Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/f37b6cb1-4258-3284-b2e2-fb064f924cb5.roa
File:                     f37b6cb1-4258-3284-b2e2-fb064f924cb5.roa (raw, json)
Hash identifier:          NSon+yWOCiO+wuwtd/uuzIF+I5WaeoCYGPLvfYRqX3c=
Subject key identifier:   A1:43:39:41:03:50:98:43:F6:6B:C3:9D:2E:CF:D6:6A:10:DF:D4:FC
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F43285845734DB5FAB8896ADBC0BA7440
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/f37b6cb1-4258-3284-b2e2-fb064f924cb5.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     11650
IP address blocks:        192.159.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:b5:fa:b8:89:6a:db:c0:ba:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=27ec90e2-34ab-4b1f-9df3-95df33f39342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:d1:d5:b1:b9:91:c0:26:1f:a6:b1:04:96:
                    de:6a:91:67:14:39:ab:75:6e:8c:cc:ae:24:10:8a:
                    ef:5e:ab:62:63:60:3d:7c:47:59:d6:81:f4:c1:68:
                    74:57:12:bc:75:7d:4d:ed:c4:82:9f:f2:b4:6b:f5:
                    22:98:1e:8b:24:c7:a0:64:c6:92:c2:6d:65:8e:60:
                    9f:16:83:58:17:b8:61:07:1c:52:fa:57:99:43:15:
                    e2:a1:0a:f5:e3:3e:c6:d8:06:58:60:e6:bd:b8:cd:
                    58:c4:e6:69:07:97:05:b8:29:35:e4:64:8b:b8:53:
                    63:ad:35:05:43:fa:6f:1b:9d:f6:fc:ff:aa:93:72:
                    06:d2:d4:e8:a3:51:9d:4c:ae:6e:81:f5:28:9c:e1:
                    46:d0:5c:93:2d:3d:d3:b8:5c:7d:af:bd:fc:db:3f:
                    05:a8:cd:69:30:d2:1c:a3:da:7e:d7:5e:d2:a8:9f:
                    fb:ea:49:c6:2c:ac:7e:54:45:5a:9a:90:de:38:dd:
                    5d:1e:88:dc:6f:d2:ff:2b:c6:b5:7f:fc:70:89:8a:
                    c2:d4:9e:7f:08:e7:28:af:a0:d0:07:2d:47:ab:85:
                    59:23:57:ef:92:f5:7b:d3:6b:46:9b:05:a7:ac:af:
                    3b:07:c1:4d:1b:0b:aa:41:73:8e:27:bb:ae:aa:55:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:43:39:41:03:50:98:43:F6:6B:C3:9D:2E:CF:D6:6A:10:DF:D4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/f37b6cb1-4258-3284-b2e2-fb064f924cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9e:79:ea:47:11:c8:9e:fc:51:d1:b7:89:42:45:e4:2a:54:
         8e:79:5a:ff:6c:5d:30:f8:ef:3a:3a:e3:06:69:ba:cb:21:64:
         ef:0b:b7:5d:00:9f:f7:14:e9:4b:7d:b5:1a:30:a6:62:8c:65:
         02:73:b9:7c:91:6c:bc:a5:03:c4:e9:8e:f1:e7:b2:a5:00:ac:
         bd:a0:91:69:95:a7:e8:fd:47:7a:a4:4d:f6:c4:7c:72:4f:54:
         c6:92:14:05:ca:9e:a7:6f:88:b7:49:bb:bb:c8:9a:1a:85:fb:
         15:23:e2:1d:11:be:3c:ae:14:f6:60:a9:cb:11:c0:76:b3:08:
         90:34:ac:f0:3e:3d:ac:da:37:3c:82:e0:4b:8b:bb:5d:81:9f:
         a6:b6:5c:f9:ae:ea:d2:e2:45:54:2d:f4:bc:43:66:b0:52:17:
         bc:d2:57:c3:ab:9b:e6:e0:f3:b9:21:4a:c9:05:e7:bb:c2:3e:
         42:4e:fc:b2:e4:50:d5:7c:dc:79:e0:37:00:bd:d8:1b:1a:b3:
         74:bf:c9:1d:65:8d:da:69:e6:64:c2:cf:30:af:7a:83:cd:c6:
         0d:7b:5d:c3:6f:0f:36:ee:34:6c:39:7a:d9:ce:47:35:ab:02:
         a7:72:aa:b1:55:e0:79:53:a8:f7:0e:2a:b0:fe:11:38:13:6e:
         62:03:6f:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVzTbX6uIlq28C6dEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0
OTcxMB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
MjdlYzkwZTItMzRhYi00YjFmLTlkZjMtOTVkZjMzZjM5MzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRzR1bG5kcAmH6axBJbeapFnFDmrdW6MzK4k
EIrvXqtiY2A9fEdZ1oH0wWh0VxK8dX1N7cSCn/K0a/UimB6LJMegZMaSwm1ljmCf
FoNYF7hhBxxS+leZQxXioQr14z7G2AZYYOa9uM1YxOZpB5cFuCk15GSLuFNjrTUF
Q/pvG532/P+qk3IG0tToo1GdTK5ugfUonOFG0FyTLT3TuFx9r7382z8FqM1pMNIc
o9p+117SqJ/76knGLKx+VEVampDeON1dHojcb9L/K8a1f/xwiYrC1J5/COcor6DQ
By1Hq4VZI1fvkvV702tGmwWnrK87B8FNGwuqQXOOJ7uuqlWMIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFDOUEDUJhD9mvDnS7P1moQ39T8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl
ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvZjM3YjZjYjEtNDI1OC0z
Mjg0LWIyZTItZmIwNjRmOTI0Y2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh
MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi
NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj
NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJ/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIaeeepHEcie/FHRt4lCReQqVI55Wv9sXTD47zo64wZpusshZO8Lt10A
n/cU6Ut9tRowpmKMZQJzuXyRbLylA8TpjvHnsqUArL2gkWmVp+j9R3qkTfbEfHJP
VMaSFAXKnqdviLdJu7vImhqF+xUj4h0RvjyuFPZgqcsRwHazCJA0rPA+PazaNzyC
4EuLu12Bn6a2XPmu6tLiRVQt9LxDZrBSF7zSV8Orm+bg87khSskF57vCPkJO/LLk
UNV83HngNwC92Bsas3S/yR1ljdpp5mTCzzCveoPNxg17XcNvDzbuNGw5etnORzWr
AqdyqrFV4HlTqPcOKrD+ETgTbmIDb58=
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:49 2024 by rpki-client on console-fra.rpki-client.org