Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa
File:                     affcab7d-6094-3982-8b34-38221efc1254.roa (raw, json)
Hash identifier:          WbAiOF6uZno04ozfAbkGE/Nkowja2rX1HkjCzwNolfE=
Subject key identifier:   C2:8C:A0:71:03:C1:EB:49:32:A1:4A:E7:80:84:19:4A:5F:83:3D:C7
Certificate issuer:       /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial:       010D0C9F432858459368C8FD9E6F4697A58BC900
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     8075
IP address blocks:        199.255.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c8:fd:9e:6f:46:97:a5:8b:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=7bde862a-94a6-41bd-8286-65566c8cd300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:44:01:01:37:c3:8b:b9:a3:b0:db:d3:e5:
                    84:40:52:da:82:08:47:ca:7f:e8:7f:53:c6:38:a0:
                    43:29:76:da:10:60:64:4f:3b:0a:9c:c0:e3:e6:09:
                    c2:e7:94:49:e4:5f:12:a4:16:ca:b6:d4:70:3f:25:
                    78:e6:1f:c0:d5:99:3e:3d:79:0b:cc:c5:af:66:c8:
                    bc:e7:c2:ce:22:c1:46:5a:e4:84:d4:33:4f:14:90:
                    6a:7b:e7:dd:f5:04:ae:6c:f1:b8:c7:d6:91:57:b1:
                    18:4a:20:ed:82:42:82:e8:13:96:42:7f:ce:42:5c:
                    26:91:8c:c2:b5:47:13:30:af:ad:e8:b0:b3:53:64:
                    00:56:91:01:74:f6:77:77:bc:8b:4f:90:dd:74:3b:
                    d0:b1:94:4d:8a:56:3f:71:8c:f6:b0:f4:05:51:c7:
                    79:77:80:3a:30:0a:9c:a7:d2:51:55:ac:5f:50:1d:
                    a3:19:d2:e5:9f:17:e1:d0:35:12:ea:88:19:6f:51:
                    a7:1c:ca:a8:ae:90:3a:e9:28:3f:48:85:f1:5c:25:
                    28:f2:79:19:01:59:dc:97:b6:b2:25:be:d3:b3:28:
                    54:73:94:28:2e:f4:9b:1b:75:5b:1d:f9:55:47:12:
                    56:d8:72:71:1f:b2:53:89:f9:db:2f:27:c9:08:6f:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8C:A0:71:03:C1:EB:49:32:A1:4A:E7:80:84:19:4A:5F:83:3D:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl

            X509v3 Authority Key Identifier:
                keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:54:62:ba:93:af:68:c0:2e:56:5a:27:39:02:9a:c8:2b:5f:
         cf:6e:62:bd:00:bd:44:87:bb:e8:9c:3b:e3:ff:de:fb:52:78:
         56:b5:f4:0f:c2:70:cb:a0:f4:9b:2f:ca:bb:7f:dd:08:3d:c1:
         25:fc:a7:44:6d:ce:72:bb:76:7b:ff:11:40:59:1f:e5:00:9c:
         ad:73:84:25:6c:85:7f:68:66:60:b9:d0:95:26:e8:29:f0:ae:
         6e:dd:3c:96:a9:2b:39:27:a1:bb:74:76:72:9a:43:14:70:9d:
         b9:d7:85:50:60:32:b1:d4:3b:94:d3:54:19:c9:69:c1:a6:20:
         13:e2:f9:ea:c4:c6:74:8b:3a:0e:c0:f9:13:03:35:46:56:85:
         bd:18:0b:e4:22:a2:47:50:dd:cb:c6:c3:05:e3:3f:87:a0:e2:
         a6:2c:e5:6d:27:d2:dc:24:a0:47:04:cd:29:b1:eb:d9:fe:69:
         01:8e:10:f9:7a:c3:cc:ac:ed:aa:de:12:cf:68:e9:46:94:84:
         ee:f5:9f:63:95:b3:84:a3:65:8d:9e:2d:63:a7:b9:9e:49:c7:
         ee:ab:57:92:7a:45:84:fa:2e:82:68:b3:22:f5:0a:f7:18:cd:
         91:30:2e:41:55:15:15:2f:2e:f9:0f:59:0a:75:14:24:47:94:
         b0:39:07:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaMj9nm9Gl6WLyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBiNDVmNzktNjEyZC00YzdlLThjMjQtNWY2NGFjNzVj
MTEzMB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
N2JkZTg2MmEtOTRhNi00MWJkLTgyODYtNjU1NjZjOGNkMzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLVEAQE3w4u5o7Db0+WEQFLagghHyn/of1PG
OKBDKXbaEGBkTzsKnMDj5gnC55RJ5F8SpBbKttRwPyV45h/A1Zk+PXkLzMWvZsi8
58LOIsFGWuSE1DNPFJBqe+fd9QSubPG4x9aRV7EYSiDtgkKC6BOWQn/OQlwmkYzC
tUcTMK+t6LCzU2QAVpEBdPZ3d7yLT5DddDvQsZRNilY/cYz2sPQFUcd5d4A6MAqc
p9JRVaxfUB2jGdLlnxfh0DUS6ogZb1GnHMqorpA66Sg/SIXxXCUo8nkZAVncl7ay
Jb7TsyhUc5QoLvSbG3VbHflVRxJW2HJxH7JTifnbLyfJCG+TGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKMoHEDwetJMqFK54CEGUpfgz3HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0
NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0YWM3NWMxMTMvYWZmY2FiN2QtNjA5NC0z
OTgyLThiMzQtMzgyMjFlZmMxMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjBiNDVmNzktNjEyZC00YzdlLThj
MjQtNWY2NGFjNzVjMTEzL2YwYjQ1Zjc5LTYxMmQtNGM3ZS04YzI0LTVmNjRhYzc1
YzExMy5jcmwwHwYDVR0jBBgwFoAUwgDCOnzJSSzO95wp7F6dYJdYYncwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0
YWM3NWMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVUYrqTr2jALlZaJzkCmsgrX89uYr0AvUSHu+icO+P/3vtSeFa19A/C
cMug9Jsvyrt/3Qg9wSX8p0RtznK7dnv/EUBZH+UAnK1zhCVshX9oZmC50JUm6Cnw
rm7dPJapKzknobt0dnKaQxRwnbnXhVBgMrHUO5TTVBnJacGmIBPi+erExnSLOg7A
+RMDNUZWhb0YC+QiokdQ3cvGwwXjP4eg4qYs5W0n0twkoEcEzSmx69n+aQGOEPl6
w8ys7areEs9o6UaUhO71n2OVs4SjZY2eLWOnuZ5Jx+6rV5J6RYT6LoJosyL1CvcY
zZEwLkFVFRUvLvkPWQp1FCRHlLA5Bw0=
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:21 2024 by rpki-client on console-ams.rpki-client.org