Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/38fb22b8-ac39-30b6-978d-f5eed61ee353.roa
File:                     38fb22b8-ac39-30b6-978d-f5eed61ee353.roa (raw, json)
Hash identifier:          WWLLj/sKH1hrjj7e65CH717YI8J0SwJgffOH8jLFI84=
Subject key identifier:   63:EC:F7:71:E4:FB:F6:83:8E:1A:1B:3A:7B:13:E9:9D:53:88:84:D0
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F432858459E934EFEB8424A8956D69AE0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/38fb22b8-ac39-30b6-978d-f5eed61ee353.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     16509
IP address blocks:        67.219.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:4e:fe:b8:42:4a:89:56:d6:9a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=f75d1baf-dcfa-428c-925d-d66631d9fc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e2:8d:61:d8:b4:5b:c9:6f:99:8b:c9:7a:a8:
                    a0:2b:fc:d2:98:80:3b:1e:81:f2:ee:ce:6c:6b:f3:
                    ab:66:79:fb:85:af:75:52:e7:78:3f:03:6f:75:3c:
                    a2:02:60:04:47:c5:ea:9b:20:63:50:c6:a5:bd:5f:
                    5b:83:fa:a0:4d:79:2e:b6:6c:75:6a:58:ff:fe:20:
                    39:cf:7c:a4:b4:84:85:5e:31:b9:40:80:7b:06:c9:
                    ec:e9:26:bf:f3:ac:91:be:08:85:4a:e6:6d:97:ab:
                    75:ad:77:f7:81:b2:b2:8d:50:3b:4a:a6:7c:0f:8b:
                    18:45:5d:e6:e5:12:37:41:6e:ba:bc:a4:ad:4b:8b:
                    39:91:15:71:8a:ed:a4:4e:a8:5b:8a:df:f6:6d:0a:
                    93:30:13:d0:a5:14:86:98:9b:13:23:2c:b1:c0:ca:
                    0f:3f:8d:1d:47:ff:79:71:42:8c:2d:15:f3:eb:54:
                    f1:08:0b:7e:8b:c3:ac:00:bd:0f:a9:8c:56:ce:f1:
                    9f:bc:12:0b:2e:f1:1b:05:b4:21:07:38:c7:68:57:
                    ec:5f:3f:63:f9:8d:17:97:6b:6e:04:dd:0d:0d:dc:
                    08:4e:b5:5b:95:5c:64:64:21:09:4e:ce:62:62:4f:
                    d0:c0:3a:67:25:e8:1f:05:8e:01:9e:91:71:bb:05:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EC:F7:71:E4:FB:F6:83:8E:1A:1B:3A:7B:13:E9:9D:53:88:84:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/38fb22b8-ac39-30b6-978d-f5eed61ee353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:ea:2d:7f:77:51:1a:fe:18:ad:e6:bc:00:ee:70:4f:c9:
         4a:c5:a6:27:d4:68:cb:22:90:e0:86:61:f1:93:15:60:f3:88:
         c2:e5:1f:c3:96:b1:c0:ef:67:f7:8f:d7:07:eb:50:18:93:9f:
         6a:12:c9:a4:d4:55:eb:8f:00:0d:3a:12:73:39:9b:31:96:ea:
         9c:21:ba:eb:ff:78:f4:a4:b1:1a:09:42:d8:e5:21:01:a1:c8:
         8b:7f:72:b9:90:b0:37:cd:0a:90:b3:a6:cb:fe:2a:7d:e9:f3:
         13:b8:36:54:cf:a2:14:24:cf:db:bb:19:81:f4:0e:9c:48:f9:
         33:48:29:ab:9f:f8:ed:65:3c:fc:8d:ff:4d:68:b1:f4:94:ed:
         c4:c5:52:de:27:85:4e:c5:bf:b2:e2:b2:25:4e:26:3b:b3:c1:
         a6:ec:3f:90:d1:f6:59:6a:2e:40:60:bd:c3:36:a9:b5:a8:1b:
         02:bd:53:17:04:ff:b1:eb:fc:32:c2:94:c9:23:11:44:ed:6f:
         20:54:31:cc:80:89:9b:a3:6a:3f:34:84:28:73:db:91:bd:44:
         85:ee:4c:47:45:ae:f8:a9:98:60:aa:08:e6:46:65:60:6d:b5:
         ab:c5:53:b1:e8:71:13:5f:ec:5c:fe:dd:5d:11:44:bd:d3:ce:
         5e:fb:46:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek07+uEJKiVbWmuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
Zjc1ZDFiYWYtZGNmYS00MjhjLTkyNWQtZDY2NjMxZDlmYzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+KNYdi0W8lvmYvJeqigK/zSmIA7HoHy7s5s
a/OrZnn7ha91Uud4PwNvdTyiAmAER8XqmyBjUMalvV9bg/qgTXkutmx1alj//iA5
z3yktISFXjG5QIB7Bsns6Sa/86yRvgiFSuZtl6t1rXf3gbKyjVA7SqZ8D4sYRV3m
5RI3QW66vKStS4s5kRVxiu2kTqhbit/2bQqTMBPQpRSGmJsTIyyxwMoPP40dR/95
cUKMLRXz61TxCAt+i8OsAL0PqYxWzvGfvBILLvEbBbQhBzjHaFfsXz9j+Y0Xl2tu
BN0NDdwITrVblVxkZCEJTs5iYk/QwDpnJegfBY4BnpFxuwXB3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPs93Hk+/aDjhobOnsT6Z1TiITQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMzhmYjIyYjgtYWMzOS0z
MGI2LTk3OGQtZjVlZWQ2MWVlMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9v6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeg6i1/d1Ea/hit5rwA7nBPyUrFpifUaMsikOCGYfGTFWDziMLlH8OW
scDvZ/eP1wfrUBiTn2oSyaTUVeuPAA06EnM5mzGW6pwhuuv/ePSksRoJQtjlIQGh
yIt/crmQsDfNCpCzpsv+Kn3p8xO4NlTPohQkz9u7GYH0DpxI+TNIKauf+O1lPPyN
/01osfSU7cTFUt4nhU7Fv7LisiVOJjuzwabsP5DR9llqLkBgvcM2qbWoGwK9UxcE
/7Hr/DLClMkjEUTtbyBUMcyAiZujaj80hChz25G9RIXuTEdFrvipmGCqCOZGZWBt
tavFU7HocRNf7Fz+3V0RRL3Tzl77Rm8=
-----END CERTIFICATE-----
Generated at Thu May 2 22:17:02 2024 by rpki-client on console-fra.rpki-client.org