Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/290cc34d-dc8d-39a9-b35e-a492b18459d0.roa
File:                     290cc34d-dc8d-39a9-b35e-a492b18459d0.roa (raw, json)
Hash identifier:          UvIlLSdMoaXf7AVqfizT3v0CuO4X3gR/mHEsDZ2noRo=
Subject key identifier:   E1:F9:A5:22:4D:EB:87:8A:BD:D7:B5:F8:D0:31:4B:3D:C5:B6:CB:00
Certificate issuer:       /CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Certificate serial:       010D0C9F43285845304D3ED2945B4EC1CD6B0080
Authority key identifier: 7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/290cc34d-dc8d-39a9-b35e-a492b18459d0.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     400817
IP address blocks:        199.58.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3e:d2:94:5b:4e:c1:cd:6b:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=3a36f29b-ecd4-4c0c-a0c8-f2076f35dbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:d1:ec:c3:2f:9b:df:13:95:df:0a:67:55:
                    03:87:13:fb:ee:55:ed:ee:ef:3d:e0:cf:5f:6a:33:
                    c4:4e:13:a7:2e:33:a8:32:06:95:ef:c0:a9:2e:ca:
                    9f:d5:8a:50:43:fb:e2:3f:84:5d:21:78:d5:6a:07:
                    74:a8:0d:58:e2:f1:9d:e0:56:e2:4d:89:7f:78:5e:
                    85:f1:ea:a7:a5:37:65:fb:ea:7d:c6:06:80:e1:64:
                    17:fc:b6:a8:1d:53:7b:52:a5:9b:73:26:57:fc:42:
                    20:25:cb:7f:b0:28:68:5f:e7:2f:bf:5f:87:b9:e5:
                    6a:d9:9a:86:cd:8f:56:c7:ec:15:88:3a:49:94:23:
                    b0:6a:e6:1c:98:28:4f:e1:7b:1a:34:ad:51:1a:75:
                    4b:12:d2:f6:78:2d:5d:77:e3:d8:8a:37:2b:75:ba:
                    ae:67:c7:de:be:f6:fa:19:1f:3b:08:73:ae:47:a3:
                    ad:ab:01:a7:be:76:90:ec:a0:ba:c4:02:55:aa:cf:
                    f0:e9:c0:cb:be:73:12:97:4b:7b:be:9e:0a:5a:6d:
                    2b:ae:e8:5a:6c:0c:6f:fa:e6:04:fa:1c:04:4a:13:
                    65:e2:21:e9:60:2c:83:4b:c4:81:1d:1f:61:6e:f8:
                    41:bf:88:0c:2b:2f:6d:70:ae:b8:56:39:3e:89:2c:
                    c7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F9:A5:22:4D:EB:87:8A:BD:D7:B5:F8:D0:31:4B:3D:C5:B6:CB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/290cc34d-dc8d-39a9-b35e-a492b18459d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl

            X509v3 Authority Key Identifier:
                keyid:7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:66:9f:3f:f7:7e:77:02:bc:c1:f6:d4:6c:b1:49:ac:43:0e:
         b1:ba:01:35:ae:6f:4a:b6:b3:5c:8c:05:0b:69:ce:8d:b3:10:
         6d:d8:bd:25:6d:92:6b:07:42:b5:ce:17:e1:fb:b1:33:22:e3:
         9a:06:bb:ad:1f:17:60:54:c8:96:67:2b:e3:b3:23:c9:1c:dd:
         a3:6d:fd:ed:48:5f:35:dc:9f:84:75:22:e1:c3:fb:19:14:2d:
         e8:49:e5:80:87:33:91:78:bc:3d:52:7a:29:ee:61:7f:75:a2:
         ca:74:10:af:e6:d5:41:3f:b9:0d:26:06:fe:64:42:ec:29:42:
         b5:dc:07:05:2e:1e:4f:c3:05:c7:2f:0e:a2:11:dc:3e:f7:2b:
         1e:69:7d:69:a0:a2:e1:7c:46:b9:cf:a9:ce:4b:18:6b:5d:b5:
         73:66:d9:b8:46:7e:38:15:2f:7f:8d:8f:1a:3e:a3:8c:4d:59:
         1f:fd:95:d6:7c:92:72:aa:b2:c4:f5:5f:57:29:cc:68:f5:a7:
         3f:02:89:42:0b:e3:d4:71:20:da:f8:e3:a1:41:e8:41:0b:7a:
         ed:32:45:b9:33:6f:7a:af:56:b2:74:a3:12:21:af:21:5b:c3:
         c8:c0:55:dd:32:99:23:fe:17:d5:07:35:ec:3b:9a:26:3a:26:
         cb:fb:07:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUwTT7SlFtOwc1rAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUwMDVhNTEtM2U1NS00ZjUxLWIzOTMtZWI5OTE4MjU1
ZjNmMB4XDTI0MDMxMzAxMDAyNloXDTI0MDYxMTAxMDAyNlowLzEtMCsGA1UEAxMk
M2EzNmYyOWItZWNkNC00YzBjLWEwYzgtZjIwNzZmMzVkYmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBjR7MMvm98Tld8KZ1UDhxP77lXt7u894M9f
ajPEThOnLjOoMgaV78CpLsqf1YpQQ/viP4RdIXjVagd0qA1Y4vGd4FbiTYl/eF6F
8eqnpTdl++p9xgaA4WQX/LaoHVN7UqWbcyZX/EIgJct/sChoX+cvv1+HueVq2ZqG
zY9Wx+wViDpJlCOwauYcmChP4XsaNK1RGnVLEtL2eC1dd+PYijcrdbquZ8fevvb6
GR87CHOuR6OtqwGnvnaQ7KC6xAJVqs/w6cDLvnMSl0t7vp4KWm0rruhabAxv+uYE
+hwEShNl4iHpYCyDS8SBHR9hbvhBv4gMKy9tcK64Vjk+iSzHuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOH5pSJN64eKvde1+NAxSz3FtssAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTAw
NWE1MS0zZTU1LTRmNTEtYjM5My1lYjk5MTgyNTVmM2YvMjkwY2MzNGQtZGM4ZC0z
OWE5LWIzNWUtYTQ5MmIxODQ1OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmUwMDVhNTEtM2U1NS00ZjUxLWIz
OTMtZWI5OTE4MjU1ZjNmLzZlMDA1YTUxLTNlNTUtNGY1MS1iMzkzLWViOTkxODI1
NWYzZi5jcmwwHwYDVR0jBBgwFoAUf6XhVGyl0nPxEzVBNJ49rg/sa/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTAwNWE1MS0zZTU1LTRmNTEtYjM5My1lYjk5
MTgyNTVmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzrDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBmnz/3fncCvMH21GyxSaxDDrG6ATWub0q2s1yMBQtpzo2zEG3YvSVt
kmsHQrXOF+H7sTMi45oGu60fF2BUyJZnK+OzI8kc3aNt/e1IXzXcn4R1IuHD+xkU
LehJ5YCHM5F4vD1SeinuYX91osp0EK/m1UE/uQ0mBv5kQuwpQrXcBwUuHk/DBccv
DqIR3D73Kx5pfWmgouF8RrnPqc5LGGtdtXNm2bhGfjgVL3+Njxo+o4xNWR/9ldZ8
knKqssT1X1cpzGj1pz8CiUIL49RxINr446FB6EELeu0yRbkzb3qvVrJ0oxIhryFb
w8jAVd0ymSP+F9UHNew7miY6Jsv7B3I=
-----END CERTIFICATE-----
Generated at Sun May 12 01:31:30 2024 by rpki-client on console-fra.rpki-client.org