Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d698adfa-a15d-37a8-a462-a1e5e48df2ae.roa
File:                     d698adfa-a15d-37a8-a462-a1e5e48df2ae.roa (raw, json)
Hash identifier:          b9suaxzNmKkmZA7eB43jaZCmKxa5KxoRhxo1W7hIF0Q=
Subject key identifier:   5A:6C:60:66:93:E9:BD:4A:62:8E:65:EC:57:CB:89:CC:E8:5A:1C:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845964A6D2FAB02E8FD4A424F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d698adfa-a15d-37a8-a462-a1e5e48df2ae.roa
Signing time:             Thu 18 Apr 2024 13:47:17 +0000
ROA not before:           Thu 18 Apr 2024 13:47:17 +0000
ROA not after:            Wed 17 Jul 2024 13:47:17 +0000
asID:                     16625
IP address blocks:        184.84.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:4a:6d:2f:ab:02:e8:fd:4a:42:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 13:47:17 2024 GMT
            Not After : Jul 17 13:47:17 2024 GMT
        Subject: CN=1d3102f2-cf73-481b-bdb1-4405587936fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e5:43:6a:c9:b9:2f:f4:0d:71:07:63:d0:37:
                    50:eb:bb:2c:98:c2:a9:87:c0:38:3e:8d:44:e2:e3:
                    87:44:34:02:9b:ea:3f:05:5c:ba:d8:05:3c:f9:7f:
                    8d:37:b7:91:a5:95:0d:66:c8:26:3e:49:f2:70:f3:
                    f8:98:fa:7e:86:48:21:d3:03:ea:ba:87:70:33:be:
                    ea:22:b5:8a:14:1d:63:a7:4c:52:1d:59:4f:d2:03:
                    5a:b2:78:c1:18:b5:54:ab:76:0e:4f:33:a5:a3:78:
                    9b:45:1f:55:e2:16:8d:68:a4:35:a8:96:66:d8:30:
                    fe:6c:8d:86:00:dc:be:78:ce:8c:56:56:c8:8f:ba:
                    f9:ef:ee:51:ad:5f:10:fc:54:42:c2:bf:6d:81:df:
                    9b:aa:89:58:61:7d:d4:ca:5a:c5:d5:e9:67:34:82:
                    00:db:2b:14:a8:26:10:29:29:e3:1b:34:1d:d9:c3:
                    1d:4f:dd:b8:fa:c2:d7:4b:a2:56:99:e5:8b:ab:f4:
                    ee:e5:05:db:00:12:ef:c4:f2:67:47:c7:e4:9b:35:
                    11:73:d4:99:39:ca:a6:31:88:13:e9:5b:64:0f:9f:
                    bb:81:50:85:c5:4f:b4:cf:2f:e1:c5:7c:69:c2:a0:
                    c9:e6:b8:57:c0:09:43:07:a0:80:3d:d7:f9:22:61:
                    fa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6C:60:66:93:E9:BD:4A:62:8E:65:EC:57:CB:89:CC:E8:5A:1C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d698adfa-a15d-37a8-a462-a1e5e48df2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.84.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:57:a5:3c:51:bb:a3:7c:10:c7:19:05:cc:a8:23:60:14:66:
         89:0c:6c:12:e4:5f:31:99:3f:46:c1:c6:fd:a4:2f:6f:5d:4d:
         f5:86:56:31:b2:d9:79:cc:01:a6:37:24:b5:23:6b:af:77:cc:
         3f:b0:63:f9:bf:b0:97:ec:9d:4d:3a:14:cc:1e:f4:b3:10:cb:
         9d:bb:6e:ab:b5:bb:99:b2:21:99:d1:1a:3f:8e:43:98:e4:50:
         3c:35:f2:7d:78:76:09:53:11:65:73:e5:c1:3e:38:53:09:45:
         2a:63:d0:00:d3:43:e0:2a:4d:59:86:25:a8:5c:5e:34:db:c9:
         b6:0a:28:07:43:48:bb:ad:4d:3a:4a:e1:a8:aa:9d:03:4a:2b:
         f5:82:ca:3f:d6:08:34:3f:fa:4e:9f:24:b4:f1:9f:1c:3a:a9:
         38:9e:0d:25:2e:6d:44:f0:1a:4a:d0:24:07:ec:3f:e2:22:ff:
         ec:fb:44:54:0c:4d:51:fc:35:81:dd:75:39:3f:47:fe:49:23:
         e7:26:ca:cb:8e:c1:44:d0:b6:be:16:2f:c9:f8:11:7c:29:b2:
         83:2e:1f:8f:61:9d:5a:a3:52:97:82:0f:f8:23:b1:65:b0:13:
         95:0d:3b:84:9b:17:78:92:3a:42:5f:3d:42:4d:f3:2e:02:b7:
         a0:2a:89:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWWSm0vqwLo/UpCT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQxODEzNDcxN1oXDTI0MDcxNzEzNDcxN1owLzEtMCsGA1UEAxMk
MWQzMTAyZjItY2Y3My00ODFiLWJkYjEtNDQwNTU4NzkzNmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+VDasm5L/QNcQdj0DdQ67ssmMKph8A4Po1E
4uOHRDQCm+o/BVy62AU8+X+NN7eRpZUNZsgmPknycPP4mPp+hkgh0wPquodwM77q
IrWKFB1jp0xSHVlP0gNasnjBGLVUq3YOTzOlo3ibRR9V4haNaKQ1qJZm2DD+bI2G
ANy+eM6MVlbIj7r57+5RrV8Q/FRCwr9tgd+bqolYYX3UylrF1elnNIIA2ysUqCYQ
KSnjGzQd2cMdT924+sLXS6JWmeWLq/Tu5QXbABLvxPJnR8fkmzURc9SZOcqmMYgT
6VtkD5+7gVCFxU+0zy/hxXxpwqDJ5rhXwAlDB6CAPdf5ImH6wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpsYGaT6b1KYo5l7FfLiczoWhweMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY5OGFkZmEtYTE1ZC0z
N2E4LWE0NjItYTFlNWU0OGRmMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuFTgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhXpTxRu6N8EMcZBcyoI2AUZokMbBLkXzGZP0bBxv2kL29dTfWGVjGy
2XnMAaY3JLUja693zD+wY/m/sJfsnU06FMwe9LMQy527bqu1u5myIZnRGj+OQ5jk
UDw18n14dglTEWVz5cE+OFMJRSpj0ADTQ+AqTVmGJahcXjTbybYKKAdDSLutTTpK
4aiqnQNKK/WCyj/WCDQ/+k6fJLTxnxw6qTieDSUubUTwGkrQJAfsP+Ii/+z7RFQM
TVH8NYHddTk/R/5JI+cmysuOwUTQtr4WL8n4EXwpsoMuH49hnVqjUpeCD/gjsWWw
E5UNO4SbF3iSOkJfPUJN8y4Ct6Aqif0=
-----END CERTIFICATE-----
Generated at Fri May 17 01:58:02 2024 by rpki-client on console-fra.rpki-client.org