Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/bf7665e3-12e5-3e62-8b77-6c5ee11d91da.roa
File:                     bf7665e3-12e5-3e62-8b77-6c5ee11d91da.roa (raw, json)
Hash identifier:          EuD9QgaRLRY+n8S1keXeLQC6SK3/wLsxWAEIGMoQq0E=
Subject key identifier:   FB:70:B8:A5:E9:69:12:4E:07:04:AB:78:B1:79:6B:33:88:39:36:DB
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583CC400B8606BE4398B2D9F3480
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/bf7665e3-12e5-3e62-8b77-6c5ee11d91da.roa
Signing time:             Sun 30 Jan 2022 05:00:00 +0000
ROA not before:           Sun 30 Jan 2022 05:00:00 +0000
ROA not after:            Sun 23 Jan 2028 05:00:00 +0000
asID:                     19905
IP address blocks:        209.124.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c4:00:b8:60:6b:e4:39:8b:2d:9f:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jan 30 05:00:00 2022 GMT
            Not After : Jan 23 05:00:00 2028 GMT
        Subject: CN=4b99e7b4-8638-471c-968c-ce3e8945b039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:b7:ee:c2:e8:a8:f3:7f:50:a2:fe:26:7e:
                    e2:21:32:9d:d3:ed:d3:e6:c5:dd:a0:77:81:20:6b:
                    90:e0:d1:85:1e:ef:ce:68:65:dd:e3:01:37:63:76:
                    7d:c1:41:a2:7e:a8:5e:9e:19:0c:1b:86:b3:2c:17:
                    0f:13:22:a6:39:eb:1d:2e:de:4f:b1:fa:57:1b:b3:
                    a8:e7:c0:0e:ac:5f:3b:4f:41:0b:07:4e:cd:24:59:
                    39:6f:c5:97:a1:fc:13:bc:42:36:03:83:4e:f4:af:
                    6d:29:db:45:89:0c:c3:aa:de:5f:7c:47:d8:03:39:
                    2d:6f:d1:b8:8b:a7:93:c9:94:f8:f7:2e:c6:80:5a:
                    0d:ae:52:b9:02:19:ef:1f:4f:fa:02:7a:77:8e:81:
                    1d:e4:83:92:84:91:99:29:78:1e:75:8f:87:71:4e:
                    07:56:47:bd:15:8b:5e:6b:6f:f6:3b:e4:d3:15:28:
                    ec:8c:ec:19:68:fc:a6:35:92:b0:6c:f7:1a:f2:f7:
                    71:a6:76:1b:f4:40:96:c3:93:88:4f:dc:48:04:20:
                    1d:56:10:b3:f4:87:7d:37:7d:90:44:94:83:60:23:
                    e0:c5:05:77:93:03:41:4b:bf:ce:e9:af:07:75:b7:
                    5a:46:ae:31:a0:76:d6:5a:09:1f:85:2d:09:76:16:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:70:B8:A5:E9:69:12:4E:07:04:AB:78:B1:79:6B:33:88:39:36:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/bf7665e3-12e5-3e62-8b77-6c5ee11d91da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:66:2d:71:f5:90:eb:e3:9d:0c:5f:00:1c:7f:c6:89:f5:ab:
         5f:22:fe:cd:3d:8f:68:75:5d:c3:93:f6:b3:ed:4c:bc:55:5d:
         61:54:29:69:25:47:9b:74:47:c9:29:c0:c2:fb:db:6a:24:c8:
         ef:a7:09:b1:6e:b8:02:79:3d:30:60:e7:70:05:41:e6:02:fa:
         39:a8:54:dc:3f:b5:0b:0c:5e:e1:61:8f:bf:7d:9f:d6:dd:7c:
         0e:87:12:d2:d3:92:81:c0:53:62:6b:56:b4:85:c2:67:b2:34:
         e1:f4:1f:af:43:d4:c6:8a:2c:80:a1:c0:24:a3:5d:3d:96:c2:
         69:6b:b6:67:68:0b:c0:0a:f8:9e:12:12:68:40:d4:db:24:6f:
         5a:ac:16:80:f0:3a:5b:7c:ba:54:6f:24:c9:bb:78:c9:2e:7e:
         db:c9:b9:81:39:a2:7a:0c:6e:4e:3d:aa:2c:b8:93:66:af:3e:
         ff:b9:1d:61:a9:61:7a:b7:eb:62:55:c8:bd:29:85:fd:0b:9d:
         c7:e5:b5:92:2b:ec:5b:fc:2a:a3:5f:92:e7:51:63:f4:cb:de:
         75:8f:95:1a:22:cc:f3:d1:82:28:02:5a:ff:9e:60:12:27:53:
         f2:8c:fa:4e:93:d2:53:bf:85:ff:54:1a:6e:72:09:f7:d4:59:
         4e:aa:1e:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzEALhga+Q5iy2fNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTIyMDEzMDA1MDAwMFoXDTI4MDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
NGI5OWU3YjQtODYzOC00NzFjLTk2OGMtY2UzZTg5NDViMDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzO37sLoqPN/UKL+Jn7iITKd0+3T5sXdoHeB
IGuQ4NGFHu/OaGXd4wE3Y3Z9wUGifqhenhkMG4azLBcPEyKmOesdLt5PsfpXG7Oo
58AOrF87T0ELB07NJFk5b8WXofwTvEI2A4NO9K9tKdtFiQzDqt5ffEfYAzktb9G4
i6eTyZT49y7GgFoNrlK5AhnvH0/6Anp3joEd5IOShJGZKXgedY+HcU4HVke9FYte
a2/2O+TTFSjsjOwZaPymNZKwbPca8vdxpnYb9ECWw5OIT9xIBCAdVhCz9Id9N32Q
RJSDYCPgxQV3kwNBS7/O6a8HdbdaRq4xoHbWWgkfhS0JdhYn/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtwuKXpaRJOBwSreLF5azOIOTbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYmY3NjY1ZTMtMTJlNS0z
ZTYyLThiNzctNmM1ZWUxMWQ5MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0XxQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlmLXH1kOvjnQxfABx/xon1q18i/s09j2h1XcOT9rPtTLxVXWFUKWkl
R5t0R8kpwML722okyO+nCbFuuAJ5PTBg53AFQeYC+jmoVNw/tQsMXuFhj799n9bd
fA6HEtLTkoHAU2JrVrSFwmeyNOH0H69D1MaKLIChwCSjXT2WwmlrtmdoC8AK+J4S
EmhA1Nskb1qsFoDwOlt8ulRvJMm7eMkuftvJuYE5onoMbk49qiy4k2avPv+5HWGp
YXq362JVyL0phf0LncfltZIr7Fv8KqNfkudRY/TL3nWPlRoizPPRgigCWv+eYBIn
U/KM+k6T0lO/hf9UGm5yCffUWU6qHts=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:52 2024 by rpki-client on console-fra.rpki-client.org