Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa
File:                     7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa (raw, json)
Hash identifier:          i0Gc9y05kApJg/TeWBx2d561it62Bt44BIl3OHqzNWA=
Subject key identifier:   F6:86:0B:29:84:FC:CE:EB:96:7B:CF:D4:87:B8:22:D8:1F:57:E3:97
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F432858471E705FAB5A5E07DCBE199F40
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     137443
IP address blocks:        192.185.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:5f:ab:5a:5e:07:dc:be:19:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=e2bc74b0-0024-4347-94ff-0f5695c56b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:67:55:70:93:72:62:d1:56:fe:ed:32:02:
                    b9:c3:1d:69:5b:d9:03:80:3e:72:d1:0b:ee:0b:a9:
                    be:d0:14:6c:1f:0d:b2:c5:53:b5:fa:65:9a:13:d0:
                    ad:f9:67:9a:6e:f5:1a:19:a6:a4:8f:82:a5:ef:0d:
                    b6:18:f9:b0:89:d5:d6:2b:f8:57:98:f0:fd:b9:25:
                    33:29:69:82:3c:40:9a:15:55:65:d2:a9:45:38:5b:
                    21:89:a7:12:5b:92:f0:4b:1e:d8:c2:a1:8d:f5:df:
                    d4:6f:60:59:dd:52:b1:1f:05:b4:28:2e:3b:bc:90:
                    f6:40:1f:53:27:3b:b1:8c:db:43:19:a1:ca:16:cf:
                    f4:29:dc:25:83:70:ed:14:41:e2:2f:4a:2b:a8:b8:
                    25:96:10:bf:84:57:bb:1a:b5:3c:03:3f:a6:42:14:
                    80:20:67:5e:7e:b8:6f:21:2f:92:eb:d2:a5:4b:cd:
                    89:3d:59:40:09:ac:b0:9d:3e:7a:95:fb:26:91:30:
                    9d:12:39:d2:ce:3c:28:fd:1b:0e:31:ed:cc:d6:f9:
                    6b:42:a5:2a:ef:de:02:5e:de:f2:9c:64:8f:9b:0c:
                    cd:fb:94:49:a4:97:49:f8:b7:35:f7:bb:3a:95:e9:
                    62:83:91:9d:6b:8d:3e:08:bf:63:f3:4f:37:78:31:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:0B:29:84:FC:CE:EB:96:7B:CF:D4:87:B8:22:D8:1F:57:E3:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:05:7c:0a:f9:e4:5e:97:ce:2f:c4:d0:bf:33:bb:f2:ed:2a:
         af:28:69:76:c1:8b:b6:2a:fc:d4:51:22:94:e1:39:80:f3:23:
         fc:36:5c:29:28:fc:fa:0b:44:e6:4c:c9:57:19:73:b6:33:80:
         ed:bb:99:8a:96:4d:fd:eb:78:07:c9:a1:02:ac:8b:b3:5b:dd:
         e2:be:a1:23:66:b6:c9:89:ab:1b:7d:82:9d:3c:bf:cc:08:9d:
         d4:bd:ed:75:94:32:f9:7e:0e:6c:ec:1d:18:59:7f:44:00:2e:
         1b:7a:5b:25:79:a1:53:74:f7:43:6c:f8:78:61:e8:4c:15:2a:
         b1:d7:6a:ca:35:65:88:a2:c6:ff:01:42:71:a2:48:1f:1a:f9:
         85:13:7d:c4:d4:70:2b:61:66:f4:d0:70:50:ec:39:b1:88:e4:
         26:6c:4e:77:68:f1:25:d4:f1:c6:db:57:56:48:24:41:7c:6d:
         7d:5d:49:6c:19:73:5c:bb:ef:3c:d5:e9:a0:7b:15:03:0d:20:
         47:24:f3:8c:22:7b:35:40:a5:04:fa:87:2b:c8:73:34:b0:71:
         74:cd:48:d3:64:a3:6c:91:1f:2a:e2:51:f4:b4:d8:34:13:13:
         e3:0f:48:5f:df:b9:9e:2c:73:77:e1:45:33:a5:b4:04:dd:80:
         12:02:ea:01
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcecF+rWl4H3L4Zn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
ZTJiYzc0YjAtMDAyNC00MzQ3LTk0ZmYtMGY1Njk1YzU2YjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0pnVXCTcmLRVv7tMgK5wx1pW9kDgD5y0Qvu
C6m+0BRsHw2yxVO1+mWaE9Ct+WeabvUaGaakj4Kl7w22GPmwidXWK/hXmPD9uSUz
KWmCPECaFVVl0qlFOFshiacSW5LwSx7YwqGN9d/Ub2BZ3VKxHwW0KC47vJD2QB9T
JzuxjNtDGaHKFs/0Kdwlg3DtFEHiL0orqLgllhC/hFe7GrU8Az+mQhSAIGdefrhv
IS+S69KlS82JPVlACaywnT56lfsmkTCdEjnSzjwo/RsOMe3M1vlrQqUq794CXt7y
nGSPmwzN+5RJpJdJ+Lc197s6lelig5Gda40+CL9j8083eDG+MwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPaGCymE/M7rlnvP1Ie4ItgfV+OXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvN2Y0NzI2MGQtNTc0OS0z
ZDM2LThlOGEtZDZjMGE5ZTIwMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAwLkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALgV8CvnkXpfOL8TQvzO78u0qryhpdsGLtir81FEilOE5gPMj/DZcKSj8
+gtE5kzJVxlztjOA7buZipZN/et4B8mhAqyLs1vd4r6hI2a2yYmrG32CnTy/zAid
1L3tdZQy+X4ObOwdGFl/RAAuG3pbJXmhU3T3Q2z4eGHoTBUqsddqyjVliKLG/wFC
caJIHxr5hRN9xNRwK2Fm9NBwUOw5sYjkJmxOd2jxJdTxxttXVkgkQXxtfV1JbBlz
XLvvPNXpoHsVAw0gRyTzjCJ7NUClBPqHK8hzNLBxdM1I02SjbJEfKuJR9LTYNBMT
4w9IX9+5nixzd+FFM6W0BN2AEgLqAQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org