Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa
File:                     ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa (raw, json)
Hash identifier:          /jPM5Ve1u9gsytoyC773jyIYU7dBa1BfVgqCksJhsQ0=
Subject key identifier:   1A:4B:64:C0:F5:55:57:C3:C2:6B:A6:13:64:3D:3D:D2:19:9D:2B:FA
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F43285847DAFF5C618927E507D7EF0C20
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa
Signing time:             Tue 12 Nov 2024 14:00:40 +0000
ROA not before:           Tue 12 Nov 2024 14:00:40 +0000
ROA not after:            Mon 10 Feb 2025 14:00:40 +0000
asID:                     399509
IP address blocks:        199.96.86.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:da:ff:5c:61:89:27:e5:07:d7:ef:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Nov 12 14:00:40 2024 GMT
            Not After : Feb 10 14:00:40 2025 GMT
        Subject: CN=32087d0d-e538-4569-90c0-14af042c5717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:3d:67:0b:90:6a:b0:94:67:fc:98:8d:96:
                    27:e9:76:e3:85:05:e7:65:62:0b:12:a1:70:77:55:
                    fd:2b:70:09:e6:1b:b4:24:3e:53:cd:e6:a9:56:64:
                    71:d7:f8:78:de:4b:f1:5f:1a:d4:4c:87:96:fd:4a:
                    eb:f8:d6:df:53:b6:f2:83:6c:ed:2b:e2:5c:57:40:
                    f3:0a:13:fe:81:97:cd:0e:52:5c:84:14:81:b4:4e:
                    1b:53:3f:d5:a4:e2:3d:68:39:55:48:f3:f6:5f:58:
                    a9:da:11:d5:cb:e5:86:e4:f6:16:8f:f4:5d:45:a7:
                    e9:45:c3:cc:6d:8c:fe:1b:1d:79:55:cb:6b:ae:0e:
                    61:1a:4d:d7:99:f7:5b:09:a0:8e:38:4c:d0:c9:1c:
                    ad:71:01:7a:90:36:2a:3c:91:3d:83:c7:29:d6:1c:
                    44:1b:c1:3f:3f:48:a3:39:c4:38:2d:91:74:dd:96:
                    32:e2:b3:b5:dc:2d:b4:85:f2:c5:6d:01:bf:b7:c6:
                    6d:a2:33:b2:29:c1:a0:f9:b4:85:8c:71:af:32:2e:
                    d7:3a:95:70:6b:d4:f6:1c:cf:d3:4d:a0:dd:db:3a:
                    2a:d4:90:5e:a2:61:7c:85:fd:ea:bd:af:64:81:44:
                    eb:9d:42:2a:7c:bb:5e:82:72:b5:84:3b:15:1e:1f:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4B:64:C0:F5:55:57:C3:C2:6B:A6:13:64:3D:3D:D2:19:9D:2B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ec0b63b4-422b-39ca-9779-6ddeff83ae22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:be:2d:cc:a1:dd:cb:44:cd:f9:b6:9e:e1:df:0d:cf:d0:
         ad:1f:78:00:0c:6d:33:09:66:52:45:04:f5:be:1b:9e:a8:b6:
         3a:f8:7e:ae:2c:97:c9:d2:14:4f:07:fa:38:ad:09:52:68:7b:
         60:fe:57:f2:c4:73:6b:e2:7f:14:60:fe:d8:88:27:d3:cc:c4:
         f5:ec:7d:97:70:f2:d4:22:7e:52:68:04:47:a2:4d:2d:8d:b9:
         75:40:3d:47:62:44:a4:42:cb:72:2f:d1:8b:38:f8:c6:f6:37:
         c2:0f:1b:42:85:2a:60:25:77:02:8a:2b:73:9b:69:ae:60:60:
         f3:2c:f1:e3:96:85:0c:87:86:d6:86:9a:5f:9a:64:ab:27:e2:
         23:a7:66:11:05:74:b2:f2:46:de:4c:b9:f2:e5:be:a7:f3:4c:
         52:1c:23:95:65:d5:6c:cd:ed:bc:4d:be:1f:cb:2a:10:c1:ec:
         71:38:d2:dc:23:69:e0:e0:fc:84:ef:e4:ca:d9:f8:66:29:a9:
         23:4f:4a:3e:cc:48:48:5b:2e:3c:6b:cd:7f:33:60:9f:3a:34:
         4d:fd:b7:47:bf:72:ee:cf:52:a5:8c:dd:af:e4:29:b8:4f:05:
         9f:d2:c1:08:01:76:d1:46:8b:b9:cb:41:ff:85:63:ca:a4:07:
         b7:be:00:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfa/1xhiSflB9fvDCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4
ZWY1MB4XDTI0MTExMjE0MDA0MFoXDTI1MDIxMDE0MDA0MFowLzEtMCsGA1UEAxMk
MzIwODdkMGQtZTUzOC00NTY5LTkwYzAtMTRhZjA0MmM1NzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx989ZwuQarCUZ/yYjZYn6XbjhQXnZWILEqFw
d1X9K3AJ5hu0JD5TzeapVmRx1/h43kvxXxrUTIeW/Urr+NbfU7byg2ztK+JcV0Dz
ChP+gZfNDlJchBSBtE4bUz/VpOI9aDlVSPP2X1ip2hHVy+WG5PYWj/RdRafpRcPM
bYz+Gx15Vctrrg5hGk3XmfdbCaCOOEzQyRytcQF6kDYqPJE9g8cp1hxEG8E/P0ij
OcQ4LZF03ZYy4rO13C20hfLFbQG/t8ZtojOyKcGg+bSFjHGvMi7XOpVwa9T2HM/T
TaDd2zoq1JBeomF8hf3qva9kgUTrnUIqfLtegnK1hDsVHh/XmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpLZMD1VVfDwmumE2Q9PdIZnSv6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0
Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvZWMwYjYzYjQtNDIyYi0z
OWNhLTk3NzktNmRkZWZmODNhZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3
MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz
OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj
MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2BWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqmvi3Mod3LRM35tp7h3w3P0K0feAAMbTMJZlJFBPW+G56otjr4fq4s
l8nSFE8H+jitCVJoe2D+V/LEc2vifxRg/tiIJ9PMxPXsfZdw8tQiflJoBEeiTS2N
uXVAPUdiRKRCy3Iv0Ys4+Mb2N8IPG0KFKmAldwKKK3Obaa5gYPMs8eOWhQyHhtaG
ml+aZKsn4iOnZhEFdLLyRt5MufLlvqfzTFIcI5Vl1WzN7bxNvh/LKhDB7HE40twj
aeDg/ITv5MrZ+GYpqSNPSj7MSEhbLjxrzX8zYJ86NE39t0e/cu7PUqWM3a/kKbhP
BZ/SwQgBdtFGi7nLQf+FY8qkB7e+AB8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:17 2024 by rpki-client on console-fra.rpki-client.org