Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
File:                     43a5601d-1585-3131-be68-bff003a98cc5.roa (raw, json)
Hash identifier:          T3pnBDqnkWlXLAnUryWgKji7jq59TyNC2b2EBbKdRlg=
Subject key identifier:   E7:DB:EB:9B:97:E4:72:1D:8B:B7:16:C2:81:32:CB:E5:3B:0F:FF:8A
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285845CE08F393372A8D8E026586B0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa
Signing time:             Wed 08 May 2024 13:00:34 +0000
ROA not before:           Wed 08 May 2024 13:00:34 +0000
ROA not after:            Tue 06 Aug 2024 13:00:34 +0000
asID:                     13414
IP address blocks:        209.237.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:08:f3:93:37:2a:8d:8e:02:65:86:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: May  8 13:00:34 2024 GMT
            Not After : Aug  6 13:00:34 2024 GMT
        Subject: CN=293dace7-09e5-49a7-95d6-281c1563d5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:03:f0:65:a1:e5:a8:b6:7b:39:7d:8d:fd:
                    83:ff:eb:4d:18:66:ba:32:19:e2:3f:1a:d2:35:bd:
                    25:33:ec:41:14:7a:62:bd:19:9c:37:a7:58:3f:22:
                    17:8b:ba:89:ff:0c:57:9e:6d:a3:f4:c3:a0:0d:9b:
                    17:6b:33:9a:7e:ff:9c:c2:f5:c8:2c:ea:d9:61:38:
                    ac:b3:72:ba:fd:44:2f:6d:59:34:0f:03:88:17:d5:
                    36:34:13:b0:5d:59:85:bc:ff:3e:10:00:c3:f0:ba:
                    e5:71:fb:20:7f:22:31:39:7b:20:59:d3:46:85:8a:
                    fe:c7:8a:c1:f3:5e:54:29:7d:4a:79:5b:b9:2d:34:
                    a8:7a:01:8f:7e:55:6a:ee:e9:df:a2:d7:c9:07:6c:
                    cc:2b:4c:94:ce:91:b6:fb:87:8e:46:52:12:44:59:
                    31:26:ff:f7:87:88:93:c7:3e:91:88:19:b2:4a:8b:
                    2c:1b:31:ac:a9:dd:d6:fb:00:ab:af:b5:6c:a6:d1:
                    7e:3f:9d:e4:8d:f7:f1:cd:71:ed:d7:34:42:7d:e6:
                    e9:ea:3a:e1:f0:e0:dd:f8:42:3b:60:d9:87:7b:26:
                    d1:6f:c2:1e:26:49:f6:d7:ac:e2:8e:2d:2e:d0:a3:
                    7e:f8:3a:0a:1c:a6:ad:d0:0a:a1:5f:4b:2e:4a:52:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DB:EB:9B:97:E4:72:1D:8B:B7:16:C2:81:32:CB:E5:3B:0F:FF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/43a5601d-1585-3131-be68-bff003a98cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:a2:6b:74:73:9c:f9:56:fc:64:f2:96:7f:d2:3f:51:0a:
         ed:0c:d1:09:d9:35:01:7d:d7:d4:ee:e1:d8:da:4e:63:7e:06:
         13:3a:e9:54:54:ad:e7:45:90:13:d7:dc:df:7e:e1:a3:8a:8d:
         59:a5:74:b5:78:fc:7c:d9:ec:c0:61:c6:f1:f4:c5:47:a2:11:
         f6:f1:e9:4e:93:d3:55:fa:26:1b:27:49:c2:07:12:dc:ae:bf:
         80:2a:27:8f:c5:d4:d7:7e:04:a5:d0:f3:28:5a:cb:f0:86:05:
         41:23:3d:cf:19:24:c9:07:c3:61:29:79:b5:9e:f1:c1:2a:cd:
         09:e6:c3:bf:45:bf:f2:bc:63:59:f4:c8:ec:1a:02:a9:00:ac:
         29:ce:db:69:62:54:ef:31:e0:50:47:70:1c:3c:29:67:10:e1:
         1b:f3:8a:35:dd:ea:1c:12:cd:66:06:2c:06:2b:37:55:f3:a1:
         aa:5c:e9:0a:ef:03:c4:dc:b4:83:f2:4b:23:26:be:0c:0c:e6:
         05:a6:a3:6d:68:55:fd:cd:23:9b:fa:7a:2a:f7:79:1b:da:5e:
         de:56:3a:e7:77:62:d4:d6:43:92:66:3f:f3:9e:b3:60:62:7c:
         36:19:b4:be:76:0f:a5:2b:e1:d3:86:dc:cd:c6:a7:07:75:95:
         35:30:2a:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXOCPOTNyqNjgJlhrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI0MDUwODEzMDAzNFoXDTI0MDgwNjEzMDAzNFowLzEtMCsGA1UEAxMk
MjkzZGFjZTctMDllNS00OWE3LTk1ZDYtMjgxYzE1NjNkNWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldID8GWh5ai2ezl9jf2D/+tNGGa6MhniPxrS
Nb0lM+xBFHpivRmcN6dYPyIXi7qJ/wxXnm2j9MOgDZsXazOafv+cwvXILOrZYTis
s3K6/UQvbVk0DwOIF9U2NBOwXVmFvP8+EADD8LrlcfsgfyIxOXsgWdNGhYr+x4rB
815UKX1KeVu5LTSoegGPflVq7unfotfJB2zMK0yUzpG2+4eORlISRFkxJv/3h4iT
xz6RiBmySossGzGsqd3W+wCrr7VsptF+P53kjffxzXHt1zRCfebp6jrh8ODd+EI7
YNmHeybRb8IeJkn216ziji0u0KN++DoKHKat0AqhX0suSlKSYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOfb65uX5HIdi7cWwoEyy+U7D/+KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNDNhNTYwMWQtMTU4NS0z
MTMxLWJlNjgtYmZmMDAzYTk4Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuNomt0c5z5Vvxk8pZ/0j9RCu0M0QnZNQF919Tu4djaTmN+BhM66VRU
redFkBPX3N9+4aOKjVmldLV4/HzZ7MBhxvH0xUeiEfbx6U6T01X6JhsnScIHEtyu
v4AqJ4/F1Nd+BKXQ8yhay/CGBUEjPc8ZJMkHw2EpebWe8cEqzQnmw79Fv/K8Y1n0
yOwaAqkArCnO22liVO8x4FBHcBw8KWcQ4RvzijXd6hwSzWYGLAYrN1Xzoapc6Qrv
A8TctIPySyMmvgwM5gWmo21oVf3NI5v6eir3eRvaXt5WOud3YtTWQ5JmP/Oes2Bi
fDYZtL52D6Ur4dOG3M3Gpwd1lTUwKpo=
-----END CERTIFICATE-----
Generated at Wed May 22 06:01:08 2024 by rpki-client on console-ams.rpki-client.org