Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa
File:                     a8d84f62-51d4-3c50-ac70-43d409c29abd.roa (raw, json)
Hash identifier:          TlvLAf/YDJnfxxoBqI5gnmye2NHS6/kJZVnm25kYLHI=
Subject key identifier:   D7:68:BD:C4:B3:E6:7D:B3:98:C9:88:81:05:92:AF:4F:8C:D7:CD:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584558C17724F4C4EB1B812249C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa
Signing time:             Wed 27 Mar 2024 12:47:01 +0000
ROA not before:           Wed 27 Mar 2024 12:47:01 +0000
ROA not after:            Tue 25 Jun 2024 12:47:01 +0000
asID:                     7342
IP address blocks:        209.131.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c1:77:24:f4:c4:eb:1b:81:22:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 12:47:01 2024 GMT
            Not After : Jun 25 12:47:01 2024 GMT
        Subject: CN=e64bba97-11be-4764-8d6f-202ffbd34463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a7:da:97:38:6e:33:bd:22:bb:ca:bb:0d:b6:
                    f4:61:ba:a1:f0:94:f4:e8:70:8b:eb:fc:4f:1e:08:
                    2f:6b:85:8f:13:78:3b:c5:69:bc:c7:fa:2c:c8:28:
                    42:18:cc:07:f2:23:83:d4:9e:56:ba:30:aa:35:fe:
                    a5:f1:62:b1:52:fd:42:13:a4:d6:71:aa:4f:29:3e:
                    ef:09:ed:dc:df:7e:13:1f:f8:be:bf:4b:dd:5b:09:
                    fe:fc:07:ac:e2:44:af:ce:bf:5b:22:b3:3f:4c:d4:
                    7e:73:00:e4:bd:ee:e8:89:5d:b9:43:90:ff:30:86:
                    6a:a4:e3:3e:bf:5d:99:9a:8d:30:87:10:66:e2:d6:
                    26:21:c3:be:f2:51:05:17:c9:68:33:df:b5:e6:f1:
                    5a:6f:e8:f6:04:d8:6e:00:17:23:2e:6f:4d:8f:32:
                    c1:76:be:09:5f:7a:04:72:5e:d6:86:ce:4d:46:23:
                    30:7e:99:23:1d:63:33:d2:73:79:61:c9:48:3e:cc:
                    f6:9c:b5:75:42:fb:8a:04:f3:d3:24:fc:1e:18:9c:
                    cc:7d:42:dc:28:d9:d8:d7:1d:5e:7d:2b:cc:73:a3:
                    06:a6:d5:bd:4d:60:4a:d7:96:d5:1f:34:3d:02:b7:
                    2f:81:cd:ed:51:18:c1:f4:b8:0c:92:ab:01:14:f5:
                    ab:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:68:BD:C4:B3:E6:7D:B3:98:C9:88:81:05:92:AF:4F:8C:D7:CD:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:57:19:5a:45:82:f0:30:0f:4f:de:16:db:96:4d:63:80:8c:
         eb:83:8a:56:d4:b7:fe:0c:c7:2f:14:d9:f5:43:8a:59:31:98:
         52:53:e9:65:98:e7:5c:80:84:15:9f:a1:71:4b:34:63:88:4b:
         05:60:87:15:da:9b:00:f1:6f:88:7e:7c:26:29:45:45:06:c5:
         e7:c0:ab:08:b8:15:66:56:b2:03:ff:db:9f:0f:40:0d:e4:da:
         72:07:84:7d:aa:9d:dd:0b:4d:5d:cf:ef:4b:d3:df:b3:ee:5d:
         a1:f7:62:91:47:07:7a:90:20:ab:04:4c:4a:3e:6f:a3:40:fb:
         c7:08:b3:cd:15:aa:1e:ed:15:f6:f5:3b:60:29:22:3d:e1:a7:
         7f:62:88:04:2d:7d:62:9f:5a:ba:5d:82:6b:9a:32:ee:18:69:
         72:57:16:20:36:c7:7c:de:cf:0e:c6:1e:2c:91:e3:1e:19:3f:
         3e:ea:f8:7f:81:67:cb:63:80:c3:32:7e:2e:45:9b:fa:dd:25:
         18:07:f9:f7:60:43:d0:17:af:f3:1e:8c:af:0e:32:8b:18:f2:
         2c:af:9c:15:15:f4:d5:15:3e:77:5e:7a:1b:72:a2:3b:25:62:
         1f:a0:10:48:24:03:88:75:24:00:bf:39:e1:2e:4e:0e:d4:ce:
         dd:a7:a9:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVYwXck9MTrG4EiScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDMyNzEyNDcwMVoXDTI0MDYyNTEyNDcwMVowLzEtMCsGA1UEAxMk
ZTY0YmJhOTctMTFiZS00NzY0LThkNmYtMjAyZmZiZDM0NDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmafalzhuM70iu8q7Dbb0Ybqh8JT06HCL6/xP
Hggva4WPE3g7xWm8x/osyChCGMwH8iOD1J5WujCqNf6l8WKxUv1CE6TWcapPKT7v
Ce3c334TH/i+v0vdWwn+/Aes4kSvzr9bIrM/TNR+cwDkve7oiV25Q5D/MIZqpOM+
v12Zmo0whxBm4tYmIcO+8lEFF8loM9+15vFab+j2BNhuABcjLm9NjzLBdr4JX3oE
cl7Whs5NRiMwfpkjHWMz0nN5YclIPsz2nLV1QvuKBPPTJPweGJzMfULcKNnY1x1e
fSvMc6MGptW9TWBK15bVHzQ9Arcvgc3tURjB9LgMkqsBFPWrVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdovcSz5n2zmMmIgQWSr0+M183TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThkODRmNjItNTFkNC0z
YzUwLWFjNzAtNDNkNDA5YzI5YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFXGVpFgvAwD0/eFtuWTWOAjOuDilbUt/4Mxy8U2fVDilkxmFJT6WWY
51yAhBWfoXFLNGOISwVghxXamwDxb4h+fCYpRUUGxefAqwi4FWZWsgP/258PQA3k
2nIHhH2qnd0LTV3P70vT37PuXaH3YpFHB3qQIKsETEo+b6NA+8cIs80Vqh7tFfb1
O2ApIj3hp39iiAQtfWKfWrpdgmuaMu4YaXJXFiA2x3zezw7GHiyR4x4ZPz7q+H+B
Z8tjgMMyfi5Fm/rdJRgH+fdgQ9AXr/MejK8OMosY8iyvnBUV9NUVPndeehtyojsl
Yh+gEEgkA4h1JAC/OeEuTg7Uzt2nqUA=
-----END CERTIFICATE-----
Generated at Fri May 10 03:33:26 2024 by rpki-client on console-fra.rpki-client.org