Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa
File:                     f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa (raw, json)
Hash identifier:          dYqMuZCcacaeI2dHk8gnDMsEYfqhxkNL3PisfDowBqU=
Subject key identifier:   B7:47:BF:78:DB:B9:9D:0B:93:47:37:40:D1:1B:C6:DA:8D:76:8C:73
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858457D1315599FBE7EE7C9BEFE00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        134.224.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:15:59:9f:be:7e:e7:c9:be:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=9a1e8dd4-1725-4da1-bdd7-f4e4858473f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:a3:d7:3a:ae:1d:a5:fb:2a:ba:ef:7d:9f:
                    c5:5f:1b:1c:86:a8:c7:e7:2a:5f:6a:b6:4d:58:2d:
                    73:a1:48:b9:ef:b5:50:3e:12:48:b1:41:35:1d:95:
                    b2:41:61:6d:88:1f:54:da:09:8c:05:4f:dc:c1:66:
                    13:b7:da:af:0d:45:4d:5e:3c:c8:fd:9b:c5:17:da:
                    66:b8:6a:eb:a4:87:62:fb:23:90:dd:e1:07:ae:4f:
                    f1:a8:b2:f3:2f:b8:fd:ad:e3:42:ea:aa:76:70:6b:
                    65:78:4d:0b:00:c7:41:2e:65:bb:62:16:8d:34:9b:
                    f5:26:9f:ff:b7:b1:de:08:1c:1b:63:b0:68:c7:5c:
                    b2:a7:0b:d0:30:50:8d:a4:f4:42:c1:15:f8:02:4b:
                    19:38:cb:d8:e1:36:ba:b5:a3:e3:70:58:08:d1:89:
                    66:84:1c:2c:26:e8:ce:dd:e9:22:cc:54:9f:ce:eb:
                    01:6f:f2:df:34:71:0b:46:ad:db:55:3a:b1:38:54:
                    ce:c4:6f:12:a6:0f:43:d7:e3:ff:34:24:28:a3:fa:
                    03:a8:19:a4:c9:7a:30:c0:53:79:7e:3d:fd:97:bf:
                    86:2e:0b:28:59:bf:fe:16:b5:53:b8:36:52:60:ce:
                    ee:43:41:08:60:21:3b:ab:c8:d0:38:bf:14:23:a9:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:47:BF:78:DB:B9:9D:0B:93:47:37:40:D1:1B:C6:DA:8D:76:8C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f3dd8e29-db6e-3fd0-897a-bcc4ebe5d28a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b5:eb:25:5e:47:b7:f5:ea:cf:53:7d:cd:49:ec:b0:fc:0e:
         dc:3d:99:bc:cb:9d:65:2a:e5:7b:3b:e5:67:d7:79:ba:fb:a0:
         af:40:7f:d4:24:db:49:42:c5:d3:a0:eb:72:ea:49:f2:d9:c1:
         de:c2:0a:bd:2c:7a:3f:70:6b:6a:8e:88:ca:93:7e:48:c7:40:
         05:ad:83:5a:8f:ab:9c:d2:a3:38:04:8d:82:34:3b:c4:66:4d:
         47:38:3f:f7:0d:18:bd:60:32:3e:52:40:fb:e0:11:0b:33:ac:
         9b:25:bb:f1:e4:0f:9c:ab:ce:ba:77:d5:97:6e:ad:1b:75:ba:
         22:76:2b:27:6c:86:1e:e7:6d:7e:74:4c:8d:8f:4b:82:dd:e5:
         2b:60:87:58:75:f0:bd:63:ee:bb:dd:11:97:29:f9:ed:d3:2a:
         40:d1:8b:c6:56:0c:7a:4c:15:76:7e:da:a0:f1:c6:1b:45:4b:
         2d:ae:91:38:b9:d2:d3:f5:e6:63:33:9c:2b:7d:f1:c4:02:4e:
         6f:b9:68:d3:09:a3:87:ff:71:a2:27:54:b2:2f:27:8c:0f:e8:
         35:b3:16:ce:39:e0:4b:bd:b6:44:ab:ba:77:a1:1b:89:2a:01:
         5f:09:e4:41:39:11:83:94:ef:64:da:c7:c5:c2:db:d0:ad:1e:
         a8:42:54:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9ExVZn75+58m+/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI0MDQwOTEzMDAzNFoXDTI0MDcwODEzMDAzNFowLzEtMCsGA1UEAxMk
OWExZThkZDQtMTcyNS00ZGExLWJkZDctZjRlNDg1ODQ3M2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfyj1zquHaX7KrrvfZ/FXxschqjH5ypfarZN
WC1zoUi577VQPhJIsUE1HZWyQWFtiB9U2gmMBU/cwWYTt9qvDUVNXjzI/ZvFF9pm
uGrrpIdi+yOQ3eEHrk/xqLLzL7j9reNC6qp2cGtleE0LAMdBLmW7YhaNNJv1Jp//
t7HeCBwbY7Box1yypwvQMFCNpPRCwRX4AksZOMvY4Ta6taPjcFgI0YlmhBwsJujO
3ekizFSfzusBb/LfNHELRq3bVTqxOFTOxG8Spg9D1+P/NCQoo/oDqBmkyXowwFN5
fj39l7+GLgsoWb/+FrVTuDZSYM7uQ0EIYCE7q8jQOL8UI6kwgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLdHv3jbuZ0Lk0c3QNEbxtqNdoxzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjNkZDhlMjktZGI2ZS0z
ZmQwLTg5N2EtYmNjNGViZTVkMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhuDQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAW16yVeR7f16s9Tfc1J7LD8Dtw9mbzLnWUq5Xs75WfXebr7oK9Af9Qk
20lCxdOg63LqSfLZwd7CCr0sej9wa2qOiMqTfkjHQAWtg1qPq5zSozgEjYI0O8Rm
TUc4P/cNGL1gMj5SQPvgEQszrJslu/HkD5yrzrp31ZdurRt1uiJ2Kydshh7nbX50
TI2PS4Ld5Stgh1h18L1j7rvdEZcp+e3TKkDRi8ZWDHpMFXZ+2qDxxhtFSy2ukTi5
0tP15mMznCt98cQCTm+5aNMJo4f/caInVLIvJ4wP6DWzFs454Eu9tkSrunehG4kq
AV8J5EE5EYOU72Tax8XC29CtHqhCVP8=
-----END CERTIFICATE-----
Generated at Thu May 2 22:32:10 2024 by rpki-client on console-ams.rpki-client.org