Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/2e61493e-3236-3502-96fc-a7c6cd4df34d.roa
File:                     2e61493e-3236-3502-96fc-a7c6cd4df34d.roa (raw, json)
Hash identifier:          oT9y2VSezbf+p+Qz6KcblLXA9MdqrXg53OGmWeV+FD0=
Subject key identifier:   F8:ED:D4:86:56:D2:8F:49:5B:14:93:37:3F:38:9B:7C:9C:AB:87:CC
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C1D356A4B68DEEC85500
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/2e61493e-3236-3502-96fc-a7c6cd4df34d.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        216.162.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c1:d3:56:a4:b6:8d:ee:c8:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=36ac3bee-29d1-42c6-8214-09471a02f634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ed:ae:93:72:10:af:82:d8:7c:bb:a8:7a:ca:
                    9b:d7:3d:d6:53:c7:4a:b3:53:6d:e4:08:d5:90:c7:
                    5d:97:4d:87:f7:aa:8c:d7:a9:3f:81:97:26:6e:da:
                    43:78:71:16:19:20:68:9c:ae:ea:9d:f4:04:7f:d9:
                    ff:2e:be:5e:b6:92:17:c0:0e:82:f1:d4:62:a1:29:
                    91:c7:ad:a3:63:38:ce:cf:83:05:a1:c2:e5:ec:e1:
                    e0:5e:b8:f3:8c:8b:b5:c5:55:a9:09:fc:28:dc:74:
                    f0:79:86:26:15:23:27:57:99:c2:27:89:2f:b9:ee:
                    ee:8f:6c:59:e8:84:83:fc:8e:0b:f1:8d:16:6f:bd:
                    19:68:4e:de:06:02:72:64:91:47:26:8e:0b:4d:64:
                    29:ac:d7:f3:b5:f0:ee:3a:6b:53:15:a0:ba:be:9e:
                    b3:34:9f:5c:11:c4:8b:9e:1b:ae:ce:ae:90:0e:50:
                    03:ac:02:6a:2f:50:86:0b:10:2e:e9:e0:a9:6d:47:
                    fc:9d:40:5e:70:4a:cc:e6:ef:d7:10:2e:e0:9a:fb:
                    5c:a0:17:36:8d:45:0a:e6:7e:03:cd:ca:98:08:ce:
                    5a:8a:96:b0:0a:6c:a3:fb:2e:64:d2:f5:98:96:17:
                    8f:a3:d9:8b:68:54:3c:54:7c:b1:2c:cc:27:4c:95:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:ED:D4:86:56:D2:8F:49:5B:14:93:37:3F:38:9B:7C:9C:AB:87:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/2e61493e-3236-3502-96fc-a7c6cd4df34d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.162.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:1e:3f:ca:46:ff:bb:b1:94:79:ee:8a:25:92:7b:bb:dd:c8:
         bc:b3:76:5f:74:6d:31:e0:38:ec:21:39:bc:85:2f:22:fe:74:
         b0:9b:7d:0e:e9:88:eb:c2:3b:29:05:cb:49:db:cc:3b:12:ea:
         7e:f1:bb:11:6b:43:ef:d6:eb:82:11:8f:e0:42:79:a7:b4:e8:
         ee:15:fe:d8:56:e8:83:71:ef:a2:fa:27:f8:7c:b9:32:35:a3:
         d8:62:c5:5c:ea:d2:03:b3:2f:6c:2e:ae:b6:be:26:dc:40:69:
         e9:44:d4:41:ce:18:27:10:9d:9a:0f:a3:44:06:d4:f0:5d:25:
         25:25:c5:44:69:43:4e:06:13:9d:d4:8e:b3:22:3a:9c:8d:3a:
         19:d1:0e:b8:56:39:bd:17:ce:44:90:5a:e1:6e:75:76:66:68:
         02:ae:b3:66:5d:32:70:09:96:5d:03:4e:0e:c0:d9:40:91:5e:
         52:e0:c2:4e:68:ec:c7:d7:a6:cd:64:fc:33:b3:aa:44:fe:31:
         bc:76:39:7e:e9:22:1e:c8:5e:57:cf:cd:e8:2f:84:c0:87:55:
         3b:cc:7a:e1:42:b3:63:d7:39:ef:17:4a:48:a9:b4:8e:ae:3b:
         9f:d8:b2:a8:1f:d3:68:42:84:bf:58:c7:b8:c7:ea:a3:f8:49:
         03:0b:b1:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXhk8HTVqS2je7IVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg0ZjljMmMtMjM4Yi00ZDIzLThlOGItYWIyZjVhMDE0
N2MxMB4XDTI0MDUxNTEzMDAzNFoXDTI0MDgxMzEzMDAzNFowLzEtMCsGA1UEAxMk
MzZhYzNiZWUtMjlkMS00MmM2LTgyMTQtMDk0NzFhMDJmNjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO2uk3IQr4LYfLuoesqb1z3WU8dKs1Nt5AjV
kMddl02H96qM16k/gZcmbtpDeHEWGSBonK7qnfQEf9n/Lr5etpIXwA6C8dRioSmR
x62jYzjOz4MFocLl7OHgXrjzjIu1xVWpCfwo3HTweYYmFSMnV5nCJ4kvue7uj2xZ
6ISD/I4L8Y0Wb70ZaE7eBgJyZJFHJo4LTWQprNfztfDuOmtTFaC6vp6zNJ9cEcSL
nhuuzq6QDlADrAJqL1CGCxAu6eCpbUf8nUBecErM5u/XEC7gmvtcoBc2jUUK5n4D
zcqYCM5aipawCmyj+y5k0vWYlhePo9mLaFQ8VHyxLMwnTJUl5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjt1IZW0o9JWxSTNz84m3ycq4fMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRm
OWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJmNWEwMTQ3YzEvMmU2MTQ5M2UtMzIzNi0z
NTAyLTk2ZmMtYTdjNmNkNGRmMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg0ZjljMmMtMjM4Yi00ZDIzLThl
OGItYWIyZjVhMDE0N2MxLzQ4NGY5YzJjLTIzOGItNGQyMy04ZThiLWFiMmY1YTAx
NDdjMS5jcmwwHwYDVR0jBBgwFoAUJvYUx7M4uObYmWgDAdqyOnczs9AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRmOWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJm
NWEwMTQ3YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2KJQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkeP8pG/7uxlHnuiiWSe7vdyLyzdl90bTHgOOwhObyFLyL+dLCbfQ7p
iOvCOykFy0nbzDsS6n7xuxFrQ+/W64IRj+BCeae06O4V/thW6INx76L6J/h8uTI1
o9hixVzq0gOzL2wurra+JtxAaelE1EHOGCcQnZoPo0QG1PBdJSUlxURpQ04GE53U
jrMiOpyNOhnRDrhWOb0XzkSQWuFudXZmaAKus2ZdMnAJll0DTg7A2UCRXlLgwk5o
7MfXps1k/DOzqkT+Mbx2OX7pIh7IXlfPzegvhMCHVTvMeuFCs2PXOe8XSkiptI6u
O5/Ysqgf02hChL9Yx7jH6qP4SQMLsVY=
-----END CERTIFICATE-----
Generated at Wed May 22 14:50:21 2024 by rpki-client on console-fra.rpki-client.org