Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa
File:                     6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa (raw, json)
Hash identifier:          r7v0Daty8tsUz9479JdDzLb4Jc5smRkN/VsJc7ElBFo=
Subject key identifier:   B7:8A:E4:42:A7:C9:13:FD:3A:F8:10:F8:0F:72:C9:59:C8:12:48:7F
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858454C381463CCA21936EAFAED00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     11090
IP address blocks:        216.137.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:14:63:cc:a2:19:36:ea:fa:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=c6bd3a65-8c13-4bb2-8891-1c2840beebf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:6e:c4:2e:61:c9:2c:b7:51:cf:91:01:19:
                    9e:ad:a5:9c:e1:51:4b:d3:08:ad:41:96:b8:58:0a:
                    fb:bf:49:1a:e8:1f:db:d1:c3:07:db:82:2a:49:48:
                    e7:7f:97:95:8f:50:6e:91:0f:08:05:31:77:d7:42:
                    14:e8:73:95:43:63:55:5c:ff:71:99:3e:e5:7a:2b:
                    fc:d2:9b:62:81:71:c1:b9:86:42:32:d7:b2:db:41:
                    75:0a:8f:c0:c0:1e:41:ca:51:8f:4e:8c:fc:f7:10:
                    6e:36:ad:99:38:2e:29:2d:b0:95:1d:35:34:80:ac:
                    85:55:90:cd:0d:3f:0b:05:40:a0:a3:a2:a2:b2:d7:
                    66:95:3e:31:d6:cf:08:3d:a6:c0:ce:56:56:56:b6:
                    6c:24:d0:81:de:35:f2:ca:ad:a6:37:6b:41:1d:d4:
                    de:17:f7:d1:fa:d9:14:ca:51:69:34:6c:59:b0:41:
                    74:ae:ae:3a:0b:8f:17:a5:69:eb:53:26:a8:ac:b2:
                    19:f1:23:89:f8:71:f7:53:d6:5b:4a:3c:bd:e8:6b:
                    58:30:6c:8f:c2:0e:cb:74:66:27:e7:78:2a:6e:cd:
                    11:1c:f4:38:5f:08:da:87:96:86:a5:a9:08:e9:25:
                    03:ea:04:9a:04:51:e1:89:54:33:98:67:27:33:40:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8A:E4:42:A7:C9:13:FD:3A:F8:10:F8:0F:72:C9:59:C8:12:48:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6bd9f993-8e74-3da9-bc33-33e37883e4a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:85:23:d0:e2:ce:bd:76:d0:a0:36:89:64:1f:ff:eb:5a:
         6f:5b:b6:a9:75:43:ba:c3:7e:4f:5f:29:45:c4:44:38:03:82:
         b1:14:c5:f1:71:b3:da:64:ae:e5:70:2a:49:57:3d:ae:d6:ac:
         63:aa:86:eb:c4:81:62:45:27:65:69:f1:85:c9:71:cb:d1:59:
         7d:9c:9f:f1:4b:f4:22:36:0a:d0:38:43:83:06:da:18:e3:73:
         19:a6:f8:af:e2:23:81:b6:33:3e:96:93:f6:77:55:fc:24:d9:
         12:dd:cb:4e:3f:78:9e:77:e6:ad:0c:d1:0f:fd:cd:72:a9:7f:
         85:38:f6:1f:37:04:d1:05:ae:46:4b:4e:84:26:3d:db:95:dc:
         8e:e8:31:bc:af:67:5b:9d:88:58:a0:f6:51:44:5a:48:77:71:
         cc:ea:81:6d:35:ab:38:62:00:85:5a:0b:40:80:f2:d2:40:2d:
         b7:78:2d:c9:af:c0:7d:8c:17:18:32:7f:36:03:46:ea:11:f3:
         a7:3d:b4:7c:4f:86:93:b5:d3:f9:57:61:91:d6:52:b9:5c:7f:
         a7:40:76:c2:93:2d:c5:27:af:86:cc:16:59:ae:13:d5:ce:21:
         bf:72:e9:6e:18:b9:8f:1d:98:c4:28:f5:e2:de:37:d5:f2:a6:
         fd:80:26:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVMOBRjzKIZNur67QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk
YzZiZDNhNjUtOGMxMy00YmIyLTg4OTEtMWMyODQwYmVlYmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA229uxC5hySy3Uc+RARmeraWc4VFL0witQZa4
WAr7v0ka6B/b0cMH24IqSUjnf5eVj1BukQ8IBTF310IU6HOVQ2NVXP9xmT7leiv8
0ptigXHBuYZCMtey20F1Co/AwB5BylGPToz89xBuNq2ZOC4pLbCVHTU0gKyFVZDN
DT8LBUCgo6KistdmlT4x1s8IPabAzlZWVrZsJNCB3jXyyq2mN2tBHdTeF/fR+tkU
ylFpNGxZsEF0rq46C48XpWnrUyaorLIZ8SOJ+HH3U9ZbSjy96GtYMGyPwg7LdGYn
53gqbs0RHPQ4Xwjah5aGpakI6SUD6gSaBFHhiVQzmGcnM0A+kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLeK5EKnyRP9OvgQ+A9yyVnIEkh/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNmJkOWY5OTMtOGU3NC0z
ZGE5LWJjMzMtMzNlMzc4ODNlNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2InkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFe1hSPQ4s69dtCgNolkH//rWm9btql1Q7rDfk9fKUXERDgDgrEUxfFx
s9pkruVwKklXPa7WrGOqhuvEgWJFJ2Vp8YXJccvRWX2cn/FL9CI2CtA4Q4MG2hjj
cxmm+K/iI4G2Mz6Wk/Z3Vfwk2RLdy04/eJ535q0M0Q/9zXKpf4U49h83BNEFrkZL
ToQmPduV3I7oMbyvZ1udiFig9lFEWkh3cczqgW01qzhiAIVaC0CA8tJALbd4Lcmv
wH2MFxgyfzYDRuoR86c9tHxPhpO10/lXYZHWUrlcf6dAdsKTLcUnr4bMFlmuE9XO
Ib9y6W4YuY8dmMQo9eLeN9Xypv2AJkc=
-----END CERTIFICATE-----
Generated at Mon May 20 14:55:20 2024 by rpki-client on console-ams.rpki-client.org