Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa
File:                     606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa (raw, json)
Hash identifier:          e0biAOJvUacfQRwhm/LaUJ/LegXcrr6cUaqENVmJURI=
Subject key identifier:   2F:38:3A:51:53:D9:42:19:38:4F:E4:87:3B:FE:7A:14:97:49:EA:48
Certificate issuer:       /CN=2e356a8c-d37d-4efc-986d-251de18075cc
Certificate serial:       010D0C9F43285845A9BE18F8B91C1ED993E75350
Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     14543
IP address blocks:        69.84.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:18:f8:b9:1c:1e:d9:93:e7:53:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=c6b2537d-403d-4c78-bc7a-82dbe2d738a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:b2:74:f3:e4:7f:93:69:74:86:f1:c4:cc:
                    f5:b4:d7:da:86:8e:ed:19:74:04:73:c3:e5:ed:3d:
                    ec:21:82:f0:cc:2e:3e:82:bf:26:cc:c4:f9:e6:b5:
                    5d:2e:94:90:2d:d3:85:28:fe:7a:ab:ad:ae:a6:68:
                    17:2e:3a:b4:96:8b:3e:d1:c1:ff:af:d8:37:1f:d2:
                    7f:17:e6:d7:ed:67:bb:f2:89:ae:02:d8:ca:cc:04:
                    37:28:7e:ff:cb:4a:1d:b7:f3:d6:d5:5e:9a:45:eb:
                    6b:67:4b:11:c0:9c:73:e7:28:3f:36:f6:12:d3:bd:
                    8c:44:ba:aa:bb:9a:1d:30:20:7c:fd:81:33:7e:44:
                    24:01:f1:b9:c3:be:1d:cd:bb:2c:72:af:e9:bc:60:
                    28:c4:6e:89:f3:49:02:ef:59:5a:9d:03:7e:53:05:
                    58:64:78:4b:b5:82:c9:d0:00:66:95:c4:c8:c5:5f:
                    44:fe:69:2c:83:f1:d2:05:96:ff:57:6e:16:a5:3e:
                    73:f9:ac:82:e7:6d:8b:1a:af:cb:c6:c1:f1:35:ca:
                    12:34:3d:f9:44:30:fb:9c:16:54:eb:ad:f8:ea:c6:
                    22:a4:71:96:4b:44:6c:da:cb:35:08:a3:18:7f:12:
                    8f:ba:88:3c:94:44:2d:60:57:98:4f:91:87:f4:72:
                    c6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:38:3A:51:53:D9:42:19:38:4F:E4:87:3B:FE:7A:14:97:49:EA:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/606dc7ab-30e0-3efc-855d-f92e73b73f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl

            X509v3 Authority Key Identifier:
                keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.84.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:cf:83:62:3e:5e:47:e6:53:7e:3d:33:0b:9c:71:16:2d:d6:
         05:8e:1d:a7:c9:3c:32:24:59:40:72:55:4b:fd:a0:9b:58:1b:
         f0:b1:08:7a:52:18:7d:7f:63:dc:a1:ad:64:67:e6:60:ee:24:
         97:db:fd:a5:c4:ad:4c:84:22:cf:74:53:32:c9:ae:71:10:c6:
         b7:63:89:f1:61:3e:fa:cc:17:fb:fb:23:01:d6:b9:33:c9:94:
         b2:1a:9d:7a:3d:2c:cc:24:e8:f0:54:bd:65:36:98:41:1d:68:
         7f:7a:08:87:96:1b:03:fb:d1:e9:d6:00:b4:10:3e:60:a2:f3:
         9d:1a:40:06:b4:74:f0:d0:d9:3e:95:7e:97:d9:0b:5e:16:8c:
         e5:7c:6b:9d:fe:00:31:c5:d8:5c:68:10:e2:8d:db:0c:f2:b7:
         2e:10:28:1a:97:6b:6c:40:ea:53:e1:f5:87:23:e0:98:37:37:
         6a:bf:ed:ad:97:64:06:eb:80:57:c8:d9:9b:0f:ca:37:0a:b8:
         b3:10:cf:aa:b2:da:d7:db:d1:ba:ea:3a:ed:36:4e:a3:eb:11:
         bb:52:3d:cc:ef:39:d2:9c:2c:4d:17:c5:5c:df:c0:b5:19:3b:
         f7:f8:0c:ee:77:52:a6:be:88:53:e0:e9:8c:18:d6:85:ea:ae:
         b4:79:f4:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpvhj4uRwe2ZPnU1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3
NWNjMB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk
YzZiMjUzN2QtNDAzZC00Yzc4LWJjN2EtODJkYmUyZDczOGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiyydPPkf5NpdIbxxMz1tNfaho7tGXQEc8Pl
7T3sIYLwzC4+gr8mzMT55rVdLpSQLdOFKP56q62upmgXLjq0los+0cH/r9g3H9J/
F+bX7We78omuAtjKzAQ3KH7/y0odt/PW1V6aRetrZ0sRwJxz5yg/NvYS072MRLqq
u5odMCB8/YEzfkQkAfG5w74dzbsscq/pvGAoxG6J80kC71lanQN+UwVYZHhLtYLJ
0ABmlcTIxV9E/mksg/HSBZb/V24WpT5z+ayC522LGq/LxsHxNcoSND35RDD7nBZU
66346sYipHGWS0Rs2ss1CKMYfxKPuog8lEQtYFeYT5GH9HLGEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC84OlFT2UIZOE/khzv+ehSXSepIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1
NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvNjA2ZGM3YWItMzBlMC0z
ZWZjLTg1NWQtZjkyZTczYjczZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4
NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw
NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk
ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERVQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPPg2I+XkfmU349MwuccRYt1gWOHafJPDIkWUByVUv9oJtYG/CxCHpS
GH1/Y9yhrWRn5mDuJJfb/aXErUyEIs90UzLJrnEQxrdjifFhPvrMF/v7IwHWuTPJ
lLIanXo9LMwk6PBUvWU2mEEdaH96CIeWGwP70enWALQQPmCi850aQAa0dPDQ2T6V
fpfZC14WjOV8a53+ADHF2FxoEOKN2wzyty4QKBqXa2xA6lPh9Ycj4Jg3N2q/7a2X
ZAbrgFfI2ZsPyjcKuLMQz6qy2tfb0brqOu02TqPrEbtSPczvOdKcLE0XxVzfwLUZ
O/f4DO53Uqa+iFPg6YwY1oXqrrR59Fg=
-----END CERTIFICATE-----
Generated at Thu May 23 16:33:20 2024 by rpki-client on console-ams.rpki-client.org