Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
File:                     09db520b-31cf-3c16-9501-2fe36da89b1f.roa (raw, json)
Hash identifier:          Ob/PP0Y07ABF5rCxahsIlsHW0nLn0H39a5CbWun0v28=
Subject key identifier:   62:7F:A8:A1:84:03:37:CE:FC:DB:75:E4:35:AE:26:2E:3F:8E:A7:DF
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F4328584576184F8409BCDD48701A1D00
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
Signing time:             Sun 07 Apr 2024 01:00:24 +0000
ROA not before:           Sun 07 Apr 2024 01:00:24 +0000
ROA not after:            Sat 06 Jul 2024 01:00:24 +0000
asID:                     13335
IP address blocks:        169.196.0.0/24 maxlen: 24
                          169.196.1.0/24 maxlen: 24
                          169.196.2.0/24 maxlen: 24
                          169.196.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:76:18:4f:84:09:bc:dd:48:70:1a:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Apr  7 01:00:24 2024 GMT
            Not After : Jul  6 01:00:24 2024 GMT
        Subject: CN=67dc5a49-03e3-4682-9077-d8b3afae5810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:09:d0:67:69:b9:4b:6b:b0:70:73:7f:ce:
                    94:f7:81:ee:63:86:c4:d0:49:2f:25:6c:94:7a:81:
                    21:fc:26:c3:e0:ee:79:4a:b5:0e:13:3e:4c:2e:ed:
                    b1:b5:40:38:df:66:89:ee:de:68:84:9b:ff:e4:a9:
                    cc:05:68:0a:9a:6b:cd:9d:aa:d6:14:3d:1e:2f:82:
                    0c:6a:c6:08:b5:57:b0:fc:bc:ca:9d:8c:11:8c:fa:
                    56:24:fb:f9:84:57:29:e8:a6:6f:95:27:31:15:f8:
                    00:08:b7:7c:27:96:d8:18:a8:c4:1f:a7:78:c8:a1:
                    97:b0:8b:46:9a:30:2a:74:21:77:7f:fb:0d:ed:ce:
                    1d:3c:71:fc:66:76:cb:b7:24:fd:b5:ca:3d:2b:c5:
                    65:d3:14:6a:52:0d:b4:2a:9d:2a:4e:ac:65:69:bc:
                    2d:dc:1f:5e:1b:6f:89:0b:3d:ef:69:89:e6:0a:6f:
                    b8:2f:16:94:74:e0:ca:aa:5a:f7:3a:43:68:e0:03:
                    21:02:43:e6:1f:7a:84:e1:13:12:7e:a4:12:48:61:
                    f9:9f:fc:2f:8a:0f:0e:59:15:c1:30:ae:de:ef:96:
                    d3:2d:9d:b8:ac:e0:99:c1:19:cc:03:d9:a8:4a:a5:
                    8b:36:91:99:20:d2:5f:09:30:e5:8b:44:2a:57:72:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7F:A8:A1:84:03:37:CE:FC:DB:75:E4:35:AE:26:2E:3F:8E:A7:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:af:a8:8b:fd:c1:75:19:3b:0b:10:eb:eb:36:f2:40:a3:
         b8:1f:5e:46:3d:92:30:2b:d0:d7:6a:fb:36:4a:71:f4:ae:0b:
         52:ec:db:3f:2b:dc:1c:e5:06:57:61:43:45:a8:0c:a6:a3:e5:
         5c:eb:76:7a:32:93:5d:33:6e:13:76:ce:40:27:c4:75:5c:08:
         38:dd:76:f8:82:4d:51:67:a2:0d:91:a8:45:fa:87:b5:82:3a:
         cc:c8:f6:23:04:8a:b1:60:3a:6c:57:d2:9c:94:2b:3c:04:09:
         3b:b9:94:ba:cd:05:bb:1d:89:34:b7:a0:65:ab:53:fb:f7:55:
         3c:3a:d5:c2:8b:e2:58:e7:19:93:5f:f3:75:15:42:e5:e1:6c:
         57:4c:7b:15:13:39:b5:b1:b0:dd:43:dd:45:12:4d:8e:5c:40:
         1a:dc:f3:3c:42:7b:f3:8a:30:b9:24:e6:b7:0a:6d:c5:43:55:
         20:f5:3c:58:65:04:5a:4e:98:09:0e:f3:73:13:a8:60:c9:29:
         8e:b3:3d:07:c6:e7:eb:c8:c2:be:5b:8e:86:2c:bb:69:64:a7:
         2d:e1:97:c3:30:ea:f4:5a:6b:1e:95:49:7a:86:ea:14:67:65:
         a6:30:61:96:75:cf:e4:25:38:04:2b:ef:34:d1:a1:20:28:97:
         82:8e:5a:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV2GE+ECbzdSHAaHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTczZWUxYmItYmI2Yi00Y2M2LWJjYTEtNGMxNjIyZGM0
ZWRiMB4XDTI0MDQwNzAxMDAyNFoXDTI0MDcwNjAxMDAyNFowLzEtMCsGA1UEAxMk
NjdkYzVhNDktMDNlMy00NjgyLTkwNzctZDhiM2FmYWU1ODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R8J0GdpuUtrsHBzf86U94HuY4bE0EkvJWyU
eoEh/CbD4O55SrUOEz5MLu2xtUA432aJ7t5ohJv/5KnMBWgKmmvNnarWFD0eL4IM
asYItVew/LzKnYwRjPpWJPv5hFcp6KZvlScxFfgACLd8J5bYGKjEH6d4yKGXsItG
mjAqdCF3f/sN7c4dPHH8ZnbLtyT9tco9K8Vl0xRqUg20Kp0qTqxlabwt3B9eG2+J
Cz3vaYnmCm+4LxaUdODKqlr3OkNo4AMhAkPmH3qE4RMSfqQSSGH5n/wvig8OWRXB
MK7e75bTLZ24rOCZwRnMA9moSqWLNpGZINJfCTDli0QqV3JWOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJ/qKGEAzfO/Nt15DWuJi4/jqffMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzNl
ZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2MjJkYzRlZGIvMDlkYjUyMGItMzFjZi0z
YzE2LTk1MDEtMmZlMzZkYTg5YjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTczZWUxYmItYmI2Yi00Y2M2LWJj
YTEtNGMxNjIyZGM0ZWRiLzU3M2VlMWJiLWJiNmItNGNjNi1iY2ExLTRjMTYyMmRj
NGVkYi5jcmwwHwYDVR0jBBgwFoAU5bcwnII1o67jk7VvPhVOUUksQ+AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzNlZTFiYi1iYjZiLTRjYzYtYmNhMS00YzE2
MjJkYzRlZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqcQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACx0r6iL/cF1GTsLEOvrNvJAo7gfXkY9kjAr0Ndq+zZKcfSuC1Ls2z8r
3BzlBldhQ0WoDKaj5Vzrdnoyk10zbhN2zkAnxHVcCDjddviCTVFnog2RqEX6h7WC
OszI9iMEirFgOmxX0pyUKzwECTu5lLrNBbsdiTS3oGWrU/v3VTw61cKL4ljnGZNf
83UVQuXhbFdMexUTObWxsN1D3UUSTY5cQBrc8zxCe/OKMLkk5rcKbcVDVSD1PFhl
BFpOmAkO83MTqGDJKY6zPQfG5+vIwr5bjoYsu2lkpy3hl8Mw6vRaax6VSXqG6hRn
ZaYwYZZ1z+QlOAQr7zTRoSAol4KOWmg=
-----END CERTIFICATE-----
Generated at Sat May 11 19:30:07 2024 by rpki-client on console-ams.rpki-client.org