Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa
File:                     dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa (raw, json)
Hash identifier:          7hqtUIVaipHN1pUuu2nt0pPRDH/AhbZe+f3J7KtrOcs=
Subject key identifier:   6C:8C:B6:C1:21:D0:B4:D7:71:C1:34:C0:7F:F0:A5:1D:D8:AA:1E:35
Certificate issuer:       /CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
Certificate serial:       010D0C9F43285845909DE8166EEFE53103A1C1C0
Authority key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     11023
IP address blocks:        209.251.32.0/24 maxlen: 24
                          209.251.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:e8:16:6e:ef:e5:31:03:a1:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=ec865ffd-41ab-4bc8-82b2-762bcbfbe7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:79:7e:95:68:75:f0:03:bf:4d:07:f8:0b:e7:
                    77:3a:82:07:43:44:c7:9a:10:a2:6a:f0:ab:e8:a9:
                    15:07:50:19:8f:66:90:ba:7b:6c:ff:55:cf:22:7c:
                    aa:5b:ed:ed:eb:6e:43:e9:43:e1:fb:c2:f2:5e:81:
                    05:25:00:09:6f:6f:c4:c0:5b:ae:54:b7:e1:01:b4:
                    cf:ce:cd:11:67:3a:b9:54:6c:fd:84:d8:4f:62:9f:
                    b2:f0:dc:78:30:dd:05:77:40:6a:1e:f0:c3:06:ac:
                    06:db:3c:38:38:9a:22:f1:b9:2f:a0:d1:17:c9:1c:
                    b1:97:bf:98:c8:d6:ee:b2:75:c1:b4:7e:02:a2:88:
                    00:09:fe:ff:98:c4:8c:7a:9a:a8:56:b9:b7:a6:ff:
                    d4:a1:30:e7:91:0f:c2:a3:ae:d3:3e:dd:f2:2e:40:
                    02:37:1c:2c:5e:10:44:c9:37:62:49:a8:43:1e:74:
                    d4:0c:7b:10:1b:f1:0b:5b:36:3b:f8:81:8a:a5:c6:
                    05:df:a6:94:4a:89:f9:b8:d0:c3:1f:7d:3f:79:6e:
                    84:1a:f0:6a:11:d2:1a:ce:86:e0:40:09:10:57:8a:
                    de:68:13:8d:b7:af:6b:78:74:9d:b3:b3:fe:8e:c0:
                    a3:83:5e:84:59:4b:56:25:50:e0:e8:55:d8:93:e3:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8C:B6:C1:21:D0:B4:D7:71:C1:34:C0:7F:F0:A5:1D:D8:AA:1E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/dbbd7782-9eb0-34e1-be21-a8b2f44236fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl

            X509v3 Authority Key Identifier:
                keyid:01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0b:f1:4b:74:4b:c3:3e:5c:27:96:59:ab:e0:6e:20:f1:8d:
         13:7c:23:8a:15:40:87:a4:3c:18:3f:21:fe:cb:5e:cb:11:db:
         ac:fb:c3:80:35:6a:9d:13:ca:5b:0c:0e:28:b6:5d:76:7e:a2:
         48:73:55:d0:75:f6:44:c4:f3:ee:a5:ce:cb:d4:77:ca:1d:6a:
         d2:06:2c:b3:30:ee:4e:65:ee:e7:73:d3:be:83:7b:8d:b6:1f:
         bf:54:0e:07:c9:d0:7f:0b:d5:76:5f:b6:a9:1e:23:35:04:34:
         bc:a1:d3:cd:61:dd:f4:a0:86:6e:bb:66:c2:2e:6d:6e:b9:7c:
         09:d7:97:2f:20:fb:89:13:66:f4:fa:d2:73:0d:4b:9e:9b:14:
         64:43:ab:3f:c5:fb:de:a4:ce:58:50:5f:4a:0f:f2:4c:ac:a8:
         d6:bc:cf:bf:4d:c2:f6:31:0d:0c:7a:30:08:37:fa:1a:3d:d0:
         9e:6d:4f:a4:1c:84:02:7e:ce:45:4d:4b:11:84:b3:d7:33:b1:
         ff:49:69:6c:eb:f8:b9:ba:64:16:ab:d4:44:cd:eb:cb:19:86:
         e7:3b:05:d9:f2:f9:39:a2:3e:38:aa:3e:ef:44:44:d0:6f:03:
         b6:9f:13:49:ec:4c:99:34:28:51:62:f3:71:6d:10:5c:92:20:
         bd:d0:29:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWQnegWbu/lMQOhwcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg1MjJiOTUtMTQ0Zi00ODNmLWJiZmItYmVjMDYwNWVi
ZjhjMB4XDTI0MDQxNjEzMDAzM1oXDTI0MDcxNTEzMDAzM1owLzEtMCsGA1UEAxMk
ZWM4NjVmZmQtNDFhYi00YmM4LTgyYjItNzYyYmNiZmJlN2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3l+lWh18AO/TQf4C+d3OoIHQ0THmhCiavCr
6KkVB1AZj2aQunts/1XPInyqW+3t625D6UPh+8LyXoEFJQAJb2/EwFuuVLfhAbTP
zs0RZzq5VGz9hNhPYp+y8Nx4MN0Fd0BqHvDDBqwG2zw4OJoi8bkvoNEXyRyxl7+Y
yNbusnXBtH4CoogACf7/mMSMepqoVrm3pv/UoTDnkQ/Co67TPt3yLkACNxwsXhBE
yTdiSahDHnTUDHsQG/ELWzY7+IGKpcYF36aUSon5uNDDH30/eW6EGvBqEdIazobg
QAkQV4reaBONt69reHSds7P+jsCjg16EWUtWJVDg6FXYk+PN5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGyMtsEh0LTXccE0wH/wpR3Yqh41MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lODUy
MmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMwNjA1ZWJmOGMvZGJiZDc3ODItOWViMC0z
NGUxLWJlMjEtYThiMmY0NDIzNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTg1MjJiOTUtMTQ0Zi00ODNmLWJi
ZmItYmVjMDYwNWViZjhjL2U4NTIyYjk1LTE0NGYtNDgzZi1iYmZiLWJlYzA2MDVl
YmY4Yy5jcmwwHwYDVR0jBBgwFoAUAR18+sVY6EiJayDd19XPFdMOIFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lODUyMmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMw
NjA1ZWJmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0fsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkL8Ut0S8M+XCeWWavgbiDxjRN8I4oVQIekPBg/If7LXssR26z7w4A1
ap0TylsMDii2XXZ+okhzVdB19kTE8+6lzsvUd8odatIGLLMw7k5l7udz076De422
H79UDgfJ0H8L1XZftqkeIzUENLyh081h3fSghm67ZsIubW65fAnXly8g+4kTZvT6
0nMNS56bFGRDqz/F+96kzlhQX0oP8kysqNa8z79NwvYxDQx6MAg3+ho90J5tT6Qc
hAJ+zkVNSxGEs9czsf9JaWzr+Lm6ZBar1ETN68sZhuc7Bdny+TmiPjiqPu9ERNBv
A7afE0nsTJk0KFFi83FtEFySIL3QKaw=
-----END CERTIFICATE-----
Generated at Wed May 8 20:39:05 2024 by rpki-client on console-ams.rpki-client.org