Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/11e60a5d-ae2e-3a6a-be70-5c6a2e3143ff.roa
File:                     11e60a5d-ae2e-3a6a-be70-5c6a2e3143ff.roa (raw, json)
Hash identifier:          lbyX1wxpFbzWXSzRDd6878esVFqyQM+0LZCtiBGrWpA=
Subject key identifier:   23:F8:04:FC:45:52:94:4A:E3:C3:54:0D:17:EB:78:59:37:46:2C:CC
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D875C788400BE057A6F180
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/11e60a5d-ae2e-3a6a-be70-5c6a2e3143ff.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     19955
IP address blocks:        216.119.61.0/24 maxlen: 24
                          216.119.60.0/24 maxlen: 24
                          216.119.59.0/24 maxlen: 24
                          216.119.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:75:c7:88:40:0b:e0:57:a6:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=c4022b29-a737-4ff8-9d6b-6f44426baea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:c8:b1:ec:bf:10:2c:77:4f:69:14:ff:9d:
                    ae:5c:db:79:0e:db:d4:4c:d1:14:83:09:80:94:5d:
                    85:0f:f7:3c:10:cc:05:b6:28:1d:42:11:35:4e:07:
                    ae:3a:a7:da:80:ad:16:ef:8e:f7:84:98:42:cb:9d:
                    05:c8:54:28:9f:31:5a:14:7c:97:26:e0:df:a4:3a:
                    7d:76:59:d0:6a:08:a9:cc:ce:1d:9f:c9:8b:65:42:
                    06:f6:1f:03:ba:f4:34:7e:38:9b:8d:57:ed:4c:44:
                    c0:2d:94:a9:9d:79:fe:d9:ba:7f:56:dc:2b:85:db:
                    fc:24:cb:fa:26:b1:20:32:b1:cf:c4:87:f7:ab:df:
                    7b:85:54:2e:3e:d1:b8:01:c6:ea:8e:48:d3:fc:7b:
                    d0:92:b7:73:48:59:73:0c:0d:58:3f:a8:e8:7e:ea:
                    b2:14:9e:f7:04:39:4e:a5:78:51:b5:98:34:6b:9b:
                    07:c1:3b:71:a2:5c:ce:7a:48:62:88:c4:fd:91:2c:
                    22:cc:30:22:f4:7c:4a:9e:d9:28:b0:7e:25:34:90:
                    f5:5b:da:e1:7a:b2:25:e1:d1:69:c6:d4:74:11:89:
                    99:d9:bc:7a:cd:27:45:2b:6a:f7:1b:be:61:87:69:
                    dc:5f:ee:06:12:cc:c3:3a:2d:c3:78:99:91:e8:b9:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F8:04:FC:45:52:94:4A:E3:C3:54:0D:17:EB:78:59:37:46:2C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/11e60a5d-ae2e-3a6a-be70-5c6a2e3143ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.58.0-216.119.61.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:de:20:2b:f4:72:63:42:37:fe:76:35:15:e9:e4:82:03:c5:
         fb:79:fa:00:77:07:ae:1b:9e:38:f3:3e:e2:a8:8b:84:9a:6a:
         5c:f6:6c:c0:53:74:7b:a6:1d:79:97:d6:47:38:56:a6:b1:d6:
         bb:bc:79:6e:5f:1b:87:c5:87:d1:db:80:33:c6:90:9f:5a:18:
         8f:b7:40:67:92:a4:15:87:17:d2:d6:ba:7b:29:6c:e0:ad:18:
         5c:d1:dc:64:50:8f:0b:ac:f8:20:5f:7c:25:2e:13:35:4a:b7:
         07:31:34:f5:12:5d:1c:c6:8b:a9:ee:80:ba:ac:e3:20:6a:8a:
         22:ef:17:15:35:5e:7a:8f:bc:af:62:26:6f:60:f0:d3:0c:72:
         70:42:0d:77:e1:10:87:97:6c:36:90:ce:3c:30:47:f2:33:55:
         4e:8a:30:ed:72:48:25:1f:26:f3:ed:91:98:06:48:34:29:38:
         f1:d8:c7:68:d1:ab:64:58:e7:a0:bb:0b:66:2e:ea:d0:f7:65:
         53:0c:82:a1:96:d4:a3:b8:d6:6d:1e:fa:d9:11:bd:45:bc:5c:
         12:b0:79:ad:2a:67:96:ec:e9:72:00:02:2e:ba:4f:d7:d6:a5:
         b1:4f:1f:5d:7e:ee:3f:6f:15:09:5a:50:e2:d3:05:81:7d:2e:
         18:57:98:5e
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEWG2HXHiEAL4Fem8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDQxMzAxMDAyNVoXDTI0MDcxMjAxMDAyNVowLzEtMCsGA1UEAxMk
YzQwMjJiMjktYTczNy00ZmY4LTlkNmItNmY0NDQyNmJhZWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR7Isey/ECx3T2kU/52uXNt5DtvUTNEUgwmA
lF2FD/c8EMwFtigdQhE1TgeuOqfagK0W7473hJhCy50FyFQonzFaFHyXJuDfpDp9
dlnQagipzM4dn8mLZUIG9h8DuvQ0fjibjVftTETALZSpnXn+2bp/Vtwrhdv8JMv6
JrEgMrHPxIf3q997hVQuPtG4AcbqjkjT/HvQkrdzSFlzDA1YP6jofuqyFJ73BDlO
pXhRtZg0a5sHwTtxolzOekhiiMT9kSwizDAi9HxKntkosH4lNJD1W9rherIl4dFp
xtR0EYmZ2bx6zSdFK2r3G75hh2ncX+4GEszDOi3DeJmR6LkUzQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFCP4BPxFUpRK48NUDRfreFk3RizMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMTFlNjBhNWQtYWUyZS0z
YTZhLWJlNzAtNWM2YTJlMzE0M2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHYdzoD
BAHYdzwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAXd4gK/RyY0I3/nY1FenkggPF+3n6AHcHrhueOPM+4qiL
hJpqXPZswFN0e6YdeZfWRzhWprHWu7x5bl8bh8WH0duAM8aQn1oYj7dAZ5KkFYcX
0ta6eyls4K0YXNHcZFCPC6z4IF98JS4TNUq3BzE09RJdHMaLqe6AuqzjIGqKIu8X
FTVeeo+8r2Imb2Dw0wxycEINd+EQh5dsNpDOPDBH8jNVToow7XJIJR8m8+2RmAZI
NCk48djHaNGrZFjnoLsLZi7q0PdlUwyCoZbUo7jWbR762RG9RbxcErB5rSpnluzp
cgACLrpP19alsU8fXX7uP28VCVpQ4tMFgX0uGFeYXg==
-----END CERTIFICATE-----
Generated at Mon May 20 17:23:34 2024 by rpki-client on console-fra.rpki-client.org