Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bc5198a2-5c79-324a-aece-a03c1b919441.roa
File:                     bc5198a2-5c79-324a-aece-a03c1b919441.roa (raw, json)
Hash identifier:          Wxs35MepImzz6NNgftjCr9nD58c7gkY04GY7arZ0Y4Q=
Subject key identifier:   03:76:53:0A:6C:15:46:61:22:3C:22:BA:50:B3:26:8D:9A:9C:45:F1
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858455A2D824CD7F5F23453851F80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bc5198a2-5c79-324a-aece-a03c1b919441.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     397422
IP address blocks:        199.193.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:82:4c:d7:f5:f2:34:53:85:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=eee70055-63e9-4db5-a66f-0cc1eaef5c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:62:2a:06:03:27:88:6c:65:52:51:66:6d:
                    7f:c2:52:1b:1b:c3:fe:39:e0:b0:9a:76:cd:5b:da:
                    a3:7e:4c:fb:dd:c7:d7:c8:b1:ef:7a:12:4c:18:5d:
                    5a:0d:fd:21:f0:2a:08:7d:f1:91:39:ed:f8:c7:21:
                    b5:c6:2b:13:e4:da:bd:32:06:6f:b5:7c:63:75:4e:
                    9a:ce:a8:ec:2b:a6:d7:69:a5:87:6b:99:34:6c:a6:
                    ad:61:7d:59:1d:af:6a:14:46:fc:f5:f3:17:b7:c5:
                    4e:ce:f8:df:90:e2:fd:a9:59:b8:81:65:63:30:69:
                    32:3e:dd:6a:43:9b:9f:f3:76:d2:ed:90:7a:20:cf:
                    3b:c3:8f:1d:5b:ae:22:5a:73:ed:e6:a0:1b:22:2d:
                    3c:97:db:c1:07:cf:ed:b5:8d:83:3f:19:91:62:18:
                    6e:e4:6f:3f:2f:43:da:8e:0b:12:2e:40:d9:4a:58:
                    65:e5:9b:ef:72:70:81:00:5c:9f:0c:88:6a:96:14:
                    3e:74:5b:e0:d8:f7:be:1c:a0:20:3f:53:7e:e1:cd:
                    8c:19:5d:98:23:e6:de:b8:54:84:bd:58:77:6f:6a:
                    3f:35:92:28:33:66:44:e0:be:00:48:06:2f:1a:fc:
                    59:29:6e:a5:75:c2:1e:fe:48:b3:f4:bb:a5:6d:9f:
                    82:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:76:53:0A:6C:15:46:61:22:3C:22:BA:50:B3:26:8D:9A:9C:45:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bc5198a2-5c79-324a-aece-a03c1b919441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:26:3d:26:2b:8c:95:8d:1d:d3:55:1e:55:9d:dc:67:15:
         dd:b3:ac:ba:46:91:b6:1c:31:86:0b:c1:0b:68:07:3c:7f:84:
         4f:0c:ee:54:33:0f:bd:d3:86:e3:42:fd:cf:35:fc:81:a6:27:
         d9:21:98:86:87:45:31:d8:2c:25:4a:62:95:f2:36:43:c4:7a:
         d2:e4:8f:fc:70:68:62:9f:b4:b9:0f:75:35:72:be:69:f0:99:
         55:a7:ae:17:8e:ef:41:a3:be:35:31:64:a0:03:37:20:f0:6d:
         04:c9:8f:86:99:db:20:70:9c:ca:b5:ca:88:96:c8:1a:ab:4b:
         46:ff:b9:2b:21:fe:cf:f6:96:b3:ec:55:59:bd:c8:3c:28:a8:
         71:dc:cb:e9:4f:ff:d8:9b:ec:c7:d5:65:9a:c3:6a:bb:34:66:
         21:34:c1:b7:e6:f0:d2:f0:3b:9a:95:6d:34:9f:7f:53:5c:52:
         96:43:b6:67:25:30:d5:d4:46:99:bd:e8:60:a1:85:15:c1:8e:
         31:3f:b6:88:e2:e2:5b:c3:10:f7:be:47:8c:67:e3:91:a2:c7:
         bd:37:f1:4b:eb:8e:7a:09:39:c2:a0:1d:cd:dd:fe:8f:21:df:
         2f:0a:85:0b:9e:60:51:0c:31:ea:76:f0:1d:d3:fd:8a:e4:7c:
         88:89:a1:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVaLYJM1/XyNFOFH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk
ZWVlNzAwNTUtNjNlOS00ZGI1LWE2NmYtMGNjMWVhZWY1YzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDFiKgYDJ4hsZVJRZm1/wlIbG8P+OeCwmnbN
W9qjfkz73cfXyLHvehJMGF1aDf0h8CoIffGROe34xyG1xisT5Nq9MgZvtXxjdU6a
zqjsK6bXaaWHa5k0bKatYX1ZHa9qFEb89fMXt8VOzvjfkOL9qVm4gWVjMGkyPt1q
Q5uf83bS7ZB6IM87w48dW64iWnPt5qAbIi08l9vBB8/ttY2DPxmRYhhu5G8/L0Pa
jgsSLkDZSlhl5ZvvcnCBAFyfDIhqlhQ+dFvg2Pe+HKAgP1N+4c2MGV2YI+beuFSE
vVh3b2o/NZIoM2ZE4L4ASAYvGvxZKW6ldcIe/kiz9LulbZ+CGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAN2UwpsFUZhIjwiulCzJo2anEXxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYmM1MTk4YTItNWM3OS0z
MjRhLWFlY2UtYTAzYzFiOTE5NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8HpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIajJj0mK4yVjR3TVR5VndxnFd2zrLpGkbYcMYYLwQtoBzx/hE8M7lQz
D73ThuNC/c81/IGmJ9khmIaHRTHYLCVKYpXyNkPEetLkj/xwaGKftLkPdTVyvmnw
mVWnrheO70GjvjUxZKADNyDwbQTJj4aZ2yBwnMq1yoiWyBqrS0b/uSsh/s/2lrPs
VVm9yDwoqHHcy+lP/9ib7MfVZZrDars0ZiE0wbfm8NLwO5qVbTSff1NcUpZDtmcl
MNXURpm96GChhRXBjjE/toji4lvDEPe+R4xn45Gix7038UvrjnoJOcKgHc3d/o8h
3y8KhQueYFEMMep28B3T/YrkfIiJoUQ=
-----END CERTIFICATE-----
Generated at Sun Jun 2 04:18:37 2024 by rpki-client on console-ams.rpki-client.org