Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8ed62fb-e08e-33e0-8ce8-c57c27e2e7d3.roa
File:                     b8ed62fb-e08e-33e0-8ce8-c57c27e2e7d3.roa (raw, json)
Hash identifier:          U7GlL31qxz0DgkYg2VzYfRCFbklSz4gMX5TH0O211zs=
Subject key identifier:   4A:B9:1E:6D:7D:58:B8:F9:13:4A:2D:8A:3A:20:8E:7D:45:1A:5F:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858452D82921F40A41DF3C35DD1A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8ed62fb-e08e-33e0-8ce8-c57c27e2e7d3.roa
Signing time:             Tue 12 Mar 2024 01:00:25 +0000
ROA not before:           Tue 12 Mar 2024 01:00:25 +0000
ROA not after:            Mon 10 Jun 2024 01:00:25 +0000
asID:                     32787
IP address blocks:        209.200.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:82:92:1f:40:a4:1d:f3:c3:5d:d1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 12 01:00:25 2024 GMT
            Not After : Jun 10 01:00:25 2024 GMT
        Subject: CN=ab02c24d-b1f5-4a6a-8dbb-d711e9eba975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0d:b5:4e:f0:c5:bb:86:7f:24:ec:df:0b:57:
                    52:04:3b:c2:fa:08:96:8e:fd:12:a4:fc:16:4f:ce:
                    05:3e:16:f2:7b:54:b1:82:c2:ed:78:a8:4b:cb:f0:
                    55:2a:06:cf:31:72:2a:63:ee:3a:35:84:58:33:9b:
                    f2:17:1b:cd:12:49:ee:5b:e1:f4:30:22:5b:aa:06:
                    90:28:ba:79:97:d2:4d:aa:41:4c:1b:bb:e7:6e:ba:
                    a6:09:53:fc:72:c1:9b:bc:d0:c5:0f:a2:1e:f2:d9:
                    54:4c:25:6e:9a:f6:50:2a:44:a0:55:99:3f:fd:5a:
                    c5:93:65:f5:55:56:48:ee:4c:98:4d:66:95:29:fc:
                    a6:8d:ff:97:7d:fb:6e:15:2c:7d:dd:9d:9f:fc:12:
                    7c:ea:8b:d8:ca:c0:28:da:e6:75:12:cd:52:5e:fc:
                    52:a3:48:f9:81:c7:75:a5:6f:bc:2d:b5:19:b5:25:
                    64:9a:85:76:f5:84:ee:98:1b:97:95:fe:48:91:a7:
                    1a:8f:b0:97:f2:fb:2e:3e:bc:ca:eb:34:3a:fe:3a:
                    cf:f7:0c:e6:47:61:e7:a8:9b:e8:ce:ff:af:46:6c:
                    45:04:cb:e3:7d:c3:82:ea:e5:5b:a3:12:a7:e5:13:
                    23:b6:d7:6f:fb:46:ea:53:6e:fb:6a:06:49:4f:86:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B9:1E:6D:7D:58:B8:F9:13:4A:2D:8A:3A:20:8E:7D:45:1A:5F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8ed62fb-e08e-33e0-8ce8-c57c27e2e7d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0e:84:b7:07:ce:89:de:0d:06:2b:fd:2b:73:86:95:cb:5a:
         8f:57:f8:9d:55:18:12:a6:33:02:54:a9:c1:54:08:45:c4:c6:
         da:08:6d:c6:f0:9c:9f:c0:85:b3:df:c9:6e:49:0a:95:34:ee:
         12:88:27:f9:9b:82:ac:f6:2a:e3:13:bc:66:51:c3:b0:48:f7:
         15:9b:56:bd:a9:ee:b2:04:fe:46:b6:5d:45:46:26:c7:72:26:
         46:73:22:52:51:f5:04:00:33:63:e1:48:e9:40:ab:b9:cd:3b:
         66:88:64:a3:eb:17:b9:88:0c:ac:45:1b:af:d1:cc:d5:32:6b:
         fd:ed:ff:e0:55:9b:3c:96:fb:c8:30:05:8f:75:52:b5:de:d5:
         bf:8d:51:2c:42:8f:86:ab:af:f8:5d:62:06:d4:2c:33:c5:c7:
         ae:2c:df:ee:d1:9c:2e:81:ff:cd:1b:fd:6e:98:f1:45:1e:68:
         af:e8:80:09:3b:16:28:c6:67:80:64:42:c6:c5:6d:4d:aa:6b:
         46:ae:ee:6f:84:d4:1c:de:70:31:9b:68:99:1c:9d:98:ec:6c:
         59:ab:bd:88:90:d0:01:17:85:57:7f:a5:78:d0:ea:d6:45:52:
         00:78:25:07:44:c6:3a:0d:ab:7c:72:69:dd:3e:20:1b:a1:be:
         b2:36:2f:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUtgpIfQKQd88Nd0aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMxMjAxMDAyNVoXDTI0MDYxMDAxMDAyNVowLzEtMCsGA1UEAxMk
YWIwMmMyNGQtYjFmNS00YTZhLThkYmItZDcxMWU5ZWJhOTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ21TvDFu4Z/JOzfC1dSBDvC+giWjv0SpPwW
T84FPhbye1SxgsLteKhLy/BVKgbPMXIqY+46NYRYM5vyFxvNEknuW+H0MCJbqgaQ
KLp5l9JNqkFMG7vnbrqmCVP8csGbvNDFD6Ie8tlUTCVumvZQKkSgVZk//VrFk2X1
VVZI7kyYTWaVKfymjf+XfftuFSx93Z2f/BJ86ovYysAo2uZ1Es1SXvxSo0j5gcd1
pW+8LbUZtSVkmoV29YTumBuXlf5Ikacaj7CX8vsuPrzK6zQ6/jrP9wzmR2HnqJvo
zv+vRmxFBMvjfcOC6uVboxKn5RMjttdv+0bqU277agZJT4aX1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEq5Hm19WLj5E0otijogjn1FGl92MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjhlZDYyZmItZTA4ZS0z
M2UwLThjZTgtYzU3YzI3ZTJlN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cipMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwOhLcHzoneDQYr/StzhpXLWo9X+J1VGBKmMwJUqcFUCEXExtoIbcbw
nJ/AhbPfyW5JCpU07hKIJ/mbgqz2KuMTvGZRw7BI9xWbVr2p7rIE/ka2XUVGJsdy
JkZzIlJR9QQAM2PhSOlAq7nNO2aIZKPrF7mIDKxFG6/RzNUya/3t/+BVmzyW+8gw
BY91UrXe1b+NUSxCj4arr/hdYgbULDPFx64s3+7RnC6B/80b/W6Y8UUeaK/ogAk7
FijGZ4BkQsbFbU2qa0au7m+E1BzecDGbaJkcnZjsbFmrvYiQ0AEXhVd/pXjQ6tZF
UgB4JQdExjoNq3xyad0+IBuhvrI2L/Y=
-----END CERTIFICATE-----
Generated at Fri May 17 20:12:14 2024 by rpki-client on console-fra.rpki-client.org