Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f3b9e335-8187-3cc2-a44e-54adeb546aa1.roa
File:                     f3b9e335-8187-3cc2-a44e-54adeb546aa1.roa (raw, json)
Hash identifier:          ejpK9bVTWR1ZuRI1/b0evszYsCLQGDkOMPrP3WRuQcw=
Subject key identifier:   EB:98:32:1E:13:B2:B4:16:39:13:6E:E3:5B:E3:4C:07:21:83:A1:86
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D86DD61A5F2DF9677EE0C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f3b9e335-8187-3cc2-a44e-54adeb546aa1.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     19092
IP address blocks:        199.96.35.0/24 maxlen: 24
                          199.96.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:6d:d6:1a:5f:2d:f9:67:7e:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=d129a8d0-85d3-4426-8c32-a94eb6b26ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:53:cf:14:4f:75:7f:6e:fa:54:5a:0f:ff:
                    88:b8:6c:58:3d:a7:8f:8d:1c:06:05:87:d2:30:e7:
                    71:49:b6:51:35:8a:3c:1d:d9:2a:77:0a:f1:0c:47:
                    68:3d:3b:d1:7a:7e:ef:64:50:05:25:e3:52:b5:8f:
                    43:ee:eb:f3:4d:f2:72:cf:15:9e:52:5c:72:51:7f:
                    70:31:c1:68:f8:57:05:59:fb:3c:1b:08:26:d9:bc:
                    91:44:87:32:d3:61:bf:fd:39:e5:22:4e:b7:81:8c:
                    08:1a:c3:40:e5:9a:b3:09:dd:5c:76:b4:42:e1:1a:
                    be:e6:3c:c7:0c:4d:dc:9c:9f:a4:ac:24:03:46:8b:
                    66:49:3b:f3:a7:9d:81:8a:e6:92:5a:d6:cf:96:d9:
                    0b:af:01:50:5b:8f:c9:04:77:3e:70:0c:b9:6b:54:
                    33:7f:57:1a:eb:8a:8d:63:94:bf:8d:db:0a:35:e7:
                    06:33:a6:12:17:fa:e5:28:26:15:8a:78:6b:7b:89:
                    be:6f:35:df:e7:91:23:52:f1:e2:64:2f:99:8d:9a:
                    8d:59:0c:4b:85:3f:50:ec:80:a8:2e:02:8d:e5:47:
                    dc:9c:a5:d3:b2:c8:cb:2b:89:ce:1b:75:89:40:d3:
                    4f:fd:76:3a:83:fd:f5:d4:47:9d:e2:4c:2f:8e:af:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:98:32:1E:13:B2:B4:16:39:13:6E:E3:5B:E3:4C:07:21:83:A1:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f3b9e335-8187-3cc2-a44e-54adeb546aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:94:56:32:47:60:bc:15:57:64:ac:fd:62:87:b6:76:82:
         7e:1a:c9:11:39:4c:82:ba:31:b8:8d:a4:40:05:64:87:52:10:
         c1:e7:20:ef:6f:a8:6b:57:64:f5:d7:fb:ff:bd:92:f1:21:a7:
         3d:95:34:0d:df:b2:ba:57:3b:81:e4:3c:10:94:3c:03:4a:1b:
         51:0b:3b:d5:e6:65:af:b1:0b:e3:84:e6:ba:18:e6:34:fe:6f:
         a5:ef:cc:43:08:cc:6b:1f:0c:c1:cb:08:83:1f:48:e4:a3:12:
         11:b2:2d:82:6f:71:67:01:23:44:44:d5:12:77:5d:c2:02:48:
         d6:55:e0:5f:17:1e:00:a2:f8:71:c6:2b:3e:63:42:20:93:f1:
         40:57:61:49:65:ae:d9:b4:6f:bc:c0:3b:47:8c:c8:4f:4e:90:
         ee:88:b4:92:1b:6d:33:bb:b8:77:8a:5f:34:3f:b2:c2:29:54:
         a9:aa:62:b5:de:da:9c:da:94:5d:22:b9:2c:5a:8b:6a:88:f3:
         cd:70:05:8c:1d:e5:5d:c5:19:b3:ae:7f:76:76:61:6b:2d:36:
         9e:19:64:39:46:21:f6:4e:9c:19:73:ea:48:b3:48:70:f7:4a:
         89:24:a6:6f:b5:13:8b:59:a4:43:93:94:71:f7:23:82:48:4b:
         17:f3:24:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWG2G3WGl8t+Wd+4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDQxMzAxMDAyNVoXDTI0MDcxMjAxMDAyNVowLzEtMCsGA1UEAxMk
ZDEyOWE4ZDAtODVkMy00NDI2LThjMzItYTk0ZWI2YjI2ZmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOFTzxRPdX9u+lRaD/+IuGxYPaePjRwGBYfS
MOdxSbZRNYo8HdkqdwrxDEdoPTvRen7vZFAFJeNStY9D7uvzTfJyzxWeUlxyUX9w
McFo+FcFWfs8Gwgm2byRRIcy02G//TnlIk63gYwIGsNA5ZqzCd1cdrRC4Rq+5jzH
DE3cnJ+krCQDRotmSTvzp52BiuaSWtbPltkLrwFQW4/JBHc+cAy5a1Qzf1ca64qN
Y5S/jdsKNecGM6YSF/rlKCYVinhre4m+bzXf55EjUvHiZC+ZjZqNWQxLhT9Q7ICo
LgKN5UfcnKXTssjLK4nOG3WJQNNP/XY6g/311Eed4kwvjq91vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuYMh4TsrQWORNu41vjTAchg6GGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZjNiOWUzMzUtODE4Ny0z
Y2MyLWE0NGUtNTRhZGViNTQ2YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2AiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0llFYyR2C8FVdkrP1ih7Z2gn4ayRE5TIK6MbiNpEAFZIdSEMHnIO9v
qGtXZPXX+/+9kvEhpz2VNA3fsrpXO4HkPBCUPANKG1ELO9XmZa+xC+OE5roY5jT+
b6XvzEMIzGsfDMHLCIMfSOSjEhGyLYJvcWcBI0RE1RJ3XcICSNZV4F8XHgCi+HHG
Kz5jQiCT8UBXYUllrtm0b7zAO0eMyE9OkO6ItJIbbTO7uHeKXzQ/ssIpVKmqYrXe
2pzalF0iuSxai2qI881wBYwd5V3FGbOuf3Z2YWstNp4ZZDlGIfZOnBlz6kizSHD3
Sokkpm+1E4tZpEOTlHH3I4JISxfzJJE=
-----END CERTIFICATE-----
Generated at Mon May 20 17:23:35 2024 by rpki-client on console-fra.rpki-client.org