Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/aa7896fd-24b8-373e-adc6-b96dba9805ad.roa
File:                     aa7896fd-24b8-373e-adc6-b96dba9805ad.roa (raw, json)
Hash identifier:          MXmTPBm8D05AzNF0g7tloEMifnFD5lQQNPC20BdfPns=
Subject key identifier:   AF:22:78:B2:6C:69:94:78:59:86:09:8A:EF:3B:0B:27:35:CF:B6:F6
Certificate issuer:       /CN=9d186494-6006-4592-b81b-d4c764dc8430
Certificate serial:       010D0C9F43285844F465581F04DC339127EB4FF0
Authority key identifier: C6:4A:0C:0C:56:22:BE:C0:A1:E0:66:90:87:6D:2C:EB:50:ED:51:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/aa7896fd-24b8-373e-adc6-b96dba9805ad.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        216.117.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/9d186494-6006-4592-b81b-d4c764dc8430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/9d186494-6006-4592-b81b-d4c764dc8430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:58:1f:04:dc:33:91:27:eb:4f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d186494-6006-4592-b81b-d4c764dc8430
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=68669cf5-0ab3-44d4-88f9-8376f5a487c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:9b:45:bd:ce:9e:78:83:2f:38:7d:b4:ba:
                    1b:66:0d:46:e7:cb:a3:a4:16:ce:c2:f1:12:c4:c8:
                    28:55:a9:53:98:fe:2c:f0:45:6b:09:4c:03:c2:fb:
                    4d:99:be:57:68:6f:09:ba:ca:81:dd:8d:49:bc:b0:
                    e1:72:5c:19:9e:ea:5f:27:a6:9b:e1:b5:94:ff:96:
                    d0:f4:3d:a1:9c:b3:5b:77:a4:44:68:5b:95:83:19:
                    0e:b3:82:2b:2c:ef:84:39:e4:a7:6e:f4:ae:ea:ec:
                    a0:a0:e4:10:23:3b:61:9f:ca:1d:17:da:36:2b:5c:
                    21:b4:bf:34:33:c8:54:cb:7d:0d:c3:d9:2e:61:25:
                    2e:cf:9c:aa:26:bb:04:b8:16:2e:e2:a6:e7:8b:5b:
                    ae:b4:3d:4e:81:fb:70:ea:15:38:6a:f3:ce:2c:65:
                    a2:eb:7a:ff:c3:e8:f5:53:c2:12:f5:c1:d3:b0:c0:
                    1a:19:01:1d:48:cd:55:e4:49:5e:ce:46:c3:08:6a:
                    5a:7e:32:02:68:25:ca:80:f5:3d:d8:ed:87:d9:b1:
                    c8:22:d0:af:bd:8f:cf:5f:81:03:bd:79:42:b5:0e:
                    7e:4c:99:40:3c:00:90:04:56:d5:98:67:46:5d:89:
                    d4:27:d2:31:4f:1f:f0:ca:da:48:07:c1:cb:9a:a9:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:22:78:B2:6C:69:94:78:59:86:09:8A:EF:3B:0B:27:35:CF:B6:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/aa7896fd-24b8-373e-adc6-b96dba9805ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/9d186494-6006-4592-b81b-d4c764dc8430.crl

            X509v3 Authority Key Identifier:
                keyid:C6:4A:0C:0C:56:22:BE:C0:A1:E0:66:90:87:6D:2C:EB:50:ED:51:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.117.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:bf:b8:9b:56:23:43:51:e0:b0:e8:cc:49:15:ca:d3:b9:e3:
         f2:95:b6:2a:d6:09:83:78:9a:db:3d:e4:ca:4d:55:64:46:10:
         10:88:0e:bd:ce:c2:8e:18:2e:35:da:70:12:14:fb:73:f8:5b:
         c3:e5:a6:04:49:95:ae:17:ea:4b:36:13:0c:3f:7d:5e:a1:ea:
         56:f3:92:c0:f5:5e:77:20:18:fd:18:fd:26:59:fa:54:ac:ad:
         7b:c2:9f:b5:86:f3:f2:a6:54:56:dc:62:e4:b5:06:8e:37:52:
         09:aa:cc:b0:23:c7:9c:39:4e:b3:a4:be:bc:71:74:c2:b7:21:
         9d:7e:ad:21:a1:d2:c0:f1:54:01:4d:a0:ee:a2:7a:89:f7:40:
         51:f9:c3:0b:7b:bd:b3:a4:af:fa:9e:21:ee:52:fb:2b:e3:0f:
         f2:4d:92:62:60:c2:6f:6e:7c:25:58:cb:47:d5:9b:0f:20:2a:
         6a:db:c1:63:1c:55:36:8e:88:2a:df:11:fb:d3:ae:c5:af:1b:
         b1:42:07:e9:32:d4:c6:de:9a:a5:b4:40:73:52:5e:62:0e:e1:
         8f:92:23:73:32:d5:57:96:7f:13:b4:96:cd:87:69:f8:e5:6a:
         f1:6f:16:32:dc:f5:af:24:3d:c8:73:66:6d:55:f2:6a:fd:1e:
         2a:28:7c:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET0ZVgfBNwzkSfrT/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQxODY0OTQtNjAwNi00NTkyLWI4MWItZDRjNzY0ZGM4
NDMwMB4XDTI0MDIyMDE0MDAzMVoXDTI0MDUyMDEzMDAzMVowLzEtMCsGA1UEAxMk
Njg2NjljZjUtMGFiMy00NGQ0LTg4ZjktODM3NmY1YTQ4N2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDebRb3OnniDLzh9tLobZg1G58ujpBbOwvES
xMgoValTmP4s8EVrCUwDwvtNmb5XaG8JusqB3Y1JvLDhclwZnupfJ6ab4bWU/5bQ
9D2hnLNbd6REaFuVgxkOs4IrLO+EOeSnbvSu6uygoOQQIzthn8odF9o2K1whtL80
M8hUy30Nw9kuYSUuz5yqJrsEuBYu4qbni1uutD1Ogftw6hU4avPOLGWi63r/w+j1
U8IS9cHTsMAaGQEdSM1V5ElezkbDCGpafjICaCXKgPU92O2H2bHIItCvvY/PX4ED
vXlCtQ5+TJlAPACQBFbVmGdGXYnUJ9IxTx/wytpIB8HLmqmF9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8ieLJsaZR4WYYJiu87Cyc1z7b2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ZDE4
NjQ5NC02MDA2LTQ1OTItYjgxYi1kNGM3NjRkYzg0MzAvYWE3ODk2ZmQtMjRiOC0z
NzNlLWFkYzYtYjk2ZGJhOTgwNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWQxODY0OTQtNjAwNi00NTkyLWI4
MWItZDRjNzY0ZGM4NDMwLzlkMTg2NDk0LTYwMDYtNDU5Mi1iODFiLWQ0Yzc2NGRj
ODQzMC5jcmwwHwYDVR0jBBgwFoAUxkoMDFYivsCh4GaQh20s61DtUQIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85ZDE4NjQ5NC02MDA2LTQ1OTItYjgxYi1kNGM3
NjRkYzg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HX5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHi/uJtWI0NR4LDozEkVytO54/KVtirWCYN4mts95MpNVWRGEBCIDr3O
wo4YLjXacBIU+3P4W8PlpgRJla4X6ks2Eww/fV6h6lbzksD1XncgGP0Y/SZZ+lSs
rXvCn7WG8/KmVFbcYuS1Bo43UgmqzLAjx5w5TrOkvrxxdMK3IZ1+rSGh0sDxVAFN
oO6ieon3QFH5wwt7vbOkr/qeIe5S+yvjD/JNkmJgwm9ufCVYy0fVmw8gKmrbwWMc
VTaOiCrfEfvTrsWvG7FCB+ky1MbemqW0QHNSXmIO4Y+SI3My1VeWfxO0ls2Hafjl
avFvFjLc9a8kPchzZm1V8mr9HioofJE=
-----END CERTIFICATE-----
Generated at Fri Apr 19 02:03:15 2024 by rpki-client on console-fra.rpki-client.org