Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7f6bbec4-3f34-3254-9575-d799c5f8ec07.roa
File:                     7f6bbec4-3f34-3254-9575-d799c5f8ec07.roa (raw, json)
Hash identifier:          tsBUX3JLYlCePHhodmRKzETzL3XHTKvnsnkhdNk3M0U=
Subject key identifier:   DB:D2:1B:1B:86:B3:0A:2D:6B:D6:B4:FB:59:50:A6:FC:F7:3F:90:32
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285845A2C341622C92A80FF39341C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7f6bbec4-3f34-3254-9575-d799c5f8ec07.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     6461
IP address blocks:        142.194.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:41:62:2c:92:a8:0f:f3:93:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=49d1cf6c-11ee-4626-a784-e58bae19f00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:7e:17:e0:4a:97:34:44:94:d7:65:dc:86:
                    ae:86:6f:e1:b0:00:bf:db:44:3f:d8:70:28:05:50:
                    2f:2b:d0:92:8b:b5:c1:45:96:d9:8f:f3:4b:3f:a7:
                    78:7c:a3:5d:86:3e:6a:44:07:ef:bb:00:3f:68:59:
                    f2:1b:47:5b:5a:9a:78:56:59:3a:08:a7:55:b1:84:
                    04:6c:9f:ee:77:e0:01:1f:a2:fb:06:57:0e:99:7e:
                    af:10:ec:55:44:35:db:be:a2:d1:81:bc:ff:66:a9:
                    3f:2e:bd:58:b6:92:d2:cc:f4:dd:32:db:e2:c5:e1:
                    6e:6b:1e:86:68:86:81:7f:71:e0:c7:88:37:0e:9c:
                    ca:c6:07:27:20:1d:bb:78:03:df:28:3d:7c:9c:be:
                    e4:47:4e:17:35:62:0e:86:77:26:dd:6b:02:93:1e:
                    69:10:1c:ed:ea:97:2e:31:4f:49:54:90:b2:9f:a3:
                    f6:1b:1e:ab:5c:95:d7:80:2d:f6:01:28:fe:14:c1:
                    20:7e:1e:2b:04:cb:8d:0f:1b:58:5d:00:7e:02:bd:
                    fd:71:a5:a3:88:98:0f:1d:f3:72:c9:2a:2e:7b:41:
                    e3:81:50:4a:9f:28:4a:35:37:89:5b:95:c3:1f:ae:
                    14:d3:a2:bb:8b:e7:87:7d:f9:29:4a:ab:84:5e:17:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D2:1B:1B:86:B3:0A:2D:6B:D6:B4:FB:59:50:A6:FC:F7:3F:90:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7f6bbec4-3f34-3254-9575-d799c5f8ec07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.194.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a4:70:1f:ee:d2:cf:82:da:47:39:f4:b8:c9:73:31:79:ef:
         a6:0c:cd:22:1f:ab:3d:44:18:69:71:5d:0b:df:f9:42:15:23:
         6b:b4:58:d9:b2:98:63:98:18:6d:07:41:87:41:b7:71:23:a9:
         01:46:44:0a:11:a9:aa:2a:ce:f3:c5:d0:7f:a0:96:0d:9a:1d:
         3d:a7:64:f3:1a:c5:2d:4b:65:f4:6d:7b:a7:5e:c9:1d:9b:d9:
         bf:d0:15:4e:f4:0b:ce:16:75:2b:4b:be:51:0d:cb:fd:5d:a7:
         e4:66:0e:0d:3c:59:44:dd:64:b6:5f:95:a9:ed:fa:08:ca:d5:
         2d:76:83:3a:dc:36:90:77:7f:34:7f:d6:96:c8:84:91:0f:e3:
         1f:5e:aa:45:40:c1:80:b8:62:fc:26:61:d6:9c:96:64:0c:b6:
         d3:e1:0a:87:46:3b:7c:5e:35:8d:07:4c:ed:bb:9c:18:65:94:
         0c:f6:a2:11:6a:02:64:fc:02:73:3f:6a:99:14:71:a6:f5:ed:
         da:c8:7e:5c:5d:54:76:d5:f2:ca:73:18:b5:4b:46:93:76:36:
         01:64:f3:38:f5:ac:46:2c:c3:f8:47:84:14:1f:3b:a0:e3:61:
         eb:53:a0:11:c8:52:4c:bd:cd:9a:ce:b7:05:c1:34:83:b5:ca:
         6f:dd:35:16
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWiw0FiLJKoD/OTQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDQyMzAxMDAyNVoXDTI0MDcyMjAxMDAyNVowLzEtMCsGA1UEAxMk
NDlkMWNmNmMtMTFlZS00NjI2LWE3ODQtZTU4YmFlMTlmMDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLB+F+BKlzRElNdl3Iauhm/hsAC/20Q/2HAo
BVAvK9CSi7XBRZbZj/NLP6d4fKNdhj5qRAfvuwA/aFnyG0dbWpp4Vlk6CKdVsYQE
bJ/ud+ABH6L7BlcOmX6vEOxVRDXbvqLRgbz/Zqk/Lr1YtpLSzPTdMtvixeFuax6G
aIaBf3Hgx4g3DpzKxgcnIB27eAPfKD18nL7kR04XNWIOhncm3WsCkx5pEBzt6pcu
MU9JVJCyn6P2Gx6rXJXXgC32ASj+FMEgfh4rBMuNDxtYXQB+Ar39caWjiJgPHfNy
ySoue0HjgVBKnyhKNTeJW5XDH64U06K7i+eHffkpSquEXhfbYQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNvSGxuGswota9a0+1lQpvz3P5AyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvN2Y2YmJlYzQtM2YzNC0z
MjU0LTk1NzUtZDc5OWM1ZjhlYzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjsIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWqRwH+7Sz4LaRzn0uMlzMXnvpgzNIh+rPUQYaXFdC9/5QhUja7RY2bKY
Y5gYbQdBh0G3cSOpAUZEChGpqirO88XQf6CWDZodPadk8xrFLUtl9G17p17JHZvZ
v9AVTvQLzhZ1K0u+UQ3L/V2n5GYODTxZRN1ktl+Vqe36CMrVLXaDOtw2kHd/NH/W
lsiEkQ/jH16qRUDBgLhi/CZh1pyWZAy20+EKh0Y7fF41jQdM7bucGGWUDPaiEWoC
ZPwCcz9qmRRxpvXt2sh+XF1UdtXyynMYtUtGk3Y2AWTzOPWsRizD+EeEFB87oONh
61OgEchSTL3Nms63BcE0g7XKb901Fg==
-----END CERTIFICATE-----
Generated at Sat May 4 16:34:58 2024 by rpki-client on console-fra.rpki-client.org