Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d2716773-5988-3a64-8713-790022ece9df.roa
File:                     d2716773-5988-3a64-8713-790022ece9df.roa (raw, json)
Hash identifier:          DHUJAmcZK4btYIrLYWHxk2x5K/QtUZPUjPm71pj0978=
Subject key identifier:   8F:C2:05:94:39:9E:69:8D:AF:8C:76:83:C3:3E:A0:B3:E7:FC:21:10
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166424089F7
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d2716773-5988-3a64-8713-790022ece9df.roa
Signing time:             Fri 05 Oct 2018 03:23:37 +0000
ROA not before:           Thu 04 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     1412
IP address blocks:        128.241.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:40:89:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=4cec6ae3-24c6-419d-b1b7-b6a3fe55da89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:95:10:be:d9:db:58:da:2b:56:ca:b5:b5:14:
                    7b:e5:d5:b1:4c:ff:1d:bc:c9:24:b1:6b:b8:e7:ca:
                    2b:f8:21:6e:59:b7:df:c2:da:02:6c:62:63:99:c8:
                    e3:7d:04:02:1f:52:25:02:2c:bd:f3:23:d0:85:06:
                    c4:ce:fa:a7:b2:aa:ac:4a:77:da:f2:92:fc:d1:19:
                    42:b6:e0:6e:0a:89:55:fc:a6:43:1a:9a:c9:0f:2b:
                    f6:dd:0c:73:9a:b8:64:99:66:c9:ea:f4:fb:c6:d2:
                    de:c4:bd:f5:f7:d8:0f:7c:05:67:df:72:87:45:30:
                    bc:e6:d8:fb:fa:2a:cd:92:9a:39:d4:c5:d4:05:2d:
                    e1:e4:80:69:f6:f6:b5:a8:64:92:b3:c8:01:3b:71:
                    a6:ac:f7:75:28:ea:03:7d:59:57:16:ea:7a:7b:4b:
                    7e:d1:28:1c:21:62:9a:bc:88:37:3b:83:4d:e0:b9:
                    51:1c:25:c2:d4:94:ac:e5:91:67:23:b3:e5:c0:c6:
                    f2:46:64:1e:41:d2:5b:09:bf:e4:5a:cc:bf:39:76:
                    cb:69:50:39:43:ce:59:10:42:e6:a2:ab:d6:d6:bb:
                    4f:b1:ac:63:9c:4c:e7:85:d3:42:56:10:5c:7c:6d:
                    26:c6:2a:fa:10:74:e5:4f:da:17:29:ff:c6:db:a2:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C2:05:94:39:9E:69:8D:AF:8C:76:83:C3:3E:A0:B3:E7:FC:21:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d2716773-5988-3a64-8713-790022ece9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:73:83:5d:98:5d:f9:75:e9:86:93:4e:8c:1c:ad:97:44:46:
         46:5e:22:9f:8c:7e:75:6e:65:f4:50:9e:84:12:5a:eb:32:2d:
         4c:9a:93:27:2f:6f:c2:e8:82:e9:41:cb:ed:50:fb:c0:9c:93:
         98:ab:e4:05:31:3b:4c:f4:8a:be:53:1c:59:d6:ff:69:b0:9b:
         0c:3a:53:71:35:c1:cc:d5:e7:10:8e:ac:ba:76:10:63:5f:86:
         cb:76:53:9b:4d:b6:e5:15:10:b1:b8:c6:74:6f:8c:d7:bd:34:
         0e:11:f2:47:ba:93:5b:89:2e:3b:39:f6:cc:6d:72:da:99:8d:
         e2:62:91:14:9f:26:bb:67:35:4b:79:85:16:0b:20:a5:a8:7b:
         60:27:75:47:6c:95:f6:3f:ad:97:2d:de:bc:de:0c:a8:8f:52:
         eb:24:47:5e:1c:e4:d7:a1:da:ad:35:b1:04:99:11:2e:8f:06:
         6f:d3:52:71:e1:8a:42:b5:26:cc:f7:09:47:f7:25:21:26:a5:
         5f:f2:d2:e8:94:7c:91:f4:ad:35:8e:d5:11:9a:c9:2d:8d:3a:
         53:0e:85:0e:c5:aa:c2:a3:57:7a:c8:fa:dc:46:5f:28:d4:32:
         af:c7:e8:74:a0:68:85:9e:09:e8:03:c6:db:b0:09:2d:ca:b5:
         a6:8e:cd:89
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZkJAifcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMDQwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDRj
ZWM2YWUzLTI0YzYtNDE5ZC1iMWI3LWI2YTNmZTU1ZGE4OTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOGVEL7Z21jaK1bKtbUUe+XVsUz/HbzJJLFruOfK
K/ghblm338LaAmxiY5nI430EAh9SJQIsvfMj0IUGxM76p7KqrEp32vKS/NEZQrbg
bgqJVfymQxqayQ8r9t0Mc5q4ZJlmyer0+8bS3sS99ffYD3wFZ99yh0UwvObY+/oq
zZKaOdTF1AUt4eSAafb2tahkkrPIATtxpqz3dSjqA31ZVxbqentLftEoHCFimryI
NzuDTeC5URwlwtSUrOWRZyOz5cDG8kZkHkHSWwm/5FrMvzl2y2lQOUPOWRBC5qKr
1ta7T7GsY5xM54XTQlYQXHxtJsYq+hB05U/aFyn/xtuiibECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSPwgWUOZ5pja+MdoPDPqCz5/whEDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2QyNzE2NzczLTU5ODgtM2E2
NC04NzEzLTc5MDAyMmVjZTlkZi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDxXDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEACHODXZhd+XXphpNOjBytl0RGRl4in4x+dW5l9FCehBJa6zItTJqTJy9vwuiC
6UHL7VD7wJyTmKvkBTE7TPSKvlMcWdb/abCbDDpTcTXBzNXnEI6sunYQY1+Gy3ZT
m0225RUQsbjGdG+M1700DhHyR7qTW4kuOzn2zG1y2pmN4mKRFJ8mu2c1S3mFFgsg
pah7YCd1R2yV9j+tly3evN4MqI9S6yRHXhzk16HarTWxBJkRLo8Gb9NSceGKQrUm
zPcJR/clISalX/LS6JR8kfStNY7VEZrJLY06Uw6FDsWqwqNXesj63EZfKNQyr8fo
dKBohZ4J6APG27AJLcq1po7NiQ==
-----END CERTIFICATE-----
Generated at Wed Apr 24 02:05:57 2024 by rpki-client on console-ams.rpki-client.org