Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa
File:                     f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa (raw, json)
Hash identifier:          CDBCYhnOizDnMlE8Y9EfJ2PWLU/Y+5Xqc8chqydIkic=
Subject key identifier:   18:96:70:D0:41:F5:8F:AF:03:05:A7:42:5F:D5:86:00:96:45:8A:F0
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F432858475EA62CE05983DD98FD29DC28
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     1640
IP address blocks:        199.59.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:2c:e0:59:83:dd:98:fd:29:dc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=9142adbe-7eba-4d08-a737-9d3d8731b6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:f1:62:48:14:01:62:3c:ff:06:3b:7a:94:
                    b3:d3:b7:35:8b:16:d2:f4:28:43:a8:98:38:a3:82:
                    71:ab:37:f9:04:cb:e4:96:a9:11:6f:27:b5:45:90:
                    3a:fe:08:e3:b6:60:c1:8c:d2:fd:c4:93:2f:65:7a:
                    a5:47:06:a6:29:b2:02:5c:c1:a1:90:d4:8d:ae:8c:
                    84:c1:00:25:31:6d:6b:7d:41:fd:ee:95:74:76:5c:
                    1f:c1:e2:35:20:c3:ec:99:82:18:d2:c9:47:8b:16:
                    2e:fb:40:50:47:03:da:41:c5:f4:b9:6e:a9:58:21:
                    96:2a:03:2b:ac:b5:8e:eb:77:2d:66:ee:23:50:77:
                    7f:bd:95:84:99:f3:d4:2a:21:bb:3c:a1:98:d3:9a:
                    27:f5:85:b3:f1:7d:70:3a:ea:5c:09:c5:3d:e2:30:
                    62:55:a3:84:cf:10:ad:0b:a8:83:7c:d5:2e:94:f0:
                    d4:db:98:d1:1d:b9:a1:53:5b:fc:58:76:fc:76:41:
                    62:c8:d3:87:d8:9d:20:98:ae:ea:b2:60:f9:d6:a7:
                    3a:11:f0:17:53:1c:ed:fe:c1:72:a4:e7:49:06:e7:
                    6c:02:7e:14:1e:49:7b:86:ac:93:bf:72:89:43:52:
                    b2:1e:d9:72:e8:d5:e1:4b:cb:88:3a:1a:f8:39:77:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:96:70:D0:41:F5:8F:AF:03:05:A7:42:5F:D5:86:00:96:45:8A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0c:57:53:be:30:e0:45:c7:ae:47:d4:4f:b3:99:9c:b9:4e:
         7c:5f:f4:90:e0:be:6a:40:24:28:98:ee:b0:f7:77:2e:17:c4:
         c5:f9:19:c8:8e:11:6d:e5:b6:5b:8b:b5:0c:5d:ea:53:96:a9:
         46:72:a7:5d:bf:85:02:3d:f8:0b:1c:f0:ff:a3:cf:2c:f2:6d:
         47:37:eb:ef:af:c0:d5:95:f0:fc:0f:5c:ad:73:37:8b:52:a1:
         a2:50:77:dc:87:1e:bb:c7:3c:ac:1b:0a:89:8b:11:fb:8e:4a:
         8f:4d:d3:b6:80:ec:c7:88:61:ea:3f:63:59:96:43:1b:fa:b8:
         65:10:30:b6:fd:07:00:9c:e4:c1:36:d3:82:7e:97:df:bc:17:
         81:43:32:1f:a0:9d:7e:3c:c3:1d:c5:be:69:f2:f7:da:9c:14:
         bb:74:ae:53:5c:dd:6d:27:fd:e1:ec:6a:8d:64:44:73:16:78:
         3e:4c:54:7a:e8:09:a9:ba:86:10:5c:d8:27:a6:bf:6e:43:52:
         af:0c:7a:b0:57:b2:8e:05:78:58:14:be:77:aa:16:6a:f5:44:
         f0:66:98:c6:95:cd:d6:db:cc:f5:f6:f0:7a:10:87:f0:ba:38:
         b7:1b:7c:0e:00:4e:c6:23:aa:ab:9f:ae:be:84:20:de:08:8e:
         3b:bf:6f:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepizgWYPdmP0p3CgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3
YjUzMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk
OTE0MmFkYmUtN2ViYS00ZDA4LWE3MzctOWQzZDg3MzFiNmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrfxYkgUAWI8/wY7epSz07c1ixbS9ChDqJg4
o4Jxqzf5BMvklqkRbye1RZA6/gjjtmDBjNL9xJMvZXqlRwamKbICXMGhkNSNroyE
wQAlMW1rfUH97pV0dlwfweI1IMPsmYIY0slHixYu+0BQRwPaQcX0uW6pWCGWKgMr
rLWO63ctZu4jUHd/vZWEmfPUKiG7PKGY05on9YWz8X1wOupcCcU94jBiVaOEzxCt
C6iDfNUulPDU25jRHbmhU1v8WHb8dkFiyNOH2J0gmK7qsmD51qc6EfAXUxzt/sFy
pOdJBudsAn4UHkl7hqyTv3KJQ1KyHtly6NXhS8uIOhr4OXenbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiWcNBB9Y+vAwWnQl/VhgCWRYrwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4
ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvZjliNmIyMDUtMWIxNC0z
N2YzLWE5N2MtYzhmNTQyZWI1MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3
ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj
N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4
OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABoMV1O+MOBFx65H1E+zmZy5Tnxf9JDgvmpAJCiY7rD3dy4XxMX5GciO
EW3ltluLtQxd6lOWqUZyp12/hQI9+Asc8P+jzyzybUc36++vwNWV8PwPXK1zN4tS
oaJQd9yHHrvHPKwbComLEfuOSo9N07aA7MeIYeo/Y1mWQxv6uGUQMLb9BwCc5ME2
04J+l9+8F4FDMh+gnX48wx3Fvmny99qcFLt0rlNc3W0n/eHsao1kRHMWeD5MVHro
Cam6hhBc2Cemv25DUq8MerBXso4FeFgUvneqFmr1RPBmmMaVzdbbzPX28HoQh/C6
OLcbfA4ATsYjqqufrr6EIN4Ijju/b/w=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:16 2024 by rpki-client on console-ams.rpki-client.org