Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d79b62cc-36d6-3e6c-97bd-3d162be55196.roa
File:                     d79b62cc-36d6-3e6c-97bd-3d162be55196.roa (raw, json)
Hash identifier:          jiTlIyKhxiN90aqHZE4yDqaXenhq0+TpzTNqJcsVFAw=
Subject key identifier:   26:04:82:C6:11:37:FE:90:8E:2C:D4:06:D2:32:56:D6:85:AA:6D:34
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F43285845CB3E5195DE23B0E1FDE2FCC0
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d79b62cc-36d6-3e6c-97bd-3d162be55196.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     52347
IP address blocks:        192.34.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:51:95:de:23:b0:e1:fd:e2:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=4a3972b0-9c8d-4912-952e-78b033612c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:60:ff:5b:ec:59:e2:bb:f4:34:a9:d9:19:53:
                    96:78:ad:92:19:5e:f8:dd:0e:50:a2:4c:90:ec:9b:
                    77:86:00:6a:f3:c0:f4:8b:a6:19:f1:7f:fa:ad:3a:
                    09:b7:2c:b3:33:ff:2a:d0:58:2b:6c:80:9b:27:8c:
                    86:b9:13:88:86:d3:18:9a:fc:ab:7a:c3:16:02:5e:
                    2b:62:17:bf:45:1a:c0:80:80:51:13:11:13:8a:b0:
                    7b:23:26:c7:93:4f:f2:e8:dc:70:41:3c:ef:e1:66:
                    ba:a3:e0:de:02:a9:76:b5:03:37:32:0b:f4:ae:73:
                    57:f5:e3:73:1e:60:d5:cc:d4:1e:9b:50:3e:aa:08:
                    18:a6:52:16:2b:83:c4:a4:b1:ba:30:fe:1e:31:75:
                    57:1c:c1:88:3a:c8:c4:e1:52:2b:db:04:c3:9f:b0:
                    65:7d:85:23:28:72:a8:99:10:cf:18:ce:28:60:02:
                    59:26:72:0e:d2:60:5c:4a:4d:ee:58:cf:d4:3e:e3:
                    1c:8d:86:56:dc:45:f5:51:a8:26:64:26:55:f1:03:
                    da:bf:35:7b:6e:83:fd:ab:01:53:7a:59:8d:03:6f:
                    91:79:ae:94:df:bb:4b:0e:7d:a0:82:f6:3d:24:27:
                    b4:79:01:86:79:ab:ea:18:fb:e1:de:79:91:b7:19:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:04:82:C6:11:37:FE:90:8E:2C:D4:06:D2:32:56:D6:85:AA:6D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d79b62cc-36d6-3e6c-97bd-3d162be55196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:9f:ef:fe:6e:e4:cd:04:da:20:40:1a:ce:5f:e0:3c:3c:be:
         be:da:b0:4f:c1:e8:b5:b6:bc:cc:6b:3a:de:98:38:4d:89:bb:
         9b:30:aa:d6:2e:dd:bb:a1:94:1e:d3:05:f0:94:c0:a6:be:87:
         b6:d7:c8:02:ea:f0:1a:32:7f:cd:e6:4e:07:8d:c3:c2:38:24:
         71:b0:cb:d4:da:6e:79:f7:8a:c4:8f:92:6f:47:ae:c2:ed:cf:
         3b:64:ce:9f:99:f1:cf:3e:2c:4d:cd:a1:31:1e:bf:40:e6:2d:
         15:d6:15:00:b5:ae:af:f7:0a:ef:0d:b9:ac:0c:5e:53:74:d1:
         c0:6a:fe:a8:44:f4:4a:bd:da:29:bb:08:a5:7d:08:0b:df:7a:
         07:6c:4c:bf:0a:89:31:0a:2e:92:87:04:01:66:d1:15:2b:8d:
         5e:fa:7e:cb:62:dc:d6:ea:66:2f:bc:6f:17:5d:43:f5:31:5a:
         c6:39:f7:9f:7e:a9:80:8f:e3:f0:f8:a0:11:ce:c9:7d:7a:5e:
         32:ce:61:26:2b:e2:08:b8:35:65:8d:a0:19:c8:70:66:82:0e:
         9c:59:61:14:79:75:e0:3e:86:ef:e2:c7:55:5d:2b:00:06:5f:
         27:0f:cf:6b:cb:a5:9c:96:a3:45:ef:2a:84:16:39:ae:b1:56:
         26:8d:ae:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXLPlGV3iOw4f3i/MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl
N2IwMB4XDTI0MDUwNzEzMDAzNVoXDTI0MDgwNTEzMDAzNVowLzEtMCsGA1UEAxMk
NGEzOTcyYjAtOWM4ZC00OTEyLTk1MmUtNzhiMDMzNjEyYzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWD/W+xZ4rv0NKnZGVOWeK2SGV743Q5QokyQ
7Jt3hgBq88D0i6YZ8X/6rToJtyyzM/8q0FgrbICbJ4yGuROIhtMYmvyresMWAl4r
Yhe/RRrAgIBRExETirB7IybHk0/y6NxwQTzv4Wa6o+DeAql2tQM3Mgv0rnNX9eNz
HmDVzNQem1A+qggYplIWK4PEpLG6MP4eMXVXHMGIOsjE4VIr2wTDn7BlfYUjKHKo
mRDPGM4oYAJZJnIO0mBcSk3uWM/UPuMcjYZW3EX1UagmZCZV8QPavzV7boP9qwFT
elmNA2+Rea6U37tLDn2ggvY9JCe0eQGGeavqGPvh3nmRtxl4WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYEgsYRN/6QjizUBtIyVtaFqm00MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx
NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvZDc5YjYyY2MtMzZkNi0z
ZTZjLTk3YmQtM2QxNjJiZTU1MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4
MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1
ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1
MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCIIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMqf7/5u5M0E2iBAGs5f4Dw8vr7asE/B6LW2vMxrOt6YOE2Ju5swqtYu
3buhlB7TBfCUwKa+h7bXyALq8Boyf83mTgeNw8I4JHGwy9Tabnn3isSPkm9HrsLt
zztkzp+Z8c8+LE3NoTEev0DmLRXWFQC1rq/3Cu8NuawMXlN00cBq/qhE9Eq92im7
CKV9CAvfegdsTL8KiTEKLpKHBAFm0RUrjV76fsti3NbqZi+8bxddQ/UxWsY5959+
qYCP4/D4oBHOyX16XjLOYSYr4gi4NWWNoBnIcGaCDpxZYRR5deA+hu/ix1VdKwAG
XycPz2vLpZyWo0XvKoQWOa6xViaNriY=
-----END CERTIFICATE-----
Generated at Thu May 9 01:33:12 2024 by rpki-client on console-fra.rpki-client.org