Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0852727b-d03d-312d-bb64-c77098602914.roa
File:                     0852727b-d03d-312d-bb64-c77098602914.roa (raw, json)
Hash identifier:          yVdCF/yUjv2ldkgaGdA1tNPsKQgeKSWY0UD6XucxukY=
Subject key identifier:   04:61:53:0C:6C:B1:0C:84:25:7F:A9:AD:C9:79:D1:4E:66:EE:76:99
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF80BF4A7E9F98FDF3280
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0852727b-d03d-312d-bb64-c77098602914.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        216.123.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f8:0b:f4:a7:e9:f9:8f:df:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=27dea68e-0fd3-47fe-8d15-1ceeb468e9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:18:30:c9:a8:18:e9:15:7e:91:10:d9:0b:
                    ea:e9:bb:73:48:7a:55:dd:dd:69:22:cb:af:bc:e4:
                    e8:29:7c:60:39:c6:9a:4f:66:be:5b:06:b2:c3:24:
                    45:05:fa:6c:11:82:f1:bf:f8:8e:30:52:a4:ca:45:
                    42:79:0e:90:6a:67:08:9a:ce:78:8a:4b:62:d3:f3:
                    32:1f:de:97:76:fd:a9:c6:ca:94:eb:5c:3d:65:e0:
                    84:46:3c:73:47:48:01:ef:c0:2d:3a:c2:d5:95:d1:
                    5d:f3:1d:f1:c7:14:54:91:e9:4e:89:72:cb:78:f4:
                    2b:a3:70:77:6f:33:ea:6e:b9:56:15:d7:4f:61:d6:
                    6b:74:5b:cd:1e:4f:5b:88:d2:dd:14:1d:1f:10:ee:
                    eb:99:f3:a6:f7:c1:1b:2c:24:e5:bd:1c:99:17:8f:
                    e7:e9:55:1a:76:ae:43:3f:fc:56:33:39:ef:cb:86:
                    2d:f9:9a:40:f8:42:9b:cc:a7:42:1f:a8:1d:e8:89:
                    55:a0:f0:2f:87:2e:f4:6c:5a:f0:3c:c6:2e:93:60:
                    86:5a:06:1a:3e:e2:34:06:59:83:34:01:72:78:82:
                    54:8b:b3:36:5c:e9:1f:9e:11:17:63:9f:61:35:16:
                    41:21:54:34:a6:2e:03:8b:66:7a:20:84:0d:d5:50:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:61:53:0C:6C:B1:0C:84:25:7F:A9:AD:C9:79:D1:4E:66:EE:76:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0852727b-d03d-312d-bb64-c77098602914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:31:14:76:23:53:f4:ab:69:19:ce:e8:65:c6:08:c6:79:b9:
         b2:a0:1d:e3:10:18:52:d2:1a:4e:1d:e3:94:66:72:43:68:d9:
         03:9c:e8:02:d7:8c:24:46:93:6f:20:fd:31:52:c4:09:0c:7b:
         ad:dc:b7:33:f8:05:a5:62:6e:a2:04:40:a4:a9:8f:7e:3f:23:
         32:63:df:67:b5:58:79:e4:da:e1:16:bf:ca:3c:88:12:9b:af:
         4a:be:fb:b8:72:07:a6:38:2a:91:fb:f8:a1:19:d1:74:d4:96:
         65:97:6b:51:6d:cf:da:46:22:9f:fb:ab:c7:3a:7d:05:fa:ea:
         54:8b:e2:5e:f3:da:ee:6e:83:69:2f:72:73:ad:be:ba:17:7c:
         28:16:95:b8:0b:fa:d2:95:cc:24:a5:58:4a:65:df:68:ba:70:
         05:b5:1e:76:82:82:70:2a:fd:b9:6e:85:08:31:7b:c7:b2:bd:
         8e:43:0f:d4:74:ad:80:60:3b:9a:26:d4:e6:a3:34:5e:07:ec:
         7f:f7:95:3c:ee:b2:b6:04:34:ef:92:8a:62:90:95:81:02:b7:
         23:78:15:73:56:02:bc:b8:40:0e:ff:71:16:bf:e0:99:52:25:
         69:4e:68:43:1c:2c:4f:79:d1:a9:8f:95:1c:c5:4c:a5:9c:7c:
         13:0d:cc:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWdLfgL9Kfp+Y/fMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
MjdkZWE2OGUtMGZkMy00N2ZlLThkMTUtMWNlZWI0NjhlOWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvQYMMmoGOkVfpEQ2Qvq6btzSHpV3d1pIsuv
vOToKXxgOcaaT2a+WwaywyRFBfpsEYLxv/iOMFKkykVCeQ6QamcIms54ikti0/My
H96Xdv2pxsqU61w9ZeCERjxzR0gB78AtOsLVldFd8x3xxxRUkelOiXLLePQro3B3
bzPqbrlWFddPYdZrdFvNHk9biNLdFB0fEO7rmfOm98EbLCTlvRyZF4/n6VUadq5D
P/xWMznvy4Yt+ZpA+EKbzKdCH6gd6IlVoPAvhy70bFrwPMYuk2CGWgYaPuI0BlmD
NAFyeIJUi7M2XOkfnhEXY59hNRZBIVQ0pi4Di2Z6IIQN1VD9oQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARhUwxssQyEJX+prcl50U5m7naZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMDg1MjcyN2ItZDAzZC0z
MTJkLWJiNjQtYzc3MDk4NjAyOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HtQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADExFHYjU/SraRnO6GXGCMZ5ubKgHeMQGFLSGk4d45RmckNo2QOc6ALX
jCRGk28g/TFSxAkMe63ctzP4BaVibqIEQKSpj34/IzJj32e1WHnk2uEWv8o8iBKb
r0q++7hyB6Y4KpH7+KEZ0XTUlmWXa1Ftz9pGIp/7q8c6fQX66lSL4l7z2u5ug2kv
cnOtvroXfCgWlbgL+tKVzCSlWEpl32i6cAW1HnaCgnAq/bluhQgxe8eyvY5DD9R0
rYBgO5om1OajNF4H7H/3lTzusrYENO+SimKQlYECtyN4FXNWAry4QA7/cRa/4JlS
JWlOaEMcLE950amPlRzFTKWcfBMNzLE=
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:10:10 2024 by rpki-client on console-ams.rpki-client.org