Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6521df86-70b2-3373-af7a-cfc3f4480536.roa
File:                     6521df86-70b2-3373-af7a-cfc3f4480536.roa (raw, json)
Hash identifier:          BnBRzSwfwl6XVHoWw88wUDrMhiTkwMhuVSVIx0Nv114=
Subject key identifier:   4C:1F:CD:26:A8:8F:1A:C4:DB:55:B3:C2:5D:5B:5F:9B:2F:A6:AC:DA
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285845A2C34097F482A77E030DC820
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6521df86-70b2-3373-af7a-cfc3f4480536.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     13555
IP address blocks:        199.127.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:40:97:f4:82:a7:7e:03:0d:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=ebb3c955-beda-4624-b0dc-41985a63955e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:99:71:f3:96:36:60:46:a5:b0:75:59:cf:
                    29:6c:88:8b:9f:d4:3e:b4:22:9f:60:23:0a:cf:a0:
                    41:5b:77:68:3b:15:d9:f7:37:49:8c:d2:77:85:7c:
                    33:b9:78:8d:88:2f:52:32:bf:f7:f6:c6:d3:6d:98:
                    9f:7a:13:e4:d2:df:9e:62:8a:b5:e9:72:43:2a:78:
                    ab:bc:ed:2d:f7:93:b6:40:73:1d:9e:8c:95:b9:c1:
                    9b:67:bd:9d:68:08:8d:b4:b3:dd:d0:b2:d2:bf:a1:
                    1c:21:7e:66:6c:0e:8d:a6:69:1a:85:09:bf:c8:8b:
                    db:14:71:f6:eb:e8:44:c8:8f:da:70:a0:07:ee:61:
                    6f:a7:92:1c:1c:43:87:6c:df:97:ac:f2:7a:a4:16:
                    e3:43:e9:90:34:a1:7b:a7:61:4d:75:46:b3:90:78:
                    52:33:60:df:a6:00:bc:98:94:7c:77:8c:57:3b:4a:
                    38:c0:cd:34:4d:0c:80:db:3c:e7:af:d4:5d:21:36:
                    a3:cd:27:33:12:f1:9c:43:7b:f6:d7:31:09:73:f7:
                    e3:38:94:b6:d3:62:ff:48:ba:09:0a:cf:ee:dc:54:
                    38:1f:7e:da:5f:d1:38:99:fd:d7:09:ce:ca:1a:22:
                    ca:83:4c:76:26:33:08:04:38:19:55:a9:51:f7:12:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:CD:26:A8:8F:1A:C4:DB:55:B3:C2:5D:5B:5F:9B:2F:A6:AC:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6521df86-70b2-3373-af7a-cfc3f4480536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:ef:7d:a3:3c:df:6c:32:9c:d2:aa:a6:5a:a2:c9:4c:be:
         96:cd:97:85:d8:71:39:d4:60:40:e5:83:da:36:5f:75:46:39:
         8b:aa:ea:a8:05:a2:18:cd:22:4e:20:7f:a0:77:6b:67:8b:4b:
         58:d7:fb:e7:8e:11:d7:f7:65:83:54:7b:a3:e4:09:2b:03:a9:
         5a:1b:bb:e0:90:90:4e:8b:ed:e3:bb:77:b7:02:11:a0:a5:70:
         3c:fa:3e:60:69:92:1c:5c:70:5b:b3:5b:41:2f:3a:80:fa:22:
         ee:03:38:f9:32:d2:ec:17:13:6b:1f:d6:a3:af:52:d8:83:82:
         68:17:c7:8a:7b:84:88:81:43:18:ad:87:01:c3:7f:09:31:fb:
         f8:ca:be:dc:b1:ee:69:20:5f:d2:e4:6f:15:64:84:92:11:d5:
         36:b7:7f:c5:03:82:d6:ac:6d:17:ee:31:91:f0:35:e5:9a:7a:
         f6:98:3f:4f:f5:45:71:d3:af:d7:85:85:9a:4b:e9:1a:d4:94:
         a7:73:d9:80:ea:c7:e9:ba:c6:df:90:40:98:ec:5b:ad:72:86:
         51:64:75:0a:3a:a8:ab:8f:c5:19:a1:9d:93:67:f4:95:20:72:
         25:74:4c:3f:64:39:98:d6:28:18:c2:7f:e1:d7:55:51:e0:03:
         d6:d4:0d:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWiw0CX9IKnfgMNyCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDQyMzAxMDAyNVoXDTI0MDcyMjAxMDAyNVowLzEtMCsGA1UEAxMk
ZWJiM2M5NTUtYmVkYS00NjI0LWIwZGMtNDE5ODVhNjM5NTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlqZcfOWNmBGpbB1Wc8pbIiLn9Q+tCKfYCMK
z6BBW3doOxXZ9zdJjNJ3hXwzuXiNiC9SMr/39sbTbZifehPk0t+eYoq16XJDKnir
vO0t95O2QHMdnoyVucGbZ72daAiNtLPd0LLSv6EcIX5mbA6NpmkahQm/yIvbFHH2
6+hEyI/acKAH7mFvp5IcHEOHbN+XrPJ6pBbjQ+mQNKF7p2FNdUazkHhSM2DfpgC8
mJR8d4xXO0o4wM00TQyA2zznr9RdITajzSczEvGcQ3v21zEJc/fjOJS202L/SLoJ
Cs/u3FQ4H37aX9E4mf3XCc7KGiLKg0x2JjMIBDgZValR9xJV6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwfzSaojxrE21Wzwl1bX5svpqzaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNjUyMWRmODYtNzBiMi0z
MzczLWFmN2EtY2ZjM2Y0NDgwNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3+EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+M732jPN9sMpzSqqZaoslMvpbNl4XYcTnUYEDlg9o2X3VGOYuq6qgF
ohjNIk4gf6B3a2eLS1jX++eOEdf3ZYNUe6PkCSsDqVobu+CQkE6L7eO7d7cCEaCl
cDz6PmBpkhxccFuzW0EvOoD6Iu4DOPky0uwXE2sf1qOvUtiDgmgXx4p7hIiBQxit
hwHDfwkx+/jKvtyx7mkgX9LkbxVkhJIR1Ta3f8UDgtasbRfuMZHwNeWaevaYP0/1
RXHTr9eFhZpL6RrUlKdz2YDqx+m6xt+QQJjsW61yhlFkdQo6qKuPxRmhnZNn9JUg
ciV0TD9kOZjWKBjCf+HXVVHgA9bUDWI=
-----END CERTIFICATE-----
Generated at Mon May 20 17:23:35 2024 by rpki-client on console-fra.rpki-client.org