Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/59bbf47a-a2b1-3605-b314-1a84808367c2.roa
File:                     59bbf47a-a2b1-3605-b314-1a84808367c2.roa (raw, json)
Hash identifier:          CJfShwRkeUf+h1lR4ujI2cFfBwYPN6PdvMq9Ox7W0DQ=
Subject key identifier:   D0:31:6E:66:DF:BE:68:88:7A:9B:3A:61:2B:5F:6E:17:40:30:29:C4
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583CC400B8901EF8D18442AAD580
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/59bbf47a-a2b1-3605-b314-1a84808367c2.roa
Signing time:             Sun 30 Jan 2022 05:00:00 +0000
ROA not before:           Sun 30 Jan 2022 05:00:00 +0000
ROA not after:            Sun 23 Jan 2028 05:00:00 +0000
asID:                     19905
IP address blocks:        209.124.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c4:00:b8:90:1e:f8:d1:84:42:aa:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jan 30 05:00:00 2022 GMT
            Not After : Jan 23 05:00:00 2028 GMT
        Subject: CN=f9c12849-c428-4e89-a6e3-2f1916cf24b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:8f:00:f2:d3:bd:f5:46:7c:a2:4b:dd:c5:
                    db:52:2e:d2:d5:b3:2c:71:7f:a7:3e:6a:38:86:1e:
                    eb:61:3f:7e:56:a7:da:32:b9:bb:f0:64:2b:8a:f5:
                    e8:1f:b4:d4:9c:dc:38:97:e3:12:49:a0:ac:38:07:
                    7d:bf:49:9f:1c:07:22:fd:f2:fe:79:25:f5:45:73:
                    4e:72:f7:13:ad:c8:06:04:70:7f:a0:59:83:a5:a1:
                    50:dc:f2:50:a4:85:47:b9:95:67:37:ef:cf:29:29:
                    90:8a:15:b8:de:47:f8:da:f5:8f:c5:10:68:a6:f1:
                    ee:62:84:f4:4f:1b:a9:ec:2e:39:41:82:99:ac:89:
                    d1:8f:60:5a:90:48:bb:c5:cc:79:69:85:4f:45:33:
                    38:4f:00:50:1f:7f:2f:a0:57:80:bd:76:90:3b:a6:
                    54:5e:b4:0c:75:43:2c:4b:73:88:f8:89:58:74:bc:
                    77:f1:86:7e:4c:0a:ae:5d:7e:26:3f:64:df:24:c9:
                    31:1c:ce:b1:cc:d5:30:4a:aa:95:0e:6b:2f:e7:27:
                    fb:26:09:23:e1:78:bf:ed:6a:31:fc:43:07:b8:07:
                    a4:cb:54:c9:99:0a:9d:b7:30:02:3b:d7:16:a1:60:
                    cf:74:a0:6d:84:e5:f3:43:c3:8a:4b:3b:b9:af:9b:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:31:6E:66:DF:BE:68:88:7A:9B:3A:61:2B:5F:6E:17:40:30:29:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/59bbf47a-a2b1-3605-b314-1a84808367c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:04:01:92:e1:47:e9:8e:03:ff:bb:33:c0:a1:cc:7e:a7:d9:
         f8:d5:46:01:4d:56:c7:4b:8a:03:96:a2:4f:9c:89:bf:77:8e:
         4d:15:08:cb:ea:0c:ba:57:1b:f7:03:fe:c9:ea:c2:85:8b:e1:
         9f:a4:ec:94:98:77:23:47:d5:a4:95:30:05:0d:3d:7d:23:a7:
         d8:3f:a2:71:d4:2c:20:f4:23:07:df:e0:ea:ad:58:c3:4c:11:
         d7:3f:59:df:67:0b:2e:20:3f:cd:bc:db:d0:b7:c1:84:a5:72:
         49:97:59:3d:c8:37:d5:f5:64:be:64:13:b1:ee:dd:d9:55:da:
         54:69:96:a1:79:26:ad:d2:90:3c:18:bc:32:fd:fd:b9:46:aa:
         81:93:83:96:2f:ed:76:51:b2:0f:eb:a0:b3:93:48:00:7a:a3:
         6b:04:c7:62:9c:92:04:84:12:11:22:46:94:83:60:63:73:c9:
         b0:eb:a1:3b:37:84:12:c8:d2:f7:1d:ec:98:9f:d3:8d:9c:67:
         da:27:bb:52:df:15:22:a1:82:e3:e5:a8:65:bb:71:4c:cc:49:
         3d:64:7a:4c:be:aa:99:87:91:3e:b5:c3:5e:21:69:98:d5:fb:
         42:36:bd:3a:bf:af:10:bb:c6:2d:52:23:6e:81:33:d2:37:3d:
         03:61:a4:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzEALiQHvjRhEKq1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTIyMDEzMDA1MDAwMFoXDTI4MDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZjljMTI4NDktYzQyOC00ZTg5LWE2ZTMtMmYxOTE2Y2YyNGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaSPAPLTvfVGfKJL3cXbUi7S1bMscX+nPmo4
hh7rYT9+VqfaMrm78GQrivXoH7TUnNw4l+MSSaCsOAd9v0mfHAci/fL+eSX1RXNO
cvcTrcgGBHB/oFmDpaFQ3PJQpIVHuZVnN+/PKSmQihW43kf42vWPxRBopvHuYoT0
Txup7C45QYKZrInRj2BakEi7xcx5aYVPRTM4TwBQH38voFeAvXaQO6ZUXrQMdUMs
S3OI+IlYdLx38YZ+TAquXX4mP2TfJMkxHM6xzNUwSqqVDmsv5yf7Jgkj4Xi/7Wox
/EMHuAeky1TJmQqdtzACO9cWoWDPdKBthOXzQ8OKSzu5r5vnzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAxbmbfvmiIeps6YStfbhdAMCnEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNTliYmY0N2EtYTJiMS0z
NjA1LWIzMTQtMWE4NDgwODM2N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0XxcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgEAZLhR+mOA/+7M8ChzH6n2fjVRgFNVsdLigOWok+cib93jk0VCMvq
DLpXG/cD/snqwoWL4Z+k7JSYdyNH1aSVMAUNPX0jp9g/onHULCD0Iwff4OqtWMNM
Edc/Wd9nCy4gP82829C3wYSlckmXWT3IN9X1ZL5kE7Hu3dlV2lRplqF5Jq3SkDwY
vDL9/blGqoGTg5Yv7XZRsg/roLOTSAB6o2sEx2KckgSEEhEiRpSDYGNzybDroTs3
hBLI0vcd7Jif042cZ9onu1LfFSKhguPlqGW7cUzMST1keky+qpmHkT61w14haZjV
+0I2vTq/rxC7xi1SI26BM9I3PQNhpIU=
-----END CERTIFICATE-----
Generated at Thu May 2 21:11:03 2024 by rpki-client on console-fra.rpki-client.org