Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/c9ca2cca-170f-3bbc-8d5b-16743399b15a.roa
File:                     c9ca2cca-170f-3bbc-8d5b-16743399b15a.roa (raw, json)
Hash identifier:          6qlq5cgn7N9i9bqxjl4YxhGVlhNDFjXJF2GPSFMAl7I=
Subject key identifier:   8B:F7:2F:28:A3:85:60:65:1E:D9:06:95:2C:46:B5:42:61:45:F6:68
Certificate issuer:       /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
Certificate serial:       010D0C9F4328584511B591C63E87F19C3274CB50
Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/c9ca2cca-170f-3bbc-8d5b-16743399b15a.roa
Signing time:             Sat 02 Mar 2024 02:00:26 +0000
ROA not before:           Sat 02 Mar 2024 02:00:26 +0000
ROA not after:            Fri 31 May 2024 01:00:26 +0000
asID:                     397952
IP address blocks:        199.116.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:b5:91:c6:3e:87:f1:9c:32:74:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
        Validity
            Not Before: Mar  2 02:00:26 2024 GMT
            Not After : May 31 01:00:26 2024 GMT
        Subject: CN=e27aa93a-c32e-4d6b-a2f7-8ddc9794fa13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:69:ec:80:eb:6b:30:05:7e:c1:f9:5d:26:
                    1f:96:55:00:32:32:a6:60:c4:4a:01:cc:cd:64:56:
                    87:7b:98:e0:62:7b:e9:6e:17:ef:75:4e:b1:d0:ca:
                    d8:ce:b5:dd:88:33:68:ed:65:a2:86:27:db:15:a8:
                    40:af:06:55:64:f0:66:f5:53:8f:f9:d2:0d:80:52:
                    49:a1:46:3e:84:44:79:ea:02:52:c9:75:2d:0f:88:
                    dc:7b:c9:73:6e:61:93:a7:9c:60:be:80:40:17:25:
                    b2:7a:e0:11:e9:de:95:39:a6:40:b1:2b:e7:99:3b:
                    dc:ac:04:84:e9:89:27:3a:c0:46:27:87:3b:c8:d2:
                    ad:15:c8:4d:e2:34:9c:f0:16:00:c9:c7:0c:66:3d:
                    44:80:17:40:31:d3:0f:89:57:50:db:32:99:94:e3:
                    0e:d7:3f:3c:f1:7e:86:9c:5d:30:0d:9a:2f:fa:5a:
                    38:93:a0:19:42:0f:88:67:28:ca:cf:23:5b:30:a2:
                    ec:2f:eb:0a:d9:01:8b:59:4d:38:56:d5:d9:18:49:
                    cc:df:0e:fd:41:f9:59:d2:39:c8:25:12:38:ac:eb:
                    0a:52:a8:0a:f1:ac:d2:e9:36:f7:0a:94:c9:fa:5f:
                    4e:76:6a:49:66:1a:f9:b7:4d:fb:2d:32:89:17:bd:
                    cb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F7:2F:28:A3:85:60:65:1E:D9:06:95:2C:46:B5:42:61:45:F6:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/c9ca2cca-170f-3bbc-8d5b-16743399b15a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl

            X509v3 Authority Key Identifier:
                keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:76:6f:44:fd:b9:69:03:fc:f3:f0:f4:e1:c7:f9:65:86:
         f6:d4:f9:bb:c8:b7:95:3b:55:2b:21:57:1e:bd:46:a9:1d:02:
         63:d0:30:45:18:e1:96:d1:31:e9:18:06:bf:79:de:5d:a8:d3:
         40:05:06:3d:20:16:ce:0e:76:c4:bb:b1:10:c9:73:44:89:08:
         08:52:60:2d:66:bd:70:63:c3:51:b1:34:66:af:a8:6f:b5:3e:
         b0:eb:f4:2a:a0:30:f1:20:32:9e:7c:2f:06:e0:ff:57:f5:c6:
         34:8f:d0:fb:14:5f:a4:2a:7b:b8:6f:a7:f5:32:44:76:cd:23:
         8b:51:2d:47:71:52:74:ed:f9:54:68:42:d9:a1:98:cc:16:be:
         7b:e6:f5:3d:37:b4:ec:da:34:96:a8:d9:76:e4:53:e6:c1:d5:
         41:54:61:82:58:ca:1c:45:00:3e:fa:81:d4:e2:74:e2:47:2f:
         ba:d3:cb:ad:d0:bc:03:61:11:f7:aa:f2:52:03:42:35:00:16:
         e7:b8:b0:3a:bd:32:02:6e:1e:e5:14:d7:9c:71:6b:da:3b:4b:
         88:b5:d5:d7:67:6f:62:0b:3b:42:d7:17:ab:d0:e0:0c:97:b3:
         03:8b:d1:64:18:a3:bf:00:b3:a6:b6:78:4c:ce:1c:46:70:2d:
         00:65:e8:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEURtZHGPofxnDJ0y1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyNjQ1OTItYmNjMy00OGYxLWE3ODItOGJhNDhmYzUw
NmZhMB4XDTI0MDMwMjAyMDAyNloXDTI0MDUzMTAxMDAyNlowLzEtMCsGA1UEAxMk
ZTI3YWE5M2EtYzMyZS00ZDZiLWEyZjctOGRkYzk3OTRmYTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv5p7IDrazAFfsH5XSYfllUAMjKmYMRKAczN
ZFaHe5jgYnvpbhfvdU6x0MrYzrXdiDNo7WWihifbFahArwZVZPBm9VOP+dINgFJJ
oUY+hER56gJSyXUtD4jce8lzbmGTp5xgvoBAFyWyeuAR6d6VOaZAsSvnmTvcrASE
6YknOsBGJ4c7yNKtFchN4jSc8BYAyccMZj1EgBdAMdMPiVdQ2zKZlOMO1z888X6G
nF0wDZov+lo4k6AZQg+IZyjKzyNbMKLsL+sK2QGLWU04VtXZGEnM3w79QflZ0jnI
JRI4rOsKUqgK8azS6Tb3CpTJ+l9OdmpJZhr5t037LTKJF73LUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIv3LyijhWBlHtkGlSxGtUJhRfZoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lODI2
NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0OGZjNTA2ZmEvYzljYTJjY2EtMTcwZi0z
YmJjLThkNWItMTY3NDMzOTliMTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTgyNjQ1OTItYmNjMy00OGYxLWE3
ODItOGJhNDhmYzUwNmZhL2U4MjY0NTkyLWJjYzMtNDhmMS1hNzgyLThiYTQ4ZmM1
MDZmYS5jcmwwHwYDVR0jBBgwFoAUiHdMTp8/9MLgRDap8Qq21ISdpwowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lODI2NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0
OGZjNTA2ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3Q0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABO4dm9E/blpA/zz8PThx/llhvbU+bvIt5U7VSshVx69RqkdAmPQMEUY
4ZbRMekYBr953l2o00AFBj0gFs4OdsS7sRDJc0SJCAhSYC1mvXBjw1GxNGavqG+1
PrDr9CqgMPEgMp58Lwbg/1f1xjSP0PsUX6Qqe7hvp/UyRHbNI4tRLUdxUnTt+VRo
QtmhmMwWvnvm9T03tOzaNJao2XbkU+bB1UFUYYJYyhxFAD76gdTidOJHL7rTy63Q
vANhEfeq8lIDQjUAFue4sDq9MgJuHuUU15xxa9o7S4i11ddnb2ILO0LXF6vQ4AyX
swOL0WQYo78As6a2eEzOHEZwLQBl6GM=
-----END CERTIFICATE-----
Generated at Thu May 2 08:56:34 2024 by rpki-client on console-fra.rpki-client.org