Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/cccc0481-09ad-3175-9e49-d8a58327c160.roa
File:                     cccc0481-09ad-3175-9e49-d8a58327c160.roa (raw, json)
Hash identifier:          gCdWn+9pKOQUFsikYTq7KBesAjlZl20TUEDrcgO4E1w=
Subject key identifier:   22:34:40:1B:03:91:31:EE:40:D5:88:D0:1E:E7:03:B0:0F:D6:B5:95
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F432858459E93697784E3D0C89DF3C440
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/cccc0481-09ad-3175-9e49-d8a58327c160.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     1640
IP address blocks:        199.116.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:69:77:84:e3:d0:c8:9d:f3:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=ecbf900b-6b55-4b97-94d4-fcc98e3f0b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:9a:5b:0d:41:99:3e:0c:6a:9f:0c:6d:74:
                    53:00:18:30:76:11:7e:da:52:1c:59:db:a0:da:3d:
                    7a:16:67:1d:76:02:e8:ad:1f:f2:02:cb:b2:56:6e:
                    26:06:5e:4d:d8:f1:7b:25:f2:5e:0c:8a:d3:54:a7:
                    98:24:64:29:41:28:9c:33:37:71:f1:5f:3b:47:3b:
                    45:54:7f:a4:62:7b:91:0a:5d:ad:34:96:6b:f9:07:
                    90:0d:41:eb:4c:93:0e:bd:c0:09:8d:d1:03:10:67:
                    ae:7d:bb:17:36:22:1f:87:06:60:8d:00:28:32:06:
                    09:79:7b:9d:de:0a:31:fa:b0:86:74:ed:5b:db:c3:
                    e4:d5:40:93:fb:ad:4b:a0:4b:b1:45:fa:8b:34:18:
                    56:7f:4e:9d:b2:46:bc:d8:52:1b:70:4c:6c:3f:01:
                    21:5f:85:48:b0:44:21:e9:f6:a3:76:e8:6f:2e:fd:
                    7f:91:a3:8b:84:d5:c4:67:dd:73:0b:f8:03:1c:41:
                    50:ca:73:9c:85:3d:a6:c6:7b:94:ab:ff:09:f4:df:
                    11:df:e8:b0:55:39:34:85:09:3b:72:54:62:9b:e0:
                    f3:92:9d:bd:25:9d:03:55:04:e1:aa:63:50:a1:26:
                    20:dc:e6:ff:2d:85:10:6b:0a:2e:f7:69:bc:fc:a6:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:34:40:1B:03:91:31:EE:40:D5:88:D0:1E:E7:03:B0:0F:D6:B5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/cccc0481-09ad-3175-9e49-d8a58327c160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:6d:ac:1d:35:84:b8:55:f2:10:d8:9d:fd:44:59:75:ed:
         a0:69:9e:5b:bc:a7:50:1c:1a:8d:13:c5:d2:6e:a6:b5:64:44:
         ed:b1:76:75:3e:cc:14:2d:8e:1e:59:d1:66:85:7a:4a:69:47:
         e4:8f:bf:e5:59:42:96:1b:7b:b6:3d:11:33:31:80:aa:50:4d:
         43:19:e2:44:91:89:9f:6a:c4:9b:43:14:10:17:10:d3:21:c5:
         d9:10:fb:37:f5:d6:9f:26:0f:14:30:6d:b9:70:70:72:33:c7:
         82:e6:98:6b:ec:50:87:ee:c6:a9:36:95:17:89:a1:46:eb:58:
         a4:3d:f4:ec:85:6f:60:35:e3:48:d7:2e:ee:47:e6:21:86:15:
         0e:93:90:6b:c9:4b:a5:f5:a6:3e:e8:f3:e4:58:9f:14:e9:4c:
         ac:ee:98:de:aa:4c:2a:e9:5c:97:8b:be:d4:be:a1:ee:85:a1:
         46:73:30:da:11:b4:3b:d2:8b:76:d4:d5:eb:d8:e8:2b:b7:3f:
         5a:d7:ef:67:02:d0:9b:fa:d7:b7:ee:f3:74:00:5b:19:ab:9a:
         79:a4:cf:2d:00:75:3f:cc:ac:0d:37:30:d8:ff:8d:46:28:a2:
         93:ab:20:85:50:e2:20:b8:94:65:d0:2b:5a:3a:bc:99:ca:1d:
         49:f9:3b:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek2l3hOPQyJ3zxEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3
YjUzMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
ZWNiZjkwMGItNmI1NS00Yjk3LTk0ZDQtZmNjOThlM2YwYjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM2aWw1BmT4Map8MbXRTABgwdhF+2lIcWdug
2j16FmcddgLorR/yAsuyVm4mBl5N2PF7JfJeDIrTVKeYJGQpQSicMzdx8V87RztF
VH+kYnuRCl2tNJZr+QeQDUHrTJMOvcAJjdEDEGeufbsXNiIfhwZgjQAoMgYJeXud
3gox+rCGdO1b28Pk1UCT+61LoEuxRfqLNBhWf06dska82FIbcExsPwEhX4VIsEQh
6fajduhvLv1/kaOLhNXEZ91zC/gDHEFQynOchT2mxnuUq/8J9N8R3+iwVTk0hQk7
clRim+Dzkp29JZ0DVQThqmNQoSYg3Ob/LYUQawou92m8/KZyjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCI0QBsDkTHuQNWI0B7nA7AP1rWVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4
ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvY2NjYzA0ODEtMDlhZC0z
MTc1LTllNDktZDhhNTgzMjdjMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3
ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj
N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4
OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3SYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2WbawdNYS4VfIQ2J39RFl17aBpnlu8p1AcGo0TxdJuprVkRO2xdnU+
zBQtjh5Z0WaFekppR+SPv+VZQpYbe7Y9ETMxgKpQTUMZ4kSRiZ9qxJtDFBAXENMh
xdkQ+zf11p8mDxQwbblwcHIzx4LmmGvsUIfuxqk2lReJoUbrWKQ99OyFb2A140jX
Lu5H5iGGFQ6TkGvJS6X1pj7o8+RYnxTpTKzumN6qTCrpXJeLvtS+oe6FoUZzMNoR
tDvSi3bU1evY6Cu3P1rX72cC0Jv617fu83QAWxmrmnmkzy0AdT/MrA03MNj/jUYo
opOrIIVQ4iC4lGXQK1o6vJnKHUn5Ozw=
-----END CERTIFICATE-----
Generated at Sun Jun 2 20:01:40 2024 by rpki-client on console-fra.rpki-client.org