Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/d9219d4e-9379-3260-bdcf-0ee432ed8206.roa
File:                     d9219d4e-9379-3260-bdcf-0ee432ed8206.roa (raw, json)
Hash identifier:          SbY/ssRvhmYaeyMoZcuzW7NlEbnVKg+30GrgH+eNlkA=
Subject key identifier:   40:16:B6:BE:41:C3:66:8F:D1:F0:C5:8E:07:D6:8E:1F:7D:CB:08:24
Certificate issuer:       /CN=8eb0455e-053d-4489-9bbe-feb693df63c7
Certificate serial:       010D0C9F43285845D7CE408DF9E70BF8647D8100
Authority key identifier: CC:C1:0A:0D:92:6E:4A:8E:42:AC:37:CB:56:18:39:DE:DA:C3:31:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/d9219d4e-9379-3260-bdcf-0ee432ed8206.roa
Signing time:             Sun 12 May 2024 01:00:25 +0000
ROA not before:           Sun 12 May 2024 01:00:25 +0000
ROA not after:            Sat 10 Aug 2024 01:00:25 +0000
asID:                     54055
IP address blocks:        204.77.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/8eb0455e-053d-4489-9bbe-feb693df63c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/8eb0455e-053d-4489-9bbe-feb693df63c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d7:ce:40:8d:f9:e7:0b:f8:64:7d:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb0455e-053d-4489-9bbe-feb693df63c7
        Validity
            Not Before: May 12 01:00:25 2024 GMT
            Not After : Aug 10 01:00:25 2024 GMT
        Subject: CN=9fee58df-b835-43b8-bfa5-35dd12233084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:02:d9:f7:0b:af:9b:79:e4:6f:c9:ed:81:
                    ca:f8:79:d6:a6:d0:5d:95:94:35:05:4c:31:ef:20:
                    1f:ee:23:81:93:16:22:47:24:1c:c8:e2:2a:f9:bd:
                    f4:92:76:ae:f1:49:af:77:a9:84:a7:6a:1c:57:78:
                    41:69:6e:fe:4a:57:27:36:a3:0c:f2:a8:33:46:5f:
                    68:ab:2d:4d:fd:9f:5c:b0:36:ee:f9:29:53:f6:a7:
                    2b:3b:ed:90:3a:90:30:b8:7d:b7:9b:8f:e2:fb:3d:
                    36:dd:bf:f9:5f:ac:4a:df:b7:41:69:6f:8a:12:99:
                    60:43:f2:8f:c8:18:ef:ae:6b:89:7f:c1:2b:ed:4d:
                    94:ed:af:64:1e:3c:02:bc:ff:c1:3e:b6:69:2a:82:
                    3a:ad:9e:b0:8e:bf:55:f0:d5:23:75:13:20:2e:e7:
                    5f:be:d3:f8:bf:14:32:4b:b6:72:63:e1:25:0c:46:
                    dd:a9:1f:27:04:47:16:11:f2:ed:f7:42:02:60:9b:
                    7d:a3:a7:b8:a9:a7:71:48:20:de:eb:7e:d9:16:3d:
                    93:a1:06:99:74:ef:3e:c1:7a:e6:01:0d:ce:1c:e9:
                    00:70:88:71:89:a8:ad:af:f7:e7:64:8d:ad:28:9f:
                    f5:c4:48:81:ab:e6:77:87:6a:06:de:89:ed:33:30:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:16:B6:BE:41:C3:66:8F:D1:F0:C5:8E:07:D6:8E:1F:7D:CB:08:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/d9219d4e-9379-3260-bdcf-0ee432ed8206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/8eb0455e-053d-4489-9bbe-feb693df63c7.crl

            X509v3 Authority Key Identifier:
                keyid:CC:C1:0A:0D:92:6E:4A:8E:42:AC:37:CB:56:18:39:DE:DA:C3:31:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:4a:7a:bb:97:88:a7:b8:03:2d:9f:e0:dd:83:eb:77:26:
         28:b6:0c:59:e6:0e:70:cc:31:93:ca:fc:00:52:24:c2:1a:1b:
         2b:b6:cc:46:8a:c4:7b:57:fd:15:1f:e5:5f:a3:8b:a3:44:fe:
         4e:8a:7f:52:77:21:f8:45:16:89:c2:ad:e4:b9:17:b3:04:4b:
         4f:7e:55:06:0c:c2:f2:65:02:56:74:9e:1a:f7:f5:eb:f2:ac:
         c7:ee:a3:7f:c8:5e:fa:a1:25:c4:82:e2:4e:48:e0:9d:72:65:
         8a:30:59:fb:78:ce:0c:ee:ca:73:e4:58:d1:5e:2a:74:f4:e2:
         1c:2a:da:b9:80:47:c1:45:8e:d3:87:67:e0:72:a7:27:88:03:
         40:9d:27:9c:f5:2f:25:d8:22:90:19:9c:82:d5:95:be:22:7c:
         a4:f4:47:69:70:69:21:c2:86:f3:01:ee:10:df:b0:b8:0b:88:
         d8:28:f8:3b:94:98:ee:6e:ae:67:db:b8:a8:46:c0:c6:7e:13:
         64:2b:7e:47:de:b2:db:8d:0c:3a:60:8f:b5:4b:0b:fe:5b:0e:
         d3:7d:ba:29:f1:df:77:97:de:bc:7c:16:df:00:ab:ce:7c:09:
         91:7c:da:90:43:e0:16:fd:e4:61:32:b6:51:f1:0b:65:ed:3a:
         55:45:10:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXXzkCN+ecL+GR9gQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGViMDQ1NWUtMDUzZC00NDg5LTliYmUtZmViNjkzZGY2
M2M3MB4XDTI0MDUxMjAxMDAyNVoXDTI0MDgxMDAxMDAyNVowLzEtMCsGA1UEAxMk
OWZlZTU4ZGYtYjgzNS00M2I4LWJmYTUtMzVkZDEyMjMzMDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaEC2fcLr5t55G/J7YHK+HnWptBdlZQ1BUwx
7yAf7iOBkxYiRyQcyOIq+b30knau8Umvd6mEp2ocV3hBaW7+SlcnNqMM8qgzRl9o
qy1N/Z9csDbu+SlT9qcrO+2QOpAwuH23m4/i+z023b/5X6xK37dBaW+KEplgQ/KP
yBjvrmuJf8Er7U2U7a9kHjwCvP/BPrZpKoI6rZ6wjr9V8NUjdRMgLudfvtP4vxQy
S7ZyY+ElDEbdqR8nBEcWEfLt90ICYJt9o6e4qadxSCDe637ZFj2ToQaZdO8+wXrm
AQ3OHOkAcIhxiaitr/fnZI2tKJ/1xEiBq+Z3h2oG3ontMzDhvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAWtr5Bw2aP0fDFjgfWjh99ywgkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWIw
NDU1ZS0wNTNkLTQ0ODktOWJiZS1mZWI2OTNkZjYzYzcvZDkyMTlkNGUtOTM3OS0z
MjYwLWJkY2YtMGVlNDMyZWQ4MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGViMDQ1NWUtMDUzZC00NDg5LTli
YmUtZmViNjkzZGY2M2M3LzhlYjA0NTVlLTA1M2QtNDQ4OS05YmJlLWZlYjY5M2Rm
NjNjNy5jcmwwHwYDVR0jBBgwFoAUzMEKDZJuSo5CrDfLVhg53trDMVcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWIwNDU1ZS0wNTNkLTQ0ODktOWJiZS1mZWI2
OTNkZjYzYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE0bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADypSnq7l4inuAMtn+Ddg+t3Jii2DFnmDnDMMZPK/ABSJMIaGyu2zEaK
xHtX/RUf5V+ji6NE/k6Kf1J3IfhFFonCreS5F7MES09+VQYMwvJlAlZ0nhr39evy
rMfuo3/IXvqhJcSC4k5I4J1yZYowWft4zgzuynPkWNFeKnT04hwq2rmAR8FFjtOH
Z+BypyeIA0CdJ5z1LyXYIpAZnILVlb4ifKT0R2lwaSHChvMB7hDfsLgLiNgo+DuU
mO5urmfbuKhGwMZ+E2QrfkfestuNDDpgj7VLC/5bDtN9uinx33eX3rx8Ft8Aq858
CZF82pBD4Bb95GEytlHxC2XtOlVFEA8=
-----END CERTIFICATE-----
Generated at Mon May 13 17:03:21 2024 by rpki-client on console-ams.rpki-client.org