Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/6204d571-e803-3094-aba8-da4087c9cc40.roa
File:                     6204d571-e803-3094-aba8-da4087c9cc40.roa (raw, json)
Hash identifier:          O+0w6wu0OpVf3kT47PG4cvdFCKJ2ZILVHTC80Crd4WI=
Subject key identifier:   F0:B1:D9:2F:D7:4F:93:5C:05:1B:62:93:B8:09:43:4C:D3:4F:FE:CA
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F43285845840DC2A4438EA31972A92380
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/6204d571-e803-3094-aba8-da4087c9cc40.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     10929
IP address blocks:        209.44.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c2:a4:43:8e:a3:19:72:a9:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=3441c904-edaa-4331-86c0-d337482463db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:df:8f:18:92:55:53:5f:dd:3d:ff:1e:c3:2a:
                    02:eb:9a:db:2c:d8:aa:05:1f:b1:f4:25:2d:37:ef:
                    e5:a4:62:77:fb:6d:32:71:93:fd:d3:26:0d:4f:e3:
                    26:89:59:aa:e6:32:da:e4:79:15:c1:77:c1:99:bc:
                    40:fb:8f:e2:8e:da:8c:3c:92:f6:de:86:b0:c5:f4:
                    ee:87:8d:e5:12:88:25:a9:34:7b:3e:90:16:c3:f9:
                    2e:ec:b1:07:45:1c:a8:28:ac:d9:95:fa:b7:9d:95:
                    28:82:9f:d3:1c:c5:d1:be:f3:41:fa:24:08:68:59:
                    58:1d:69:b7:07:fd:7f:fa:04:24:95:56:8d:13:62:
                    a8:42:72:01:2d:09:c1:6a:8a:ec:8c:5f:2d:cb:05:
                    6c:53:82:67:09:21:2a:ff:de:45:53:dd:5c:ff:26:
                    ea:3f:4b:d7:a4:f0:f5:94:c9:13:a5:52:ba:f2:68:
                    81:71:9d:b1:d1:ff:89:37:21:57:51:b6:a1:23:9e:
                    40:0d:ba:d8:93:58:0a:f7:57:b0:af:2d:7e:4c:68:
                    eb:17:ea:a0:f7:06:13:e7:0e:66:c8:15:9d:1e:af:
                    7f:24:dd:79:12:18:53:38:3b:4a:53:04:57:9a:f7:
                    e0:08:46:73:19:af:21:29:b1:fd:ab:f3:c4:3f:f4:
                    d3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B1:D9:2F:D7:4F:93:5C:05:1B:62:93:B8:09:43:4C:D3:4F:FE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/6204d571-e803-3094-aba8-da4087c9cc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.44.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:08:65:4b:47:8b:b1:82:a9:fb:08:dd:02:56:39:92:84:
         39:91:ff:72:ea:6a:1c:e4:dc:47:b6:7e:f5:7c:ef:88:8f:4e:
         93:ba:9f:56:80:d3:7e:9b:17:84:3c:16:1c:7e:d1:d0:79:f8:
         82:9a:00:f0:3d:a3:56:46:01:ad:50:da:41:6c:00:e1:ee:62:
         15:17:7e:6d:fd:d8:60:e8:e2:95:a4:f6:81:e0:d0:74:f6:0d:
         e2:a0:87:9e:90:e7:2e:01:fc:3e:d8:5e:eb:b6:78:7a:80:0b:
         3a:23:7b:9b:9c:4c:00:db:de:d6:c1:8e:9c:b2:e1:c4:45:fe:
         13:ca:c4:96:8e:c7:df:97:e8:15:d7:e6:e4:c7:f8:63:41:8e:
         2c:6f:e2:c4:b5:fc:e7:e4:84:d3:ba:72:97:ed:a1:26:43:5f:
         72:69:28:5e:27:a8:1b:72:c3:0c:b5:8d:f0:4c:bb:21:2e:ad:
         f2:f3:cf:a8:7b:85:b1:f3:2a:60:77:2c:b9:7a:5d:53:49:9c:
         ca:c0:6f:46:40:19:27:64:29:53:25:d0:f0:46:64:25:a1:e4:
         1b:c5:ee:d9:cf:20:a2:df:3b:49:20:b7:ec:af:4d:38:40:f5:
         9b:a7:dc:9e:d0:af:a0:9b:29:eb:6e:10:e1:5d:6a:fe:f8:c4:
         16:71:ff:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDcKkQ46jGXKpI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIz
NWUwMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk
MzQ0MWM5MDQtZWRhYS00MzMxLTg2YzAtZDMzNzQ4MjQ2M2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN+PGJJVU1/dPf8ewyoC65rbLNiqBR+x9CUt
N+/lpGJ3+20ycZP90yYNT+MmiVmq5jLa5HkVwXfBmbxA+4/ijtqMPJL23oawxfTu
h43lEoglqTR7PpAWw/ku7LEHRRyoKKzZlfq3nZUogp/THMXRvvNB+iQIaFlYHWm3
B/1/+gQklVaNE2KoQnIBLQnBaorsjF8tywVsU4JnCSEq/95FU91c/ybqP0vXpPD1
lMkTpVK68miBcZ2x0f+JNyFXUbahI55ADbrYk1gK91ewry1+TGjrF+qg9wYT5w5m
yBWdHq9/JN15EhhTODtKUwRXmvfgCEZzGa8hKbH9q/PEP/TThwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCx2S/XT5NcBRtik7gJQ0zTT/7KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3
ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvNjIwNGQ1NzEtZTgwMy0z
MDk0LWFiYTgtZGE0MDg3YzljYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjI2N2Q4MzItY2IwNS00YzY4LWE1
Y2UtYmE0NjQ1ZGIzNWUwL2IyNjdkODMyLWNiMDUtNGM2OC1hNWNlLWJhNDY0NWRi
MzVlMC5jcmwwHwYDVR0jBBgwFoAU2rliA1hIhy/TMsdQmyxxCC9eqCYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2
NDVkYjM1ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0SxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIsoCGVLR4uxgqn7CN0CVjmShDmR/3Lqahzk3Ee2fvV874iPTpO6n1aA
036bF4Q8Fhx+0dB5+IKaAPA9o1ZGAa1Q2kFsAOHuYhUXfm392GDo4pWk9oHg0HT2
DeKgh56Q5y4B/D7YXuu2eHqACzoje5ucTADb3tbBjpyy4cRF/hPKxJaOx9+X6BXX
5uTH+GNBjixv4sS1/OfkhNO6cpftoSZDX3JpKF4nqBtywwy1jfBMuyEurfLzz6h7
hbHzKmB3LLl6XVNJnMrAb0ZAGSdkKVMl0PBGZCWh5BvF7tnPIKLfO0kgt+yvTThA
9Zun3J7Qr6CbKetuEOFdav74xBZx//g=
-----END CERTIFICATE-----
Generated at Sat May 4 02:10:16 2024 by rpki-client on console-ams.rpki-client.org