Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa
File:                     b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa (raw, json)
Hash identifier:          mKaISZdl2h22w1Dqx6bl/CaIM1GyioYp172m4gFE+ZU=
Subject key identifier:   42:CE:67:FE:79:90:5F:89:C8:F6:23:F3:00:66:52:C3:E2:AC:81:B6
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285844EED002272F4D3323E4EB1800
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     11404
IP address blocks:        199.189.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:d0:02:27:2f:4d:33:23:e4:eb:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=eded8817-6ccd-484b-b415-347564d4fbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:78:91:18:d6:66:c3:39:ec:3c:78:98:a2:
                    88:f1:ff:88:f7:d9:6c:ab:52:9b:3b:67:de:13:40:
                    95:33:93:99:b2:41:ab:8f:e5:28:b3:45:91:10:d5:
                    e4:48:fa:f5:a1:c5:7f:81:72:4a:98:fd:88:25:6f:
                    2a:7a:73:50:93:44:e5:d3:16:6b:4c:6a:c4:0b:19:
                    cb:77:5f:f0:cf:48:36:65:f3:0f:06:33:2c:8e:fb:
                    28:0f:8c:1b:12:8c:5d:f1:17:75:cc:b0:75:19:b5:
                    99:e1:e2:db:19:68:d9:47:bd:eb:81:5d:09:1e:7d:
                    47:7b:ad:ad:f4:51:d3:e1:fc:75:56:b8:94:c6:7f:
                    8d:5c:06:59:2b:a4:d6:29:97:80:ea:84:5e:91:df:
                    2c:e4:e0:c4:ce:04:dc:00:4b:83:ef:74:7f:d1:56:
                    23:97:ec:0d:0e:39:3b:16:a1:7f:76:14:95:2c:0a:
                    01:2d:f3:c8:bb:50:c0:04:49:86:6b:dd:d6:eb:cb:
                    fd:98:fe:a0:b7:19:34:2b:0e:ed:94:e1:8b:7b:c4:
                    23:77:0f:8c:44:1d:35:4c:6c:0a:f9:ed:ee:ae:b1:
                    6f:a0:34:e5:f9:40:ec:27:b6:e2:e1:c9:c7:0d:3e:
                    e6:28:0a:d1:63:77:ca:1f:8c:2e:77:66:87:55:57:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CE:67:FE:79:90:5F:89:C8:F6:23:F3:00:66:52:C3:E2:AC:81:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e9:13:26:e2:9e:e8:33:64:bb:70:de:07:7b:0a:8d:90:f9:
         d7:9f:b9:fa:10:29:a5:b0:ad:50:c7:0e:45:cb:16:47:0e:f0:
         b5:8a:66:bf:cb:30:a7:60:24:3e:51:0c:32:01:42:d5:82:d1:
         7c:ae:e3:12:92:68:3a:04:a8:17:78:92:83:0c:cb:02:c2:16:
         3b:c9:4c:65:41:d5:98:72:e5:fc:2f:56:78:45:ec:2b:7a:25:
         f9:3b:bc:28:8d:29:74:dc:d2:9d:b2:09:83:dc:a6:e4:9e:3b:
         48:27:82:38:ef:05:d3:51:0a:24:e6:0d:d0:fd:6a:5a:86:b4:
         32:90:26:94:f9:e5:c3:bf:60:43:8a:57:f4:f2:0d:82:09:35:
         c4:9e:60:e5:bd:87:d2:ec:b2:39:e2:59:3b:7a:aa:5d:92:89:
         b4:1a:6d:6b:25:c4:1b:8e:34:f2:a0:ce:f7:10:21:cd:e2:27:
         c8:b3:46:59:a0:81:bb:b7:72:05:6f:04:b2:b5:cf:bf:ee:bf:
         25:cb:05:a5:33:9a:c4:af:c9:fb:47:c2:46:ae:4e:ef:5e:36:
         5c:bc:e4:56:59:53:9d:32:71:3b:cf:5a:8f:b5:35:6a:74:b0:
         e0:38:e2:a7:90:71:3d:fd:f3:b5:96:53:d9:2c:e4:12:ec:80:
         c5:9d:33:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETu0AInL00zI+TrGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI0MDIxODE0MDAzMFoXDTI0MDUxODEzMDAzMFowLzEtMCsGA1UEAxMk
ZWRlZDg4MTctNmNjZC00ODRiLWI0MTUtMzQ3NTY0ZDRmYmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkct4kRjWZsM57Dx4mKKI8f+I99lsq1KbO2fe
E0CVM5OZskGrj+Uos0WRENXkSPr1ocV/gXJKmP2IJW8qenNQk0Tl0xZrTGrECxnL
d1/wz0g2ZfMPBjMsjvsoD4wbEoxd8Rd1zLB1GbWZ4eLbGWjZR73rgV0JHn1He62t
9FHT4fx1VriUxn+NXAZZK6TWKZeA6oRekd8s5ODEzgTcAEuD73R/0VYjl+wNDjk7
FqF/dhSVLAoBLfPIu1DABEmGa93W68v9mP6gtxk0Kw7tlOGLe8Qjdw+MRB01TGwK
+e3urrFvoDTl+UDsJ7bi4cnHDT7mKArRY3fKH4wud2aHVVcO3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELOZ/55kF+JyPYj8wBmUsPirIG2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjBkNWIzMTktZWU4Mi0z
MmI3LWJiODQtNmE0N2JiOWM1OTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjpEybinugzZLtw3gd7Co2Q+defufoQKaWwrVDHDkXLFkcO8LWKZr/L
MKdgJD5RDDIBQtWC0Xyu4xKSaDoEqBd4koMMywLCFjvJTGVB1Zhy5fwvVnhF7Ct6
Jfk7vCiNKXTc0p2yCYPcpuSeO0gngjjvBdNRCiTmDdD9alqGtDKQJpT55cO/YEOK
V/TyDYIJNcSeYOW9h9LssjniWTt6ql2SibQabWslxBuONPKgzvcQIc3iJ8izRlmg
gbu3cgVvBLK1z7/uvyXLBaUzmsSvyftHwkauTu9eNly85FZZU50ycTvPWo+1NWp0
sOA44qeQcT3987WWU9ks5BLsgMWdM7w=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:52 2024 by rpki-client on console-fra.rpki-client.org