Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0de1a9d3-fdaf-30e8-bba8-843af24156af.roa
File:                     0de1a9d3-fdaf-30e8-bba8-843af24156af.roa (raw, json)
Hash identifier:          R1yJP9kF7z31xYtpx6LdPIZWVh/yHeJOanplh7+mSLE=
Subject key identifier:   9F:D0:D6:EC:F0:F4:5B:3C:1E:F3:BA:A0:63:69:23:BF:D4:EB:5E:29
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF6DBCB62C379E838EEA0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0de1a9d3-fdaf-30e8-bba8-843af24156af.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        216.13.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f6:db:cb:62:c3:79:e8:38:ee:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=1d3b61ac-0b66-437f-bed5-164790d82ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:9f:6a:fe:4d:a7:fc:9b:c6:fd:89:3e:4a:
                    df:65:cb:45:ed:74:5a:25:e9:9c:9d:11:a2:e5:d9:
                    5c:7f:a5:ef:85:77:98:be:63:f2:0a:dd:36:a0:6c:
                    69:54:d7:93:4e:0c:1f:1c:00:5c:e4:2c:59:52:96:
                    00:69:ac:c2:a7:b4:96:da:6d:37:61:fe:f5:dc:2f:
                    ad:59:77:f1:70:b2:70:21:92:a1:88:c1:ba:e3:8c:
                    36:b9:1e:17:e5:de:d7:0e:d5:7d:4f:7f:79:db:af:
                    fd:bf:7d:19:2e:7c:c6:46:1a:de:03:e7:28:d1:0d:
                    ac:b9:58:4a:71:f4:96:4c:78:09:ae:70:52:6b:b7:
                    19:d4:23:5a:3c:d1:21:c6:d1:f6:13:12:0d:00:ac:
                    59:13:24:61:bf:cc:72:17:54:10:b5:d3:cc:39:01:
                    92:85:39:c7:db:0b:5e:74:1b:39:3d:7d:74:ef:8d:
                    a6:2c:bc:25:04:21:b2:33:51:b7:d0:a1:18:e3:c9:
                    19:cf:27:0f:6a:eb:f7:bb:d2:6c:70:3a:b2:4f:0c:
                    f5:ef:0e:32:34:4c:04:0d:ac:be:c8:51:75:5b:fa:
                    85:ef:15:61:31:af:ce:64:57:f5:a3:0d:82:ea:35:
                    22:81:2d:ee:03:2b:72:fb:9d:4b:bc:54:bb:1c:52:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D0:D6:EC:F0:F4:5B:3C:1E:F3:BA:A0:63:69:23:BF:D4:EB:5E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0de1a9d3-fdaf-30e8-bba8-843af24156af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:47:d5:c7:48:b8:3c:de:eb:f9:f2:ec:4c:89:aa:36:e6:af:
         f4:ef:cc:dd:7e:20:9b:06:14:7a:58:16:4f:78:a5:b1:5e:01:
         84:a7:2f:21:b4:a5:a3:a0:04:05:4c:2e:50:d2:61:66:e0:16:
         ba:0e:7c:2d:27:63:00:10:99:da:22:ae:08:24:ae:4c:76:72:
         8d:3a:ed:95:14:a9:37:6c:03:a8:64:f6:14:3a:48:7e:b4:a8:
         09:50:e9:46:40:89:63:f4:6f:c0:f2:d0:c2:36:24:6a:fe:72:
         ad:c3:5b:46:e4:b5:73:10:ea:c6:26:08:75:ec:9e:c7:07:7c:
         ee:9a:64:82:65:89:51:31:76:99:4e:5f:65:a3:2a:b3:9c:93:
         53:9d:36:c0:d7:60:b1:c3:7e:a2:57:be:27:96:33:2a:c5:2e:
         56:06:ab:15:59:89:41:48:d9:ea:3d:cd:75:4b:b9:2f:08:56:
         6b:49:a0:a0:ac:87:81:01:59:f2:08:65:3f:77:bf:c9:bc:b4:
         70:1d:4f:c0:81:c0:37:71:6e:f4:b5:24:61:f7:78:81:cb:db:
         d0:fe:35:99:ff:2c:e7:86:56:eb:db:c1:b7:72:f4:7e:44:1d:
         e9:de:47:e5:ba:fd:91:53:39:36:9a:f0:20:b7:72:b9:67:1b:
         ce:60:4f:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWdLfbby2LDeeg47qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
MWQzYjYxYWMtMGI2Ni00MzdmLWJlZDUtMTY0NzkwZDgyY2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieefav5Np/ybxv2JPkrfZctF7XRaJemcnRGi
5dlcf6XvhXeYvmPyCt02oGxpVNeTTgwfHABc5CxZUpYAaazCp7SW2m03Yf713C+t
WXfxcLJwIZKhiMG644w2uR4X5d7XDtV9T39526/9v30ZLnzGRhreA+co0Q2suVhK
cfSWTHgJrnBSa7cZ1CNaPNEhxtH2ExINAKxZEyRhv8xyF1QQtdPMOQGShTnH2wte
dBs5PX10742mLLwlBCGyM1G30KEY48kZzycPauv3u9JscDqyTwz17w4yNEwEDay+
yFF1W/qF7xVhMa/OZFf1ow2C6jUigS3uAyty+51LvFS7HFK9vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/Q1uzw9Fs8HvO6oGNpI7/U614pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMGRlMWE5ZDMtZmRhZi0z
MGU4LWJiYTgtODQzYWYyNDE1NmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2A1wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNH1cdIuDze6/ny7EyJqjbmr/TvzN1+IJsGFHpYFk94pbFeAYSnLyG0
paOgBAVMLlDSYWbgFroOfC0nYwAQmdoirggkrkx2co067ZUUqTdsA6hk9hQ6SH60
qAlQ6UZAiWP0b8Dy0MI2JGr+cq3DW0bktXMQ6sYmCHXsnscHfO6aZIJliVExdplO
X2WjKrOck1OdNsDXYLHDfqJXvieWMyrFLlYGqxVZiUFI2eo9zXVLuS8IVmtJoKCs
h4EBWfIIZT93v8m8tHAdT8CBwDdxbvS1JGH3eIHL29D+NZn/LOeGVuvbwbdy9H5E
HeneR+W6/ZFTOTaa8CC3crlnG85gT1Q=
-----END CERTIFICATE-----
Generated at Sun May 19 16:43:29 2024 by rpki-client on console-fra.rpki-client.org