Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa
File:                     6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa (raw, json)
Hash identifier:          3I+Efnts8JBZrtoRI/CwFnDdiRvt5C7aC4znjL2J8FQ=
Subject key identifier:   13:B9:F4:69:4E:A0:9A:D3:03:B9:93:9D:0A:74:21:44:D7:77:EB:7F
Certificate issuer:       /CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6
Certificate serial:       010D0C9F432858459E93683723EAA3B8815816A0
Authority key identifier: B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     53684
IP address blocks:        208.66.156.0/22 maxlen: 24
                          199.30.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:68:37:23:ea:a3:b8:81:58:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b7a8557-3cb9-4ce7-893c-58d0461737b6
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=16f49875-f2e6-450c-b032-8d9ee4abe368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a9:81:60:9c:2d:b3:f5:f9:a0:13:96:76:74:
                    47:3a:42:07:0d:4c:15:99:d8:6f:d7:cc:bb:b6:76:
                    b0:b9:b8:d0:f8:fc:b7:e6:9b:c8:67:99:ac:04:95:
                    d6:91:70:30:08:08:79:d3:9f:93:4d:04:6f:1f:9b:
                    f9:70:05:4d:43:b3:52:43:cd:68:b4:3a:34:5b:cf:
                    b1:4f:8a:e9:a9:47:0a:74:10:27:37:04:8a:ad:38:
                    99:25:d3:75:e3:e1:3e:3c:a3:49:be:7e:78:cb:17:
                    ae:98:fc:37:7f:a8:a4:2a:bb:6c:f1:fa:bc:a8:78:
                    13:ea:06:78:36:fe:c9:03:62:91:9f:08:b8:0c:16:
                    33:28:7c:6b:7f:3d:ed:e5:d3:da:8e:53:e8:a0:35:
                    b5:62:0a:9f:a7:b0:bb:66:21:15:50:61:01:ae:ed:
                    8a:bc:06:69:05:ff:26:d8:57:5d:7c:41:4c:99:8f:
                    27:94:fd:33:e0:37:cd:22:c7:6f:2f:5d:c2:98:35:
                    fe:f8:12:6d:66:7f:a8:05:8c:c1:61:87:ce:88:88:
                    b1:1e:5b:f3:0d:12:ea:18:1a:eb:63:ff:24:e3:91:
                    85:96:9b:09:3b:24:19:2a:98:6e:5f:fd:b7:88:7d:
                    47:54:52:9c:58:8a:a6:52:ff:21:07:f8:7d:93:62:
                    4c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:F4:69:4E:A0:9A:D3:03:B9:93:9D:0A:74:21:44:D7:77:EB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/6aa392a7-8178-3785-b2a2-cddbbf186cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6/1b7a8557-3cb9-4ce7-893c-58d0461737b6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:70:F5:94:2A:BE:82:DF:16:C2:21:1B:E0:91:50:7D:6A:78:CF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1b7a8557-3cb9-4ce7-893c-58d0461737b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.56.0/22
                  208.66.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:62:bc:4a:82:ca:ff:eb:aa:f4:62:d6:23:21:e5:9a:9c:
         8a:de:17:22:2b:6f:3b:01:b8:f7:79:7b:e9:42:b4:c9:76:06:
         cb:7a:0c:f0:a6:29:c7:81:6b:00:9c:1a:30:5d:b4:ec:d1:c7:
         f7:6b:27:02:a5:33:c1:ff:2c:fc:f1:de:1a:dd:62:56:9a:df:
         df:14:d3:b0:ca:df:dc:1e:60:b1:ff:60:0e:e8:89:b3:20:b5:
         41:59:51:e5:78:ad:e0:d9:5c:f4:06:ff:e4:58:d8:65:73:b5:
         37:74:0d:f2:88:c6:a9:9b:70:42:2b:41:6f:28:94:32:db:40:
         05:34:0a:70:f6:04:0a:f2:69:59:a1:d0:3a:6f:2b:67:1e:85:
         88:d1:88:0a:9e:45:68:05:36:17:30:e4:09:9b:9d:f2:b2:98:
         87:03:0b:df:47:a5:20:f0:ca:73:52:a6:1c:ba:5f:4e:22:a5:
         1c:84:9d:9a:6f:12:af:b9:9c:2e:4f:d7:b8:99:be:50:e0:43:
         c0:ac:34:bf:75:b6:15:7f:0a:f6:b0:4e:94:81:13:03:60:cc:
         d5:3d:c3:08:c6:14:04:b9:4b:be:91:9e:2c:82:21:49:0f:d9:
         58:f0:0d:de:a2:9d:16:f9:60:b0:59:f2:79:00:95:19:53:d7:
         80:6e:7e:03
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWek2g3I+qjuIFYFqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWI3YTg1NTctM2NiOS00Y2U3LTg5M2MtNThkMDQ2MTcz
N2I2MB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
MTZmNDk4NzUtZjJlNi00NTBjLWIwMzItOGQ5ZWU0YWJlMzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqmBYJwts/X5oBOWdnRHOkIHDUwVmdhv18y7
tnawubjQ+Py35pvIZ5msBJXWkXAwCAh505+TTQRvH5v5cAVNQ7NSQ81otDo0W8+x
T4rpqUcKdBAnNwSKrTiZJdN14+E+PKNJvn54yxeumPw3f6ikKrts8fq8qHgT6gZ4
Nv7JA2KRnwi4DBYzKHxrfz3t5dPajlPooDW1Ygqfp7C7ZiEVUGEBru2KvAZpBf8m
2FddfEFMmY8nlP0z4DfNIsdvL13CmDX++BJtZn+oBYzBYYfOiIixHlvzDRLqGBrr
Y/8k45GFlpsJOyQZKphuX/23iH1HVFKcWIqmUv8hB/h9k2JM/wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBO59GlOoJrTA7mTnQp0IUTXd+t/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYjdh
ODU1Ny0zY2I5LTRjZTctODkzYy01OGQwNDYxNzM3YjYvNmFhMzkyYTctODE3OC0z
Nzg1LWIyYTItY2RkYmJmMTg2Y2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWI3YTg1NTctM2NiOS00Y2U3LTg5
M2MtNThkMDQ2MTczN2I2LzFiN2E4NTU3LTNjYjktNGNlNy04OTNjLTU4ZDA0NjE3
MzdiNi5jcmwwHwYDVR0jBBgwFoAUtnD1lCq+gt8WwiEb4JFQfWp4zx0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYjdhODU1Ny0zY2I5LTRjZTctODkzYy01OGQw
NDYxNzM3YjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCxx44AwQC
0EKcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFZKYrxKgsr/66r0YtYjIeWanIreFyIrbzsBuPd5e+lCtMl2
Bst6DPCmKceBawCcGjBdtOzRx/drJwKlM8H/LPzx3hrdYlaa398U07DK39weYLH/
YA7oibMgtUFZUeV4reDZXPQG/+RY2GVztTd0DfKIxqmbcEIrQW8olDLbQAU0CnD2
BAryaVmh0DpvK2cehYjRiAqeRWgFNhcw5AmbnfKymIcDC99HpSDwynNSphy6X04i
pRyEnZpvEq+5nC5P17iZvlDgQ8CsNL91thV/CvawTpSBEwNgzNU9wwjGFAS5S76R
niyCIUkP2VjwDd6inRb5YLBZ8nkAlRlT14BufgM=
-----END CERTIFICATE-----
Generated at Mon Jun 3 15:59:21 2024 by rpki-client on console-fra.rpki-client.org