Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/31a88443-36ee-3c34-8fee-e6c4d8090991.roa
File:                     31a88443-36ee-3c34-8fee-e6c4d8090991.roa (raw, json)
Hash identifier:          7SrHAnD5WVzh8fGQuoXVjWKWnCyi9Iz5Hny3gNajp+g=
Subject key identifier:   EA:7F:96:07:5D:46:C3:86:92:3A:AD:CD:1D:6D:5D:64:97:0E:2E:57
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F43285847B1015F9DEA60A2E66B42B160
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/31a88443-36ee-3c34-8fee-e6c4d8090991.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397666
IP address blocks:        162.220.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5f:9d:ea:60:a2:e6:6b:42:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=cea32133-bee5-4b06-8c31-5c397db73f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:01:81:43:9f:21:1f:b2:36:6d:02:a8:6d:
                    1d:c2:11:44:a5:5f:41:a3:3b:0c:0c:8f:1b:bb:ce:
                    81:e1:05:68:09:1e:14:ef:12:4f:5a:70:7d:a5:dc:
                    36:5d:e6:2b:ba:d7:60:fe:22:af:b4:16:2d:7a:05:
                    9b:b1:a1:4b:de:60:14:5e:69:c4:64:47:8b:b0:20:
                    5f:1b:0c:79:41:cd:1b:84:32:0b:a2:15:d3:90:ac:
                    53:fe:3a:1d:08:97:ba:0c:56:b9:08:70:58:32:9c:
                    34:fd:94:79:03:1a:46:c6:1f:09:54:28:65:f2:b2:
                    6c:33:4b:33:4a:de:3e:ce:ee:c0:a3:13:a3:99:4d:
                    14:6d:1b:1c:39:4d:aa:bf:0a:a1:0d:c5:40:ad:9b:
                    49:fe:84:a3:34:ab:41:a9:01:5d:ed:a2:ba:21:a1:
                    c3:18:2d:67:72:0d:a9:20:c0:cc:2f:c7:1c:cd:b6:
                    68:2c:24:2f:e2:de:b7:80:1f:ef:f3:cd:fd:38:5a:
                    c7:3d:88:a3:72:a4:9d:6a:b7:92:f8:d2:d2:a4:87:
                    8c:92:f8:e5:9b:19:68:91:21:57:fd:51:57:9a:84:
                    7f:8d:0b:cd:46:01:e4:88:0a:63:35:a7:7a:96:d9:
                    f3:41:5c:67:fa:5b:be:25:58:01:19:ca:de:61:6e:
                    0c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:96:07:5D:46:C3:86:92:3A:AD:CD:1D:6D:5D:64:97:0E:2E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/31a88443-36ee-3c34-8fee-e6c4d8090991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:53:18:7f:82:ee:cd:64:15:dd:93:25:75:8c:ef:c1:83:03:
         68:5a:01:0e:30:1c:0f:7d:7e:46:da:7b:fa:1e:f8:88:fd:a2:
         a1:60:56:7c:73:ff:3b:e2:82:19:dd:f7:d8:50:3a:6d:ac:f6:
         b8:f2:10:ef:d9:2a:1b:15:a2:fe:f7:50:93:ca:b6:09:9c:c6:
         f6:67:91:ae:c7:3c:fd:b0:cf:14:78:40:14:17:59:de:c8:49:
         39:05:2c:9f:50:dc:4c:98:d7:b6:f5:2b:e5:e3:32:54:db:2f:
         31:9c:19:c1:d6:80:84:ff:77:83:b6:d1:59:97:3f:e3:7f:e2:
         1b:61:96:9b:27:b1:3a:a7:c9:cd:ef:87:ce:d2:e0:42:b2:08:
         9b:f3:3c:2e:aa:ea:42:c5:7a:5c:ac:46:f3:62:a1:97:c5:55:
         eb:b3:01:ff:ab:ea:39:8d:d8:de:a3:ad:cf:59:1b:61:bd:c7:
         aa:86:b3:cd:12:68:42:1e:c3:5f:d3:9f:45:25:0e:6c:4d:60:
         78:d4:7c:96:b8:33:bd:de:20:83:7c:bd:93:3e:02:5a:7b:35:
         7d:6e:b9:f3:fc:5f:17:51:e1:a7:8a:4a:7c:9b:7a:91:31:d9:
         14:dd:f0:c7:31:46:e6:a4:98:4a:77:d5:4f:db:36:9f:75:41:
         99:82:4c:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAV+d6mCi5mtCsWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4
M2RmMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk
Y2VhMzIxMzMtYmVlNS00YjA2LThjMzEtNWMzOTdkYjczZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncUBgUOfIR+yNm0CqG0dwhFEpV9BozsMDI8b
u86B4QVoCR4U7xJPWnB9pdw2XeYrutdg/iKvtBYtegWbsaFL3mAUXmnEZEeLsCBf
Gwx5Qc0bhDILohXTkKxT/jodCJe6DFa5CHBYMpw0/ZR5AxpGxh8JVChl8rJsM0sz
St4+zu7AoxOjmU0UbRscOU2qvwqhDcVArZtJ/oSjNKtBqQFd7aK6IaHDGC1ncg2p
IMDML8cczbZoLCQv4t63gB/v8839OFrHPYijcqSdareS+NLSpIeMkvjlmxlokSFX
/VFXmoR/jQvNRgHkiApjNad6ltnzQVxn+lu+JVgBGcreYW4M9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOp/lgddRsOGkjqtzR1tXWSXDi5XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5
OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvMzFhODg0NDMtMzZlZS0z
YzM0LThmZWUtZTZjNGQ4MDkwOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi
NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw
ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj
YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotwaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBTGH+C7s1kFd2TJXWM78GDA2haAQ4wHA99fkbae/oe+Ij9oqFgVnxz
/zvighnd99hQOm2s9rjyEO/ZKhsVov73UJPKtgmcxvZnka7HPP2wzxR4QBQXWd7I
STkFLJ9Q3EyY17b1K+XjMlTbLzGcGcHWgIT/d4O20VmXP+N/4hthlpsnsTqnyc3v
h87S4EKyCJvzPC6q6kLFelysRvNioZfFVeuzAf+r6jmN2N6jrc9ZG2G9x6qGs80S
aEIew1/Tn0UlDmxNYHjUfJa4M73eIIN8vZM+Alp7NX1uufP8XxdR4aeKSnybepEx
2RTd8McxRuakmEp31U/bNp91QZmCTAU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:58 2024 by rpki-client on console-ams.rpki-client.org