9:96:ee:a0:ca:dc:cf:c4:35:
         ee:1b:03:91:9f:67:d1:6b:ed:34:57:32:b8:27:4f:fd:55:5a:
         76:9d:15:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV6SI6g4dhbKkyI9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4
M2IxMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
YzJkMTA4ZTctOWUzOS00OWRlLTljN2MtMDZiNDRkNjFjMWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWO/dinpD3lTg3fx6u1m1UCV119lyTQpjgsh
IOj0Oivqf/mFwHimOerhNu6CKKMW3DwBTOFIrs98BtRhNcWX/f/s2SPMdopekbPj
X6bL2YypsBMLd/qjH+tVZBqYB6JHdEOKXtyn/QyRQJHeF54mvqplT2BlyYLR6kR+
H6b3gFACm425Df4VSxQ4zgLVao5K6d/Bc1vq6af7l80bi9itUFDsbbv+vRZEyWFc
ehOYLn5/tCFw0Up2HZDzLd827lZqy/1LC+ucRvMRqthEbrSq1Gb9wVRu0Y5cZQPw
cKUxxonOcDokK077pG0kOOk6fjqBs7HtuvlUxh0rN+ZuGzsIaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBZKOS/B3AO+wZNFrE1rIfZevdVZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4
ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvMmIxZjYzZGMtZDBmMS0z
YzE3LWJkZDctZTA3ZDc4ZDliNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0
MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy
ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3
MmQ2MjgzYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABjg6F1Fuhc2r2V4M/geI7MeCeeUVL6DKYoeiKjMBU4Mv8dWuTXayvcy
VQ1orHXb86xkasQtkuq5enV8TE/KTIDHdet7//9JugsdmMXikN88wmAQRkc6EwHz
OjxKwgPrBT2ibVDwF3ARVVPvb5RCezi3Vi3vK3dUGJWCJxwFmNI5fmldjNvaSUe0
GUlAsJJtNIm8wL75V7Kf68fhT/h7Gj/Q2p0NqX4L6D4LUDPDMTqKMSJp4POl1QOA
c+LE9dqJa03cQ6gt+v52K0Tqkjo3aP/QwTsaX5GVlQEkOeyzCp+TOumW7qDK3M/E
Ne4bA5GfZ9Fr7TRXMrgnT/1VWnadFVc=
-----END CERTIFICATE-----
Generated at Wed May 15 17:50:33 2024 by rpki-client on console-fra.rpki-client.org