Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/18dcc387-71b6-4973-962e-0d79c69f36ca/4bd24117-1aa9-3b55-90e1-ed1aa909e975.roa
File:                     4bd24117-1aa9-3b55-90e1-ed1aa909e975.roa (raw, json)
Hash identifier:          Pqy7yy/v7qIqr+SpVUtJxYOVtCOk6HMhbGavPPeSGZM=
Subject key identifier:   CC:FB:08:EC:43:FA:54:6E:C7:51:3C:86:5B:C5:72:D5:62:D5:77:03
Certificate issuer:       /CN=18dcc387-71b6-4973-962e-0d79c69f36ca
Certificate serial:       010D0C9F43285845BD48DEF0AF17EC73F8E51560
Authority key identifier: ED:25:10:0F:E2:2E:0E:5E:60:93:EB:11:7F:8D:0A:FF:07:3D:D3:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/18dcc387-71b6-4973-962e-0d79c69f36ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/18dcc387-71b6-4973-962e-0d79c69f36ca/4bd24117-1aa9-3b55-90e1-ed1aa909e975.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     7922
IP address blocks:        208.68.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/18dcc387-71b6-4973-962e-0d79c69f36ca/18dcc387-71b6-4973-962e-0d79c69f36ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/18dcc387-71b6-4973-962e-0d79c69f36ca/18dcc387-71b6-4973-962e-0d79c69f36ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/18dcc387-71b6-4973-962e-0d79c69f36ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:de:f0:af:17:ec:73:f8:e5:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18dcc387-71b6-4973-962e-0d79c69f36ca
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=a9700840-9f1a-43dd-b0ce-ee63d43e0bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:0c:80:45:4f:3f:e3:2e:4d:01:f2:b9:f9:
                    04:a3:0b:26:ee:db:2b:e2:c9:15:a8:7c:72:98:89:
                    5a:7d:5c:bb:23:df:9f:20:2b:d0:77:69:44:41:41:
                    a1:df:9e:c7:98:88:11:96:6c:b3:98:1b:ce:13:20:
                    5d:b8:35:9c:f9:27:36:18:e2:cb:fd:ae:80:43:92:
                    66:c1:35:fa:74:38:d5:d0:6e:e7:2e:32:43:74:f0:
                    5a:11:d3:d1:be:e5:5f:b0:2e:16:f2:37:16:2c:19:
                    1a:1a:d3:bd:dd:4e:ed:65:ec:77:68:cc:99:7a:2f:
                    c2:b7:9d:b6:7f:6b:3e:a4:aa:6d:c2:9b:10:65:d2:
                    35:73:9d:67:36:5a:4b:85:3f:63:9f:a5:cd:b7:2d:
                    1f:9d:5b:2c:15:85:0b:49:2f:17:ae:d9:83:eb:6d:
                    e0:de:f3:15:39:34:64:73:0c:24:d5:c5:f6:d8:eb:
                    6a:28:e4:17:87:3b:b6:4a:61:82:79:27:cf:1c:7a:
                    5c:0b:7f:45:91:36:dc:43:22:0a:09:e3:a3:7d:c9:
                    84:ee:94:b2:40:e4:5f:94:ec:75:04:3d:ce:db:b1:
                    52:07:1f:9f:06:ce:5b:6c:e5:f5:58:39:a9:3f:fb:
                    cd:bb:ea:9d:3b:e3:f0:62:9a:f8:c7:f3:8a:96:a9:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FB:08:EC:43:FA:54:6E:C7:51:3C:86:5B:C5:72:D5:62:D5:77:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/18dcc387-71b6-4973-962e-0d79c69f36ca/4bd24117-1aa9-3b55-90e1-ed1aa909e975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/18dcc387-71b6-4973-962e-0d79c69f36ca/18dcc387-71b6-4973-962e-0d79c69f36ca.crl

            X509v3 Authority Key Identifier:
                keyid:ED:25:10:0F:E2:2E:0E:5E:60:93:EB:11:7F:8D:0A:FF:07:3D:D3:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/18dcc387-71b6-4973-962e-0d79c69f36ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:62:78:6e:64:3c:d3:cd:a3:45:70:13:ae:ec:9f:38:8a:dd:
         aa:45:c1:51:e2:cd:77:10:64:47:1d:83:9d:0b:9e:ac:01:5f:
         d8:87:44:e1:1f:46:eb:51:1b:ad:e4:33:8f:59:18:94:c1:82:
         10:92:9e:d9:14:10:51:15:f1:0d:48:51:23:7c:d5:ff:8c:ba:
         d3:38:88:7a:96:e4:9d:76:c4:5e:40:5c:5f:32:b8:a9:52:4a:
         ca:98:fa:c7:ac:81:27:15:1d:17:d7:51:58:d6:c8:1e:fc:d5:
         43:6b:48:91:ba:55:c5:fb:6f:c8:03:e4:ea:bb:75:6a:a1:43:
         b0:8c:3d:80:51:17:f1:a3:07:58:a3:5f:10:02:fd:22:61:23:
         21:7e:9b:62:bf:86:6b:3f:b4:0f:d6:f3:2a:03:e1:38:18:0d:
         2c:72:67:00:23:af:5e:fd:82:38:33:50:b9:fe:11:26:d8:38:
         fd:b2:56:2d:b2:6f:e2:fd:88:25:de:8a:1e:9d:1f:91:c4:ad:
         dd:14:fe:0d:f2:82:cc:ab:3a:39:43:e9:4c:44:04:60:b8:0f:
         38:8c:eb:32:9c:23:ac:0c:3b:45:e3:d3:9a:28:84:21:d6:1d:
         32:84:48:66:97:7f:0d:c2:b1:8f:1c:92:73:7e:5e:e0:24:62:
         88:c7:ab:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW9SN7wrxfsc/jlFWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThkY2MzODctNzFiNi00OTczLTk2MmUtMGQ3OWM2OWYz
NmNhMB4XDTI0MDUwMjEzMDAzNFoXDTI0MDczMTEzMDAzNFowLzEtMCsGA1UEAxMk
YTk3MDA4NDAtOWYxYS00M2RkLWIwY2UtZWU2M2Q0M2UwYmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2agMgEVPP+MuTQHyufkEowsm7tsr4skVqHxy
mIlafVy7I9+fICvQd2lEQUGh357HmIgRlmyzmBvOEyBduDWc+Sc2GOLL/a6AQ5Jm
wTX6dDjV0G7nLjJDdPBaEdPRvuVfsC4W8jcWLBkaGtO93U7tZex3aMyZei/Ct522
f2s+pKptwpsQZdI1c51nNlpLhT9jn6XNty0fnVssFYULSS8XrtmD623g3vMVOTRk
cwwk1cX22OtqKOQXhzu2SmGCeSfPHHpcC39FkTbcQyIKCeOjfcmE7pSyQORflOx1
BD3O27FSBx+fBs5bbOX1WDmpP/vNu+qdO+PwYpr4x/OKlqmnswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMz7COxD+lRux1E8hlvFctVi1XcDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xOGRj
YzM4Ny03MWI2LTQ5NzMtOTYyZS0wZDc5YzY5ZjM2Y2EvNGJkMjQxMTctMWFhOS0z
YjU1LTkwZTEtZWQxYWE5MDllOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMThkY2MzODctNzFiNi00OTczLTk2
MmUtMGQ3OWM2OWYzNmNhLzE4ZGNjMzg3LTcxYjYtNDk3My05NjJlLTBkNzljNjlm
MzZjYS5jcmwwHwYDVR0jBBgwFoAU7SUQD+IuDl5gk+sRf40K/wc9058wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xOGRjYzM4Ny03MWI2LTQ5NzMtOTYyZS0wZDc5
YzY5ZjM2Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ET4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1ieG5kPNPNo0VwE67snziK3apFwVHizXcQZEcdg50LnqwBX9iHROEf
RutRG63kM49ZGJTBghCSntkUEFEV8Q1IUSN81f+MutM4iHqW5J12xF5AXF8yuKlS
SsqY+sesgScVHRfXUVjWyB781UNrSJG6VcX7b8gD5Oq7dWqhQ7CMPYBRF/GjB1ij
XxAC/SJhIyF+m2K/hms/tA/W8yoD4TgYDSxyZwAjr179gjgzULn+ESbYOP2yVi2y
b+L9iCXeih6dH5HErd0U/g3ygsyrOjlD6UxEBGC4DziM6zKcI6wMO0Xj05oohCHW
HTKESGaXfw3CsY8cknN+XuAkYojHq7I=
-----END CERTIFICATE-----
Generated at Fri May 3 20:16:26 2024 by rpki-client on console-ams.rpki-client.org