Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa
File:                     984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa (raw, json)
Hash identifier:          lDFgtgz7XsO6k/WD6khBTkZi+PJk0d4ANtUsFCCRkks=
Subject key identifier:   DA:68:0B:B4:3D:68:A7:45:95:C7:E5:9F:FE:36:E4:EA:75:65:97:B0
Certificate issuer:       /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial:       010D0C9F43285845CEF61B48C4AD17733484D400
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa
Signing time:             Wed 08 May 2024 20:58:28 +0000
ROA not before:           Wed 08 May 2024 20:58:28 +0000
ROA not after:            Tue 06 Aug 2024 20:58:28 +0000
asID:                     393384
IP address blocks:        162.220.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:f6:1b:48:c4:ad:17:73:34:84:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
        Validity
            Not Before: May  8 20:58:28 2024 GMT
            Not After : Aug  6 20:58:28 2024 GMT
        Subject: CN=ec099ede-d93a-429c-a19c-b19d4d638831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:80:43:1c:10:7c:96:05:c4:ae:d6:4d:f6:
                    ca:10:d0:8d:a6:3b:62:69:f7:e7:d7:9e:52:09:02:
                    3f:b4:68:96:61:0b:db:24:80:6e:83:76:a1:5b:20:
                    fb:55:29:29:f6:c8:3c:a0:1c:c9:70:28:41:5c:f0:
                    47:54:02:d8:59:b9:4e:6d:34:1a:37:ed:0d:04:b6:
                    f0:95:e3:2c:24:b1:71:d6:fd:a7:07:53:2d:7c:9f:
                    90:7c:4a:34:ba:12:dd:32:e7:b8:73:98:9c:c9:d3:
                    11:27:ee:bd:c1:b7:6b:cb:4b:77:5a:80:9c:37:56:
                    61:10:0c:83:a5:2c:c4:03:50:70:6b:84:17:fb:f0:
                    b4:d5:01:ee:fe:b5:ba:b2:94:65:72:6a:33:bc:13:
                    9c:88:b9:e8:24:db:11:52:ea:52:cc:ec:86:5e:03:
                    91:3b:75:28:8a:60:9d:ed:6e:32:3e:ef:05:2b:03:
                    f7:84:70:4b:0f:87:09:a9:84:1a:48:cd:5b:bd:04:
                    a7:f3:e5:0a:d9:0f:ff:07:17:41:d4:df:cc:1c:71:
                    87:ff:ea:79:3b:a4:30:73:e8:65:64:10:61:66:68:
                    13:b8:e9:81:51:a5:a3:22:f1:bc:17:f6:cb:a2:ee:
                    3d:bd:4e:c1:d3:f1:7c:18:a6:c6:49:5d:3b:74:48:
                    c1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:68:0B:B4:3D:68:A7:45:95:C7:E5:9F:FE:36:E4:EA:75:65:97:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl

            X509v3 Authority Key Identifier:
                keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:d6:c0:fb:c7:36:dc:5d:83:54:11:ab:4f:15:fa:4c:09:
         78:05:66:2e:29:f6:e6:36:0f:98:21:0f:2c:b3:c7:02:eb:dd:
         00:c8:8f:cc:89:8b:3d:41:46:04:86:8e:ae:b1:4b:ca:e5:95:
         00:f5:65:b1:33:ec:ef:e6:f8:96:45:ac:47:4b:19:aa:7b:67:
         b2:ee:b9:bf:d3:3d:e0:e7:4d:fd:d1:22:2d:24:90:87:a1:f2:
         1c:c1:54:48:cd:f3:d1:ef:ab:b7:b4:91:6f:88:87:0e:13:7b:
         14:21:50:e4:03:92:90:48:f2:d0:52:5f:0e:8b:d9:14:8f:a3:
         ac:1b:85:9a:80:a3:02:fa:61:86:34:96:b9:c5:21:21:15:54:
         3a:f9:fe:6f:49:9b:ea:9d:f5:6b:d9:4f:71:00:a7:c2:41:ee:
         d8:10:58:be:e9:34:77:dd:dd:3d:4b:86:d4:cb:8a:46:ef:99:
         c7:e1:66:20:62:28:80:24:f7:b9:0a:78:17:1a:ea:33:4c:04:
         54:ae:7e:2f:f6:a6:e7:f6:5e:c0:76:76:8b:82:4a:c1:87:fc:
         e4:01:78:e8:ee:eb:f2:51:bd:39:26:86:d3:1a:c3:9d:ec:76:
         fa:8c:ab:a1:15:dd:17:80:59:fc:44:e2:c3:92:6a:bc:38:eb:
         1b:cc:df:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXO9htIxK0XczSE1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzc3OWFkNWQtNWNhNy00YzIzLTkyOGYtMDkxZTBlMWEz
ZjkzMB4XDTI0MDUwODIwNTgyOFoXDTI0MDgwNjIwNTgyOFowLzEtMCsGA1UEAxMk
ZWMwOTllZGUtZDkzYS00MjljLWExOWMtYjE5ZDRkNjM4ODMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn82AQxwQfJYFxK7WTfbKENCNpjtiaffn155S
CQI/tGiWYQvbJIBug3ahWyD7VSkp9sg8oBzJcChBXPBHVALYWblObTQaN+0NBLbw
leMsJLFx1v2nB1MtfJ+QfEo0uhLdMue4c5icydMRJ+69wbdry0t3WoCcN1ZhEAyD
pSzEA1Bwa4QX+/C01QHu/rW6spRlcmozvBOciLnoJNsRUupSzOyGXgORO3UoimCd
7W4yPu8FKwP3hHBLD4cJqYQaSM1bvQSn8+UK2Q//BxdB1N/MHHGH/+p5O6Qwc+hl
ZBBhZmgTuOmBUaWjIvG8F/bLou49vU7B0/F8GKbGSV07dEjBQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNpoC7Q9aKdFlcfln/425Op1ZZewMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5
YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFlMGUxYTNmOTMvOTg0ZGMyZjctNDA0Ni0z
YmQxLWEzY2EtNDRkOGM4ZDcyMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzc3OWFkNWQtNWNhNy00YzIzLTky
OGYtMDkxZTBlMWEzZjkzLzM3NzlhZDVkLTVjYTctNGMyMy05MjhmLTA5MWUwZTFh
M2Y5My5jcmwwHwYDVR0jBBgwFoAU3UBYo70iE7ShZ8UHLgPVQAuSHEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFl
MGUxYTNmOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotx1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADO11sD7xzbcXYNUEatPFfpMCXgFZi4p9uY2D5ghDyyzxwLr3QDIj8yJ
iz1BRgSGjq6xS8rllQD1ZbEz7O/m+JZFrEdLGap7Z7Luub/TPeDnTf3RIi0kkIeh
8hzBVEjN89Hvq7e0kW+Ihw4TexQhUOQDkpBI8tBSXw6L2RSPo6wbhZqAowL6YYY0
lrnFISEVVDr5/m9Jm+qd9WvZT3EAp8JB7tgQWL7pNHfd3T1LhtTLikbvmcfhZiBi
KIAk97kKeBca6jNMBFSufi/2puf2XsB2douCSsGH/OQBeOju6/JRvTkmhtMaw53s
dvqMq6EV3ReAWfxE4sOSarw46xvM3xY=
-----END CERTIFICATE-----
Generated at Thu May 23 02:59:52 2024 by rpki-client on console-ams.rpki-client.org