Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa
File:                     b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa (raw, json)
Hash identifier:          kLpOP3AuikVC36LVhKfle9GxGQkVZRNzawfIISfUfRI=
Subject key identifier:   9B:9C:F6:FE:45:05:6B:20:C0:75:0A:44:A8:91:EF:FC:CF:B8:D8:A2
Certificate issuer:       /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial:       010D0C9F43285847AF9BE9BD3759DBD260E4DD00
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     35860
IP address blocks:        63.133.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:e9:bd:37:59:db:d2:60:e4:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=f466c2b1-6e81-405e-b706-7a5126af23bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c7:09:19:cb:76:50:89:bb:fb:95:20:8a:9d:
                    cd:d3:56:b0:9a:f7:75:ba:92:00:0d:27:5f:12:2a:
                    55:2c:c8:a5:83:48:99:d1:25:93:4b:32:90:db:ef:
                    e3:a5:6e:51:c9:df:b4:3d:8c:cb:f6:22:2f:9e:eb:
                    1d:77:cf:cf:bd:54:17:60:c8:2a:42:f0:ca:cb:a1:
                    b6:22:d3:44:46:14:b0:18:3b:d9:80:4a:10:86:fd:
                    d5:1b:fa:54:f8:d3:2e:b2:f8:17:3d:7c:ad:e1:2a:
                    36:b8:dd:13:e9:76:31:f6:f6:63:d3:79:b4:95:6f:
                    21:f7:dc:83:f2:5f:60:24:66:71:0e:ae:3d:70:c6:
                    7a:84:7b:9a:61:b4:8d:52:96:b7:c1:b1:a0:a6:8c:
                    41:9d:3f:9e:97:60:6c:ca:ef:5c:dc:57:a4:30:9e:
                    a8:d8:2d:1a:7a:9e:4f:ab:57:b1:05:6f:4a:0b:38:
                    2c:2c:75:81:74:ba:e2:cf:25:77:12:7a:b3:bb:80:
                    0a:86:34:b0:5e:a3:3d:4e:d1:67:b5:e1:14:2e:09:
                    50:ff:c0:8f:0e:ae:de:70:13:f5:fc:d0:3d:7a:c1:
                    cf:85:79:f1:92:6c:6b:79:89:6f:fa:71:fc:d2:bc:
                    25:a4:70:86:4a:39:dd:bb:08:78:7d:2e:59:fb:e9:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9C:F6:FE:45:05:6B:20:C0:75:0A:44:A8:91:EF:FC:CF:B8:D8:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:81:56:d2:5d:81:9f:a0:fb:3d:a0:28:ad:f1:42:49:e1:22:
         44:bb:96:5a:9c:20:7f:51:da:4a:ca:f1:3c:06:f5:29:4c:98:
         d9:57:33:f6:d1:dc:2f:1f:b6:fe:16:bf:3d:e6:1d:7f:a8:4e:
         be:a1:2e:d1:54:3d:13:d5:18:14:3d:c9:50:5d:50:d8:f3:1c:
         92:f9:5c:4e:6e:26:5c:04:c9:58:07:85:82:a7:86:49:61:97:
         dc:da:ed:5f:c3:91:3f:df:5d:f2:7e:e8:0c:db:c4:f7:c5:53:
         d8:16:e9:8d:e9:0c:6e:98:79:0c:e5:86:d4:96:2c:36:68:29:
         ad:f3:37:8d:5d:9d:cd:24:b2:01:70:f5:25:a9:7a:59:67:ef:
         12:2a:95:eb:2b:76:4b:f0:f4:64:8d:5b:c5:97:49:fd:79:e7:
         48:f3:4a:35:51:45:03:18:49:84:f8:aa:e2:39:fe:53:84:36:
         01:f4:de:07:d2:f5:27:55:96:ca:e6:ed:36:3c:4d:75:a2:24:
         a8:44:69:98:7f:63:76:7a:a0:29:b8:ce:6c:b5:3b:24:d8:aa:
         1f:dc:28:07:33:85:2d:ef:f3:e6:f3:2f:bf:3a:3e:f0:23:f0:
         9a:42:70:d5:3f:8f:9f:53:97:88:94:a1:99:cd:71:71:02:c9:
         9d:7f:cd:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEevm+m9N1nb0mDk3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2
ZDA5MB4XDTI0MTAyODAxMDAzMloXDTI1MDEyNjAyMDAzMlowLzEtMCsGA1UEAxMk
ZjQ2NmMyYjEtNmU4MS00MDVlLWI3MDYtN2E1MTI2YWYyM2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8cJGct2UIm7+5Ugip3N01awmvd1upIADSdf
EipVLMilg0iZ0SWTSzKQ2+/jpW5Ryd+0PYzL9iIvnusdd8/PvVQXYMgqQvDKy6G2
ItNERhSwGDvZgEoQhv3VG/pU+NMusvgXPXyt4So2uN0T6XYx9vZj03m0lW8h99yD
8l9gJGZxDq49cMZ6hHuaYbSNUpa3wbGgpoxBnT+el2Bsyu9c3FekMJ6o2C0aep5P
q1exBW9KCzgsLHWBdLrizyV3Enqzu4AKhjSwXqM9TtFnteEULglQ/8CPDq7ecBP1
/NA9esHPhXnxkmxreYlv+nH80rwlpHCGSjnduwh4fS5Z++kxZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJuc9v5FBWsgwHUKRKiR7/zPuNiiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy
MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvYjgyODQyOTMtYmMxNC0z
NmYzLWEzYmQtZjVlMTcyZjkxZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky
ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj
NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl
MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqBVtJdgZ+g+z2gKK3xQknhIkS7llqcIH9R2krK8TwG9SlMmNlXM/bR
3C8ftv4Wvz3mHX+oTr6hLtFUPRPVGBQ9yVBdUNjzHJL5XE5uJlwEyVgHhYKnhklh
l9za7V/DkT/fXfJ+6AzbxPfFU9gW6Y3pDG6YeQzlhtSWLDZoKa3zN41dnc0ksgFw
9SWpelln7xIqlesrdkvw9GSNW8WXSf1550jzSjVRRQMYSYT4quI5/lOENgH03gfS
9SdVlsrm7TY8TXWiJKhEaZh/Y3Z6oCm4zmy1OyTYqh/cKAczhS3v8+bzL786PvAj
8JpCcNU/j59Tl4iUoZnNcXECyZ1/zas=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:33 2024 by rpki-client on console-fra.rpki-client.org