Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b1ac389d-8a1c-3988-b699-56e4595b0c13.roa
File:                     b1ac389d-8a1c-3988-b699-56e4595b0c13.roa (raw, json)
Hash identifier:          w/jJd1gHylQrZjoyREbhJGBYqrDAUxe9gfy4mdFk/mY=
Subject key identifier:   C8:AE:94:00:83:6B:40:2C:CB:08:BA:69:54:7A:A1:1B:F1:E6:66:18
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583DFED831DC782BB090405C0D10
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b1ac389d-8a1c-3988-b699-56e4595b0c13.roa
Signing time:             Sun 22 May 2022 12:00:00 +0000
ROA not before:           Sun 22 May 2022 12:00:00 +0000
ROA not after:            Thu 10 Jan 2030 05:00:00 +0000
asID:                     36692
IP address blocks:        208.69.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:fe:d8:31:dc:78:2b:b0:90:40:5c:0d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: May 22 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2030 GMT
        Subject: CN=585f1a51-8b64-447c-8ac7-902ef968e49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:d7:43:18:7d:4a:ce:b0:45:a7:97:d3:4a:
                    97:41:b0:b9:87:ca:f1:76:7e:aa:d3:f6:c2:6c:8e:
                    9e:cc:e7:a7:e1:0a:20:4b:da:8c:9f:71:3e:f8:e1:
                    6a:30:b6:f6:8d:cd:af:d2:f0:75:c4:7f:b9:19:a6:
                    b6:7c:5a:84:46:c6:86:71:79:99:a4:07:b5:cb:e8:
                    51:1a:01:0b:00:1e:73:d2:fd:77:37:2d:5a:5f:b6:
                    31:ca:21:be:c2:ac:81:63:c7:d8:c2:1e:37:30:63:
                    b8:50:e3:04:3a:2f:8a:f1:f8:6d:77:8f:63:5f:a5:
                    80:4d:22:9b:87:e8:5f:09:33:20:1e:7a:a5:ac:8e:
                    24:6b:b7:6f:fd:27:49:7a:21:bf:a0:90:24:ad:7e:
                    c6:6e:1f:f8:57:22:01:24:e2:0d:8c:6e:52:7c:49:
                    a1:fe:65:5a:e5:b1:e1:9c:27:72:5d:db:3f:2c:55:
                    56:56:3b:1b:09:0a:d5:14:df:a6:9d:5d:65:51:3e:
                    fe:12:91:52:40:e9:a7:6f:45:c1:c9:fd:2b:cf:bb:
                    33:15:98:0a:b9:a4:e5:2d:ca:f7:d1:aa:7c:14:0b:
                    7a:26:4d:38:c2:22:5d:cb:80:1f:1c:47:35:90:c2:
                    40:a3:88:d0:10:8c:d3:58:9f:0d:e9:b1:25:83:79:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AE:94:00:83:6B:40:2C:CB:08:BA:69:54:7A:A1:1B:F1:E6:66:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b1ac389d-8a1c-3988-b699-56e4595b0c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4a:8a:fe:c9:31:16:10:b3:bf:f7:05:79:5f:d7:7e:5a:c4:
         75:ab:94:82:0e:14:38:7b:2f:ba:ef:c8:c1:d8:ea:6a:02:8b:
         a7:91:a2:be:b8:2a:f4:d4:d8:37:59:ce:bb:2d:8b:cf:97:07:
         cb:d8:45:d4:ad:f6:f1:df:c2:ce:76:aa:a3:3d:ef:ed:aa:49:
         21:0b:71:aa:15:89:3c:fc:af:3a:29:50:06:e1:90:17:e2:36:
         ba:62:69:49:a2:22:95:8b:aa:dc:75:37:01:ba:f3:00:d1:98:
         54:9a:55:e8:6b:3e:42:c0:f5:28:a8:f5:d4:81:c8:f3:a3:c4:
         c8:97:67:75:ab:b2:db:6f:b1:0d:e7:5a:24:57:75:d9:7c:31:
         0b:05:86:a4:15:46:aa:b7:e2:77:81:20:2e:b0:fc:4d:98:38:
         e2:97:65:f8:44:da:68:72:ee:4d:a3:3e:f4:37:2e:82:fc:a2:
         de:84:24:1e:02:82:72:0b:a0:fb:02:4b:f3:9c:ed:68:e3:15:
         a6:fb:d8:e4:e1:2b:2b:70:68:1b:5f:41:80:ce:8b:90:ce:28:
         af:af:e4:22:d5:dc:73:5f:cb:1d:35:d0:6e:43:4f:9c:8f:c1:
         1c:b1:70:5c:30:a0:ab:7c:79:37:08:ff:70:24:21:25:8c:db:
         11:2a:c8:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3+2DHceCuwkEBcDRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk
ZWZjMB4XDTIyMDUyMjEyMDAwMFoXDTMwMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
NTg1ZjFhNTEtOGI2NC00NDdjLThhYzctOTAyZWY5NjhlNDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ/XQxh9Ss6wRaeX00qXQbC5h8rxdn6q0/bC
bI6ezOen4QogS9qMn3E++OFqMLb2jc2v0vB1xH+5Gaa2fFqERsaGcXmZpAe1y+hR
GgELAB5z0v13Ny1aX7YxyiG+wqyBY8fYwh43MGO4UOMEOi+K8fhtd49jX6WATSKb
h+hfCTMgHnqlrI4ka7dv/SdJeiG/oJAkrX7Gbh/4VyIBJOINjG5SfEmh/mVa5bHh
nCdyXds/LFVWVjsbCQrVFN+mnV1lUT7+EpFSQOmnb0XByf0rz7szFZgKuaTlLcr3
0ap8FAt6Jk04wiJdy4AfHEc1kMJAo4jQEIzTWJ8N6bElg3mOxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMiulACDa0Asywi6aVR6oRvx5mYYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj
YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvYjFhYzM4OWQtOGExYy0z
OTg4LWI2OTktNTZlNDU5NWIwYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm
MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi
ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw
NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EUkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxKiv7JMRYQs7/3BXlf135axHWrlIIOFDh7L7rvyMHY6moCi6eRor64
KvTU2DdZzrsti8+XB8vYRdSt9vHfws52qqM97+2qSSELcaoViTz8rzopUAbhkBfi
NrpiaUmiIpWLqtx1NwG68wDRmFSaVehrPkLA9Sio9dSByPOjxMiXZ3WrsttvsQ3n
WiRXddl8MQsFhqQVRqq34neBIC6w/E2YOOKXZfhE2mhy7k2jPvQ3LoL8ot6EJB4C
gnILoPsCS/Oc7WjjFab72OThKytwaBtfQYDOi5DOKK+v5CLV3HNfyx010G5DT5yP
wRyxcFwwoKt8eTcI/3AkISWM2xEqyEs=
-----END CERTIFICATE-----
Generated at Mon Jun 17 09:42:05 2024 by rpki-client on console-fra.rpki-client.org