Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3a17dd1-04fd-3c1f-b606-e284d090929a.roa
File:                     d3a17dd1-04fd-3c1f-b606-e284d090929a.roa (raw, json)
Hash identifier:          6jHeRn0WOb+aNteIhfOYpwb7K0vDn65C0FpwRHHSovM=
Subject key identifier:   83:9D:19:92:39:E5:8E:CA:CB:41:A2:6E:07:41:2F:79:52:8F:16:1E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328583B0F45795D20D4CC9D27FABB60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3a17dd1-04fd-3c1f-b606-e284d090929a.roa
Signing time:             Fri 27 Aug 2021 04:00:00 +0000
ROA not before:           Fri 27 Aug 2021 04:00:00 +0000
ROA not after:            Wed 17 Feb 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        198.41.217.0/24 maxlen: 24
                          198.41.218.0/24 maxlen: 24
                          198.41.219.0/24 maxlen: 24
                          2606:4700:a1::/48 maxlen: 48
                          2606:4700:a9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:0f:45:79:5d:20:d4:cc:9d:27:fa:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 27 04:00:00 2021 GMT
            Not After : Feb 17 05:00:00 2027 GMT
        Subject: CN=3ad2078b-29a5-4f07-91b6-8419b789d476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:60:99:e3:7f:6b:77:0b:6b:2c:17:b4:3f:
                    7b:2b:07:b0:b4:51:b6:9e:9f:81:19:c5:ab:8a:ee:
                    61:78:cf:4b:73:39:6c:26:e2:9f:85:ea:e3:c8:bf:
                    f8:43:0c:56:57:c7:89:8d:ae:af:ab:97:0e:b4:f1:
                    7d:c0:50:d6:5c:df:39:62:c0:23:c3:ad:e6:36:3d:
                    e7:a3:b5:35:38:fa:b6:15:db:de:21:c7:e2:f8:7b:
                    3f:81:32:8d:20:58:e6:d2:a8:7c:19:71:74:ee:6b:
                    49:e8:bc:91:88:6e:15:fa:78:b4:75:25:de:46:1e:
                    0b:b1:e6:22:35:13:ec:67:93:61:cb:bd:47:59:50:
                    c6:b8:9b:67:ba:f9:79:d3:6b:85:3f:76:9d:3c:2f:
                    dc:f2:ff:35:7d:3e:fb:7f:02:60:da:08:17:70:6c:
                    24:27:cb:51:69:00:dd:fc:ad:24:7b:bd:a6:e9:c1:
                    07:91:64:ff:42:ae:84:2e:a4:55:1c:05:e3:c7:ce:
                    07:49:63:85:0e:96:34:de:9a:b1:95:db:f6:fa:de:
                    6f:1d:83:73:c3:f2:b5:29:60:56:dd:3a:50:d7:3a:
                    c8:6a:6f:42:9d:3f:05:34:69:0a:5e:8d:c1:ce:d7:
                    5d:15:f0:04:28:dc:62:ee:31:cf:96:d8:56:ed:c9:
                    cb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9D:19:92:39:E5:8E:CA:CB:41:A2:6E:07:41:2F:79:52:8F:16:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d3a17dd1-04fd-3c1f-b606-e284d090929a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.217.0-198.41.219.255
                IPv6:
                  2606:4700:a1::/48
                  2606:4700:a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:66:8e:37:57:c9:f9:08:62:74:9d:34:98:5b:1e:67:3e:
         99:9e:d2:16:89:33:92:14:68:1d:16:69:2c:aa:75:a1:f8:63:
         30:a1:5f:73:a2:56:dd:07:ac:04:82:05:44:ad:59:0d:65:14:
         e5:2a:ce:5a:ed:86:a0:e3:69:a0:5d:ef:2d:c5:15:91:40:1b:
         82:a5:59:7a:9b:d9:84:1d:b4:d8:84:b1:c0:a5:f5:14:05:c4:
         17:ec:53:81:28:34:05:e1:40:eb:f7:45:12:f4:3c:a6:d7:db:
         c0:6e:ec:6d:ee:99:ad:76:2a:31:63:6d:42:ca:a3:49:0a:a0:
         40:75:b5:31:e2:68:b8:7c:0f:9b:41:c8:fc:dd:89:0f:08:aa:
         8a:fc:dd:2d:71:17:4d:23:22:bd:3d:79:e1:88:0a:9d:2b:68:
         89:85:2a:10:ab:7e:a2:d6:0a:f7:fa:8d:b8:b0:9b:07:c0:3a:
         f7:ef:cf:c7:89:73:27:42:db:b7:41:31:b7:b9:39:65:db:1c:
         48:48:85:8d:78:f7:3c:2e:64:70:6c:85:22:67:9d:ee:d3:04:
         86:eb:fd:ff:f4:5d:ab:ca:e5:1e:93:57:65:3c:61:f0:ce:3f:
         e6:9c:e3:5a:bd:b3:47:66:9d:01:08:ec:f3:d1:e0:90:5c:7a:
         e1:99:54:2b
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWDsPRXldINTMnSf6u2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIxMDgyNzA0MDAwMFoXDTI3MDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
M2FkMjA3OGItMjlhNS00ZjA3LTkxYjYtODQxOWI3ODlkNDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPFgmeN/a3cLaywXtD97KwewtFG2np+BGcWr
iu5heM9LczlsJuKfherjyL/4QwxWV8eJja6vq5cOtPF9wFDWXN85YsAjw63mNj3n
o7U1OPq2FdveIcfi+Hs/gTKNIFjm0qh8GXF07mtJ6LyRiG4V+ni0dSXeRh4LseYi
NRPsZ5Nhy71HWVDGuJtnuvl502uFP3adPC/c8v81fT77fwJg2ggXcGwkJ8tRaQDd
/K0ke72m6cEHkWT/Qq6ELqRVHAXjx84HSWOFDpY03pqxldv2+t5vHYNzw/K1KWBW
3TpQ1zrIam9CnT8FNGkKXo3BztddFfAEKNxi7jHPlthW7cnLNQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFIOdGZI55Y7Ky0GibgdBL3lSjxYeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDNhMTdkZDEtMDRmZC0z
YzFmLWI2MDYtZTI4NGQwOTA5MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAUBAIAATAOMAwDBADGKdkD
BALGKdgwGAQCAAIwEgMHACYGRwAAoQMHACYGRwAAqTBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2uWaON1fJ
+QhidJ00mFseZz6ZntIWiTOSFGgdFmksqnWh+GMwoV9zolbdB6wEggVErVkNZRTl
Ks5a7Yag42mgXe8txRWRQBuCpVl6m9mEHbTYhLHApfUUBcQX7FOBKDQF4UDr90US
9Dym19vAbuxt7pmtdioxY21CyqNJCqBAdbUx4mi4fA+bQcj83YkPCKqK/N0tcRdN
IyK9PXnhiAqdK2iJhSoQq36i1gr3+o24sJsHwDr378/HiXMnQtu3QTG3uTll2xxI
SIWNePc8LmRwbIUiZ53u0wSG6/3/9F2ryuUek1dlPGHwzj/mnONavbNHZp0BCOzz
0eCQXHrhmVQr
-----END CERTIFICATE-----
Generated at Sat May 11 02:51:10 2024 by rpki-client on console-ams.rpki-client.org