Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/552f9f7f-670f-3d86-9f27-e67565efd9d1.roa
File:                     552f9f7f-670f-3d86-9f27-e67565efd9d1.roa (raw, json)
Hash identifier:          QgLDPIWo/IBeVWYpqUG/yIGWKsYn17I6T/Mv8ATvhQU=
Subject key identifier:   16:9E:2D:DB:B0:72:5B:4D:4E:83:1D:71:3A:B1:22:90:85:28:C8:78
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584742BB5460576658B16AB38200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/552f9f7f-670f-3d86-9f27-e67565efd9d1.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     6461
IP address blocks:        216.200.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:54:60:57:66:58:b1:6a:b3:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=4845d02a-8a0f-4f50-a823-d1008000fc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:bb:5f:fb:30:f7:ca:46:44:34:04:2f:cc:
                    41:72:5a:d7:1e:1b:7c:bc:45:4a:88:8c:0f:ca:69:
                    85:55:d9:af:e4:30:96:1f:d5:8f:b8:1c:2c:5a:a9:
                    86:cc:93:77:20:4e:a7:f5:db:c9:4c:95:59:8d:4a:
                    f2:c0:04:82:45:15:44:b2:a9:22:3a:d5:f6:78:6b:
                    43:d1:5b:77:4f:55:cd:63:f1:0f:29:4e:3f:18:32:
                    b9:a1:69:15:95:73:af:3b:b3:c9:1b:ab:c8:7b:95:
                    0f:f8:5b:00:bb:ba:03:fb:67:00:a5:8d:5f:f3:ff:
                    96:85:e5:63:19:5e:e3:fc:e2:a2:19:dc:19:05:71:
                    92:e1:4d:9b:97:53:ce:f0:cd:f6:45:69:91:c8:1d:
                    d6:ee:5e:e7:a2:24:cf:c9:34:f7:6a:62:5c:ee:75:
                    a4:01:9f:65:c3:bf:95:32:58:9f:a9:3f:d9:78:2f:
                    c8:d2:38:0b:38:c0:36:7e:0c:0a:f3:71:23:ae:72:
                    d6:fe:30:be:0c:3e:f5:b7:fa:86:e7:8f:71:33:60:
                    6d:ce:92:b4:29:18:37:e4:8e:13:8d:7f:84:10:ca:
                    b5:34:dc:5e:d7:69:f5:e8:be:74:94:f6:0b:24:2a:
                    e1:94:58:b6:a0:d4:cc:0c:3b:e1:81:d7:12:84:5c:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9E:2D:DB:B0:72:5B:4D:4E:83:1D:71:3A:B1:22:90:85:28:C8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/552f9f7f-670f-3d86-9f27-e67565efd9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:d7:3e:f6:71:23:7e:66:14:2f:ff:74:4b:45:c2:37:f6:
         ba:89:35:a5:a3:8d:1d:b6:7c:9c:d4:42:74:97:3d:ca:aa:9d:
         89:ca:a4:38:03:75:17:02:0e:65:0f:4e:7b:4c:11:30:79:af:
         e2:77:6c:15:21:a4:4b:8b:f3:84:2b:ed:ce:78:6a:b2:1a:b9:
         9d:1b:9a:8e:40:ed:ed:bc:5e:f9:75:a2:20:25:ba:10:48:9c:
         f7:fa:7a:ec:23:8a:45:db:87:52:9b:e4:16:47:11:de:e8:44:
         04:c0:29:a4:f3:71:a1:76:26:58:57:36:cc:d7:cf:ef:0f:e3:
         94:a0:d2:e8:c5:a2:10:0a:3d:22:e5:96:bc:d7:3f:03:02:17:
         c4:aa:e2:7e:96:7a:9c:c9:dc:5b:6c:f9:bd:b9:c4:af:03:50:
         9d:85:3e:03:d2:33:42:37:b1:78:f0:45:2a:3a:96:1a:68:9f:
         40:d5:5b:0d:e0:ef:30:f4:a2:49:72:f3:d7:7c:2f:50:84:2a:
         61:bf:ae:9a:6b:43:d0:b2:b2:cc:bf:a5:d5:42:61:3b:5a:ea:
         cc:31:ef:9b:2d:2f:e8:36:86:b3:c8:e8:b1:69:fd:8f:b2:df:
         ef:1f:92:ee:02:13:47:64:a2:f1:b3:1b:c9:bb:df:5a:d6:20:
         a2:96:d5:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu1RgV2ZYsWqzggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
NDg0NWQwMmEtOGEwZi00ZjUwLWE4MjMtZDEwMDgwMDBmYzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9W7X/sw98pGRDQEL8xBclrXHht8vEVKiIwP
ymmFVdmv5DCWH9WPuBwsWqmGzJN3IE6n9dvJTJVZjUrywASCRRVEsqkiOtX2eGtD
0Vt3T1XNY/EPKU4/GDK5oWkVlXOvO7PJG6vIe5UP+FsAu7oD+2cApY1f8/+WheVj
GV7j/OKiGdwZBXGS4U2bl1PO8M32RWmRyB3W7l7noiTPyTT3amJc7nWkAZ9lw7+V
MlifqT/ZeC/I0jgLOMA2fgwK83EjrnLW/jC+DD71t/qG549xM2BtzpK0KRg35I4T
jX+EEMq1NNxe12n16L50lPYLJCrhlFi2oNTMDDvhgdcShFy2PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBaeLduwcltNToMdcTqxIpCFKMh4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNTUyZjlmN2YtNjcwZi0z
ZDg2LTlmMjctZTY3NTY1ZWZkOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Mi4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvn1z72cSN+ZhQv/3RLRcI39rqJNaWjjR22fJzUQnSXPcqqnYnKpDgD
dRcCDmUPTntMETB5r+J3bBUhpEuL84Qr7c54arIauZ0bmo5A7e28Xvl1oiAluhBI
nPf6euwjikXbh1Kb5BZHEd7oRATAKaTzcaF2JlhXNszXz+8P45Sg0ujFohAKPSLl
lrzXPwMCF8Sq4n6WepzJ3Fts+b25xK8DUJ2FPgPSM0I3sXjwRSo6lhpon0DVWw3g
7zD0okly89d8L1CEKmG/rpprQ9Cyssy/pdVCYTta6swx75stL+g2hrPI6LFp/Y+y
3+8fku4CE0dkovGzG8m731rWIKKW1bQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:27 2024 by rpki-client on console-fra.rpki-client.org