Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/d784052a-d913-3886-abf3-2e0529b7a7f9.roa
File:                     d784052a-d913-3886-abf3-2e0529b7a7f9.roa (raw, json)
Hash identifier:          Ttin8A+KpL5Qw5qHPWJMU7cNhaMVNmJNPsj3pKYkxaM=
Subject key identifier:   4F:E3:29:D2:84:BC:8B:BB:3D:E3:65:4A:2C:04:90:8C:27:B2:CB:22
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583B17FD5446CC0821902F093AA5
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/d784052a-d913-3886-abf3-2e0529b7a7f9.roa
Signing time:             Mon 30 Aug 2021 04:00:00 +0000
ROA not before:           Mon 30 Aug 2021 04:00:00 +0000
ROA not after:            Thu 10 Jan 2030 05:00:00 +0000
asID:                     36692
IP address blocks:        208.69.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:17:fd:54:46:cc:08:21:90:2f:09:3a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Aug 30 04:00:00 2021 GMT
            Not After : Jan 10 05:00:00 2030 GMT
        Subject: CN=96978c35-9325-4dbf-8980-e37deb229a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:be:39:1e:c1:48:2b:f0:76:db:af:d0:66:
                    be:5d:12:9c:c2:db:f8:16:79:54:f8:c9:95:98:c6:
                    78:41:e2:34:e4:6f:8f:8e:96:ed:68:cb:28:0a:c5:
                    94:7b:95:d0:d1:7e:61:68:f0:d0:df:b3:d3:38:6d:
                    de:46:c5:cd:16:88:40:e9:48:a3:bf:11:6d:46:21:
                    d0:b4:12:9d:c7:2d:ff:ed:03:99:42:31:08:fb:02:
                    92:41:eb:e6:17:7a:d9:ba:ef:31:9d:9d:b5:a3:3c:
                    2d:11:32:12:cc:cb:ee:ed:c4:3b:ca:79:bb:aa:d0:
                    e1:ed:c8:3d:1a:27:fd:19:78:59:3a:ae:e6:32:7e:
                    d5:80:96:2d:d8:e1:67:83:72:88:80:67:55:b4:71:
                    0a:af:df:71:c4:97:b4:cb:42:90:bd:c1:98:97:a3:
                    8e:b6:1b:1c:19:01:ed:ae:1c:29:15:e5:a3:15:30:
                    21:b3:a2:60:a1:a4:53:5b:be:0f:63:ee:58:7b:4f:
                    c6:1f:31:3a:70:8d:30:5c:87:d5:8e:0d:44:2c:af:
                    68:e0:b8:6a:94:a9:f2:98:1e:ca:ed:d6:21:59:da:
                    bc:09:d3:1d:6e:82:14:89:09:fc:c2:7f:05:53:92:
                    5e:59:88:9a:58:f9:45:ee:79:35:9e:77:2e:63:2e:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E3:29:D2:84:BC:8B:BB:3D:E3:65:4A:2C:04:90:8C:27:B2:CB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/d784052a-d913-3886-abf3-2e0529b7a7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:63:35:b1:8a:97:79:47:bf:e8:fb:59:42:e8:20:fb:03:
         f8:ce:6a:ff:9e:6e:c0:74:af:b1:7f:b2:f7:7b:a2:4a:10:eb:
         93:8b:c1:ed:7c:63:01:ff:46:13:4d:21:4f:72:6f:62:60:57:
         dd:48:88:24:5a:f5:36:a0:7d:cb:a2:b4:fe:fa:bb:40:08:95:
         0e:c5:4f:71:1d:3a:ac:01:89:3a:03:7a:93:f3:4c:a7:5d:6d:
         0c:e5:90:c5:41:8c:6c:af:99:47:71:a6:fc:31:b3:51:a2:eb:
         11:0a:d0:84:3d:8c:6c:69:c6:d2:4c:83:7f:6e:ed:21:aa:d1:
         7e:5e:74:54:b6:f1:50:39:d3:ff:bd:e5:79:76:0e:61:80:a2:
         85:07:be:6e:2c:1e:5c:85:14:5e:25:41:af:60:da:99:a8:5b:
         62:e9:be:25:ef:c0:8c:2c:34:98:2e:a2:54:09:65:b6:b7:0a:
         83:df:ce:73:5f:16:6a:08:d6:e1:0d:5d:1d:b9:25:7d:ce:40:
         8b:f7:04:bc:b0:31:c2:b5:3b:e7:19:a6:be:11:cf:57:ea:06:
         12:ae:10:e7:68:9f:85:2e:81:6a:e5:f2:44:3d:e7:e4:a9:bf:
         aa:be:21:ed:c4:62:6a:66:d6:bd:80:7f:28:62:fa:f2:8d:9d:
         a9:3e:20:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDsX/VRGzAghkC8JOqUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk
ZWZjMB4XDTIxMDgzMDA0MDAwMFoXDTMwMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
OTY5NzhjMzUtOTMyNS00ZGJmLTg5ODAtZTM3ZGViMjI5YTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j6+OR7BSCvwdtuv0Ga+XRKcwtv4FnlU+MmV
mMZ4QeI05G+PjpbtaMsoCsWUe5XQ0X5haPDQ37PTOG3eRsXNFohA6UijvxFtRiHQ
tBKdxy3/7QOZQjEI+wKSQevmF3rZuu8xnZ21ozwtETISzMvu7cQ7ynm7qtDh7cg9
Gif9GXhZOq7mMn7VgJYt2OFng3KIgGdVtHEKr99xxJe0y0KQvcGYl6OOthscGQHt
rhwpFeWjFTAhs6JgoaRTW74PY+5Ye0/GHzE6cI0wXIfVjg1ELK9o4LhqlKnymB7K
7dYhWdq8CdMdboIUiQn8wn8FU5JeWYiaWPlF7nk1nncuYy4WWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE/jKdKEvIu7PeNlSiwEkIwnsssiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj
YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvZDc4NDA1MmEtZDkxMy0z
ODg2LWFiZjMtMmUwNTI5YjdhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm
MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi
ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw
NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EUnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWMYzWxipd5R7/o+1lC6CD7A/jOav+ebsB0r7F/svd7okoQ65OLwe18
YwH/RhNNIU9yb2JgV91IiCRa9TagfcuitP76u0AIlQ7FT3EdOqwBiToDepPzTKdd
bQzlkMVBjGyvmUdxpvwxs1Gi6xEK0IQ9jGxpxtJMg39u7SGq0X5edFS28VA50/+9
5Xl2DmGAooUHvm4sHlyFFF4lQa9g2pmoW2LpviXvwIwsNJguolQJZba3CoPfznNf
FmoI1uENXR25JX3OQIv3BLywMcK1O+cZpr4Rz1fqBhKuEOdon4UugWrl8kQ95+Sp
v6q+Ie3EYmpm1r2Afyhi+vKNnak+IP0=
-----END CERTIFICATE-----
Generated at Wed May 29 09:19:16 2024 by rpki-client on console-fra.rpki-client.org