Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa
File:                     6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa (raw, json)
Hash identifier:          3Zh7rZ05HxyPYgmWnzHLEviq0QCiN8KuE21ycVUHUyA=
Subject key identifier:   FD:43:C1:0F:54:F6:F9:56:10:C4:14:E2:07:9A:C5:65:0E:38:30:13
Certificate issuer:       /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial:       010D0C9F432858451FAAEA9C47E2D70B3CDA7240
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        209.127.216.0/24 maxlen: 24
                          209.188.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:aa:ea:9c:47:e2:d7:0b:3c:da:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=ac42f1fe-056c-461a-a869-9d091b52a1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:34:30:25:81:b0:c2:53:ce:8e:68:d2:91:
                    2c:98:73:32:91:31:6b:e6:53:31:67:a4:58:d5:6c:
                    f8:51:14:5c:9c:54:8e:b8:33:36:bd:d1:64:dd:08:
                    87:d8:a8:ea:4e:ea:06:20:26:16:10:32:94:29:5a:
                    a9:3e:63:c8:42:cf:05:24:c5:4d:45:8d:c9:6e:79:
                    92:b2:e2:56:b3:fd:08:b3:43:b7:f6:55:7e:ec:79:
                    d6:77:3d:44:12:31:1f:56:bf:e2:31:26:a0:6b:66:
                    c2:be:f5:91:5a:57:4e:36:6f:e8:63:a1:bf:63:68:
                    d4:62:6e:19:27:d8:94:2a:9b:11:c1:41:a7:c6:42:
                    0d:40:bc:bb:e1:91:77:e3:61:52:b0:fc:f4:1f:05:
                    6f:6b:91:5d:d5:f2:24:ac:07:9c:f2:00:16:a9:38:
                    48:a9:ea:46:9d:f3:78:cd:63:8d:59:e8:5a:50:ad:
                    0f:7c:2b:ee:b1:54:ab:ab:fd:cb:31:51:7f:6d:c7:
                    2d:a7:f4:45:dc:cc:4c:55:6f:38:1d:ae:72:34:28:
                    17:84:c8:30:11:dd:84:a3:29:5f:85:05:91:fc:bf:
                    e4:77:a8:ac:0d:06:29:9d:8d:97:17:2e:73:13:2c:
                    43:98:86:d1:d2:99:88:f4:ba:d3:2a:60:3f:c6:02:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:C1:0F:54:F6:F9:56:10:C4:14:E2:07:9A:C5:65:0E:38:30:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl

            X509v3 Authority Key Identifier:
                keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.216.0/24
                  209.188.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:72:ad:79:c1:c7:90:42:8a:e3:d6:43:9b:e7:c0:f7:ec:35:
         e0:27:a3:f6:04:1c:2b:16:26:d5:ef:11:4e:34:ef:ca:35:c1:
         36:3d:c9:fc:88:31:38:94:ac:ff:9b:f6:1d:ac:e3:ea:75:b4:
         1d:e6:c6:92:ca:e3:91:10:5b:54:1b:98:fd:1a:56:b7:d4:03:
         0f:25:a1:95:32:62:48:dc:98:d5:17:8c:2d:91:60:56:da:60:
         6c:50:e8:48:e5:f2:b4:1d:67:ff:ab:d8:29:66:2a:6c:b5:8b:
         87:c8:7f:d9:81:6b:63:31:84:ad:ae:c6:30:09:62:d7:1e:7d:
         ba:bb:2e:b8:af:29:41:c6:16:37:20:2f:01:8d:f7:82:03:39:
         cb:1f:96:41:10:64:6c:8d:39:1e:5f:05:cf:d3:84:b4:e0:a7:
         74:83:64:b1:0a:cd:73:7b:11:1a:25:07:e0:bb:01:26:fc:54:
         ca:80:9c:e5:67:0f:58:b1:72:41:66:41:78:d2:3f:9f:f8:d3:
         2f:8f:18:f0:29:ef:68:60:73:a3:bd:e9:2a:25:c2:ab:6c:49:
         3e:d1:e9:da:20:05:38:a0:f4:05:21:f1:b8:8a:62:77:65:9f:
         ad:20:3e:72:79:a7:59:3a:4e:95:cf:53:7e:31:15:35:3e:84:
         22:03:e6:de
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEUfquqcR+LXCzzackAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhj
M2Y1MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
YWM0MmYxZmUtMDU2Yy00NjFhLWE4NjktOWQwOTFiNTJhMWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWs0MCWBsMJTzo5o0pEsmHMykTFr5lMxZ6RY
1Wz4URRcnFSOuDM2vdFk3QiH2KjqTuoGICYWEDKUKVqpPmPIQs8FJMVNRY3JbnmS
suJWs/0Is0O39lV+7HnWdz1EEjEfVr/iMSaga2bCvvWRWldONm/oY6G/Y2jUYm4Z
J9iUKpsRwUGnxkINQLy74ZF342FSsPz0HwVva5Fd1fIkrAec8gAWqThIqepGnfN4
zWONWehaUK0PfCvusVSrq/3LMVF/bcctp/RF3MxMVW84Ha5yNCgXhMgwEd2Eoylf
hQWR/L/kd6isDQYpnY2XFy5zEyxDmIbR0pmI9LrTKmA/xgKAbwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFP1DwQ9U9vlWEMQU4geaxWUOODATMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZl
NDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvNmY0YjljMjAtMzEyOC0z
ZjFkLWIzZTYtMDVhMmM2NDQ0NmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDlmZTQ2YjAtNzAzNC00ZDdiLWE3
NDYtN2E3MGY3ODhjM2Y1LzA5ZmU0NmIwLTcwMzQtNGQ3Yi1hNzQ2LTdhNzBmNzg4
YzNmNS5jcmwwHwYDVR0jBBgwFoAUKlIbdd2p7j6R7Mtvp8LrPeq8OEswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcw
Zjc4OGMzZjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0X/YAwQA
0bxtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJpyrXnBx5BCiuPWQ5vnwPfsNeAno/YEHCsWJtXvEU4078o1
wTY9yfyIMTiUrP+b9h2s4+p1tB3mxpLK45EQW1QbmP0aVrfUAw8loZUyYkjcmNUX
jC2RYFbaYGxQ6Ejl8rQdZ/+r2ClmKmy1i4fIf9mBa2MxhK2uxjAJYtcefbq7Lriv
KUHGFjcgLwGN94IDOcsflkEQZGyNOR5fBc/ThLTgp3SDZLEKzXN7ERolB+C7ASb8
VMqAnOVnD1ixckFmQXjSP5/40y+PGPAp72hgc6O96SolwqtsST7R6dogBTig9AUh
8biKYndln60gPnJ5p1k6TpXPU34xFTU+hCID5t4=
-----END CERTIFICATE-----
Generated at Thu May 2 03:13:29 2024 by rpki-client on console-ams.rpki-client.org