Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa
File:                     b343567e-a49e-3300-8a5b-72a22b6d70aa.roa (raw, json)
Hash identifier:          PFyNdAU2qQxGoxHWCotxGssHnQhjRCE8UqHYaEGj/Lo=
Subject key identifier:   E2:CF:59:43:F5:D2:87:25:75:BC:C1:27:56:E9:0C:3F:CF:61:5A:8D
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F43285846EACAD5DC9655F1878A277900
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa
Signing time:             Sun 18 Aug 2024 13:00:40 +0000
ROA not before:           Sun 18 Aug 2024 13:00:40 +0000
ROA not after:            Sat 16 Nov 2024 14:00:40 +0000
asID:                     1239
IP address blocks:        172.84.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ea:ca:d5:dc:96:55:f1:87:8a:27:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Aug 18 13:00:40 2024 GMT
            Not After : Nov 16 14:00:40 2024 GMT
        Subject: CN=c7fc5596-24dc-41a5-930d-ce09ea2407ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:aa:de:a4:93:55:08:c4:5d:43:db:ab:4a:
                    e5:4f:50:77:46:50:77:50:58:68:00:fc:82:16:72:
                    7b:30:38:cc:e3:4a:4d:e6:c8:23:d6:99:c1:0f:6d:
                    ff:65:4a:dc:9d:b6:c9:9a:90:c4:aa:3c:e5:17:f1:
                    c2:04:5f:72:93:39:3c:19:de:97:65:e5:9b:6c:2c:
                    1c:f8:9a:2e:30:c8:19:ec:a6:9b:b5:4a:92:51:c9:
                    ee:e6:72:e8:e7:c6:d5:57:b9:12:fe:96:df:b4:c6:
                    1d:c3:bd:6e:72:55:cd:7a:c1:8f:26:2e:7d:3d:aa:
                    10:79:0d:3f:a2:51:e1:be:a8:58:c9:dd:ba:36:02:
                    6e:56:b1:66:a0:d1:01:f4:94:2b:ad:33:dc:d8:a6:
                    95:47:84:4c:43:e6:8f:f6:f4:fe:ad:f3:44:d8:2e:
                    e5:51:8e:c8:de:7b:a6:a9:96:32:03:23:e6:6e:ed:
                    c4:6b:b6:ba:f6:4f:ab:18:24:f1:00:1d:b2:07:f2:
                    cd:1c:5a:93:e9:ea:29:ce:6f:03:d4:19:9e:59:4d:
                    e5:95:d1:83:8f:6d:4f:74:2e:60:0c:49:e4:a2:88:
                    40:9e:6b:ee:6c:de:18:9a:bb:bd:9a:1c:3f:18:5b:
                    37:9b:cd:08:9a:d8:3c:ff:80:4a:4f:f5:e7:61:77:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CF:59:43:F5:D2:87:25:75:BC:C1:27:56:E9:0C:3F:CF:61:5A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5f:fe:27:a2:1f:86:36:77:d4:a0:2f:bd:e6:cd:ef:d1:ee:
         8a:c5:02:66:02:1e:11:28:08:14:b3:cb:a9:16:65:dc:db:8a:
         56:22:c2:87:71:6a:a3:68:bb:c8:31:a6:b5:f3:0f:bc:bd:89:
         5e:f7:7d:a0:89:db:2b:ce:72:cd:c2:8e:7b:e2:4a:c0:40:9f:
         70:d2:5d:91:14:fa:29:42:b8:a6:07:ee:5b:54:59:92:eb:b9:
         1e:b2:82:a2:ca:49:4e:8b:8f:51:c3:c5:dd:c1:9e:f3:16:74:
         3d:5c:7e:59:44:7b:24:e8:72:2a:09:2b:22:e8:cb:bc:b4:e4:
         73:b7:32:2f:7c:32:70:00:a7:b4:7e:c4:ab:1e:b0:ab:12:dd:
         02:2f:e5:e2:62:7e:c4:ca:94:1e:2d:0f:10:0f:bd:26:73:04:
         06:1f:24:70:9c:aa:6f:35:6f:a8:af:66:7e:3a:a0:fc:70:e0:
         ce:7d:4d:0d:da:08:48:97:8e:9b:73:7e:83:85:39:b0:58:bf:
         70:2e:17:34:f8:62:a3:64:9f:7d:f3:c0:ff:f6:4a:1d:c2:aa:
         e9:fb:1c:36:37:6e:ff:b5:9c:e0:65:c2:51:d5:0c:05:1f:72:
         a6:16:29:81:e6:da:f0:c0:d9:5b:66:25:23:11:1d:0b:6e:b3:
         d9:9f:c9:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbqytXcllXxh4oneQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw
ZDcwMB4XDTI0MDgxODEzMDA0MFoXDTI0MTExNjE0MDA0MFowLzEtMCsGA1UEAxMk
YzdmYzU1OTYtMjRkYy00MWE1LTkzMGQtY2UwOWVhMjQwN2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwGq3qSTVQjEXUPbq0rlT1B3RlB3UFhoAPyC
FnJ7MDjM40pN5sgj1pnBD23/ZUrcnbbJmpDEqjzlF/HCBF9ykzk8Gd6XZeWbbCwc
+JouMMgZ7KabtUqSUcnu5nLo58bVV7kS/pbftMYdw71uclXNesGPJi59PaoQeQ0/
olHhvqhYyd26NgJuVrFmoNEB9JQrrTPc2KaVR4RMQ+aP9vT+rfNE2C7lUY7I3num
qZYyAyPmbu3Ea7a69k+rGCTxAB2yB/LNHFqT6eopzm8D1BmeWU3lldGDj21PdC5g
DEnkoohAnmvubN4Ymru9mhw/GFs3m80Imtg8/4BKT/XnYXes1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLPWUP10ocldbzBJ1bpDD/PYVqNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0
OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYjM0MzU2N2UtYTQ5ZS0z
MzAwLThhNWItNzJhMjJiNmQ3MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl
MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1
MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk
YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFS9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNf/ieiH4Y2d9SgL73mze/R7orFAmYCHhEoCBSzy6kWZdzbilYiwodx
aqNou8gxprXzD7y9iV73faCJ2yvOcs3CjnviSsBAn3DSXZEU+ilCuKYH7ltUWZLr
uR6ygqLKSU6Lj1HDxd3BnvMWdD1cfllEeyTocioJKyLoy7y05HO3Mi98MnAAp7R+
xKsesKsS3QIv5eJifsTKlB4tDxAPvSZzBAYfJHCcqm81b6ivZn46oPxw4M59TQ3a
CEiXjptzfoOFObBYv3AuFzT4YqNkn33zwP/2Sh3Cqun7HDY3bv+1nOBlwlHVDAUf
cqYWKYHm2vDA2VtmJSMRHQtus9mfyT8=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:14:01 2024 by rpki-client on console-fra.rpki-client.org