Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/c227b0f3-af34-3e26-aa92-51a1324ef281.roa
File:                     c227b0f3-af34-3e26-aa92-51a1324ef281.roa (raw, json)
Hash identifier:          oUYNQGJ3e7BcVSjgMm9x7gKixEDXntHRAjtr1oyWRfw=
Subject key identifier:   AC:12:58:58:8E:BE:AC:7C:D5:5C:77:FA:26:0E:93:61:C7:AF:FC:47
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F43285845DBFE5E26FCC4C5D9C29C6A40
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/c227b0f3-af34-3e26-aa92-51a1324ef281.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     26914
IP address blocks:        166.93.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:5e:26:fc:c4:c5:d9:c2:9c:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=496e8231-8b15-4178-ac45-dd879556db59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:8d:0a:62:d2:a6:fe:97:89:12:31:0c:13:
                    91:6b:76:5b:b9:53:4b:23:ab:d1:ae:f4:ac:f7:bd:
                    0b:0b:4a:2a:94:90:0b:a0:90:98:c7:86:ca:ae:fa:
                    13:75:03:f1:68:03:4f:e8:c3:1f:ee:4d:7a:b7:15:
                    23:f2:2e:a9:72:87:a1:92:44:56:c5:5c:eb:3f:8e:
                    1a:d3:21:a8:31:b9:c7:05:82:25:ae:b1:81:78:d3:
                    9e:4e:f7:ee:68:30:94:ec:2f:41:a7:d4:dc:15:1b:
                    9a:30:6b:fa:cb:b3:0c:a2:e6:9d:1d:a4:ee:72:1c:
                    41:84:27:0c:4d:7f:81:47:e7:8b:b3:de:78:66:02:
                    a9:ec:78:30:78:5b:61:1a:0a:79:1f:f5:b8:1d:f9:
                    bf:ff:e3:93:2f:2c:ff:bb:63:3d:e2:06:50:d5:1a:
                    8a:90:8e:fb:36:08:17:e7:14:2c:d2:db:6b:98:d6:
                    6a:76:a7:25:2a:51:c4:97:d0:ac:d6:f1:77:d4:80:
                    28:35:01:e1:ec:96:1e:d2:04:36:c8:94:31:17:8c:
                    50:00:f5:6e:f7:44:b4:a1:a7:c2:9c:ce:84:95:4e:
                    9c:eb:7d:61:7b:2a:4f:f7:88:1c:4f:e3:6d:09:96:
                    da:a4:a2:32:fd:53:cc:fe:ae:66:b4:0a:46:7e:2b:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:58:58:8E:BE:AC:7C:D5:5C:77:FA:26:0E:93:61:C7:AF:FC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/c227b0f3-af34-3e26-aa92-51a1324ef281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:04:81:f1:af:3a:f0:95:fe:6f:cb:95:3f:ab:4d:dd:a4:
         3a:41:8c:a0:e6:da:65:55:bb:e3:61:57:83:f3:32:62:2c:bc:
         25:d1:ff:51:e7:2a:7b:52:94:c0:6c:44:c4:77:f8:e7:04:24:
         9f:11:74:c9:ae:8d:b9:ea:b8:ed:88:eb:a4:d6:b8:0f:0c:e4:
         c3:9c:c7:cf:91:df:aa:82:4c:dd:e4:4c:94:88:9b:60:23:0c:
         ff:9b:2d:83:c9:63:37:28:2d:77:ec:41:42:7e:77:0b:c6:e7:
         8f:b1:06:74:b1:57:6d:0d:21:e8:5c:5f:76:02:5f:2f:2e:48:
         71:6d:b5:23:37:9d:31:73:4f:0f:93:77:77:74:8d:33:ca:4b:
         d5:50:a9:9a:ea:5f:12:75:0f:1a:8c:cf:0d:af:57:82:c2:01:
         1a:55:88:8a:35:e3:a1:74:1c:29:83:ec:4e:c0:22:39:05:fd:
         c6:28:39:ed:c0:df:7e:e2:9d:59:3f:5d:45:1d:16:21:e4:48:
         c9:a0:4c:4f:2e:de:3c:44:95:5c:e4:36:ad:7b:d1:78:03:79:
         dd:b8:7b:a1:03:4a:f2:69:90:9a:ad:36:9e:56:a9:94:7a:a8:
         99:04:f0:fa:b2:65:c2:be:31:d6:c8:70:3b:bb:fa:93:a8:1c:
         63:47:72:e7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEXb/l4m/MTF2cKcakAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWM3MDUzYWItMDczNi00M2JiLWJkZmMtMDE2OWFlOTBi
ODBkMB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk
NDk2ZTgyMzEtOGIxNS00MTc4LWFjNDUtZGQ4Nzk1NTZkYjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr6NCmLSpv6XiRIxDBORa3ZbuVNLI6vRrvSs
970LC0oqlJALoJCYx4bKrvoTdQPxaANP6MMf7k16txUj8i6pcoehkkRWxVzrP44a
0yGoMbnHBYIlrrGBeNOeTvfuaDCU7C9Bp9TcFRuaMGv6y7MMouadHaTuchxBhCcM
TX+BR+eLs954ZgKp7HgweFthGgp5H/W4Hfm//+OTLyz/u2M94gZQ1RqKkI77NggX
5xQs0ttrmNZqdqclKlHEl9Cs1vF31IAoNQHh7JYe0gQ2yJQxF4xQAPVu90S0oafC
nM6ElU6c631heypP94gcT+NtCZbapKIy/VPM/q5mtApGfisCuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKwSWFiOvqx81Vx3+iYOk2HHr/xHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcw
NTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5YWU5MGI4MGQvYzIyN2IwZjMtYWYzNC0z
ZTI2LWFhOTItNTFhMTMyNGVmMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWM3MDUzYWItMDczNi00M2JiLWJk
ZmMtMDE2OWFlOTBiODBkL2VjNzA1M2FiLTA3MzYtNDNiYi1iZGZjLTAxNjlhZTkw
YjgwZC5jcmwwHwYDVR0jBBgwFoAU3pcubt/PvchrC3xOqzpSG2XulSwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcwNTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5
YWU5MGI4MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApl0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAblAEgfGvOvCV/m/LlT+rTd2kOkGMoObaZVW742FXg/MyYiy8JdH/Uecq
e1KUwGxExHf45wQknxF0ya6Nueq47YjrpNa4Dwzkw5zHz5HfqoJM3eRMlIibYCMM
/5stg8ljNygtd+xBQn53C8bnj7EGdLFXbQ0h6FxfdgJfLy5IcW21IzedMXNPD5N3
d3SNM8pL1VCpmupfEnUPGozPDa9XgsIBGlWIijXjoXQcKYPsTsAiOQX9xig57cDf
fuKdWT9dRR0WIeRIyaBMTy7ePESVXOQ2rXvReAN53bh7oQNK8mmQmq02nlaplHqo
mQTw+rJlwr4x1shwO7v6k6gcY0dy5w==
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:25 2024 by rpki-client on console-fra.rpki-client.org