Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/83793cf0-8922-3a54-a4ff-b97894638f5b.roa
File:                     83793cf0-8922-3a54-a4ff-b97894638f5b.roa (raw, json)
Hash identifier:          SgNV+OAS18FFJWTmYFIVm6CDhj+qXfnG8MMGmsxLxgs=
Subject key identifier:   C0:75:A0:AD:1B:67:6B:78:0C:FA:59:A9:9A:BA:04:DD:27:E1:EA:4B
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584585B2896A7DF533093C055A00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/83793cf0-8922-3a54-a4ff-b97894638f5b.roa
Signing time:             Fri 12 Apr 2024 15:08:19 +0000
ROA not before:           Fri 12 Apr 2024 15:08:19 +0000
ROA not after:            Thu 11 Jul 2024 15:08:19 +0000
asID:                     16696
IP address blocks:        209.20.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:b2:89:6a:7d:f5:33:09:3c:05:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr 12 15:08:19 2024 GMT
            Not After : Jul 11 15:08:19 2024 GMT
        Subject: CN=30197380-2e4c-4094-b4bc-28e024c4a85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:8d:2b:b2:61:cd:54:39:86:19:3a:b3:c6:
                    75:e1:a9:08:b3:6d:c8:e6:fb:7c:61:a9:9e:57:2f:
                    95:c3:94:e3:1e:7e:99:78:10:f4:24:34:5d:08:8a:
                    74:4b:d6:df:c9:f6:8d:e0:e0:91:31:51:30:38:8f:
                    1c:4f:1b:c6:9f:8e:69:bf:06:a9:21:c7:5e:e4:6f:
                    e6:e4:e5:99:65:3a:fe:8d:81:5e:c1:71:0a:69:f9:
                    f2:e2:90:e9:e5:cd:5e:7b:18:f2:b0:3a:93:8b:f5:
                    d1:ae:a9:04:61:ea:ec:7f:43:34:36:a4:cb:3b:fd:
                    91:a4:90:6b:77:0b:bd:8e:e0:64:b3:ee:23:fe:37:
                    ee:64:e3:c2:7c:c4:09:96:a5:1c:2e:d1:2f:49:6f:
                    71:01:e2:06:02:94:76:d1:47:2a:b7:6d:1e:e3:dd:
                    52:51:06:f0:5f:c6:a6:16:a7:f7:7d:e9:c7:47:09:
                    83:47:a1:c7:86:d9:54:ed:16:99:a2:35:85:3d:cb:
                    8a:70:d5:94:95:76:c6:d7:14:5a:0a:fc:cb:b3:ce:
                    8e:c8:50:24:ac:71:07:0c:04:1b:02:a6:48:29:ea:
                    12:81:b8:95:01:1a:ab:ed:26:4f:4d:6b:db:3b:d3:
                    b9:ae:44:7e:67:51:d2:06:73:a8:d1:c9:8e:d3:91:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:75:A0:AD:1B:67:6B:78:0C:FA:59:A9:9A:BA:04:DD:27:E1:EA:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/83793cf0-8922-3a54-a4ff-b97894638f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.20.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:96:74:5d:7f:46:95:4a:a3:12:cb:af:19:ab:41:e7:22:53:
         71:90:63:f8:cc:b8:54:f0:55:9a:6d:c3:a9:2c:50:67:22:9d:
         a8:0c:3b:b7:2f:ac:da:61:e5:75:8f:1f:76:f2:9e:f0:c1:cd:
         36:5b:b4:fe:a3:65:59:ff:33:27:68:7b:81:70:bd:7b:ac:a6:
         7b:bf:34:7f:1d:c4:4f:8f:c4:ce:ae:9d:4b:69:3b:55:cb:d0:
         0b:9f:d1:c7:1e:28:cc:8c:da:f9:ec:bd:76:c9:b6:6e:16:af:
         4d:29:64:6b:22:79:8c:fc:49:0c:ba:25:80:27:88:fd:70:01:
         e7:f0:e9:d2:04:f8:a0:f0:91:ef:29:a8:fc:73:8f:97:45:40:
         5b:cc:a3:44:6a:7e:d4:c1:15:68:64:a9:0b:1c:ce:89:d2:a6:
         7f:b6:07:8e:b4:e7:21:ee:7c:a3:7f:67:e2:98:93:d0:81:00:
         b4:99:5a:99:99:f9:ca:1d:e1:4c:13:44:44:a7:c6:34:d0:af:
         32:54:af:ed:51:2c:43:d2:91:6f:c2:d3:ba:ff:8f:21:21:39:
         45:a2:1f:01:43:a5:ce:af:ad:55:ef:b6:02:ee:a6:ce:ab:8d:
         73:aa:c7:60:9a:17:df:3a:01:a1:7c:36:18:1c:3b:ac:d1:25:
         b0:7e:97:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWFsolqffUzCTwFWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI0MDQxMjE1MDgxOVoXDTI0MDcxMTE1MDgxOVowLzEtMCsGA1UEAxMk
MzAxOTczODAtMmU0Yy00MDk0LWI0YmMtMjhlMDI0YzRhODViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiaNK7JhzVQ5hhk6s8Z14akIs23I5vt8Yame
Vy+Vw5TjHn6ZeBD0JDRdCIp0S9bfyfaN4OCRMVEwOI8cTxvGn45pvwapIcde5G/m
5OWZZTr+jYFewXEKafny4pDp5c1eexjysDqTi/XRrqkEYersf0M0NqTLO/2RpJBr
dwu9juBks+4j/jfuZOPCfMQJlqUcLtEvSW9xAeIGApR20Ucqt20e491SUQbwX8am
Fqf3fenHRwmDR6HHhtlU7RaZojWFPcuKcNWUlXbG1xRaCvzLs86OyFAkrHEHDAQb
AqZIKeoSgbiVARqr7SZPTWvbO9O5rkR+Z1HSBnOo0cmO05EqewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMB1oK0bZ2t4DPpZqZq6BN0n4epLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvODM3OTNjZjAtODkyMi0z
YTU0LWE0ZmYtYjk3ODk0NjM4ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKWdF1/RpVKoxLLrxmrQeciU3GQY/jMuFTwVZptw6ksUGcinagMO7cv
rNph5XWPH3bynvDBzTZbtP6jZVn/Mydoe4FwvXuspnu/NH8dxE+PxM6unUtpO1XL
0Auf0cceKMyM2vnsvXbJtm4Wr00pZGsieYz8SQy6JYAniP1wAefw6dIE+KDwke8p
qPxzj5dFQFvMo0RqftTBFWhkqQsczonSpn+2B4605yHufKN/Z+KYk9CBALSZWpmZ
+cod4UwTRESnxjTQrzJUr+1RLEPSkW/C07r/jyEhOUWiHwFDpc6vrVXvtgLups6r
jXOqx2CaF986AaF8NhgcO6zRJbB+l1k=
-----END CERTIFICATE-----
Generated at Wed May 22 20:43:36 2024 by rpki-client on console-fra.rpki-client.org