Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43b7568d-f9b7-3b7c-a9a3-c20b34d825c5.roa
File:                     43b7568d-f9b7-3b7c-a9a3-c20b34d825c5.roa (raw, json)
Hash identifier:          pXIz1k+hAtJPkgJAR0WPx8TtWPTXTJLiSp+ncpLjD9o=
Subject key identifier:   80:1E:E4:D5:D9:1B:C6:EB:00:7F:18:CF:33:EF:F4:CF:A9:78:96:F4
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845971C7075A6F8939E46101380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43b7568d-f9b7-3b7c-a9a3-c20b34d825c5.roa
Signing time:             Thu 18 Apr 2024 20:50:26 +0000
ROA not before:           Thu 18 Apr 2024 20:50:26 +0000
ROA not after:            Wed 17 Jul 2024 20:50:26 +0000
asID:                     13335
IP address blocks:        204.195.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:1c:70:75:a6:f8:93:9e:46:10:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 18 20:50:26 2024 GMT
            Not After : Jul 17 20:50:26 2024 GMT
        Subject: CN=91f3de2a-8cfa-4148-9332-10bb8b148df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:64:7f:ab:86:bc:96:23:f9:9f:c2:91:2c:
                    d5:ba:b3:4e:f2:f5:af:7d:f6:98:a2:a5:03:00:44:
                    d1:8c:87:7c:3b:1c:3c:d1:b8:f0:4a:dd:ce:8d:49:
                    47:67:69:e2:bd:ff:e2:e6:64:68:8a:d3:96:b9:ec:
                    49:3b:fb:f9:7c:32:89:a1:87:8b:c5:70:27:f4:f5:
                    4f:32:54:2a:19:08:b0:df:8b:cd:80:24:d5:f9:4b:
                    99:6c:44:19:e0:3a:44:9b:79:8c:0d:1b:20:ed:0c:
                    20:6d:1c:24:8d:70:8a:bb:b1:07:16:b8:54:8d:8f:
                    e6:82:84:a4:22:74:1b:49:5e:d1:d9:7c:d2:b9:e4:
                    d7:b6:73:a0:c2:b0:08:b5:be:9c:d7:39:ec:b1:81:
                    de:c6:1f:d6:53:82:fe:5c:2a:76:9b:65:d2:61:73:
                    0a:ed:59:32:c4:a0:65:2f:1d:9c:1f:e7:fb:de:d2:
                    6e:b7:11:3c:c8:02:04:6e:7c:d3:88:47:6f:8d:b5:
                    36:40:03:7c:89:21:29:ec:0f:43:4a:a5:79:49:54:
                    73:35:f5:7d:87:a6:9f:ca:68:78:f1:22:c3:86:9a:
                    25:c5:21:79:51:83:65:1c:65:fa:06:3a:26:be:cc:
                    02:23:15:24:d0:32:71:f1:e4:74:64:11:ce:64:c1:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:E4:D5:D9:1B:C6:EB:00:7F:18:CF:33:EF:F4:CF:A9:78:96:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/43b7568d-f9b7-3b7c-a9a3-c20b34d825c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:31:06:0b:07:22:af:77:8c:e7:81:2e:8a:3d:da:b0:c4:e5:
         f8:f0:72:60:2e:4a:8f:ee:7f:af:e6:d5:4b:d6:6d:e7:fa:f6:
         98:bc:c5:4b:45:20:1c:b9:53:7b:cd:4d:ca:6c:63:36:c4:07:
         a8:b0:0f:6f:2c:79:01:ad:e2:a1:a1:b9:3f:58:1d:0d:53:5f:
         e9:de:52:c1:2a:24:fa:94:b9:be:28:48:ed:0f:9c:6f:20:34:
         80:96:ba:8b:93:bc:86:ca:94:47:ef:93:be:80:6d:c8:a6:5e:
         83:b4:23:c3:c3:c5:b6:53:5f:ff:d0:b4:11:ca:a1:49:06:b4:
         da:4e:77:23:5f:a6:5c:d7:c2:7e:67:50:6b:fd:32:a0:ce:a8:
         85:73:e5:ed:9b:5a:87:bc:99:34:e0:bf:04:3d:71:96:36:8d:
         41:b4:a2:92:67:f7:04:e0:0a:d1:58:f6:1c:0e:57:9f:20:af:
         28:6c:7e:c3:f7:8d:6f:f5:fc:d6:0f:9c:ea:63:99:5a:ff:f3:
         01:83:d5:85:f3:87:25:d1:38:b5:db:76:6d:ed:9f:88:2a:30:
         92:90:58:e9:38:87:a0:21:f4:3d:f2:58:e3:a3:ac:af:aa:47:
         5c:96:38:19:89:17:04:6d:ae:7f:3e:da:ac:ce:38:fd:f0:27:
         70:3a:b8:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWXHHB1pviTnkYQE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDQxODIwNTAyNloXDTI0MDcxNzIwNTAyNlowLzEtMCsGA1UEAxMk
OTFmM2RlMmEtOGNmYS00MTQ4LTkzMzItMTBiYjhiMTQ4ZGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qBkf6uGvJYj+Z/CkSzVurNO8vWvffaYoqUD
AETRjId8Oxw80bjwSt3OjUlHZ2nivf/i5mRoitOWuexJO/v5fDKJoYeLxXAn9PVP
MlQqGQiw34vNgCTV+UuZbEQZ4DpEm3mMDRsg7QwgbRwkjXCKu7EHFrhUjY/mgoSk
InQbSV7R2XzSueTXtnOgwrAItb6c1znssYHexh/WU4L+XCp2m2XSYXMK7VkyxKBl
Lx2cH+f73tJutxE8yAIEbnzTiEdvjbU2QAN8iSEp7A9DSqV5SVRzNfV9h6afymh4
8SLDhpolxSF5UYNlHGX6BjomvswCIxUk0DJx8eR0ZBHOZMHiwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIAe5NXZG8brAH8YzzPv9M+peJb0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDNiNzU2OGQtZjliNy0z
YjdjLWE5YTMtYzIwYjM0ZDgyNWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIxBgsHIq93jOeBLoo92rDE5fjwcmAuSo/uf6/m1UvWbef69pi8xUtF
IBy5U3vNTcpsYzbEB6iwD28seQGt4qGhuT9YHQ1TX+neUsEqJPqUub4oSO0PnG8g
NICWuouTvIbKlEfvk76AbcimXoO0I8PDxbZTX//QtBHKoUkGtNpOdyNfplzXwn5n
UGv9MqDOqIVz5e2bWoe8mTTgvwQ9cZY2jUG0opJn9wTgCtFY9hwOV58gryhsfsP3
jW/1/NYPnOpjmVr/8wGD1YXzhyXROLXbdm3tn4gqMJKQWOk4h6Ah9D3yWOOjrK+q
R1yWOBmJFwRtrn8+2qzOOP3wJ3A6uNs=
-----END CERTIFICATE-----
Generated at Sat May 11 15:31:19 2024 by rpki-client on console-fra.rpki-client.org