Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa
File:                     1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa (raw, json)
Hash identifier:          bsTf5aAubW4+VQ75j60RZuhwrovApxjljui7/4DK52c=
Subject key identifier:   D6:29:C7:6B:00:14:63:18:FD:C1:52:24:87:FA:C7:29:8D:59:6B:12
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F43285845C8739BE80D52750035042DC0
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     6954
IP address blocks:        69.4.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:9b:e8:0d:52:75:00:35:04:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=6925cfc6-c9c9-49f0-a964-720ce78361ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:68:e2:80:1c:f9:37:2b:8b:d3:7e:e0:2f:
                    f3:35:d4:84:bd:61:2d:36:66:66:84:22:97:87:a4:
                    e8:83:8d:f8:5c:0d:53:02:d5:f7:c5:30:a9:82:8d:
                    37:7e:ab:d7:c1:de:93:3d:2f:a6:1d:f5:c4:1e:26:
                    06:1d:03:b4:06:d8:d5:f7:5e:f2:6b:3a:4e:1c:d6:
                    32:4e:01:55:59:4e:bd:53:90:05:15:04:8e:f8:f8:
                    c3:80:a0:51:b2:a9:91:b3:22:b2:2e:ed:80:0e:53:
                    cb:ad:90:e6:02:f5:87:2b:c5:f2:3c:28:28:56:87:
                    2b:4b:82:8c:74:f4:26:b5:03:6f:e5:29:84:1f:b2:
                    b7:6b:44:3d:3f:04:06:43:dc:4d:6f:65:66:06:3e:
                    79:1a:3d:bf:dd:d9:c6:43:ac:53:ff:ff:07:cf:8a:
                    da:7f:1e:14:ba:3e:cc:9a:68:69:d9:76:42:06:be:
                    0a:64:e8:74:e6:75:7a:21:31:6e:ee:dd:8b:5c:00:
                    28:bf:e7:b2:67:9c:b9:81:ee:32:65:9f:58:49:a2:
                    b8:af:70:47:72:89:5f:0b:a6:c0:f0:de:65:1b:a4:
                    26:6b:b3:23:18:9d:bb:27:0a:4c:87:62:6c:51:04:
                    a3:8b:bd:9f:91:e3:78:14:d6:5a:75:40:12:67:bf:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:29:C7:6B:00:14:63:18:FD:C1:52:24:87:FA:C7:29:8D:59:6B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/1b038149-0fc3-3d3b-97f2-3905fb1bb0fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:eb:08:43:a1:60:35:f6:63:85:d7:52:34:59:08:02:05:84:
         df:fa:8a:d2:99:f3:f3:04:6b:ae:18:bc:d3:27:55:01:69:4b:
         22:2a:45:eb:74:ae:56:34:cb:06:5b:7b:25:53:60:fb:34:0a:
         5c:80:8e:0b:6c:6e:d7:17:e4:97:2e:2b:eb:e4:c8:fd:9c:91:
         81:e7:b3:94:12:4c:62:50:bb:31:de:c4:47:55:0d:72:8f:54:
         41:69:8c:b3:0f:94:75:a8:15:98:4b:43:27:ba:fa:92:c1:16:
         27:fa:ac:eb:7c:b1:74:2d:2a:5b:bc:5d:f6:ef:8e:b0:57:8c:
         f7:13:07:fd:b7:c4:0f:ea:0f:7b:63:68:9d:91:17:ac:96:3d:
         1e:55:33:28:fb:50:40:10:f6:22:6f:c1:47:c5:28:90:b1:de:
         62:36:11:7c:73:20:63:88:89:9b:6a:fe:2b:23:e9:26:06:1b:
         c7:ed:22:75:26:02:6e:66:33:99:75:c4:94:78:e7:5d:b3:03:
         db:98:be:98:bd:b2:58:22:ab:02:e1:cc:60:77:08:6c:24:7c:
         bb:02:55:37:58:26:57:51:21:73:7a:5c:4a:5c:e0:f8:db:31:
         c6:54:b2:79:ef:1c:fc:96:0f:8f:96:49:12:fc:da:ef:cc:2a:
         b6:05:39:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXIc5voDVJ1ADUELcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ZjUwMjEtZDc4MC00NzU5LWFjMGYtMTg2NWFiOGQ1
YTYxMB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk
NjkyNWNmYzYtYzljOS00OWYwLWE5NjQtNzIwY2U3ODM2MWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY9o4oAc+Tcri9N+4C/zNdSEvWEtNmZmhCKX
h6Tog434XA1TAtX3xTCpgo03fqvXwd6TPS+mHfXEHiYGHQO0BtjV917yazpOHNYy
TgFVWU69U5AFFQSO+PjDgKBRsqmRsyKyLu2ADlPLrZDmAvWHK8XyPCgoVocrS4KM
dPQmtQNv5SmEH7K3a0Q9PwQGQ9xNb2VmBj55Gj2/3dnGQ6xT//8Hz4rafx4Uuj7M
mmhp2XZCBr4KZOh05nV6ITFu7t2LXAAov+eyZ5y5ge4yZZ9YSaK4r3BHcolfC6bA
8N5lG6Qma7MjGJ27JwpMh2JsUQSji72fkeN4FNZadUASZ7+i8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNYpx2sAFGMY/cFSJIf6xymNWWsSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Zjlm
NTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1YWI4ZDVhNjEvMWIwMzgxNDktMGZjMy0z
ZDNiLTk3ZjItMzkwNWZiMWJiMGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWY5ZjUwMjEtZDc4MC00NzU5LWFj
MGYtMTg2NWFiOGQ1YTYxLzlmOWY1MDIxLWQ3ODAtNDc1OS1hYzBmLTE4NjVhYjhk
NWE2MS5jcmwwHwYDVR0jBBgwFoAUp/VgwYDsJYqP+aKoTe3Ru9XHB18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85ZjlmNTAyMS1kNzgwLTQ3NTktYWMwZi0xODY1
YWI4ZDVhNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRQQgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7rCEOhYDX2Y4XXUjRZCAIFhN/6itKZ8/MEa64YvNMnVQFpSyIqRet0
rlY0ywZbeyVTYPs0ClyAjgtsbtcX5JcuK+vkyP2ckYHns5QSTGJQuzHexEdVDXKP
VEFpjLMPlHWoFZhLQye6+pLBFif6rOt8sXQtKlu8XfbvjrBXjPcTB/23xA/qD3tj
aJ2RF6yWPR5VMyj7UEAQ9iJvwUfFKJCx3mI2EXxzIGOIiZtq/isj6SYGG8ftInUm
Am5mM5l1xJR4512zA9uYvpi9slgiqwLhzGB3CGwkfLsCVTdYJldRIXN6XEpc4Pjb
McZUsnnvHPyWD4+WSRL82u/MKrYFOfY=
-----END CERTIFICATE-----
Generated at Wed May 22 20:14:50 2024 by rpki-client on console-ams.rpki-client.org