Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa
File:                     98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa (raw, json)
Hash identifier:          AKnQ8/z5RhynG3tQTRQK8TNvKUF3hFpxTOiwfP0a2cc=
Subject key identifier:   A3:51:8C:A3:14:F6:44:60:AB:71:39:CB:5F:AD:0D:DC:02:73:28:00
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F43285847A5D6ABD499E3B95D70FC5080
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     31834
IP address blocks:        209.222.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ab:d4:99:e3:b9:5d:70:fc:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=6e889625-83cf-41f8-9cf4-1d5b3430bbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:b5:c0:2d:58:91:8e:d0:82:0b:36:06:e8:
                    36:4f:b7:e7:2c:ef:3d:01:af:10:b8:e6:81:ad:a9:
                    36:3c:03:3d:00:a8:1b:5a:2e:19:d9:f8:ef:31:04:
                    08:47:46:c7:5d:fe:52:48:e7:7e:aa:14:90:09:f6:
                    99:4b:d7:e3:ab:72:65:6b:24:46:e2:b5:d8:1b:31:
                    2e:9d:66:88:3e:38:f5:68:d4:23:3b:4f:a7:72:53:
                    26:18:fe:1a:62:c1:52:b8:95:f0:8f:af:3c:01:6f:
                    ff:30:aa:38:86:d1:7c:d7:9e:4e:bf:42:20:e0:aa:
                    c3:ac:a5:c9:20:77:b7:22:df:6b:b1:1b:35:52:db:
                    04:94:76:33:9c:0a:22:cd:35:67:87:ef:e5:76:04:
                    88:6a:e6:db:96:f3:83:fe:d4:18:8a:8b:86:c3:af:
                    90:71:7c:9a:9c:9a:2a:f5:e8:2b:09:ef:ad:c6:4d:
                    11:ba:b9:0f:5a:2a:42:17:c0:40:7b:d7:f2:9d:99:
                    38:81:4c:cc:3a:a4:f2:58:05:4c:b7:08:27:ff:5c:
                    4e:52:cc:cb:5c:b6:65:72:fd:98:39:1c:16:98:bf:
                    14:9e:8c:b9:e5:48:2f:4a:f8:7d:61:27:e4:0c:ec:
                    6f:20:fc:ec:31:2e:04:3f:14:66:39:0c:1e:e7:d3:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:51:8C:A3:14:F6:44:60:AB:71:39:CB:5F:AD:0D:DC:02:73:28:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:94:43:13:85:b6:53:dd:59:fe:3b:1c:1e:05:9e:9e:ea:5c:
         eb:ef:5b:88:8e:e2:82:63:bb:e5:e0:c5:fd:c8:eb:9d:b8:74:
         f7:32:7e:45:9a:af:37:67:ab:a7:1c:30:cc:ec:17:87:fb:3c:
         5e:b8:6a:e4:0c:d8:d5:c6:0f:bd:24:11:f2:a9:91:45:4f:91:
         ab:d8:68:2b:a7:85:c0:35:1c:db:04:0f:d1:44:2f:2c:ce:51:
         89:87:7f:ac:4a:74:8e:b2:81:7e:22:f3:ff:b6:e7:94:1a:dd:
         9b:61:65:e5:d5:49:2b:b7:00:8d:3d:e3:0d:57:df:fd:f6:fb:
         78:ad:fe:12:ab:ad:94:e5:88:64:7d:98:68:f8:39:7e:84:41:
         82:e5:3c:47:f1:7b:13:33:65:78:bf:46:f3:cf:8a:af:f5:04:
         85:7d:81:ff:41:78:96:06:45:99:d0:e3:9a:42:9c:0d:41:36:
         2e:79:b0:86:a8:de:7c:d2:66:71:cc:6c:de:4c:0e:a8:5d:63:
         bb:3a:b9:5a:47:12:a8:a5:a1:fe:bb:e5:58:55:ed:cf:fe:ac:
         df:01:56:2b:d5:57:04:2c:6d:8c:09:fe:9e:20:b4:73:0c:a3:
         d9:5c:59:85:6a:ca:bd:a0:5b:ec:c0:64:70:36:9a:f3:8d:ae:
         cc:ca:d3:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qvUmeO5XXD8UIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh
NmFlMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
NmU4ODk2MjUtODNjZi00MWY4LTljZjQtMWQ1YjM0MzBiYmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQq1wC1YkY7Qggs2Bug2T7fnLO89Aa8QuOaB
rak2PAM9AKgbWi4Z2fjvMQQIR0bHXf5SSOd+qhSQCfaZS9fjq3JlayRG4rXYGzEu
nWaIPjj1aNQjO0+nclMmGP4aYsFSuJXwj688AW//MKo4htF8155Ov0Ig4KrDrKXJ
IHe3It9rsRs1UtsElHYznAoizTVnh+/ldgSIaubblvOD/tQYiouGw6+QcXyanJoq
9egrCe+txk0RurkPWipCF8BAe9fynZk4gUzMOqTyWAVMtwgn/1xOUszLXLZlcv2Y
ORwWmL8Unoy55UgvSvh9YSfkDOxvIPzsMS4EPxRmOQwe59O2iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNRjKMU9kRgq3E5y1+tDdwCcygAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj
ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvOThhM2UzZmMtNmY2ZC0z
OWI3LWJhYjAtNTI3NGE5ZGFhZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx
YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi
YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw
MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d7zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOUQxOFtlPdWf47HB4Fnp7qXOvvW4iO4oJju+Xgxf3I6524dPcyfkWa
rzdnq6ccMMzsF4f7PF64auQM2NXGD70kEfKpkUVPkavYaCunhcA1HNsED9FELyzO
UYmHf6xKdI6ygX4i8/+255Qa3ZthZeXVSSu3AI094w1X3/32+3it/hKrrZTliGR9
mGj4OX6EQYLlPEfxexMzZXi/RvPPiq/1BIV9gf9BeJYGRZnQ45pCnA1BNi55sIao
3nzSZnHMbN5MDqhdY7s6uVpHEqilof675VhV7c/+rN8BVivVVwQsbYwJ/p4gtHMM
o9lcWYVqyr2gW+zAZHA2mvONrszK0zQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org