Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa
File:                     8f21fddd-8bf5-3217-a480-686fff06115a.roa (raw, json)
Hash identifier:          y9OOv4aBMev28inZ++fXDJdpLi0Y2jrguMsHkk/yu00=
Subject key identifier:   0F:3B:7D:7A:E2:A8:9E:DA:8E:F2:8D:CB:B7:CA:E6:D2:87:B3:14:2D
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584563F309ED96169EC23788CE30
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     1403
IP address blocks:        199.58.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:09:ed:96:16:9e:c2:37:88:ce:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=fe3c75f9-5a3b-44c5-ba0f-0ce90d3cd599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:4f:b0:3e:3b:7d:e1:63:47:a1:cf:11:2e:
                    48:64:4f:55:7e:e2:82:fc:85:ff:d6:71:36:06:3b:
                    cb:50:b8:39:4b:4b:2d:1a:4c:48:7f:ee:65:3e:6c:
                    3d:78:10:47:af:a1:98:e7:be:43:67:6e:6b:55:ee:
                    1a:1a:3f:8a:c9:04:b2:8a:d3:cb:e2:48:b7:73:3d:
                    50:39:54:a7:ec:b6:2f:e3:63:04:1f:e6:c0:03:5a:
                    ad:79:a2:75:95:db:78:9f:ed:f3:1b:8d:03:f9:e9:
                    b6:b8:a1:fe:b1:df:37:98:e7:bd:7b:aa:47:23:82:
                    bc:c7:f9:05:33:98:3d:dc:11:7f:2f:88:2b:35:ef:
                    e8:64:04:b9:8c:8f:a1:27:6b:68:1d:69:fb:e9:18:
                    78:29:ad:ed:d3:d5:1e:1d:6a:d1:db:4e:76:82:6c:
                    97:72:eb:45:2c:94:f9:55:d5:b7:d7:4b:23:59:16:
                    4d:36:db:96:cb:50:7c:39:81:80:c0:90:22:6b:12:
                    b9:ee:f3:ea:6d:da:61:6c:12:40:24:2b:3d:54:19:
                    31:07:fd:b1:0d:75:3e:1d:5b:f8:d1:f8:f5:0d:62:
                    f8:cb:46:9e:f4:ee:c4:22:bc:18:21:65:5c:ff:0d:
                    13:bb:7a:3e:5f:e5:97:38:eb:3c:cc:87:57:b1:b9:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:7D:7A:E2:A8:9E:DA:8E:F2:8D:CB:B7:CA:E6:D2:87:B3:14:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/8f21fddd-8bf5-3217-a480-686fff06115a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:02:ce:8e:7e:8d:e6:cb:d9:7d:3c:83:af:98:28:be:bd:5a:
         8c:38:a5:2d:0c:c8:f8:5a:50:ae:4c:1f:dd:1d:30:2c:cd:a6:
         73:2e:6a:a9:1b:32:b3:a6:51:f3:81:3e:a5:e7:a5:cf:0d:ac:
         cd:ea:b0:22:fb:47:bc:49:52:f3:c9:02:90:11:ff:5e:b0:81:
         be:6c:6b:35:80:b8:c7:68:4e:23:4c:64:b2:c8:8f:b7:c2:a5:
         2c:8a:3f:91:8b:93:6f:61:84:87:20:c3:3e:c0:47:d7:a9:f2:
         7e:9c:a3:8e:4d:56:cc:3f:6a:1e:d5:28:a8:7a:10:28:21:9a:
         1a:53:b2:a6:fa:38:51:d2:53:b3:f1:c2:c4:a7:c0:b4:bc:08:
         fb:8d:f7:b4:23:50:ee:06:43:6e:0b:b2:db:ab:d1:84:53:c9:
         e5:76:29:35:8b:9c:72:83:f0:f7:d5:d1:16:3c:9e:54:db:6a:
         54:15:7e:13:3e:57:7d:4b:72:8a:13:92:64:ef:ba:b4:e5:97:
         ac:d8:67:42:13:7e:01:a5:80:8d:0a:c0:ee:07:80:7c:3b:31:
         91:54:25:cd:aa:52:b8:8f:ea:db:2c:97:b1:33:97:1d:86:14:
         fb:a3:ba:4d:01:dc:a2:ad:de:ea:8f:fc:b6:ad:b3:68:a6:62:
         fd:a0:94:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVj8wntlhaewjeIzjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2
Nzk4MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk
ZmUzYzc1ZjktNWEzYi00NGM1LWJhMGYtMGNlOTBkM2NkNTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcxPsD47feFjR6HPES5IZE9VfuKC/IX/1nE2
BjvLULg5S0stGkxIf+5lPmw9eBBHr6GY575DZ25rVe4aGj+KyQSyitPL4ki3cz1Q
OVSn7LYv42MEH+bAA1qteaJ1ldt4n+3zG40D+em2uKH+sd83mOe9e6pHI4K8x/kF
M5g93BF/L4grNe/oZAS5jI+hJ2toHWn76Rh4Ka3t09UeHWrR2052gmyXcutFLJT5
VdW310sjWRZNNtuWy1B8OYGAwJAiaxK57vPqbdphbBJAJCs9VBkxB/2xDXU+HVv4
0fj1DWL4y0ae9O7EIrwYIWVc/w0Tu3o+X+WXOOs8zIdXsbmNTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA87fXriqJ7ajvKNy7fK5tKHsxQtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh
YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvOGYyMWZkZGQtOGJmNS0z
MjE3LWE0ODAtNjg2ZmZmMDYxMTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz
N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj
Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl
YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzr4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwCzo5+jebL2X08g6+YKL69Wow4pS0MyPhaUK5MH90dMCzNpnMuaqkb
MrOmUfOBPqXnpc8NrM3qsCL7R7xJUvPJApAR/16wgb5sazWAuMdoTiNMZLLIj7fC
pSyKP5GLk29hhIcgwz7AR9ep8n6co45NVsw/ah7VKKh6ECghmhpTsqb6OFHSU7Px
wsSnwLS8CPuN97QjUO4GQ24Lstur0YRTyeV2KTWLnHKD8PfV0RY8nlTbalQVfhM+
V31LcooTkmTvurTll6zYZ0ITfgGlgI0KwO4HgHw7MZFUJc2qUriP6tssl7Ezlx2G
FPujuk0B3KKt3uqP/Lats2imYv2glKE=
-----END CERTIFICATE-----
Generated at Fri May 10 03:02:36 2024 by rpki-client on console-ams.rpki-client.org