Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
File:                     1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa (raw, json)
Hash identifier:          rjQ2PclvTmUoDJWUr827z3e/R0RMpIl8c4eDM+COPUo=
Subject key identifier:   83:ED:E0:5E:73:C7:D5:50:30:0A:C7:2D:BE:BD:29:E1:ED:D1:2F:CC
Certificate issuer:       /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Certificate serial:       010D0C9F432858478026591F10A8CA6E11A7FC80
Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     61317
IP address blocks:        192.48.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:59:1f:10:a8:ca:6e:11:a7:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=df535a36-a8a4-4a72-bcc6-620065bb661d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:a2:3a:ed:1f:2f:56:41:66:9a:d8:94:c8:
                    18:1f:26:9a:d9:55:bc:53:d6:15:47:ae:64:cf:eb:
                    32:17:ed:5b:d3:11:15:d2:77:cc:14:33:71:bb:cf:
                    aa:39:2c:32:bb:0c:12:9c:90:4c:61:7d:28:c9:cd:
                    48:21:5e:09:73:7c:1a:61:55:f9:04:1b:0b:41:d6:
                    d7:41:6a:6a:23:69:d0:f3:cc:c5:b1:2d:04:0f:17:
                    ce:40:81:be:34:a8:93:a3:8e:f2:82:e4:a3:00:c3:
                    d4:1e:da:76:1a:94:d0:fc:b8:84:0c:a6:d6:b3:7a:
                    db:8c:cd:14:4f:7c:78:8b:ba:29:86:ec:b0:97:53:
                    af:27:9c:53:b9:1c:ab:a4:f2:0f:81:e4:fc:bc:72:
                    91:73:22:88:98:cf:35:fa:03:93:bb:39:71:df:c1:
                    e9:1e:ae:c2:71:85:08:9a:6e:32:cf:a3:48:69:49:
                    59:a6:a7:21:3f:a9:aa:dc:84:cc:2b:57:79:49:3a:
                    26:cd:3c:af:51:3d:fe:38:d8:ca:cd:0a:ff:0d:04:
                    cb:6e:bd:52:9d:96:d7:b6:79:5e:91:7f:47:2d:ec:
                    53:4d:ab:c3:14:69:da:8f:ca:b1:be:4f:67:db:20:
                    1c:5e:e0:1d:fb:68:ab:46:c6:14:5a:75:05:27:a0:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:ED:E0:5E:73:C7:D5:50:30:0A:C7:2D:BE:BD:29:E1:ED:D1:2F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl

            X509v3 Authority Key Identifier:
                keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:34:1f:ec:d5:12:52:de:20:95:28:1a:b7:44:27:f4:f5:e6:
         c0:ae:b6:eb:ca:48:2c:7b:e5:21:ad:20:dd:20:82:38:1e:4a:
         d3:42:c8:84:c1:c9:de:39:66:cf:e6:83:af:c6:a0:61:9e:44:
         62:c0:b8:6f:f9:26:fa:b7:8b:64:80:51:1e:45:be:14:8d:16:
         ec:6c:09:b5:0b:75:a0:d0:58:66:3e:fd:95:3f:ff:f6:bf:80:
         2d:d9:d8:e0:84:b7:13:e2:df:d7:9d:44:db:0b:eb:e4:24:9c:
         04:28:cf:3f:4b:9e:1e:8d:ff:cd:76:d2:99:8a:02:f1:c8:20:
         9c:c0:96:06:1b:d8:55:9b:ae:85:30:c5:5f:88:25:96:b8:15:
         41:6c:b5:3d:38:ef:2f:35:10:21:48:66:3a:15:0d:ae:e7:05:
         af:58:c8:9e:4c:e3:7c:28:71:f5:4f:f0:c8:79:6c:92:ea:ec:
         46:6f:eb:d4:e2:d3:b2:9e:a0:48:fb:be:11:49:58:c4:15:a8:
         20:88:0d:96:79:b5:07:0e:88:8d:6f:e0:a8:9b:32:79:c2:fd:
         4c:ee:58:1c:54:c1:ac:25:65:ee:1c:4f:87:b7:02:b0:39:40:
         81:9c:21:9d:1b:88:0f:16:c2:10:89:4e:f5:29:a1:d1:18:42:
         80:cc:35:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJlkfEKjKbhGn/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMwOTQ5OGUtOGJlZS00ZGIzLWI0ZWYtNWZkNmYzNTc2
ZWIzMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZGY1MzVhMzYtYThhNC00YTcyLWJjYzYtNjIwMDY1YmI2NjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8KiOu0fL1ZBZprYlMgYHyaa2VW8U9YVR65k
z+syF+1b0xEV0nfMFDNxu8+qOSwyuwwSnJBMYX0oyc1IIV4Jc3waYVX5BBsLQdbX
QWpqI2nQ88zFsS0EDxfOQIG+NKiTo47yguSjAMPUHtp2GpTQ/LiEDKbWs3rbjM0U
T3x4i7ophuywl1OvJ5xTuRyrpPIPgeT8vHKRcyKImM81+gOTuzlx38HpHq7CcYUI
mm4yz6NIaUlZpqchP6mq3ITMK1d5STomzTyvUT3+ONjKzQr/DQTLbr1SnZbXtnle
kX9HLexTTavDFGnaj8qxvk9n2yAcXuAd+2irRsYUWnUFJ6AY7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIPt4F5zx9VQMArHLb69KeHt0S/MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5
NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1NzZlYjMvMWU1YTRhZGEtZGI1Yi0z
MWE0LTg0OTItNzIwZDVlNWM5MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTMwOTQ5OGUtOGJlZS00ZGIzLWI0
ZWYtNWZkNmYzNTc2ZWIzLzkzMDk0OThlLThiZWUtNGRiMy1iNGVmLTVmZDZmMzU3
NmViMy5jcmwwHwYDVR0jBBgwFoAUF6EsL9Pj6jvnn/04Ze/5NaXYYakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2
ZjM1NzZlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEg0H+zVElLeIJUoGrdEJ/T15sCutuvKSCx75SGtIN0ggjgeStNCyITB
yd45Zs/mg6/GoGGeRGLAuG/5Jvq3i2SAUR5FvhSNFuxsCbULdaDQWGY+/ZU///a/
gC3Z2OCEtxPi39edRNsL6+QknAQozz9Lnh6N/8120pmKAvHIIJzAlgYb2FWbroUw
xV+IJZa4FUFstT047y81ECFIZjoVDa7nBa9YyJ5M43wocfVP8Mh5bJLq7EZv69Ti
07KeoEj7vhFJWMQVqCCIDZZ5tQcOiI1v4KibMnnC/UzuWBxUwawlZe4cT4e3ArA5
QIGcIZ0biA8WwhCJTvUpodEYQoDMNQA=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:20 2024 by rpki-client on console-ams.rpki-client.org