Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa
File:                     9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa (raw, json)
Hash identifier:          5lzQEEFnT+kB/Yuzmnw3eLeQiCbtVKaz4HemhDf6IgE=
Subject key identifier:   07:B4:D1:E6:39:45:EA:F6:90:80:6B:4A:E5:99:0D:C2:FB:88:1D:87
Certificate issuer:       /CN=9f8abfb1-5f91-4570-a775-7435d3e52012
Certificate serial:       010D0C9F43285845A9BE0E8EAB6CB90F239DAE20
Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     53405
IP address blocks:        192.199.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:0e:8e:ab:6c:b9:0f:23:9d:ae:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=4e17782e-a5b4-49b9-b078-90156d6b6613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:c0:fa:2b:a4:b4:ee:6d:a3:08:1f:08:90:
                    ab:86:3b:57:05:38:ef:fb:e7:a6:ec:f0:b0:b1:5e:
                    bc:42:bc:cb:2f:e7:ec:9b:8d:23:fa:21:f4:d1:f5:
                    24:dc:1f:ac:3c:d3:45:fe:4e:69:86:66:e1:3c:b7:
                    aa:63:80:00:c6:f9:28:97:71:51:75:0b:e6:aa:3e:
                    9a:00:eb:2a:45:fb:cb:81:af:2d:f9:ec:30:6a:d0:
                    7e:99:a2:05:8c:a7:6b:92:2d:1b:2a:48:87:2e:b8:
                    ad:a7:f1:63:53:64:ea:54:6c:cd:74:19:c8:78:8a:
                    3b:81:76:77:f9:ae:cb:04:9f:17:a8:32:39:50:7d:
                    8f:5a:c3:79:36:c2:82:52:88:5a:5c:82:82:74:1f:
                    2f:53:dd:d7:32:d5:5c:ef:34:0a:a7:e2:ae:7b:c3:
                    ef:cd:89:79:ca:83:3f:fa:d9:6c:50:7f:a9:f3:cc:
                    be:33:05:d8:2d:dd:d7:64:42:8e:dc:99:53:4f:0e:
                    0c:b3:5c:61:c6:fc:a9:ca:b5:2a:39:d4:4a:8e:85:
                    c6:9c:58:ab:17:cd:55:53:52:8e:ed:77:2d:92:87:
                    c5:ab:0b:11:18:55:31:ce:c0:3d:7c:6f:81:df:37:
                    18:38:82:f3:bd:f1:2f:d4:af:6c:9d:d2:9b:84:45:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B4:D1:E6:39:45:EA:F6:90:80:6B:4A:E5:99:0D:C2:FB:88:1D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl

            X509v3 Authority Key Identifier:
                keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.199.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:40:10:70:48:2d:0c:ef:28:1b:f4:77:8d:71:08:dd:08:d6:
         2f:66:f1:d1:c0:77:d9:97:85:f9:c7:03:d9:47:a9:a7:8e:c7:
         08:bb:7d:ea:d7:48:ce:5c:b3:82:55:46:6d:dd:0e:82:3a:16:
         32:8e:48:a9:dd:5c:5c:7b:d3:b5:0e:77:76:c2:f2:09:15:f6:
         32:81:1a:b7:e2:4d:30:18:7f:eb:e1:b3:a4:c4:4d:3c:4f:cb:
         67:18:b6:95:7c:4b:d8:cf:1d:3e:5d:56:2a:41:c3:c3:1b:e7:
         9d:83:6c:f0:23:11:a0:c0:34:ce:99:1c:0e:d3:00:92:25:f0:
         56:cc:8f:a8:85:12:01:12:21:78:a6:a6:26:d7:c6:94:0d:eb:
         30:5a:bd:a0:8b:88:8b:f2:82:51:b7:0d:ed:4a:7e:9f:e7:92:
         ad:e4:22:24:4c:c3:51:a4:cc:6c:23:7a:c9:61:cf:65:c3:ad:
         fc:55:e8:1d:ce:17:e9:2b:7e:9f:df:88:52:37:eb:93:e4:c2:
         0a:ea:01:ea:10:ba:2d:fa:49:71:4f:20:19:8b:1e:c1:3c:6a:
         03:bc:30:ec:53:2c:6b:47:32:98:c6:7b:99:a9:a0:9c:4b:bc:
         48:c4:0f:de:a9:dc:c7:07:79:9e:bd:89:4c:cf:3b:13:0e:d4:
         18:7f:44:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpvg6Oq2y5DyOdriAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy
MDEyMB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk
NGUxNzc4MmUtYTViNC00OWI5LWIwNzgtOTAxNTZkNmI2NjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOvA+iuktO5towgfCJCrhjtXBTjv++em7PCw
sV68QrzLL+fsm40j+iH00fUk3B+sPNNF/k5phmbhPLeqY4AAxvkol3FRdQvmqj6a
AOsqRfvLga8t+ewwatB+maIFjKdrki0bKkiHLritp/FjU2TqVGzNdBnIeIo7gXZ3
+a7LBJ8XqDI5UH2PWsN5NsKCUohaXIKCdB8vU93XMtVc7zQKp+Kue8PvzYl5yoM/
+tlsUH+p88y+MwXYLd3XZEKO3JlTTw4Ms1xhxvypyrUqOdRKjoXGnFirF81VU1KO
7XctkofFqwsRGFUxzsA9fG+B3zcYOILzvfEv1K9sndKbhEXYLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAe00eY5Rer2kIBrSuWZDcL7iB2HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh
YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvOWIyZjVhNTAtMjI5OC0z
NWNmLWE5ZGUtOWU2MzlkNmY1Y2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3
NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1
MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1
ZDNlNTIwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMfGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERAEHBILQzvKBv0d41xCN0I1i9m8dHAd9mXhfnHA9lHqaeOxwi7ferX
SM5cs4JVRm3dDoI6FjKOSKndXFx707UOd3bC8gkV9jKBGrfiTTAYf+vhs6TETTxP
y2cYtpV8S9jPHT5dVipBw8Mb552DbPAjEaDANM6ZHA7TAJIl8FbMj6iFEgESIXim
pibXxpQN6zBavaCLiIvyglG3De1Kfp/nkq3kIiRMw1GkzGwjeslhz2XDrfxV6B3O
F+krfp/fiFI365PkwgrqAeoQui36SXFPIBmLHsE8agO8MOxTLGtHMpjGe5mpoJxL
vEjED96p3McHeZ69iUzPOxMO1Bh/RK8=
-----END CERTIFICATE-----
Generated at Fri May 10 03:02:24 2024 by rpki-client on console-ams.rpki-client.org