Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa
File:                     ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa (raw, json)
Hash identifier:          wdnTieZ1bH5hU4477vaiNDZWL8tswa3YYo6/dluH9k4=
Subject key identifier:   6B:1F:6C:58:A9:6D:37:97:D9:20:5C:A4:5D:7B:16:3D:51:E0:BB:1E
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F43285844F03543A92FB255170D0C8CC0
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     10753
IP address blocks:        172.93.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:43:a9:2f:b2:55:17:0d:0c:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=ea695cae-a414-4d3e-85c9-88771d92c533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:dd:64:2b:6f:8b:fb:90:a3:e7:64:b9:50:
                    40:bc:bd:b1:4c:28:37:e3:9e:3a:3f:51:9f:0a:2c:
                    2b:a1:1c:fa:a3:5b:bb:36:08:75:83:10:71:73:93:
                    bd:e6:10:e8:bb:65:dc:25:31:9d:bf:4f:a5:36:82:
                    a7:5e:ca:f3:96:bb:34:5b:36:fe:a6:12:72:84:38:
                    51:c7:d1:21:ff:2e:d3:18:ee:55:f8:40:ee:19:eb:
                    14:6f:31:de:05:9d:d0:71:4a:49:40:ce:c1:17:bb:
                    6e:7f:5f:0a:9d:ca:f6:99:d9:22:22:92:ab:9d:8e:
                    cc:ad:cc:1d:9e:ef:45:7b:1e:bf:fe:67:f9:6b:9d:
                    83:1c:b3:a2:86:3a:34:04:fd:ec:8f:14:78:77:47:
                    49:b4:e2:79:4c:59:63:71:3f:31:df:0a:17:88:ef:
                    9b:15:d8:cf:4a:fa:0a:f0:37:e4:57:ce:26:48:20:
                    5d:d3:09:61:2c:3f:6c:74:85:55:a0:03:dd:4b:0b:
                    54:f8:ac:d6:d3:56:8c:8d:9d:47:3e:68:2a:09:ef:
                    68:07:de:93:ad:dc:8d:6b:df:cd:e0:00:47:9d:0d:
                    c1:b6:c1:b3:2a:15:f9:2b:6f:52:0b:da:a4:f3:e0:
                    ca:7f:aa:ec:66:a8:9b:a5:33:2b:b4:de:34:cd:72:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1F:6C:58:A9:6D:37:97:D9:20:5C:A4:5D:7B:16:3D:51:E0:BB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/ddbc3e6a-fa39-32a1-a964-47306d0a0945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:47:24:55:bb:cb:b6:e7:cb:c2:ed:6b:74:1a:34:b4:4c:
         c7:ad:1c:98:43:7d:fc:53:ab:ad:1f:9c:a6:52:63:4f:38:ad:
         c8:ee:3d:69:00:68:39:39:48:3c:24:be:59:d0:8d:4a:76:6c:
         8a:73:4e:b7:b0:de:cb:90:1e:0b:fa:c9:ec:24:6b:cf:d5:99:
         cf:20:2a:67:4c:13:01:4d:9f:f6:27:c3:a5:f2:a0:f1:0c:91:
         9a:88:1d:f8:a6:f9:5c:82:fd:32:0d:1b:62:12:d1:7c:52:81:
         fe:9c:80:0e:26:c8:4a:4d:1d:64:70:8a:f7:b8:18:87:f2:2c:
         03:1f:56:67:75:e7:c4:3d:75:4a:7d:3b:59:64:9e:6a:67:6d:
         c1:4b:af:4c:19:ef:71:81:4c:50:39:4f:6f:99:45:19:49:4d:
         4f:ea:01:69:ca:3f:e7:1b:c4:e0:46:3b:b7:05:c3:9d:4a:03:
         9c:43:58:35:bf:46:8f:c2:76:0a:d2:f1:dc:f1:3c:4d:f9:74:
         5f:a6:6b:e4:82:76:4c:fd:b0:7c:bf:84:19:99:2c:14:6d:5c:
         17:3b:b7:00:21:e4:c6:cd:2b:f9:06:e3:1d:04:cc:da:83:36:
         ad:e7:f3:fc:58:33:d8:cf:1d:73:a3:76:76:0d:63:17:ef:72:
         43:09:7a:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETwNUOpL7JVFw0MjMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyYTVhZWUtYzE1Ni00M2E3LTg1MmQtOGNmYzJhY2Ez
NmU2MB4XDTI0MDIxOTAyMDAyNVoXDTI0MDUxOTAxMDAyNVowLzEtMCsGA1UEAxMk
ZWE2OTVjYWUtYTQxNC00ZDNlLTg1YzktODg3NzFkOTJjNTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnLdZCtvi/uQo+dkuVBAvL2xTCg34546P1Gf
CiwroRz6o1u7Ngh1gxBxc5O95hDou2XcJTGdv0+lNoKnXsrzlrs0Wzb+phJyhDhR
x9Eh/y7TGO5V+EDuGesUbzHeBZ3QcUpJQM7BF7tuf18Kncr2mdkiIpKrnY7Mrcwd
nu9Fex6//mf5a52DHLOihjo0BP3sjxR4d0dJtOJ5TFljcT8x3woXiO+bFdjPSvoK
8DfkV84mSCBd0wlhLD9sdIVVoAPdSwtU+KzW01aMjZ1HPmgqCe9oB96TrdyNa9/N
4ABHnQ3BtsGzKhX5K29SC9qk8+DKf6rsZqibpTMrtN40zXIwnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsfbFipbTeX2SBcpF17Fj1R4LseMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODJh
NWFlZS1jMTU2LTQzYTctODUyZC04Y2ZjMmFjYTM2ZTYvZGRiYzNlNmEtZmEzOS0z
MmExLWE5NjQtNDczMDZkMGEwOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTgyYTVhZWUtYzE1Ni00M2E3LTg1
MmQtOGNmYzJhY2EzNmU2L2U4MmE1YWVlLWMxNTYtNDNhNy04NTJkLThjZmMyYWNh
MzZlNi5jcmwwHwYDVR0jBBgwFoAUUFdAxxWy+40HQ6bcB3qgd77rv0QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lODJhNWFlZS1jMTU2LTQzYTctODUyZC04Y2Zj
MmFjYTM2ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF16MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9QRyRVu8u258vC7Wt0GjS0TMetHJhDffxTq60fnKZSY084rcjuPWkA
aDk5SDwkvlnQjUp2bIpzTrew3suQHgv6yewka8/Vmc8gKmdMEwFNn/Ynw6XyoPEM
kZqIHfim+VyC/TING2IS0XxSgf6cgA4myEpNHWRwive4GIfyLAMfVmd158Q9dUp9
O1lknmpnbcFLr0wZ73GBTFA5T2+ZRRlJTU/qAWnKP+cbxOBGO7cFw51KA5xDWDW/
Ro/CdgrS8dzxPE35dF+ma+SCdkz9sHy/hBmZLBRtXBc7twAh5MbNK/kG4x0EzNqD
Nq3n8/xYM9jPHXOjdnYNYxfvckMJelg=
-----END CERTIFICATE-----
Generated at Thu May 2 04:23:52 2024 by rpki-client on console-fra.rpki-client.org