Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4ccb9bbd-969e-3378-aca3-cf9801a94e1d.roa
File:                     4ccb9bbd-969e-3378-aca3-cf9801a94e1d.roa (raw, json)
Hash identifier:          uXJ9KgEGW7XwhmMyTbWTx13+b6azCGHQTwM9TTgjFqs=
Subject key identifier:   4B:F3:92:2F:BE:3F:A5:A2:A2:8D:70:85:DC:A6:5F:F2:95:BE:BB:81
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584585732D4A32C002BEED679FC0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4ccb9bbd-969e-3378-aca3-cf9801a94e1d.roa
Signing time:             Fri 12 Apr 2024 13:00:34 +0000
ROA not before:           Fri 12 Apr 2024 13:00:34 +0000
ROA not after:            Thu 11 Jul 2024 13:00:34 +0000
asID:                     27471
IP address blocks:        199.116.172.0/24 maxlen: 24
                          199.19.254.0/24 maxlen: 24
                          199.19.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:73:2d:4a:32:c0:02:be:ed:67:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Apr 12 13:00:34 2024 GMT
            Not After : Jul 11 13:00:34 2024 GMT
        Subject: CN=c3e5707a-b18b-4ef2-9417-76cb2329b572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:96:09:ad:5a:75:36:55:24:90:b2:34:37:34:
                    f7:ef:b4:9c:cc:0f:07:1c:bf:d4:2b:74:b1:ea:5b:
                    99:c0:9c:15:b2:18:83:b1:ac:b4:81:de:4f:4a:68:
                    80:0a:84:3c:8c:4d:66:31:d4:cc:fb:bc:f0:cd:64:
                    39:ed:5c:0a:21:2f:83:04:07:ea:ff:30:e0:d9:a4:
                    bc:75:b2:af:ef:e5:65:2a:d8:08:23:ad:e8:09:df:
                    5a:22:da:b5:b6:23:64:73:5e:f5:e7:ca:31:5c:6e:
                    28:21:ab:ef:d9:a0:18:67:cc:70:b1:92:99:47:86:
                    ce:25:6c:3e:5e:d9:02:e7:48:0a:c5:08:18:59:25:
                    ec:08:87:11:7a:a9:2a:1b:07:db:3d:9a:2b:0d:7e:
                    31:10:f8:9d:2f:a0:fd:4f:23:aa:85:67:ad:68:0f:
                    b5:c0:5e:60:e0:35:ec:de:56:18:06:03:3b:72:7c:
                    5b:1d:2e:fb:0c:67:b0:ea:a7:d0:a8:ae:a0:c2:8d:
                    5a:6b:e8:62:7a:18:c9:32:9e:03:a5:c4:7c:7e:52:
                    09:8d:33:ea:2c:66:c4:ae:cf:8b:51:04:2e:ac:76:
                    11:c1:c4:84:4e:f0:ce:f3:34:1a:2e:2b:f9:d2:d5:
                    d3:a0:44:55:a8:f2:fd:de:03:e3:62:f6:e5:70:8f:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F3:92:2F:BE:3F:A5:A2:A2:8D:70:85:DC:A6:5F:F2:95:BE:BB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4ccb9bbd-969e-3378-aca3-cf9801a94e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.254.0/23
                  199.116.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:57:ed:52:70:fb:51:7c:34:aa:45:96:37:77:a3:2b:ca:00:
         f9:ba:bc:cf:d8:08:a8:e0:ba:92:9a:90:b0:e2:cc:4f:a2:1c:
         7d:6f:7c:c7:1e:32:92:27:f6:44:ac:48:c4:d3:10:79:48:26:
         e4:b2:15:f3:a5:a6:16:7a:61:e5:61:dc:6a:08:3d:8b:34:f6:
         85:1d:d6:87:26:95:42:3a:0d:44:bd:71:9e:8a:a2:1a:d0:3d:
         d9:09:35:17:c6:cd:22:2a:51:4c:87:b7:1f:84:17:d5:19:64:
         f4:0e:be:43:de:45:4d:3f:ff:2c:9c:ad:36:00:f5:e0:f5:52:
         84:71:fe:01:a1:17:1e:c5:fb:8b:0b:f5:52:01:94:4f:a9:6e:
         e6:bf:d6:6d:b1:2d:58:92:4a:51:b0:55:0d:3b:c1:b6:c4:5b:
         2a:c9:79:8c:05:db:3b:c3:db:73:98:90:df:2a:6e:07:94:f4:
         d6:66:9a:7e:9f:28:89:00:e7:c7:fd:7c:f2:f0:35:6c:57:d0:
         3c:90:74:91:5b:5d:e1:d8:d0:51:ec:da:16:34:06:06:09:07:
         27:ee:c3:a1:39:be:e3:93:c2:41:22:ed:5a:22:1b:b0:77:36:
         d5:1b:38:a3:d8:0b:ba:b6:8f:61:d1:fd:01:12:4a:06:7d:aa:
         39:9e:64:0f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWFcy1KMsACvu1nn8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI0MDQxMjEzMDAzNFoXDTI0MDcxMTEzMDAzNFowLzEtMCsGA1UEAxMk
YzNlNTcwN2EtYjE4Yi00ZWYyLTk0MTctNzZjYjIzMjliNTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZYJrVp1NlUkkLI0NzT377SczA8HHL/UK3Sx
6luZwJwVshiDsay0gd5PSmiACoQ8jE1mMdTM+7zwzWQ57VwKIS+DBAfq/zDg2aS8
dbKv7+VlKtgII63oCd9aItq1tiNkc17158oxXG4oIavv2aAYZ8xwsZKZR4bOJWw+
XtkC50gKxQgYWSXsCIcReqkqGwfbPZorDX4xEPidL6D9TyOqhWetaA+1wF5g4DXs
3lYYBgM7cnxbHS77DGew6qfQqK6gwo1aa+hiehjJMp4DpcR8flIJjTPqLGbErs+L
UQQurHYRwcSETvDO8zQaLiv50tXToERVqPL93gPjYvblcI/ZzQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEvzki++P6Wioo1whdymX/KVvruBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNGNjYjliYmQtOTY5ZS0z
Mzc4LWFjYTMtY2Y5ODAxYTk0ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxxP+AwQA
x3SsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHRX7VJw+1F8NKpFljd3oyvKAPm6vM/YCKjgupKakLDizE+i
HH1vfMceMpIn9kSsSMTTEHlIJuSyFfOlphZ6YeVh3GoIPYs09oUd1ocmlUI6DUS9
cZ6KohrQPdkJNRfGzSIqUUyHtx+EF9UZZPQOvkPeRU0//yycrTYA9eD1UoRx/gGh
Fx7F+4sL9VIBlE+pbua/1m2xLViSSlGwVQ07wbbEWyrJeYwF2zvD23OYkN8qbgeU
9NZmmn6fKIkA58f9fPLwNWxX0DyQdJFbXeHY0FHs2hY0BgYJByfuw6E5vuOTwkEi
7VoiG7B3NtUbOKPYC7q2j2HR/QESSgZ9qjmeZA8=
-----END CERTIFICATE-----
Generated at Fri May 10 08:04:59 2024 by rpki-client on console-ams.rpki-client.org