Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa
File:                     80ca88fd-748b-398c-994d-51d5dfc053ba.roa (raw, json)
Hash identifier:          nVt1V+TrVdq3fldRQvkFZFfLfGTdUyeU3kaxJ8OdNKQ=
Subject key identifier:   47:14:34:B9:54:0E:BC:59:CE:DC:F4:78:00:6E:7D:F5:92:3E:F3:C4
Certificate issuer:       /CN=8a57b69a-d683-4350-83d4-e449c0242b7d
Certificate serial:       010D0C9F43285846F4130F8D252E53E8E6756940
Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa
Signing time:             Wed 21 Aug 2024 20:48:39 +0000
ROA not before:           Wed 21 Aug 2024 20:48:39 +0000
ROA not after:            Tue 19 Nov 2024 21:48:39 +0000
asID:                     55134
IP address blocks:        172.111.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f4:13:0f:8d:25:2e:53:e8:e6:75:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d
        Validity
            Not Before: Aug 21 20:48:39 2024 GMT
            Not After : Nov 19 21:48:39 2024 GMT
        Subject: CN=80540605-65f9-45cc-9512-789028868dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:5c:18:8a:83:e8:0e:18:77:4d:a1:48:6a:
                    0c:9f:60:4a:ba:fe:15:6d:d7:c0:c9:d9:b4:36:94:
                    aa:68:6b:a2:77:8e:56:0d:28:42:4f:22:f2:db:8c:
                    6a:cb:95:a2:8d:4a:92:62:a2:c9:b8:57:b4:ee:5e:
                    e1:e6:d7:06:fd:5f:bf:c9:c9:ae:50:3d:d2:f7:c2:
                    ef:dd:0a:20:e7:ce:99:e7:25:e3:f0:a4:1a:2f:f4:
                    cf:c1:0b:6d:a0:44:c9:5b:d7:f6:b6:70:26:2a:4c:
                    07:70:30:60:a6:11:9f:d7:23:64:70:6f:99:a4:b7:
                    bb:8d:2d:3b:9e:be:7c:28:d3:5b:a3:87:19:da:88:
                    b7:87:b2:17:f0:00:dd:a8:fb:4c:af:bc:44:b7:d9:
                    cf:0e:19:34:17:db:33:b0:14:36:ec:f8:06:2f:de:
                    1b:5c:66:ab:18:0e:ec:c4:61:61:b8:35:64:b7:69:
                    f8:1d:dd:0a:3f:29:a5:3f:08:a1:d5:89:b3:e2:ea:
                    0d:34:e8:40:01:d2:7b:32:48:c6:1a:c6:2c:2c:e4:
                    6e:21:9e:ea:43:e4:da:27:df:ca:ec:e4:09:82:e7:
                    00:6b:ed:3b:cf:1d:7a:56:5f:ec:72:68:ff:1a:cf:
                    c3:51:97:70:70:8a:a8:26:54:f2:f6:db:65:2a:53:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:14:34:B9:54:0E:BC:59:CE:DC:F4:78:00:6E:7D:F5:92:3E:F3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/80ca88fd-748b-398c-994d-51d5dfc053ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:57:37:70:fd:54:1d:8f:9c:d2:0b:dc:7d:19:c6:2c:0a:d8:
         85:74:7f:a4:f0:37:f6:4f:bb:8a:c9:48:83:f6:59:d7:cd:63:
         df:45:05:3c:65:1e:17:2c:e8:9c:71:cc:1f:ea:19:cf:57:ff:
         05:b6:cc:25:2a:1f:a7:b4:9b:4b:d5:07:15:88:03:75:bf:3f:
         48:9e:99:77:66:1c:14:2a:3d:7a:39:eb:21:94:93:dd:6c:f6:
         5e:40:64:f0:32:06:39:bc:97:03:d8:cc:09:c6:b9:ae:86:4f:
         0a:0e:c9:b0:83:cc:cb:61:7f:6c:43:11:51:d4:e8:00:95:e5:
         3b:57:f2:ac:2f:2d:58:ce:11:80:be:5b:36:32:58:83:ad:1b:
         3a:b7:e5:6b:49:0d:74:10:e3:22:12:40:1a:89:6b:cd:57:b8:
         80:ce:5e:a0:ad:0d:e6:f4:ea:4c:36:f2:0c:c7:3a:18:d4:f0:
         f6:96:17:42:5c:3b:81:de:0d:14:ea:73:58:bc:24:bc:6d:be:
         9c:1c:28:c7:60:fa:47:cd:3b:95:4a:ce:76:4a:3f:d6:a5:e0:
         6e:7d:99:21:0b:50:3e:57:31:97:d9:6d:d0:12:b2:84:63:7d:
         3e:5b:25:ec:47:de:26:e6:28:31:cf:87:9f:0f:13:e0:1f:90:
         48:97:25:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb0Ew+NJS5T6OZ1aUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy
YjdkMB4XDTI0MDgyMTIwNDgzOVoXDTI0MTExOTIxNDgzOVowLzEtMCsGA1UEAxMk
ODA1NDA2MDUtNjVmOS00NWNjLTk1MTItNzg5MDI4ODY4ZGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qtcGIqD6A4Yd02hSGoMn2BKuv4VbdfAydm0
NpSqaGuid45WDShCTyLy24xqy5WijUqSYqLJuFe07l7h5tcG/V+/ycmuUD3S98Lv
3Qog586Z5yXj8KQaL/TPwQttoETJW9f2tnAmKkwHcDBgphGf1yNkcG+ZpLe7jS07
nr58KNNbo4cZ2oi3h7IX8ADdqPtMr7xEt9nPDhk0F9szsBQ27PgGL94bXGarGA7s
xGFhuDVkt2n4Hd0KPymlPwih1Ymz4uoNNOhAAdJ7MkjGGsYsLORuIZ7qQ+TaJ9/K
7OQJgucAa+07zx16Vl/scmj/Gs/DUZdwcIqoJlTy9ttlKlN2twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEcUNLlUDrxZztz0eABuffWSPvPEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3
YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvODBjYTg4ZmQtNzQ4Yi0z
OThjLTk5NGQtNTFkNWRmYzA1M2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz
ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0
MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5
YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1XN3D9VB2PnNIL3H0ZxiwK2IV0f6TwN/ZPu4rJSIP2WdfNY99FBTxl
Hhcs6JxxzB/qGc9X/wW2zCUqH6e0m0vVBxWIA3W/P0iemXdmHBQqPXo56yGUk91s
9l5AZPAyBjm8lwPYzAnGua6GTwoOybCDzMthf2xDEVHU6ACV5TtX8qwvLVjOEYC+
WzYyWIOtGzq35WtJDXQQ4yISQBqJa81XuIDOXqCtDeb06kw28gzHOhjU8PaWF0Jc
O4HeDRTqc1i8JLxtvpwcKMdg+kfNO5VKznZKP9al4G59mSELUD5XMZfZbdASsoRj
fT5bJexH3ibmKDHPh58PE+AfkEiXJS8=
-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org