Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa
File:                     a76e2a99-afef-387e-82e9-daf0c2b55c50.roa (raw, json)
Hash identifier:          JlgAbVyW+Cv8yVVnZAmZMs3Ga4VCmO01yTrOFwUF5ss=
Subject key identifier:   D9:1B:9D:F2:63:48:D0:21:DD:24:19:BC:5C:08:C7:6A:27:76:B7:8C
Certificate issuer:       /CN=83978879-0e89-498f-901b-884a1988c27f
Certificate serial:       010D0C9F43285845A428AFBF8339D38A6463D29C
Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     21615
IP address blocks:        209.33.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:af:bf:83:39:d3:8a:64:63:d2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83978879-0e89-498f-901b-884a1988c27f
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=85819a83-6731-4560-b03d-a3d4f9056f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5d:c9:b8:9a:ea:cf:c7:4e:a5:19:7d:95:14:
                    34:97:1e:47:66:3e:da:54:c4:37:ef:34:c4:be:75:
                    99:c2:0c:c1:1c:4b:a9:63:78:6c:cd:d4:c0:ed:18:
                    e3:95:06:5e:ac:5b:9c:a8:ab:e6:0f:19:8b:0a:17:
                    fe:e1:60:08:54:33:cd:48:28:0a:38:02:64:42:47:
                    1e:50:c1:be:05:74:0d:40:46:a5:35:4f:28:99:17:
                    e0:7a:7c:d5:de:b9:f5:b4:8a:68:7a:72:4f:f2:24:
                    3a:2e:b5:cf:ec:20:4b:62:72:18:9a:99:18:30:fa:
                    c3:c9:ea:e8:1c:3f:4d:b0:52:e2:5e:63:e2:7e:91:
                    78:a0:7e:c8:e6:44:3a:1d:b3:7b:db:9c:64:54:59:
                    84:58:b5:4a:00:fe:bd:57:cb:4a:ef:71:10:80:f1:
                    16:f6:bf:d8:97:f0:63:23:d8:b6:bf:f0:67:5d:ad:
                    a4:87:20:8e:ba:85:f0:97:e8:89:c2:5c:37:ac:9f:
                    d7:6a:12:e2:7e:a4:2c:19:08:bb:5d:29:48:37:57:
                    6e:0a:c7:b3:03:6d:28:9f:02:a8:7b:24:46:c2:24:
                    70:6f:bc:85:f2:ad:5d:4c:20:48:79:9e:bf:fb:bb:
                    02:32:22:cc:90:91:92:f9:26:a5:ea:75:57:2e:62:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1B:9D:F2:63:48:D0:21:DD:24:19:BC:5C:08:C7:6A:27:76:B7:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/a76e2a99-afef-387e-82e9-daf0c2b55c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.33.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b8:47:bc:0f:a5:f3:f9:aa:4a:06:67:96:90:1e:54:52:06:
         eb:c0:43:ee:39:aa:20:ed:a9:c2:10:d8:d8:e9:96:c5:24:0e:
         42:6c:25:c7:9a:15:f8:05:9b:05:e5:7a:ee:17:c7:5f:ad:53:
         98:bc:2b:99:0f:91:19:e9:06:78:03:5c:16:3e:39:42:48:0c:
         62:14:b8:10:85:d7:03:c0:4c:86:76:10:63:ac:ec:84:01:05:
         11:6c:60:38:78:3d:84:84:de:de:94:10:25:6a:45:8f:bc:3c:
         6b:a1:cd:6a:7a:e3:a8:ac:2a:1b:d6:d5:5c:a6:20:b0:bf:85:
         f7:b2:24:88:18:e5:eb:50:16:9f:87:c1:53:4d:5d:6e:23:82:
         63:68:f4:b9:f5:32:59:06:7e:96:e3:2d:ec:49:61:96:78:e1:
         a3:2a:af:2e:fa:68:23:c2:5e:ea:79:ed:8a:4a:c0:e6:6e:26:
         bd:97:44:9c:ff:2c:c9:85:0b:06:dc:97:e5:90:5e:62:b7:de:
         01:48:e8:c4:24:8e:7c:1c:a4:78:2f:72:39:69:ec:d6:62:0a:
         d5:9e:24:f6:63:10:e7:fb:13:27:1b:21:61:a0:33:c0:4e:b4:
         70:c2:ab:c7:c6:44:95:6c:f8:c1:9d:d3:c7:c3:91:cb:90:17:
         1f:20:8f:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKK+/gznTimRj0pwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM5Nzg4NzktMGU4OS00OThmLTkwMWItODg0YTE5ODhj
MjdmMB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk
ODU4MTlhODMtNjczMS00NTYwLWIwM2QtYTNkNGY5MDU2ZjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7l3JuJrqz8dOpRl9lRQ0lx5HZj7aVMQ37zTE
vnWZwgzBHEupY3hszdTA7RjjlQZerFucqKvmDxmLChf+4WAIVDPNSCgKOAJkQkce
UMG+BXQNQEalNU8omRfgenzV3rn1tIpoenJP8iQ6LrXP7CBLYnIYmpkYMPrDyero
HD9NsFLiXmPifpF4oH7I5kQ6HbN725xkVFmEWLVKAP69V8tK73EQgPEW9r/Yl/Bj
I9i2v/BnXa2khyCOuoXwl+iJwlw3rJ/XahLifqQsGQi7XSlIN1duCsezA20onwKo
eyRGwiRwb7yF8q1dTCBIeZ6/+7sCMiLMkJGS+Sal6nVXLmIW7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkbnfJjSNAh3SQZvFwIx2ondreMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3
ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRhMTk4OGMyN2YvYTc2ZTJhOTktYWZlZi0z
ODdlLTgyZTktZGFmMGMyYjU1YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODM5Nzg4NzktMGU4OS00OThmLTkw
MWItODg0YTE5ODhjMjdmLzgzOTc4ODc5LTBlODktNDk4Zi05MDFiLTg4NGExOTg4
YzI3Zi5jcmwwHwYDVR0jBBgwFoAU8hNJvB6lb5TpnmMzzFMcxfcAueIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRh
MTk4OGMyN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SFBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHW4R7wPpfP5qkoGZ5aQHlRSBuvAQ+45qiDtqcIQ2NjplsUkDkJsJcea
FfgFmwXleu4Xx1+tU5i8K5kPkRnpBngDXBY+OUJIDGIUuBCF1wPATIZ2EGOs7IQB
BRFsYDh4PYSE3t6UECVqRY+8PGuhzWp646isKhvW1VymILC/hfeyJIgY5etQFp+H
wVNNXW4jgmNo9Ln1MlkGfpbjLexJYZZ44aMqry76aCPCXup57YpKwOZuJr2XRJz/
LMmFCwbcl+WQXmK33gFI6MQkjnwcpHgvcjlp7NZiCtWeJPZjEOf7EycbIWGgM8BO
tHDCq8fGRJVs+MGd08fDkcuQFx8gj8k=
-----END CERTIFICATE-----
Generated at Tue May 21 16:35:02 2024 by rpki-client on console-ams.rpki-client.org