Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa
File:                     9d198439-f575-301d-9005-1871e3887572.roa (raw, json)
Hash identifier:          I0n7nC4U7GSwbGenG3PTbStLZ13xTgRdtmpVlM3DSPU=
Subject key identifier:   67:F1:17:F6:E4:1B:53:EC:42:88:48:2A:4F:3B:0C:77:1C:1F:24:C7
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F43285847521610C672BE485E2D1CF890
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa
Signing time:             Tue 24 Sep 2024 13:00:40 +0000
ROA not before:           Tue 24 Sep 2024 13:00:40 +0000
ROA not after:            Mon 23 Dec 2024 14:00:40 +0000
asID:                     63199
IP address blocks:        148.153.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:16:10:c6:72:be:48:5e:2d:1c:f8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Sep 24 13:00:40 2024 GMT
            Not After : Dec 23 14:00:40 2024 GMT
        Subject: CN=3310f9be-fc9b-407a-aa21-a45859dd98e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e5:c8:06:34:f5:7b:ac:78:2d:f7:d5:95:77:
                    09:31:57:d9:10:e6:8b:f0:6a:42:f6:ed:e1:31:bc:
                    56:c2:2f:10:66:88:fa:6b:c5:4f:92:b3:93:8e:9a:
                    2b:34:28:5f:ee:b1:58:92:3f:14:eb:d9:32:5a:8b:
                    ad:a3:45:4f:f2:44:ef:fa:40:d9:d1:7a:0c:18:36:
                    94:ea:ac:04:a1:d8:fb:67:d9:d5:58:12:ba:1b:f0:
                    04:f2:d5:7e:dc:71:6a:1e:cc:1c:99:91:be:68:6d:
                    fc:58:da:ee:3a:da:61:b1:d7:bc:57:67:5b:4d:2f:
                    0b:b9:69:e0:b2:64:9a:60:03:e3:a1:35:9b:d0:92:
                    96:90:2b:d2:15:91:de:e7:ba:2c:1a:63:3d:26:e2:
                    f1:51:93:b4:0c:44:fc:dd:d9:5e:2d:3e:74:1a:25:
                    cf:57:8c:66:d0:49:2d:86:15:4b:cf:d6:5a:5d:c0:
                    0e:d6:fd:55:a8:ef:75:fd:93:31:73:87:2a:ba:cd:
                    64:66:d6:c2:45:02:84:5f:df:5e:0a:8e:98:f8:70:
                    f6:92:8c:39:68:e7:c9:b2:4f:08:41:78:67:35:05:
                    b0:4a:ac:cd:df:93:ca:f9:a1:ed:63:79:6c:bf:06:
                    5d:23:04:f2:45:ba:9c:1a:64:99:d7:8c:f5:a3:42:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F1:17:F6:E4:1B:53:EC:42:88:48:2A:4F:3B:0C:77:1C:1F:24:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:36:bf:48:91:4e:54:8b:7f:25:7c:70:b6:ed:8d:9b:c7:
         e6:df:1b:0f:70:ef:26:bf:d7:de:d6:b6:7f:25:e3:b2:bf:b7:
         46:e3:94:53:13:d4:31:34:26:5c:a5:4d:f7:42:a6:b9:a2:87:
         63:00:02:81:e8:7c:4d:47:06:ca:02:df:19:6d:85:f9:2f:eb:
         62:e4:15:41:35:ac:9b:67:c2:f5:ac:60:c1:cd:c7:fe:87:95:
         7a:cb:3d:0d:36:3e:86:90:ec:b7:b2:20:79:d4:d9:5f:a6:c3:
         e2:5e:67:df:cd:4e:7d:f5:18:76:df:53:b4:17:d4:cd:41:fe:
         af:af:13:f6:60:c8:76:36:b0:65:b0:69:c1:b2:0f:14:55:0b:
         a9:eb:ac:d3:84:72:4a:a6:d9:fe:35:87:00:46:1f:8d:a4:81:
         ec:53:28:1d:8b:29:01:c6:f3:2a:2f:36:a0:fb:ef:52:3e:f6:
         58:ac:35:66:4e:a2:6e:d4:46:76:24:88:a2:f6:5e:65:c3:5f:
         96:26:c9:a3:ab:a3:b1:57:84:c2:42:64:fd:9f:36:10:ae:db:
         7d:11:dd:9c:b9:7c:63:b4:f4:2d:be:68:10:e6:b9:6f:e8:fe:
         44:30:65:d0:66:5f:ff:dc:b7:03:33:bf:7c:25:1f:6c:de:71:
         92:c4:8e:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSFhDGcr5IXi0c+JAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI0MDkyNDEzMDA0MFoXDTI0MTIyMzE0MDA0MFowLzEtMCsGA1UEAxMk
MzMxMGY5YmUtZmM5Yi00MDdhLWFhMjEtYTQ1ODU5ZGQ5OGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuXIBjT1e6x4LffVlXcJMVfZEOaL8GpC9u3h
MbxWwi8QZoj6a8VPkrOTjporNChf7rFYkj8U69kyWouto0VP8kTv+kDZ0XoMGDaU
6qwEodj7Z9nVWBK6G/AE8tV+3HFqHswcmZG+aG38WNruOtphsde8V2dbTS8LuWng
smSaYAPjoTWb0JKWkCvSFZHe57osGmM9JuLxUZO0DET83dleLT50GiXPV4xm0Ekt
hhVLz9ZaXcAO1v1VqO91/ZMxc4cqus1kZtbCRQKEX99eCo6Y+HD2kow5aOfJsk8I
QXhnNQWwSqzN35PK+aHtY3lsvwZdIwTyRbqcGmSZ14z1o0K6jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfxF/bkG1PsQohIKk87DHccHyTHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvOWQxOTg0MzktZjU3NS0z
MDFkLTkwMDUtMTg3MWUzODg3NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgeNr9IkU5Ui38lfHC27Y2bx+bfGw9w7ya/197Wtn8l47K/t0bjlFMT
1DE0JlylTfdCprmih2MAAoHofE1HBsoC3xlthfkv62LkFUE1rJtnwvWsYMHNx/6H
lXrLPQ02PoaQ7LeyIHnU2V+mw+JeZ9/NTn31GHbfU7QX1M1B/q+vE/ZgyHY2sGWw
acGyDxRVC6nrrNOEckqm2f41hwBGH42kgexTKB2LKQHG8yovNqD771I+9lisNWZO
om7URnYkiKL2XmXDX5YmyaOro7FXhMJCZP2fNhCu230R3Zy5fGO09C2+aBDmuW/o
/kQwZdBmX//ctwMzv3wlH2zecZLEjhw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org