Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/aa600383-7b76-3358-8686-46798b13bf4c.roa
File:                     aa600383-7b76-3358-8686-46798b13bf4c.roa (raw, json)
Hash identifier:          m3fPnomHi52vbOJZoRCQVEgFJEsSI2YQuSO8lQVffZ8=
Subject key identifier:   B0:0D:9A:01:F3:01:97:6D:3C:3C:DE:F2:37:3D:49:5C:17:53:8A:B2
Certificate issuer:       /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Certificate serial:       010D0C9F4328584563F3095F032277929C8D6100
Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/aa600383-7b76-3358-8686-46798b13bf4c.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        209.222.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:09:5f:03:22:77:92:9c:8d:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=2d4fc04a-1f90-4d78-8549-d048dfdcbf08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:6c:04:9d:ca:15:9a:fd:60:f0:ce:f3:a7:
                    54:5e:72:6a:1c:60:55:2c:58:96:83:fa:ff:71:af:
                    c2:12:8a:3c:ad:cc:78:01:e0:0f:cd:4c:a0:e3:a0:
                    ee:76:ef:12:10:a1:18:fc:30:a8:5d:9f:32:5a:8e:
                    c8:d7:8d:e8:35:e7:40:e8:fd:87:48:e1:dd:8e:43:
                    a1:95:aa:9e:d4:57:ac:36:80:0f:cb:8d:aa:58:9c:
                    55:4a:35:ff:dc:eb:3d:d4:d5:35:01:18:22:18:80:
                    95:30:4c:92:82:4b:56:dc:a0:81:d8:67:37:a2:ca:
                    57:75:03:78:d6:51:e3:e4:13:e3:5b:09:dd:ac:6d:
                    ff:2e:33:24:1e:e4:92:93:26:74:70:7e:59:61:42:
                    f4:34:71:ed:c8:f1:ca:5c:f1:7a:12:64:e2:56:00:
                    e8:27:60:2d:49:fe:21:ad:bf:cc:bf:9a:62:88:8f:
                    0e:6e:c6:02:09:e4:b6:a7:60:4c:89:23:3f:fc:0f:
                    8a:b4:99:8e:4d:ee:09:9d:4d:22:4d:ea:0f:ab:6a:
                    39:ce:c8:d6:19:4a:6d:4e:89:7d:c1:a0:e3:87:ed:
                    22:e8:06:62:02:1b:bc:03:d2:67:b4:b4:33:e0:64:
                    f4:5e:fc:bf:73:b6:5f:2b:ba:f3:39:41:f8:4c:2d:
                    8e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:9A:01:F3:01:97:6D:3C:3C:DE:F2:37:3D:49:5C:17:53:8A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/aa600383-7b76-3358-8686-46798b13bf4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl

            X509v3 Authority Key Identifier:
                keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d4:62:95:fc:d8:08:c1:cf:79:47:37:0b:43:c1:93:00:10:
         40:68:95:c3:76:f1:9c:f5:9d:49:b0:18:8e:ee:40:d4:92:73:
         b4:a4:9a:b6:26:ad:a0:00:d3:85:11:c4:c6:ef:b0:d2:52:8f:
         4e:56:70:6c:f7:7f:e3:2f:2b:2d:4d:c4:8a:ae:fe:26:a9:39:
         e4:76:42:f0:30:84:d5:d9:59:40:dc:8d:89:f4:ab:0c:c6:a2:
         e8:7c:7f:a3:8c:67:16:38:71:bd:cc:b0:9b:17:cc:cc:d1:22:
         1f:d0:65:7c:a4:bf:0d:ac:01:a0:7b:9e:ba:6e:aa:f6:f8:2f:
         e4:e6:2b:fb:37:52:fa:13:2d:f4:f3:9d:2d:69:e4:e9:0c:77:
         66:e8:60:be:ac:bf:39:1d:9f:61:c0:1f:9b:7a:5d:e4:f4:3a:
         62:74:ce:16:56:b2:70:8e:c5:82:77:9f:e6:b0:15:c3:c8:92:
         a9:d3:88:f2:9a:af:53:70:eb:0e:09:8d:9b:cd:0b:63:8a:2a:
         a5:cb:ba:a9:ed:34:de:dd:b0:e5:28:20:ed:ea:68:2b:92:99:
         9c:3d:5c:b5:b0:c3:a9:d6:c2:3b:29:df:e4:83:8d:f4:39:b6:
         b7:46:4e:18:fa:ef:d0:a6:31:ce:30:e3:15:af:fd:f3:c3:28:
         73:c7:a7:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8wlfAyJ3kpyNYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVhYjBiOGYtZTg3Zi00NjYwLTgzY2MtNDZjMzU3MjAy
ZWQ5MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk
MmQ0ZmMwNGEtMWY5MC00ZDc4LTg1NDktZDA0OGRmZGNiZjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6tsBJ3KFZr9YPDO86dUXnJqHGBVLFiWg/r/
ca/CEoo8rcx4AeAPzUyg46Dudu8SEKEY/DCoXZ8yWo7I143oNedA6P2HSOHdjkOh
laqe1FesNoAPy42qWJxVSjX/3Os91NU1ARgiGICVMEySgktW3KCB2Gc3ospXdQN4
1lHj5BPjWwndrG3/LjMkHuSSkyZ0cH5ZYUL0NHHtyPHKXPF6EmTiVgDoJ2AtSf4h
rb/Mv5piiI8ObsYCCeS2p2BMiSM//A+KtJmOTe4JnU0iTeoPq2o5zsjWGUptTol9
waDjh+0i6AZiAhu8A9JntLQz4GT0Xvy/c7ZfK7rzOUH4TC2OQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLANmgHzAZdtPDze8jc9SVwXU4qyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NWFi
MGI4Zi1lODdmLTQ2NjAtODNjYy00NmMzNTcyMDJlZDkvYWE2MDAzODMtN2I3Ni0z
MzU4LTg2ODYtNDY3OThiMTNiZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODVhYjBiOGYtZTg3Zi00NjYwLTgz
Y2MtNDZjMzU3MjAyZWQ5Lzg1YWIwYjhmLWU4N2YtNDY2MC04M2NjLTQ2YzM1NzIw
MmVkOS5jcmwwHwYDVR0jBBgwFoAUneXTFmsYl6ROVfi+e3EwJa93m+gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NWFiMGI4Zi1lODdmLTQ2NjAtODNjYy00NmMz
NTcyMDJlZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d5SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPUYpX82AjBz3lHNwtDwZMAEEBolcN28Zz1nUmwGI7uQNSSc7SkmrYm
raAA04URxMbvsNJSj05WcGz3f+MvKy1NxIqu/iapOeR2QvAwhNXZWUDcjYn0qwzG
ouh8f6OMZxY4cb3MsJsXzMzRIh/QZXykvw2sAaB7nrpuqvb4L+TmK/s3UvoTLfTz
nS1p5OkMd2boYL6svzkdn2HAH5t6XeT0OmJ0zhZWsnCOxYJ3n+awFcPIkqnTiPKa
r1Nw6w4JjZvNC2OKKqXLuqntNN7dsOUoIO3qaCuSmZw9XLWww6nWwjsp3+SDjfQ5
trdGThj679CmMc4w4xWv/fPDKHPHp00=
-----END CERTIFICATE-----
Generated at Thu May 2 18:02:55 2024 by rpki-client on console-fra.rpki-client.org