Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa
File:                     b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa (raw, json)
Hash identifier:          zLTZ4JcrpNF3DioUgz2DwJdjzLPk/8vZ1PHcc5ja3HU=
Subject key identifier:   B9:E2:A0:EB:91:B9:FC:C7:95:4E:A6:85:B9:76:6A:A5:81:C7:1B:A1
Certificate issuer:       /CN=28168b94-cad8-4dae-a00d-057ac35417a3
Certificate serial:       010D0C9F43285847A8A14F98458AABA2D017A580
Authority key identifier: 16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa
Signing time:             Fri 25 Oct 2024 13:00:42 +0000
ROA not before:           Fri 25 Oct 2024 13:00:42 +0000
ROA not after:            Thu 23 Jan 2025 14:00:42 +0000
asID:                     46180
IP address blocks:        158.51.164.0/22 maxlen: 24
                          198.254.28.0/22 maxlen: 24
                          199.68.220.0/22 maxlen: 24
                          208.92.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:a1:4f:98:45:8a:ab:a2:d0:17:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28168b94-cad8-4dae-a00d-057ac35417a3
        Validity
            Not Before: Oct 25 13:00:42 2024 GMT
            Not After : Jan 23 14:00:42 2025 GMT
        Subject: CN=444d18d9-13ef-4d45-a749-4620b4a559ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:19:bc:56:bf:e1:ad:61:07:04:47:3d:be:
                    ce:de:61:04:cc:1c:b9:38:ae:95:73:4c:fe:12:6d:
                    cc:99:92:80:68:1c:88:d2:1a:db:ef:c2:62:20:f7:
                    d5:c6:c2:f7:f9:4d:1b:73:58:a1:26:4a:0c:73:fc:
                    05:86:b4:a0:fe:59:84:56:72:6e:d1:49:38:32:75:
                    01:10:93:e8:46:c2:e1:5a:d5:1c:0b:f4:d1:b9:a7:
                    17:18:2b:24:70:b0:d1:ca:61:a7:c8:83:3b:89:ea:
                    4c:a4:ef:92:34:38:e3:8c:92:d0:e2:1e:dc:aa:90:
                    94:9d:52:3f:6f:44:35:ac:a1:a6:20:20:8d:04:35:
                    11:c1:89:c4:5e:18:33:ab:6c:21:f6:cf:7e:2c:09:
                    9f:ea:c7:fa:5e:24:e8:0f:90:77:8b:64:4d:46:06:
                    f2:7e:62:c6:5d:c5:41:0d:93:4f:f0:b9:d2:67:f8:
                    e8:ce:b2:3a:1a:d1:de:33:f4:94:cf:d1:46:2c:d8:
                    be:25:98:0e:f3:67:22:3b:dd:a9:b5:1d:f7:5a:65:
                    fa:65:c0:58:7a:60:d6:f5:ee:b7:3e:05:d2:71:73:
                    74:3b:90:64:9e:b0:1c:d7:43:4d:e1:af:d2:c0:5e:
                    8c:1f:f0:50:33:79:20:7b:71:63:a2:60:47:45:10:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E2:A0:EB:91:B9:FC:C7:95:4E:A6:85:B9:76:6A:A5:81:C7:1B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl

            X509v3 Authority Key Identifier:
                keyid:16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.164.0/22
                  198.254.28.0/22
                  199.68.220.0/22
                  208.92.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:89:a3:1a:d1:84:b4:f2:a2:6d:57:67:66:7d:5a:38:7e:d5:
         be:91:50:62:d2:61:4d:ba:fd:dd:14:69:7b:10:ba:d8:e9:71:
         c9:ec:57:ae:c3:7a:b6:20:9e:fa:b1:08:2c:da:55:b4:b5:49:
         13:48:ad:59:da:ed:86:37:6b:1f:e3:2d:8f:8b:f2:0f:12:73:
         05:47:11:de:04:d6:0f:83:c8:72:c6:70:27:a4:a9:bb:6c:ec:
         74:b9:63:f4:49:f6:7a:fe:99:de:da:cd:0c:1b:00:99:77:95:
         15:5f:0b:b3:f9:ab:e5:49:35:84:19:d9:36:04:c1:08:8d:e7:
         bf:33:44:98:04:e2:42:55:ae:83:a4:61:38:5b:78:a4:cc:75:
         a5:c6:a8:54:36:c3:53:38:04:bb:96:95:a1:31:ae:17:dd:ac:
         0a:f6:e9:1a:99:1e:39:53:f7:2f:43:be:d3:c4:70:24:60:c2:
         f6:f2:11:0f:61:56:5d:fd:00:ff:71:94:1e:0a:95:47:1c:5c:
         15:1c:93:5c:d2:1c:bb:90:44:36:0d:bf:f9:c7:ce:42:53:0f:
         6a:89:2f:1c:7b:fd:11:01:76:44:7a:73:40:e0:18:1b:eb:da:
         74:3e:34:9a:f1:6b:4e:ad:cd:c3:19:a3:57:2d:6d:79:e4:56:
         68:2c:80:c4
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEeooU+YRYqrotAXpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxNjhiOTQtY2FkOC00ZGFlLWEwMGQtMDU3YWMzNTQx
N2EzMB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk
NDQ0ZDE4ZDktMTNlZi00ZDQ1LWE3NDktNDYyMGI0YTU1OWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn90ZvFa/4a1hBwRHPb7O3mEEzBy5OK6Vc0z+
Em3MmZKAaByI0hrb78JiIPfVxsL3+U0bc1ihJkoMc/wFhrSg/lmEVnJu0Uk4MnUB
EJPoRsLhWtUcC/TRuacXGCskcLDRymGnyIM7iepMpO+SNDjjjJLQ4h7cqpCUnVI/
b0Q1rKGmICCNBDURwYnEXhgzq2wh9s9+LAmf6sf6XiToD5B3i2RNRgbyfmLGXcVB
DZNP8LnSZ/jozrI6GtHeM/SUz9FGLNi+JZgO82ciO92ptR33WmX6ZcBYemDW9e63
PgXScXN0O5BknrAc10NN4a/SwF6MH/BQM3kge3FjomBHRRDe2QIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFLnioOuRufzHlU6mhbl2aqWBxxuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODE2
OGI5NC1jYWQ4LTRkYWUtYTAwZC0wNTdhYzM1NDE3YTMvYjZiMDhhMWQtYzQxYi0z
MDMyLWFjMzEtZTgzZWFkYjdiNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjgxNjhiOTQtY2FkOC00ZGFlLWEw
MGQtMDU3YWMzNTQxN2EzLzI4MTY4Yjk0LWNhZDgtNGRhZS1hMDBkLTA1N2FjMzU0
MTdhMy5jcmwwHwYDVR0jBBgwFoAUFh2BYtQZNgHN9Q6vk+u3mHq99YkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODE2OGI5NC1jYWQ4LTRkYWUtYTAwZC0wNTdh
YzM1NDE3YTMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCnjOkAwQC
xv4cAwQCx0TcAwQD0FyoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACCJoxrRhLTyom1XZ2Z9Wjh+1b6RUGLS
YU26/d0UaXsQutjpccnsV67DerYgnvqxCCzaVbS1SRNIrVna7YY3ax/jLY+L8g8S
cwVHEd4E1g+DyHLGcCekqbts7HS5Y/RJ9nr+md7azQwbAJl3lRVfC7P5q+VJNYQZ
2TYEwQiN578zRJgE4kJVroOkYThbeKTMdaXGqFQ2w1M4BLuWlaExrhfdrAr26RqZ
HjlT9y9DvtPEcCRgwvbyEQ9hVl39AP9xlB4KlUccXBUck1zSHLuQRDYNv/nHzkJT
D2qJLxx7/REBdkR6c0DgGBvr2nQ+NJrxa06tzcMZo1ctbXnkVmgsgMQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org