Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/6181a5f9-0c46-333c-a84e-13d2b4e5fea3.roa
File:                     6181a5f9-0c46-333c-a84e-13d2b4e5fea3.roa (raw, json)
Hash identifier:          xdvX924qhLUcd6MMAJO0rEWO9Zgf4/aprvjqFqSuH40=
Subject key identifier:   D1:0E:35:53:0E:2C:0D:9B:5A:03:A5:3B:76:D2:17:A4:D2:C8:DC:B8
Certificate issuer:       /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Certificate serial:       010D0C9F43285845B56FC31003D6A1FCE850B880
Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/6181a5f9-0c46-333c-a84e-13d2b4e5fea3.roa
Signing time:             Mon 29 Apr 2024 17:32:34 +0000
ROA not before:           Mon 29 Apr 2024 17:32:34 +0000
ROA not after:            Sun 28 Jul 2024 17:32:34 +0000
asID:                     54552
IP address blocks:        216.39.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b5:6f:c3:10:03:d6:a1:fc:e8:50:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
        Validity
            Not Before: Apr 29 17:32:34 2024 GMT
            Not After : Jul 28 17:32:34 2024 GMT
        Subject: CN=9d1847d9-0a0f-41ef-975c-f823621db486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:37:7f:0c:3e:d5:c3:d9:22:57:af:c3:21:
                    b3:e6:ed:18:c8:58:96:3a:3f:e9:04:e1:1b:48:ee:
                    fc:cd:15:97:b5:32:65:d5:c8:96:17:04:f0:a4:2d:
                    b9:8c:e8:dc:7c:ad:cb:18:28:80:a0:bf:f1:1a:3e:
                    d6:3a:44:76:c0:b0:5c:0a:90:98:e9:27:57:88:11:
                    cb:b6:13:b1:e5:4b:08:e7:4d:c2:9b:b2:ef:29:c9:
                    b3:6c:80:a7:e3:ae:a8:de:0f:21:73:7f:5d:e1:34:
                    00:87:a2:b6:9f:96:b6:f1:c0:cd:b0:89:bb:5e:65:
                    ac:36:d9:88:9e:2a:98:ae:f2:fc:8c:1a:a1:4c:96:
                    a4:42:6f:32:cf:e3:c5:e2:43:1b:76:ea:83:4f:91:
                    33:78:d0:72:ed:df:48:7d:a3:f7:9f:15:37:5e:c5:
                    8b:57:e1:23:ca:e6:5e:71:7e:7b:20:d7:47:af:51:
                    1b:f6:22:5c:3d:d7:0e:ff:fc:a6:8b:fd:35:cf:37:
                    f1:b9:d6:99:49:cd:f3:ac:f1:ba:51:f2:2e:ba:55:
                    2c:a5:87:b6:25:dd:f6:4d:e3:d5:2e:4b:9b:07:0e:
                    be:19:97:e5:26:2f:b7:bc:d2:e2:00:41:8e:c6:1c:
                    14:cb:6a:68:79:1d:94:d2:4f:2c:aa:46:81:e0:c0:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0E:35:53:0E:2C:0D:9B:5A:03:A5:3B:76:D2:17:A4:D2:C8:DC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/6181a5f9-0c46-333c-a84e-13d2b4e5fea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl

            X509v3 Authority Key Identifier:
                keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:05:68:c6:83:36:26:b6:7e:57:13:d4:ad:6c:7d:c0:d4:8d:
         c9:53:5a:ac:c4:2e:a1:dc:b8:ed:98:9d:5e:af:f7:2a:a5:ec:
         38:52:62:af:de:64:91:60:01:bf:e5:a2:bb:76:a8:3e:3a:fe:
         c4:d3:fa:03:a9:4d:aa:84:50:2c:29:3e:33:c4:21:b4:84:a6:
         22:8f:29:d6:44:15:53:b4:9c:7c:42:70:7d:4e:84:74:cc:c2:
         1f:c3:42:6c:16:28:63:d8:d5:a0:65:18:3e:84:49:1f:29:2f:
         e5:b0:96:da:aa:ae:91:d7:4e:10:89:db:47:b5:72:36:ac:3d:
         dc:2c:0e:5b:7d:68:88:59:df:bd:40:2f:9c:f9:25:c7:5d:30:
         6a:f1:13:d8:97:cc:90:22:9b:af:72:3f:a3:a5:4a:62:b9:0d:
         e5:dc:4f:cf:32:64:2c:20:27:04:5e:9e:e1:65:bc:03:4a:2b:
         b6:78:f9:68:1b:39:fb:c0:55:8f:e8:d7:21:b8:ff:83:30:b7:
         27:5a:87:3f:d4:b6:52:08:b2:b9:ac:4c:bb:9b:88:bf:2b:17:
         f8:37:e6:d5:73:5a:f3:f5:50:f3:84:e0:e2:b3:5f:9a:4b:47:
         6a:63:68:81:32:a5:34:72:ce:a9:27:db:79:6a:0d:97:ba:ec:
         84:a3:3f:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW1b8MQA9ah/OhQuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz
MjBhMB4XDTI0MDQyOTE3MzIzNFoXDTI0MDcyODE3MzIzNFowLzEtMCsGA1UEAxMk
OWQxODQ3ZDktMGEwZi00MWVmLTk3NWMtZjgyMzYyMWRiNDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Y3fww+1cPZIlevwyGz5u0YyFiWOj/pBOEb
SO78zRWXtTJl1ciWFwTwpC25jOjcfK3LGCiAoL/xGj7WOkR2wLBcCpCY6SdXiBHL
thOx5UsI503Cm7LvKcmzbICn466o3g8hc39d4TQAh6K2n5a28cDNsIm7XmWsNtmI
niqYrvL8jBqhTJakQm8yz+PF4kMbduqDT5EzeNBy7d9IfaP3nxU3XsWLV+EjyuZe
cX57INdHr1Eb9iJcPdcO//ymi/01zzfxudaZSc3zrPG6UfIuulUspYe2Jd32TePV
LkubBw6+GZflJi+3vNLiAEGOxhwUy2poeR2U0k8sqkaB4MCIdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNEONVMOLA2bWgOlO3bSF6TSyNy4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2
MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvNjE4MWE1ZjktMGM0Ni0z
MzNjLWE4NGUtMTNkMmI0ZTVmZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli
YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh
MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3
NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Cf0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUFaMaDNia2flcT1K1sfcDUjclTWqzELqHcuO2YnV6v9yql7DhSYq/e
ZJFgAb/lort2qD46/sTT+gOpTaqEUCwpPjPEIbSEpiKPKdZEFVO0nHxCcH1OhHTM
wh/DQmwWKGPY1aBlGD6ESR8pL+WwltqqrpHXThCJ20e1cjasPdwsDlt9aIhZ371A
L5z5JcddMGrxE9iXzJAim69yP6OlSmK5DeXcT88yZCwgJwRenuFlvANKK7Z4+Wgb
OfvAVY/o1yG4/4Mwtydahz/UtlIIsrmsTLubiL8rF/g35tVzWvP1UPOE4OKzX5pL
R2pjaIEypTRyzqkn23lqDZe67ISjP20=
-----END CERTIFICATE-----
Generated at Thu May 23 06:56:42 2024 by rpki-client on console-fra.rpki-client.org