Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d82faadc-d1af-3160-b3d1-e33861e8b13a.roa
File:                     d82faadc-d1af-3160-b3d1-e33861e8b13a.roa (raw, json)
Hash identifier:          H69AAtTfzCNBIFgXbjT0bTmFGz9xJu8HPDWSxPT4WVc=
Subject key identifier:   2A:08:AE:6B:B4:A5:D1:EE:96:45:DD:F9:9B:6B:82:B1:C6:A0:3A:49
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285845971AF3527F0FCB9482584E80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d82faadc-d1af-3160-b3d1-e33861e8b13a.roa
Signing time:             Thu 18 Apr 2024 20:47:26 +0000
ROA not before:           Thu 18 Apr 2024 20:47:26 +0000
ROA not after:            Wed 17 Jul 2024 20:47:26 +0000
asID:                     13335
IP address blocks:        204.195.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:1a:f3:52:7f:0f:cb:94:82:58:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 18 20:47:26 2024 GMT
            Not After : Jul 17 20:47:26 2024 GMT
        Subject: CN=2007416e-48ba-40da-be65-b4cd413732e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:b6:84:92:e4:0e:23:53:19:47:cb:d0:2d:
                    5a:e0:f3:be:e5:69:75:47:ad:e9:c2:ab:83:60:1f:
                    3d:86:4f:16:8d:65:02:d2:39:9a:6e:a2:99:07:b9:
                    e3:02:cb:24:2a:5c:58:30:26:b3:f7:9f:55:70:87:
                    94:ef:3f:62:05:03:07:9a:97:d3:a5:35:f6:ab:62:
                    e8:99:7f:a4:c3:1f:15:da:42:bf:e9:0a:ae:73:4c:
                    48:6c:a2:be:65:a0:73:2d:48:70:42:be:6f:53:da:
                    80:3b:01:09:0b:bb:1f:7a:48:44:8d:17:ca:fe:f8:
                    a9:ae:e5:03:54:ee:4b:80:e3:43:75:ca:de:f8:bd:
                    eb:d3:c9:48:3f:eb:f0:3d:0e:93:e3:2c:0f:6a:ac:
                    11:4e:41:58:7e:2c:41:4b:9d:13:de:82:5e:10:6d:
                    e8:c2:e2:e5:9e:35:e0:29:9d:41:96:17:70:60:36:
                    3d:c9:aa:71:78:8c:6e:66:b5:4a:d0:d5:f0:06:b5:
                    06:23:0a:f8:1b:0c:28:6c:08:a6:9b:bc:b1:4d:65:
                    ab:32:83:d7:95:bf:55:ba:c5:14:d6:2c:b8:93:dc:
                    fb:85:0b:dd:fa:f6:b1:7e:03:d1:1b:a9:ea:9a:b5:
                    9e:d3:ad:55:f4:56:a0:10:71:8b:18:e8:bd:d8:16:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:08:AE:6B:B4:A5:D1:EE:96:45:DD:F9:9B:6B:82:B1:C6:A0:3A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d82faadc-d1af-3160-b3d1-e33861e8b13a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:21:23:bc:8c:69:23:ec:6f:ba:20:2b:d1:42:e6:b3:6c:
         3f:3c:33:79:0e:0d:e9:a1:ca:bb:34:24:82:46:99:a6:5b:c3:
         81:2c:2b:ce:61:2c:34:de:b5:fe:63:e5:a5:06:18:4e:4f:c1:
         3e:7f:d9:a8:53:28:8c:91:27:61:10:ca:2f:a9:0d:58:9e:70:
         1c:27:35:46:65:7d:67:eb:d5:54:ea:49:0c:90:50:67:17:41:
         d8:78:5a:d0:f9:ef:42:de:1f:52:3f:4c:b6:26:06:9a:e9:9e:
         d3:92:92:af:1a:4d:b5:f7:94:c7:4d:91:92:bc:2c:49:4c:c6:
         45:7c:e4:68:25:e6:30:f2:3d:10:63:59:a0:58:3a:b4:5d:17:
         9e:cb:df:ea:0a:b3:27:de:9e:79:35:40:f3:5b:5c:4e:cb:46:
         3d:7e:f9:ba:ea:d2:1b:c4:52:f7:ae:f5:8d:75:07:e2:cb:32:
         00:6e:1b:80:d3:42:aa:8e:0d:f3:8c:c8:06:fa:20:78:0f:8f:
         16:74:54:88:20:df:e8:31:4f:d4:2e:ad:1e:95:f7:2b:e8:10:
         03:77:94:b5:ee:b3:b7:3a:e1:fb:e2:81:57:10:d1:52:43:ab:
         25:9e:1a:49:76:50:72:d8:37:e6:ea:9e:59:83:11:10:17:d7:
         d1:f4:92:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWXGvNSfw/LlIJYToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDQxODIwNDcyNloXDTI0MDcxNzIwNDcyNlowLzEtMCsGA1UEAxMk
MjAwNzQxNmUtNDhiYS00MGRhLWJlNjUtYjRjZDQxMzczMmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolq2hJLkDiNTGUfL0C1a4PO+5Wl1R63pwquD
YB89hk8WjWUC0jmabqKZB7njAsskKlxYMCaz959VcIeU7z9iBQMHmpfTpTX2q2Lo
mX+kwx8V2kK/6Qquc0xIbKK+ZaBzLUhwQr5vU9qAOwEJC7sfekhEjRfK/vipruUD
VO5LgONDdcre+L3r08lIP+vwPQ6T4ywPaqwRTkFYfixBS50T3oJeEG3owuLlnjXg
KZ1BlhdwYDY9yapxeIxuZrVK0NXwBrUGIwr4GwwobAimm7yxTWWrMoPXlb9VusUU
1iy4k9z7hQvd+vaxfgPRG6nqmrWe061V9FagEHGLGOi92Bbx8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCoIrmu0pdHulkXd+ZtrgrHGoDpJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDgyZmFhZGMtZDFhZi0z
MTYwLWIzZDEtZTMzODYxZThiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzMPUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHesISO8jGkj7G+6ICvRQuazbD88M3kODemhyrs0JIJGmaZbw4EsK85h
LDTetf5j5aUGGE5PwT5/2ahTKIyRJ2EQyi+pDViecBwnNUZlfWfr1VTqSQyQUGcX
Qdh4WtD570LeH1I/TLYmBprpntOSkq8aTbX3lMdNkZK8LElMxkV85Ggl5jDyPRBj
WaBYOrRdF57L3+oKsyfennk1QPNbXE7LRj1++brq0hvEUveu9Y11B+LLMgBuG4DT
QqqODfOMyAb6IHgPjxZ0VIgg3+gxT9QurR6V9yvoEAN3lLXus7c64fvigVcQ0VJD
qyWeGkl2UHLYN+bqnlmDERAX19H0kiU=
-----END CERTIFICATE-----
Generated at Sat May 11 15:25:59 2024 by rpki-client on console-ams.rpki-client.org