Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa
File:                     d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa (raw, json)
Hash identifier:          Mog4ZXi0o7dDr1Jc7Ln/TMMl4Wh1q6tuV+Njw8cGylo=
Subject key identifier:   FC:39:4D:B3:B2:70:E5:1F:CF:44:70:BC:DD:64:8C:47:DA:7C:EC:A9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584597187806BFE2A79BC39EFD00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa
Signing time:             Thu 18 Apr 2024 20:42:26 +0000
ROA not before:           Thu 18 Apr 2024 20:42:26 +0000
ROA not after:            Wed 17 Jul 2024 20:42:26 +0000
asID:                     13335
IP address blocks:        204.195.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:18:78:06:bf:e2:a7:9b:c3:9e:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 18 20:42:26 2024 GMT
            Not After : Jul 17 20:42:26 2024 GMT
        Subject: CN=5aa6a60a-30d0-42a8-bfac-b4ecc25a2b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:98:d8:60:10:76:6b:f1:8d:9b:c0:4a:30:
                    83:5f:4f:69:c9:5e:30:c7:cc:5c:39:1f:ab:04:c3:
                    aa:8e:b9:4b:cf:6d:64:31:fe:e9:73:c9:d4:4a:73:
                    64:fe:4b:6e:50:35:7d:2c:f7:9e:6c:9b:2b:ed:ed:
                    17:d8:0f:66:fc:47:81:9c:d1:18:f5:a4:fa:19:d2:
                    a3:52:6b:f0:ac:08:d3:c9:85:80:b7:66:36:62:a7:
                    d7:66:1a:80:42:53:6a:6c:dc:4a:7b:46:26:6b:a7:
                    ef:e8:f6:41:a0:1c:61:6e:ba:78:8e:e7:95:d0:67:
                    17:2f:31:84:5a:72:d3:f9:ca:2d:6c:9b:f3:ad:f2:
                    2f:a1:7e:f5:db:df:2a:44:7f:df:8e:0f:b2:2a:97:
                    66:c7:b1:4c:28:a0:1e:21:6c:d3:78:8d:47:89:69:
                    45:1d:32:28:f7:76:f5:79:5a:2c:48:0b:43:3d:57:
                    cc:5f:f3:1f:15:b7:36:09:c8:71:61:2d:fe:cb:b4:
                    09:8c:bb:38:c6:9a:5a:a4:32:86:62:65:5c:31:8d:
                    83:b0:fc:3b:7e:bc:34:3a:86:e2:99:a9:63:0f:a5:
                    b4:d3:a5:5c:47:38:15:11:db:9f:19:0f:74:a4:15:
                    26:05:35:77:f1:d2:18:df:18:cf:10:53:3e:b7:b6:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:39:4D:B3:B2:70:E5:1F:CF:44:70:BC:DD:64:8C:47:DA:7C:EC:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9e92df3-32fe-35cb-ad7d-eeffeb87dd0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:b6:e1:03:77:8f:06:57:e4:5e:fa:d2:1d:3b:bc:69:62:
         09:be:b1:21:b7:64:8a:74:7f:90:cb:d1:c5:e6:08:0d:83:85:
         95:fa:35:f2:ec:fe:5d:5c:ad:90:c4:a7:c7:76:a2:70:4c:d6:
         6d:11:a9:57:27:cb:4b:09:f7:a2:b8:30:1e:c2:61:d4:ee:6b:
         c9:58:9c:4e:e5:6d:2b:9e:95:b5:65:13:f1:6f:dd:4a:9c:7a:
         f1:4a:72:3c:18:4a:42:41:5c:26:b0:ac:7f:38:9c:05:d1:54:
         e1:17:f2:84:40:9a:99:e4:9e:49:83:a6:1d:a2:42:c3:23:c2:
         af:48:41:c7:35:b2:49:3b:10:f6:7a:79:35:20:4c:ea:31:33:
         c4:f8:7f:34:20:35:48:9d:e6:d9:ff:91:9f:77:76:27:97:94:
         1f:9e:97:c7:69:79:a8:ec:c6:92:57:7b:97:15:fe:40:2e:dc:
         c8:56:86:38:5f:b1:11:ac:7c:8f:1b:ac:f5:cf:65:89:2e:c3:
         7a:0c:34:b4:86:42:f1:d0:a2:19:e2:ca:82:95:22:b6:1b:36:
         35:7c:59:4a:e0:d0:8d:c0:52:7a:bd:45:74:83:c6:c9:26:4b:
         73:27:27:4c:f8:94:04:9c:f6:25:65:48:24:78:f8:cc:4f:ba:
         a4:86:68:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWXGHgGv+Knm8Oe/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDQxODIwNDIyNloXDTI0MDcxNzIwNDIyNlowLzEtMCsGA1UEAxMk
NWFhNmE2MGEtMzBkMC00MmE4LWJmYWMtYjRlY2MyNWEyYjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxWY2GAQdmvxjZvASjCDX09pyV4wx8xcOR+r
BMOqjrlLz21kMf7pc8nUSnNk/ktuUDV9LPeebJsr7e0X2A9m/EeBnNEY9aT6GdKj
UmvwrAjTyYWAt2Y2YqfXZhqAQlNqbNxKe0Yma6fv6PZBoBxhbrp4jueV0GcXLzGE
WnLT+cotbJvzrfIvoX71298qRH/fjg+yKpdmx7FMKKAeIWzTeI1HiWlFHTIo93b1
eVosSAtDPVfMX/MfFbc2CchxYS3+y7QJjLs4xppapDKGYmVcMY2DsPw7frw0Oobi
maljD6W006VcRzgVEdufGQ90pBUmBTV38dIY3xjPEFM+t7Y1WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPw5TbOycOUfz0RwvN1kjEfafOypMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDllOTJkZjMtMzJmZS0z
NWNiLWFkN2QtZWVmZmViODdkZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9gtuEDd48GV+Re+tIdO7xpYgm+sSG3ZIp0f5DL0cXmCA2DhZX6NfLs
/l1crZDEp8d2onBM1m0RqVcny0sJ96K4MB7CYdTua8lYnE7lbSuelbVlE/Fv3Uqc
evFKcjwYSkJBXCawrH84nAXRVOEX8oRAmpnknkmDph2iQsMjwq9IQcc1skk7EPZ6
eTUgTOoxM8T4fzQgNUid5tn/kZ93dieXlB+el8dpeajsxpJXe5cV/kAu3MhWhjhf
sRGsfI8brPXPZYkuw3oMNLSGQvHQohniyoKVIrYbNjV8WUrg0I3AUnq9RXSDxskm
S3MnJ0z4lASc9iVlSCR4+MxPuqSGaNg=
-----END CERTIFICATE-----
Generated at Sat May 11 17:57:22 2024 by rpki-client on console-ams.rpki-client.org