Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
File:                     93af5d7f-145a-3b75-9635-bd780078b94f.roa (raw, json)
Hash identifier:          PcIcvLAS5iDjgsjrJR/1Yd0u3jKaxm7A0fL10XwIOnI=
Subject key identifier:   15:9C:81:9E:DB:A5:11:E0:26:FB:16:AE:34:8F:62:EA:4E:20:87:6B
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F4328584563F2FD611A179A20E64168E0
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     25830
IP address blocks:        199.195.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f2:fd:61:1a:17:9a:20:e6:41:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=5bac7d7b-8e92-47bc-9a62-bde8d1bdf8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:1b:86:5d:95:48:fc:9d:e6:18:13:46:60:
                    52:39:68:ea:ac:15:f1:4a:a9:3f:9d:32:71:94:ec:
                    07:04:95:8b:f6:5d:b2:0f:a8:e3:fd:ef:6b:b3:78:
                    af:ff:a7:fd:17:7f:cc:37:aa:43:81:92:7e:3a:c3:
                    b3:fe:71:79:40:6b:e8:97:d4:17:bf:66:ea:30:ca:
                    9c:59:f6:6e:c6:a1:dc:69:0a:81:e2:72:71:02:92:
                    4e:3c:0a:df:96:ce:43:46:40:bf:98:f3:ef:b2:14:
                    e8:3e:6d:44:ae:47:ee:45:5a:3c:65:3d:53:85:35:
                    22:f7:55:44:39:93:5e:d3:64:a1:8a:71:ea:85:12:
                    b9:10:5e:67:03:ff:42:7d:dd:f1:34:c6:5a:fc:43:
                    59:3b:b8:ef:ef:2a:4f:8b:e5:ae:95:ad:b3:91:a1:
                    12:b3:ec:4c:98:a5:98:fb:d2:26:c1:d1:95:dd:85:
                    7a:bb:cb:e4:1f:76:cc:4e:e1:25:c4:a9:ad:82:19:
                    fe:a8:4d:6c:31:23:e7:a1:35:11:3d:4a:29:aa:8d:
                    97:c8:d5:3b:bc:99:49:ce:b3:36:a3:53:50:cf:f6:
                    f4:aa:88:4d:e5:9b:ba:1a:14:02:f8:08:5b:c7:a1:
                    6d:fc:6f:73:39:56:10:eb:16:91:ff:18:b5:f6:18:
                    30:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9C:81:9E:DB:A5:11:E0:26:FB:16:AE:34:8F:62:EA:4E:20:87:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/93af5d7f-145a-3b75-9635-bd780078b94f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:d4:97:f0:98:5a:df:cb:da:36:d1:ca:b6:01:f1:9a:ff:
         a8:5e:22:69:86:5b:90:0a:14:00:2b:d6:73:1f:24:1c:4a:8d:
         71:d2:0c:0c:5a:34:24:11:c9:99:2f:1d:2b:98:35:90:26:f3:
         bf:56:b9:17:49:ba:c4:0b:5b:28:6b:a3:d5:9b:69:6e:85:e0:
         94:5c:26:d5:69:b7:80:10:09:57:7e:ff:d7:c6:00:ee:b6:b0:
         03:be:af:c5:58:98:a3:49:d4:00:b4:36:37:65:78:a4:83:3d:
         67:0a:d8:07:e1:79:3b:e3:c7:1e:33:74:d4:5a:6c:20:b6:39:
         c6:49:8f:d2:84:06:76:0e:4d:dd:9f:40:f6:b8:f1:29:66:ae:
         ea:f9:c7:89:6b:d6:ff:6a:75:f2:24:ee:f3:82:9d:86:26:9e:
         a3:9f:72:cb:4e:a9:16:7e:ab:e7:9a:d5:38:a2:60:ee:2e:6a:
         3c:06:70:74:05:6b:ff:15:19:01:de:2c:42:0b:d1:ac:2f:b2:
         8f:5f:ce:e8:6e:f7:1f:31:d6:fb:b3:fc:ed:06:fb:d3:ee:fc:
         0d:34:18:10:09:3b:c3:99:dd:ab:a2:fa:28:9e:d1:9a:b9:cd:
         d3:61:44:2e:1b:e6:e9:c9:c4:cb:39:c5:fe:5f:cc:68:e6:fe:
         20:d3:b6:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8v1hGheaIOZBaOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRjY2QzYjMtZGRhNS00NTNmLWI1MGQtMGExZTllNGQ0
ZWY0MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk
NWJhYzdkN2ItOGU5Mi00N2JjLTlhNjItYmRlOGQxYmRmOGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rUbhl2VSPyd5hgTRmBSOWjqrBXxSqk/nTJx
lOwHBJWL9l2yD6jj/e9rs3iv/6f9F3/MN6pDgZJ+OsOz/nF5QGvol9QXv2bqMMqc
WfZuxqHcaQqB4nJxApJOPArfls5DRkC/mPPvshToPm1ErkfuRVo8ZT1ThTUi91VE
OZNe02ShinHqhRK5EF5nA/9Cfd3xNMZa/ENZO7jv7ypPi+Wula2zkaESs+xMmKWY
+9ImwdGV3YV6u8vkH3bMTuElxKmtghn+qE1sMSPnoTURPUopqo2XyNU7vJlJzrM2
o1NQz/b0qohN5Zu6GhQC+Ahbx6Ft/G9zOVYQ6xaR/xi19hgwkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWcgZ7bpRHgJvsWrjSPYupOIIdrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGNj
ZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFlOWU0ZDRlZjQvOTNhZjVkN2YtMTQ1YS0z
Yjc1LTk2MzUtYmQ3ODAwNzhiOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRjY2QzYjMtZGRhNS00NTNmLWI1
MGQtMGExZTllNGQ0ZWY0L2FkY2NkM2IzLWRkYTUtNDUzZi1iNTBkLTBhMWU5ZTRk
NGVmNC5jcmwwHwYDVR0jBBgwFoAUv8KbwFu17C9/2Z0ujo92iFdsHpEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hZGNjZDNiMy1kZGE1LTQ1M2YtYjUwZC0wYTFl
OWU0ZDRlZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8M0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGj1JfwmFrfy9o20cq2AfGa/6heImmGW5AKFAAr1nMfJBxKjXHSDAxa
NCQRyZkvHSuYNZAm879WuRdJusQLWyhro9WbaW6F4JRcJtVpt4AQCVd+/9fGAO62
sAO+r8VYmKNJ1AC0NjdleKSDPWcK2AfheTvjxx4zdNRabCC2OcZJj9KEBnYOTd2f
QPa48Slmrur5x4lr1v9qdfIk7vOCnYYmnqOfcstOqRZ+q+ea1TiiYO4uajwGcHQF
a/8VGQHeLEIL0awvso9fzuhu9x8x1vuz/O0G+9Pu/A00GBAJO8OZ3aui+iie0Zq5
zdNhRC4b5unJxMs5xf5fzGjm/iDTtiI=
-----END CERTIFICATE-----
Generated at Wed May 15 18:21:57 2024 by rpki-client on console-ams.rpki-client.org