Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ecf7767e-c081-3e80-afc8-e9d6ec40fd46.roa
File:                     ecf7767e-c081-3e80-afc8-e9d6ec40fd46.roa (raw, json)
Hash identifier:          QGtMIN3OdW0H/VGEVwgs+VLukQDYUg9nTz5qe3IO060=
Subject key identifier:   57:37:87:1E:39:55:34:C1:5A:05:66:06:10:DD:64:8B:A7:00:99:3F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D8759C325C8DB41E8D1080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ecf7767e-c081-3e80-afc8-e9d6ec40fd46.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     19955
IP address blocks:        216.119.41.0/24 maxlen: 24
                          216.119.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:75:9c:32:5c:8d:b4:1e:8d:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=19eaa565-82bf-4984-93f9-0074abd88d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:24:66:f1:ab:a3:cf:33:33:d8:3d:4e:d4:
                    34:bf:63:7b:dc:6f:45:e3:dc:d9:26:7e:10:26:bb:
                    76:ef:cd:2c:f8:f2:02:36:7d:0c:44:42:37:52:54:
                    6a:59:37:c1:52:34:85:e6:f1:da:32:f2:ff:0a:43:
                    38:c6:1c:2d:ad:f8:d4:34:1e:97:d1:9c:59:ef:53:
                    bf:aa:82:58:ba:be:a8:cd:f0:fb:9e:a0:36:27:63:
                    b7:fd:6b:a9:c4:66:4d:f9:57:84:dd:ee:7f:46:c7:
                    4f:fd:05:2b:eb:5b:22:b8:32:ae:d2:2a:eb:9d:41:
                    9c:b3:3f:e8:c2:56:df:e9:1d:55:91:8f:a8:61:4a:
                    f0:7c:92:78:0f:ad:ac:57:1c:56:7d:6d:21:0e:4e:
                    fb:e6:1e:04:89:8e:76:96:82:df:51:49:e3:a8:45:
                    21:98:d8:5b:ed:73:0a:0e:40:53:1f:63:93:dc:dd:
                    54:70:be:0f:e6:d5:a9:df:4f:f4:04:c4:d5:9d:86:
                    02:b5:a7:e4:98:08:c3:95:eb:8c:5c:e6:74:1c:e8:
                    6a:f8:6b:d9:ce:18:d6:82:55:dc:21:9c:bb:1d:00:
                    f7:9e:6f:ca:31:23:4f:bd:44:17:06:4f:ef:35:90:
                    79:78:83:5d:a9:6b:f5:ae:64:5a:d1:74:97:65:a5:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:37:87:1E:39:55:34:C1:5A:05:66:06:10:DD:64:8B:A7:00:99:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ecf7767e-c081-3e80-afc8-e9d6ec40fd46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c0:6e:22:73:28:e8:8e:fa:a6:c7:b4:c5:ae:bf:c0:6d:24:
         30:fa:ce:64:03:ab:11:1e:67:4b:27:84:b3:7b:43:83:c5:29:
         78:33:15:93:21:f9:57:aa:0c:03:7f:26:3b:c8:5a:b9:6c:9b:
         89:cc:c1:e1:5d:13:ee:ef:8f:dc:d4:d3:20:48:e7:82:33:c0:
         61:82:c1:fc:67:9c:7e:8a:9d:4a:00:c6:40:c8:f6:08:82:03:
         17:94:ea:6e:42:35:11:60:9f:b3:e4:bd:a7:57:12:69:be:50:
         98:01:ab:05:52:a2:a9:af:17:79:e7:19:41:38:9c:74:33:4d:
         80:3e:80:c8:9e:12:19:e6:31:23:70:93:04:5d:92:15:a3:95:
         0a:72:91:80:ec:6b:d3:56:1c:e1:9d:73:e5:27:20:99:11:b9:
         48:48:f6:4e:38:ba:82:9b:f7:12:2c:5a:02:7e:0a:e0:19:a5:
         2d:60:69:f2:8f:f6:80:aa:a9:4e:8e:74:d2:71:c9:45:15:cb:
         a3:45:8a:e5:c8:b4:56:b2:e7:05:e8:ed:e4:ef:f9:9b:3b:37:
         ad:30:90:89:d6:1a:7d:93:fa:2a:98:47:17:65:a2:91:f2:80:
         81:e1:d6:29:4b:ee:5c:72:9f:fe:f0:f6:bb:c9:b1:b2:95:d0:
         53:4c:5c:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWG2HWcMlyNtB6NEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDQxMzAxMDAyNVoXDTI0MDcxMjAxMDAyNVowLzEtMCsGA1UEAxMk
MTllYWE1NjUtODJiZi00OTg0LTkzZjktMDA3NGFiZDg4ZDNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZQkZvGro88zM9g9TtQ0v2N73G9F49zZJn4Q
Jrt2780s+PICNn0MREI3UlRqWTfBUjSF5vHaMvL/CkM4xhwtrfjUNB6X0ZxZ71O/
qoJYur6ozfD7nqA2J2O3/WupxGZN+VeE3e5/RsdP/QUr61siuDKu0irrnUGcsz/o
wlbf6R1VkY+oYUrwfJJ4D62sVxxWfW0hDk775h4EiY52loLfUUnjqEUhmNhb7XMK
DkBTH2OT3N1UcL4P5tWp30/0BMTVnYYCtafkmAjDleuMXOZ0HOhq+GvZzhjWglXc
IZy7HQD3nm/KMSNPvUQXBk/vNZB5eINdqWv1rmRa0XSXZaUsswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFc3hx45VTTBWgVmBhDdZIunAJk/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZWNmNzc2N2UtYzA4MS0z
ZTgwLWFmYzgtZTlkNmVjNDBmZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIvAbiJzKOiO+qbHtMWuv8BtJDD6zmQDqxEeZ0snhLN7Q4PFKXgzFZMh
+VeqDAN/JjvIWrlsm4nMweFdE+7vj9zU0yBI54IzwGGCwfxnnH6KnUoAxkDI9giC
AxeU6m5CNRFgn7PkvadXEmm+UJgBqwVSoqmvF3nnGUE4nHQzTYA+gMieEhnmMSNw
kwRdkhWjlQpykYDsa9NWHOGdc+UnIJkRuUhI9k44uoKb9xIsWgJ+CuAZpS1gafKP
9oCqqU6OdNJxyUUVy6NFiuXItFay5wXo7eTv+Zs7N60wkInWGn2T+iqYRxdlopHy
gIHh1ilL7lxyn/7w9rvJsbKV0FNMXAs=
-----END CERTIFICATE-----
Generated at Mon May 20 17:23:35 2024 by rpki-client on console-fra.rpki-client.org