Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3560e784-5d7f-3d51-ba45-1458fd7ed995.roa
File:                     3560e784-5d7f-3d51-ba45-1458fd7ed995.roa (raw, json)
Hash identifier:          Zh4N2bSxbi1G335FOoi2NNZPG7IMCV80y58oQcX7Seg=
Subject key identifier:   56:87:E9:44:22:AE:99:16:05:35:D4:F1:2E:D1:6E:61:E3:A6:31:C6
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584777C63D24B7C61A890501BE00
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3560e784-5d7f-3d51-ba45-1458fd7ed995.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     62651
IP address blocks:        205.185.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:3d:24:b7:c6:1a:89:05:01:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=44572138-c1b4-4a8b-a1c0-2dde349c6d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:12:52:62:61:63:80:89:35:b1:f7:60:d2:
                    80:52:4a:e0:98:5d:ab:2f:10:90:2f:ce:61:29:c2:
                    1b:7e:70:00:f3:1c:ce:5f:4b:03:67:64:01:36:9d:
                    ee:59:b4:2c:97:92:50:ea:80:1f:21:ca:24:59:ac:
                    c5:e2:91:a5:aa:30:3d:66:4d:e5:29:ea:ed:45:97:
                    4d:44:ca:08:57:ac:ac:70:f2:40:4f:58:4d:21:de:
                    0e:43:7e:2e:e7:c5:65:94:7a:48:b1:52:f9:77:4e:
                    c6:aa:a2:ef:e1:fc:d1:65:42:00:5e:c9:3f:85:b4:
                    2b:1c:cc:5e:a7:bf:68:7a:bb:e0:43:25:cd:03:8d:
                    99:32:d1:d1:c0:5c:e5:ea:7a:0a:d5:22:f7:62:fa:
                    63:9d:98:1b:53:fe:eb:22:40:e2:26:c1:00:90:ee:
                    61:8d:16:b7:5b:08:93:d8:fc:ec:fc:d1:e8:29:7b:
                    bb:5e:95:26:e9:9b:4c:09:22:dd:1f:00:79:97:b2:
                    04:0f:4f:69:c0:51:ec:8d:27:f3:9c:d7:83:fc:ef:
                    17:f9:df:ab:80:3b:99:8e:38:b3:43:40:73:a0:41:
                    22:d4:0f:81:9d:66:f8:cd:4c:07:98:69:3b:70:1b:
                    70:df:de:0b:ae:83:d4:3a:41:6e:db:c2:ba:a2:56:
                    0c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:87:E9:44:22:AE:99:16:05:35:D4:F1:2E:D1:6E:61:E3:A6:31:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/3560e784-5d7f-3d51-ba45-1458fd7ed995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.185.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:7d:3e:8d:d1:e2:e3:ce:12:61:64:ae:fd:5b:6f:13:43:8e:
         f5:63:31:80:99:20:17:fa:47:ff:88:1c:d2:fa:91:0e:55:4c:
         97:cd:67:af:be:19:86:09:c6:39:2e:5d:41:fc:d7:46:e0:8f:
         3f:8f:44:16:0e:a8:1d:1b:e8:76:23:b8:45:c9:be:10:84:ab:
         45:bd:bd:bc:d9:b0:96:3f:81:d3:0c:c2:35:a5:e7:0f:39:ac:
         d4:0d:03:51:4f:b7:5b:ce:9c:b7:32:f5:fb:15:5b:1e:53:27:
         b2:27:4d:3d:96:66:b0:a0:cb:c5:ca:fb:6a:af:88:31:fc:80:
         16:4a:2d:47:d6:01:e5:93:76:be:0a:c8:70:f6:d7:23:98:c4:
         3d:28:81:40:8b:bc:5b:58:87:23:a2:18:2a:a4:34:34:af:83:
         17:7e:91:33:d9:b7:9e:f8:42:aa:6e:3a:58:4d:6a:0a:9c:82:
         b0:44:83:b8:13:39:83:c5:ec:d5:ad:32:26:3c:36:76:fe:86:
         4b:bc:a8:ab:80:6e:a7:51:a9:42:7b:5a:8f:d4:11:d8:7e:aa:
         67:d3:b5:50:79:2c:45:64:d5:7a:d7:03:17:40:7a:25:33:8c:
         46:23:67:35:ee:ac:66:f9:2b:42:b2:05:01:92:15:9b:7a:f4:
         b4:2a:46:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3xj0kt8YaiQUBvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz
OGFhMB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk
NDQ1NzIxMzgtYzFiNC00YThiLWExYzAtMmRkZTM0OWM2ZDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkISUmJhY4CJNbH3YNKAUkrgmF2rLxCQL85h
KcIbfnAA8xzOX0sDZ2QBNp3uWbQsl5JQ6oAfIcokWazF4pGlqjA9Zk3lKertRZdN
RMoIV6yscPJAT1hNId4OQ34u58VllHpIsVL5d07GqqLv4fzRZUIAXsk/hbQrHMxe
p79oervgQyXNA42ZMtHRwFzl6noK1SL3YvpjnZgbU/7rIkDiJsEAkO5hjRa3WwiT
2Pzs/NHoKXu7XpUm6ZtMCSLdHwB5l7IED09pwFHsjSfznNeD/O8X+d+rgDuZjjiz
Q0BzoEEi1A+BnWb4zUwHmGk7cBtw394LroPUOkFu28K6olYM/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFaH6UQirpkWBTXU8S7RbmHjpjHGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk
MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMzU2MGU3ODQtNWQ3Zi0z
ZDUxLWJhNDUtMTQ1OGZkN2VkOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2
ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy
MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4
ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzbnfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJF9Po3R4uPOEmFkrv1bbxNDjvVjMYCZIBf6R/+IHNL6kQ5VTJfNZ6++
GYYJxjkuXUH810bgjz+PRBYOqB0b6HYjuEXJvhCEq0W9vbzZsJY/gdMMwjWl5w85
rNQNA1FPt1vOnLcy9fsVWx5TJ7InTT2WZrCgy8XK+2qviDH8gBZKLUfWAeWTdr4K
yHD21yOYxD0ogUCLvFtYhyOiGCqkNDSvgxd+kTPZt574QqpuOlhNagqcgrBEg7gT
OYPF7NWtMiY8Nnb+hku8qKuAbqdRqUJ7Wo/UEdh+qmfTtVB5LEVk1XrXAxdAeiUz
jEYjZzXurGb5K0KyBQGSFZt69LQqRqE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:06:56 2024 by rpki-client on console-ams.rpki-client.org