Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c22a7f-5706-3247-8c7d-c2947920d8e9.roa
File:                     90c22a7f-5706-3247-8c7d-c2947920d8e9.roa (raw, json)
Hash identifier:          /FzakZZ+vNll+4X21yAFaXroujExIosjGzgaCAK8ruk=
Subject key identifier:   88:1B:9E:55:05:9B:8A:2F:95:6D:57:DE:21:FE:F4:DE:A7:21:22:4F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DB8349971
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c22a7f-5706-3247-8c7d-c2947920d8e9.roa
Signing time:             Fri 11 Oct 2019 00:25:17 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     7795
IP address blocks:        199.234.89.0/24 maxlen: 24
                          199.234.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:b8:34:99:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=c274c19d-96fa-4f2a-ad86-06e352defe1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:33:e1:16:e3:3b:25:d1:81:17:aa:00:46:5c:
                    ee:ea:f6:66:3b:2c:5c:99:2b:be:27:73:ab:71:fd:
                    bb:d5:e2:4a:ec:aa:59:99:1f:26:2d:6c:3c:04:ec:
                    50:4e:8e:0a:1c:31:67:ef:61:03:2a:5b:4b:21:33:
                    6c:8d:ff:c0:0c:4e:07:8c:80:70:ec:35:fa:c1:0b:
                    8f:51:0d:01:79:fd:bc:6e:6a:ec:51:e7:b0:58:11:
                    01:d0:97:ad:4b:6a:0a:6a:7a:2e:36:0b:03:f9:64:
                    48:7b:5c:cd:c2:a9:b4:99:29:f2:09:f8:32:d5:4c:
                    e2:e9:70:cd:71:11:c4:b4:b8:1a:ed:b6:d6:da:1d:
                    ce:a8:cf:c8:2a:3e:f1:5a:50:93:5a:eb:72:19:1b:
                    d4:67:a6:c8:8e:e8:f0:8e:9f:49:a7:ee:74:c5:8e:
                    87:c4:4b:bc:1f:19:cc:e0:ec:92:8b:e0:ec:25:26:
                    44:53:6c:d7:6f:b9:4c:1f:4b:c1:1f:63:a9:cf:57:
                    81:c8:30:79:ae:d5:c7:cf:c4:72:a3:46:1c:cf:2d:
                    77:1a:1d:8e:a2:11:80:85:3f:0d:71:a9:64:61:11:
                    45:14:e8:66:85:2d:0b:37:2b:1c:c6:bf:80:92:ab:
                    86:27:91:cd:a4:20:9f:c3:7b:a1:c5:3b:80:6b:36:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:9E:55:05:9B:8A:2F:95:6D:57:DE:21:FE:F4:DE:A7:21:22:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c22a7f-5706-3247-8c7d-c2947920d8e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.234.89.0-199.234.90.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a9:89:a1:c6:cb:44:90:0b:a2:65:76:90:b3:5b:48:ec:48:
         a3:36:b9:37:36:51:fa:a8:73:fc:66:7d:cb:3d:67:df:38:12:
         ff:68:b6:3e:c1:f1:39:20:4f:ac:45:7e:d2:7d:b7:48:c5:8f:
         62:97:cd:0d:d6:4c:52:6d:5c:4a:84:6e:2a:f0:0b:8b:ea:2b:
         bd:8a:0c:b0:b2:29:d4:2b:69:67:f3:c0:3e:08:00:3b:89:5f:
         7b:7c:5e:b2:43:85:29:50:d2:40:ff:9e:26:f8:94:c5:59:59:
         c9:fd:92:1c:31:92:ba:4e:dc:a2:69:c5:84:c5:d6:19:d0:e9:
         9a:e2:45:cd:04:99:c0:0d:0a:ae:62:38:8b:30:02:b6:77:72:
         e9:d9:b8:d0:37:4f:e9:f3:c5:cf:7b:65:6e:ea:59:d7:4e:d4:
         75:d7:a5:4c:4f:6b:a6:67:9c:bf:24:95:7c:7a:44:2b:80:d1:
         55:53:56:fa:41:59:f0:12:5e:55:51:bc:53:98:eb:4f:13:28:
         53:c2:b1:87:23:60:11:42:b9:fd:c7:b9:04:06:43:64:4e:42:
         45:2f:44:a5:c8:b5:d4:d2:62:88:23:9e:a3:8d:36:d5:94:b6:
         4b:6b:df:26:d6:1c:2f:94:ef:a0:c3:d7:8f:6e:7d:23:08:b9:
         dc:98:6c:01
-----BEGIN CERTIFICATE-----
MIIGRzCCBTGgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbbg0mXEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGMy
NzRjMTlkLTk2ZmEtNGYyYS1hZDg2LTA2ZTM1MmRlZmUxYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAO0z4RbjOyXRgReqAEZc7ur2ZjssXJkrvidzq3H9
u9XiSuyqWZkfJi1sPATsUE6OChwxZ+9hAypbSyEzbI3/wAxOB4yAcOw1+sELj1EN
AXn9vG5q7FHnsFgRAdCXrUtqCmp6LjYLA/lkSHtczcKptJkp8gn4MtVM4ulwzXER
xLS4Gu221todzqjPyCo+8VpQk1rrchkb1GemyI7o8I6fSafudMWOh8RLvB8ZzODs
kovg7CUmRFNs12+5TB9LwR9jqc9Xgcgwea7Vx8/EcqNGHM8tdxodjqIRgIU/DXGp
ZGERRRToZoUtCzcrHMa/gJKrhieRzaQgn8N7ocU7gGs26OUCAwEAAaOCA10wggNZ
MB0GA1UdDgQWBBSIG55VBZuKL5VtV94h/vTepyEiTzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzkwYzIyYTdmLTU3MDYtMzI0
Ny04YzdkLWMyOTQ3OTIwZDhlOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAx+pZAwQA
x+paMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZI
hvcNAQELA4IBAQCOqYmhxstEkAuiZXaQs1tI7EijNrk3NlH6qHP8Zn3LPWffOBL/
aLY+wfE5IE+sRX7SfbdIxY9il80N1kxSbVxKhG4q8AuL6iu9igywsinUK2ln88A+
CAA7iV97fF6yQ4UpUNJA/54m+JTFWVnJ/ZIcMZK6TtyiacWExdYZ0Oma4kXNBJnA
DQquYjiLMAK2d3Lp2bjQN0/p88XPe2Vu6lnXTtR116VMT2umZ5y/JJV8ekQrgNFV
U1b6QVnwEl5VUbxTmOtPEyhTwrGHI2ARQrn9x7kEBkNkTkJFL0SlyLXU0mKII56j
jTbVlLZLa98m1hwvlO+gw9ePbn0jCLncmGwB
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:24 2024 by rpki-client on console-fra.rpki-client.org