Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/52535ef1-076f-3ba5-bf01-617462e8e82a.roa
File:                     52535ef1-076f-3ba5-bf01-617462e8e82a.roa (raw, json)
Hash identifier:          1bNEJ02YTdzILv7bXix873Yqb4Or3X/53kLjAviMkA8=
Subject key identifier:   47:77:4F:E7:24:BF:D7:07:7B:C2:21:94:56:2E:34:A9:D5:2B:CE:BC
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583CC400B2202B843F394FA54780
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/52535ef1-076f-3ba5-bf01-617462e8e82a.roa
Signing time:             Sun 30 Jan 2022 05:00:00 +0000
ROA not before:           Sun 30 Jan 2022 05:00:00 +0000
ROA not after:            Sun 23 Jan 2028 05:00:00 +0000
asID:                     19905
IP address blocks:        200.69.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c4:00:b2:20:2b:84:3f:39:4f:a5:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jan 30 05:00:00 2022 GMT
            Not After : Jan 23 05:00:00 2028 GMT
        Subject: CN=bc0ebd5a-5b5e-42c0-be67-05f7e333b8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:ab:da:94:16:ec:97:87:1a:2a:e8:15:4c:
                    40:d2:fb:7c:7e:4f:e2:35:96:b8:43:9c:42:71:df:
                    e4:d0:bf:b1:8b:f6:8e:04:bc:67:f7:34:be:66:81:
                    f0:86:59:2a:55:dd:5f:94:67:2a:ee:5d:99:ba:f3:
                    5f:3c:66:a7:e7:6c:a9:e0:a9:26:1e:53:24:91:4c:
                    68:e3:7a:49:ff:33:ad:68:0a:8b:ec:bc:24:e9:a2:
                    c6:86:2c:4c:40:43:1a:ad:5e:00:f9:af:43:94:0c:
                    7e:c6:75:73:9a:7b:dc:58:e5:55:17:68:bc:c6:8d:
                    ea:86:c7:89:f8:f7:25:84:23:09:4f:df:eb:93:ba:
                    b6:35:07:8a:73:cc:16:51:73:a8:21:cb:18:c9:37:
                    e0:01:78:3f:5c:82:b2:2d:8e:ba:3f:a5:29:36:8e:
                    e0:12:63:2c:57:f2:61:97:e6:97:65:8e:0a:8d:69:
                    9d:68:cc:dd:22:fd:64:27:36:46:d7:c2:3c:28:18:
                    83:e6:f4:3b:ca:ca:99:ab:71:68:10:d7:c0:24:82:
                    cb:13:ba:ac:35:87:ef:bc:4d:d1:59:24:b6:2c:7e:
                    56:7f:a5:a0:f3:98:fb:42:4a:84:ae:f0:03:fd:c4:
                    02:27:8d:b8:0d:83:44:c3:5a:6c:72:a1:c8:f0:2b:
                    b3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:77:4F:E7:24:BF:D7:07:7B:C2:21:94:56:2E:34:A9:D5:2B:CE:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/52535ef1-076f-3ba5-bf01-617462e8e82a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:13:fe:27:ca:ce:23:a2:45:97:f5:4c:17:34:56:f4:eb:81:
         c9:df:26:22:5d:8f:fb:a3:14:da:15:e9:e9:10:ae:ff:48:9d:
         9b:fe:dc:72:57:eb:60:ab:45:fb:54:07:c2:51:20:1f:74:73:
         1a:c2:6b:56:98:55:66:0f:49:b2:8d:79:ff:8c:93:4d:03:be:
         66:f8:c1:09:9f:88:c0:4d:9b:5a:32:40:0e:d2:88:c0:27:cf:
         6d:3a:c3:20:c7:68:d0:ca:fe:b3:be:16:e8:92:61:df:68:ae:
         bd:b2:ab:f7:92:1c:65:e4:17:11:a0:3e:b8:f5:0a:55:6e:da:
         16:ee:ba:76:51:3d:04:d9:7f:09:d0:66:ab:5c:da:1a:95:d7:
         ee:25:62:1e:40:d8:60:4d:06:04:eb:58:34:fd:82:2a:20:94:
         4e:4c:34:17:bc:1b:d6:4b:c0:a1:58:71:34:78:b8:6f:c0:6d:
         50:9d:70:73:36:69:ab:8a:a0:68:0e:b6:37:55:29:c9:b3:ea:
         a1:ff:d1:ad:fa:c8:0e:c4:2b:49:0a:d4:1d:1a:ee:16:ed:55:
         88:fc:d4:31:82:f8:c8:a5:18:ae:49:73:df:0d:f6:11:21:cc:
         0c:90:df:bc:eb:9f:dd:b2:bb:df:17:73:7d:2f:ae:96:74:09:
         dc:38:54:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzEALIgK4Q/OU+lR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTIyMDEzMDA1MDAwMFoXDTI4MDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
YmMwZWJkNWEtNWI1ZS00MmMwLWJlNjctMDVmN2UzMzNiOGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Sr2pQW7JeHGiroFUxA0vt8fk/iNZa4Q5xC
cd/k0L+xi/aOBLxn9zS+ZoHwhlkqVd1flGcq7l2ZuvNfPGan52yp4KkmHlMkkUxo
43pJ/zOtaAqL7Lwk6aLGhixMQEMarV4A+a9DlAx+xnVzmnvcWOVVF2i8xo3qhseJ
+PclhCMJT9/rk7q2NQeKc8wWUXOoIcsYyTfgAXg/XIKyLY66P6UpNo7gEmMsV/Jh
l+aXZY4KjWmdaMzdIv1kJzZG18I8KBiD5vQ7ysqZq3FoENfAJILLE7qsNYfvvE3R
WSS2LH5Wf6Wg85j7QkqErvAD/cQCJ424DYNEw1pscqHI8CuzXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEd3T+ckv9cHe8IhlFYuNKnVK868MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNTI1MzVlZjEtMDc2Zi0z
YmE1LWJmMDEtNjE3NDYyZThlODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyEUUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMT/ifKziOiRZf1TBc0VvTrgcnfJiJdj/ujFNoV6ekQrv9InZv+3HJX
62CrRftUB8JRIB90cxrCa1aYVWYPSbKNef+Mk00Dvmb4wQmfiMBNm1oyQA7SiMAn
z206wyDHaNDK/rO+FuiSYd9orr2yq/eSHGXkFxGgPrj1ClVu2hbuunZRPQTZfwnQ
Zqtc2hqV1+4lYh5A2GBNBgTrWDT9gioglE5MNBe8G9ZLwKFYcTR4uG/AbVCdcHM2
aauKoGgOtjdVKcmz6qH/0a36yA7EK0kK1B0a7hbtVYj81DGC+MilGK5Jc98N9hEh
zAyQ37zrn92yu98Xc30vrpZ0Cdw4VKo=
-----END CERTIFICATE-----
Generated at Thu May 2 18:04:07 2024 by rpki-client on console-fra.rpki-client.org