Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c0f2bf6d-f534-3e94-b053-f76db071d83b.roa
File:                     c0f2bf6d-f534-3e94-b053-f76db071d83b.roa (raw, json)
Hash identifier:          A0gYZoWZOmSqlyI01XsvESghOGiUitC2hemW509FrrQ=
Subject key identifier:   67:66:34:51:94:89:EA:E8:F2:6D:24:52:D9:A0:23:97:03:9F:A6:4A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D877109EA4469EC0CE4F80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c0f2bf6d-f534-3e94-b053-f76db071d83b.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     4997
IP address blocks:        216.222.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:77:10:9e:a4:46:9e:c0:ce:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=8e4eb748-fc54-4b83-99c5-851faca03752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:4f:ab:b1:86:c3:9f:7e:65:e4:56:95:53:
                    99:4e:9e:d8:29:51:ef:b7:98:50:b8:f3:20:0e:39:
                    c0:3d:5a:6f:5a:27:74:cd:8b:a0:39:05:6d:29:12:
                    5c:36:2d:4c:7d:be:e4:95:af:10:f5:78:90:6a:65:
                    56:17:06:f7:ef:e9:23:16:5b:63:d9:61:0c:d3:e6:
                    02:11:3f:8c:ec:29:1d:a3:12:37:14:e2:37:e9:47:
                    50:1f:b9:3b:c1:f4:66:ca:32:e3:69:21:5c:68:38:
                    0f:18:69:67:10:3d:52:26:13:cf:c1:d1:86:70:fe:
                    a0:67:2d:e1:76:fc:18:b7:2d:0c:86:ec:c8:16:6e:
                    1b:fc:f4:d4:22:32:dd:aa:ae:43:0c:09:ea:23:d3:
                    57:b4:ee:bd:05:f1:95:3e:b8:36:11:30:85:6e:8f:
                    4d:a7:32:28:ad:27:b4:fb:ac:ce:3b:59:23:8e:e6:
                    08:66:07:0d:ed:c9:67:7e:80:7e:65:50:1e:39:ce:
                    a6:08:c5:33:5a:96:ea:a3:ef:05:aa:08:43:9b:1a:
                    fd:45:10:73:b3:9e:1e:ee:7b:f7:9f:c5:3f:34:25:
                    38:01:33:37:53:67:94:a3:42:ed:6e:5b:4f:98:fc:
                    09:34:96:3c:5b:37:25:55:78:18:da:0b:d7:73:c8:
                    cc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:34:51:94:89:EA:E8:F2:6D:24:52:D9:A0:23:97:03:9F:A6:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c0f2bf6d-f534-3e94-b053-f76db071d83b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:31:8f:28:ed:3d:14:3f:87:5b:10:84:cc:c2:b7:21:96:
         47:a2:0f:3d:69:f6:a7:2f:cd:c8:9a:1f:5e:bf:dd:85:8f:ca:
         83:b1:d1:9e:53:91:63:df:7c:c6:de:06:25:bb:58:d0:7c:a0:
         19:cb:0c:4a:e0:41:02:f6:80:9c:d7:c1:51:0e:e6:0b:f8:9e:
         89:93:2c:0b:74:2f:fd:e2:93:ca:cd:bd:c2:48:f0:54:54:84:
         46:a0:33:4c:0d:59:e2:81:dd:88:6d:5e:87:89:ea:fb:87:de:
         1a:2e:40:97:58:ba:4f:f9:5b:38:f3:98:8c:06:3d:47:e7:48:
         d1:2a:ad:e9:f4:d1:c0:10:b8:5e:a1:61:ad:ac:37:55:1f:bb:
         08:e4:c7:ca:ef:f4:2d:96:e1:3c:1c:14:15:75:a3:9d:29:70:
         69:7f:87:08:47:3b:8f:e3:d4:c8:01:1e:4d:af:09:0b:54:fd:
         1d:2a:06:33:a2:b0:48:52:5c:84:bf:5d:09:4d:bf:eb:91:50:
         42:61:bd:c7:a3:9c:59:cf:55:83:c6:14:bb:20:2b:b5:1e:10:
         39:94:9c:d4:3f:27:db:1b:a1:62:68:82:1a:bb:e6:e6:19:47:
         08:9d:8d:8e:f1:a6:d1:62:d5:bc:78:bf:3a:1b:43:65:62:82:
         e5:54:0e:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWG2HcQnqRGnsDOT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDQxMzAxMDAyNVoXDTI0MDcxMjAxMDAyNVowLzEtMCsGA1UEAxMk
OGU0ZWI3NDgtZmM1NC00YjgzLTk5YzUtODUxZmFjYTAzNzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+BPq7GGw59+ZeRWlVOZTp7YKVHvt5hQuPMg
DjnAPVpvWid0zYugOQVtKRJcNi1Mfb7kla8Q9XiQamVWFwb37+kjFltj2WEM0+YC
ET+M7CkdoxI3FOI36UdQH7k7wfRmyjLjaSFcaDgPGGlnED1SJhPPwdGGcP6gZy3h
dvwYty0MhuzIFm4b/PTUIjLdqq5DDAnqI9NXtO69BfGVPrg2ETCFbo9NpzIorSe0
+6zOO1kjjuYIZgcN7clnfoB+ZVAeOc6mCMUzWpbqo+8FqghDmxr9RRBzs54e7nv3
n8U/NCU4ATM3U2eUo0LtbltPmPwJNJY8WzclVXgY2gvXc8jMPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGdmNFGUiero8m0kUtmgI5cDn6ZKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYzBmMmJmNmQtZjUzNC0z
ZTk0LWIwNTMtZjc2ZGIwNzFkODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2N5lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADI9MY8o7T0UP4dbEITMwrchlkeiDz1p9qcvzciaH16/3YWPyoOx0Z5T
kWPffMbeBiW7WNB8oBnLDErgQQL2gJzXwVEO5gv4nomTLAt0L/3ik8rNvcJI8FRU
hEagM0wNWeKB3YhtXoeJ6vuH3houQJdYuk/5WzjzmIwGPUfnSNEqren00cAQuF6h
Ya2sN1Ufuwjkx8rv9C2W4TwcFBV1o50pcGl/hwhHO4/j1MgBHk2vCQtU/R0qBjOi
sEhSXIS/XQlNv+uRUEJhvcejnFnPVYPGFLsgK7UeEDmUnNQ/J9sboWJoghq75uYZ
RwidjY7xptFi1bx4vzobQ2ViguVUDvo=
-----END CERTIFICATE-----
Generated at Mon May 20 17:25:30 2024 by rpki-client on console-ams.rpki-client.org