Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/de645552-e993-3017-a938-908df2e2e761.roa
File:                     de645552-e993-3017-a938-908df2e2e761.roa (raw, json)
Hash identifier:          sk9PD4+5KVKfMw7j3wwY0Fi58us0N3rMnbalFHocy0Y=
Subject key identifier:   B2:E0:53:1B:8D:3B:22:EE:B4:B8:3B:8A:F2:95:CF:C1:E6:5F:2A:2F
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285845A15E22C713356B21684EB800
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/de645552-e993-3017-a938-908df2e2e761.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     16839
IP address blocks:        199.91.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:22:c7:13:35:6b:21:68:4e:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=9d8fcefb-6d93-4025-9bf8-508a2ef61054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:e3:ee:bd:ae:e7:ec:fd:d3:b1:ce:f5:58:
                    ec:62:c2:eb:c2:9b:c1:20:b4:de:03:21:05:cc:f0:
                    2d:d2:b2:ae:45:74:f3:f5:e5:d4:9f:f0:ea:31:eb:
                    bc:4b:aa:c9:87:56:df:b3:1a:00:80:f6:b4:f2:df:
                    7d:80:de:89:4b:6d:f9:d9:2e:6f:7a:f3:e0:1d:10:
                    a9:5d:a9:02:04:e2:b9:34:1f:d7:36:e0:4c:fa:5a:
                    11:55:d9:12:79:fa:9d:54:6e:d1:c5:a7:70:4e:cc:
                    8c:7e:da:79:18:cb:0d:63:f6:61:a6:cf:dd:0b:61:
                    45:30:47:67:26:e0:bb:ac:c3:e2:76:20:e4:6a:40:
                    06:19:09:a4:ed:c6:81:53:dc:62:7c:bc:3c:b6:04:
                    63:68:93:c1:14:27:bb:01:64:1e:45:99:1c:20:d3:
                    76:b3:74:a8:1e:fc:b4:f2:84:0a:c3:c5:43:28:f1:
                    d1:97:81:bf:8e:5c:2c:9e:16:52:ac:c7:28:fe:b9:
                    77:fc:9d:12:19:92:db:6a:72:b6:dc:47:79:10:44:
                    52:41:26:bb:f9:1f:75:e8:05:b8:a6:7d:4d:08:06:
                    9f:3d:7b:9d:12:92:45:76:7b:be:c2:4b:4f:a2:5b:
                    14:97:f8:21:81:70:8c:51:38:7e:b1:db:04:a9:59:
                    19:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:53:1B:8D:3B:22:EE:B4:B8:3B:8A:F2:95:CF:C1:E6:5F:2A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/de645552-e993-3017-a938-908df2e2e761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:63:5b:96:ea:70:04:66:26:51:7d:3e:35:a3:26:5c:70:bd:
         2b:09:fb:0c:d0:6c:e3:74:7b:ac:23:b1:ce:8e:04:91:6c:67:
         98:76:29:cb:a6:37:b1:06:14:5e:32:de:7d:aa:89:e4:ff:df:
         55:13:d5:25:fc:3e:cd:fa:9b:85:68:81:71:ed:b1:59:54:a8:
         fa:93:b7:f2:4b:72:ed:13:f1:d4:25:42:84:a3:fd:75:d2:d6:
         e6:da:e7:93:ba:1c:0f:ba:99:94:78:07:78:37:6a:13:69:5d:
         da:3b:df:ce:03:71:a6:f7:11:0f:fb:43:84:f8:8b:ef:9a:95:
         7b:4a:a0:a0:4b:b4:73:35:da:87:0b:ad:85:72:09:2f:82:2d:
         79:32:16:9c:61:f8:ca:37:8b:8e:03:39:bb:4a:d8:11:82:0b:
         e9:83:8a:c4:78:b6:31:06:bd:d6:7a:a6:16:54:38:38:78:29:
         2b:ee:2e:52:1d:f0:6b:85:da:b8:f0:6f:ae:a9:a7:1b:1d:5c:
         35:de:52:fc:e0:fe:49:1f:e3:02:74:14:d4:00:65:38:7d:4e:
         c5:83:c3:7d:60:56:d1:a3:ce:c5:8c:95:1b:b6:02:58:9e:de:
         2f:d4:6b:ae:63:14:a0:c8:62:0b:93:d4:3c:d8:51:7a:f5:f7:
         a9:24:fe:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWhXiLHEzVrIWhOuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MDQyMjEzMDAzM1oXDTI0MDcyMTEzMDAzM1owLzEtMCsGA1UEAxMk
OWQ4ZmNlZmItNmQ5My00MDI1LTliZjgtNTA4YTJlZjYxMDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJvj7r2u5+z907HO9VjsYsLrwpvBILTeAyEF
zPAt0rKuRXTz9eXUn/DqMeu8S6rJh1bfsxoAgPa08t99gN6JS2352S5vevPgHRCp
XakCBOK5NB/XNuBM+loRVdkSefqdVG7RxadwTsyMftp5GMsNY/Zhps/dC2FFMEdn
JuC7rMPidiDkakAGGQmk7caBU9xifLw8tgRjaJPBFCe7AWQeRZkcINN2s3SoHvy0
8oQKw8VDKPHRl4G/jlwsnhZSrMco/rl3/J0SGZLbanK23Ed5EERSQSa7+R916AW4
pn1NCAafPXudEpJFdnu+wktPolsUl/ghgXCMUTh+sdsEqVkZxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLLgUxuNOyLutLg7ivKVz8HmXyovMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZGU2NDU1NTItZTk5My0z
MDE3LWE5MzgtOTA4ZGYyZTJlNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1uMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFjW5bqcARmJlF9PjWjJlxwvSsJ+wzQbON0e6wjsc6OBJFsZ5h2Kcum
N7EGFF4y3n2qieT/31UT1SX8Ps36m4VogXHtsVlUqPqTt/JLcu0T8dQlQoSj/XXS
1uba55O6HA+6mZR4B3g3ahNpXdo7384Dcab3EQ/7Q4T4i++alXtKoKBLtHM12ocL
rYVyCS+CLXkyFpxh+Mo3i44DObtK2BGCC+mDisR4tjEGvdZ6phZUODh4KSvuLlId
8GuF2rjwb66ppxsdXDXeUvzg/kkf4wJ0FNQAZTh9TsWDw31gVtGjzsWMlRu2Alie
3i/Ua65jFKDIYguT1DzYUXr196kk/oM=
-----END CERTIFICATE-----
Generated at Wed May 8 02:00:10 2024 by rpki-client on console-fra.rpki-client.org