Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/06259249-f934-3cff-bde7-2d79334f2798.roa
File:                     06259249-f934-3cff-bde7-2d79334f2798.roa (raw, json)
Hash identifier:          nJxEkgOJnIa5G5LTIWs4ny8eFK2CCRr2ngHi4B8ipqA=
Subject key identifier:   A1:8A:3F:03:D0:81:1B:AD:56:30:38:99:80:21:9E:5E:D4:21:4E:13
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285847E78F5856E152183C1A68E2C9
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/06259249-f934-3cff-bde7-2d79334f2798.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     396982
IP address blocks:        165.85.146.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:58:56:e1:52:18:3c:1a:68:e2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=497a6712-c0fa-49a8-b24c-4bd188436870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1d:03:3d:39:c8:39:9c:ce:18:39:65:8e:77:
                    31:e1:3c:ee:b8:39:a9:7e:75:15:f0:1c:3d:c5:1a:
                    25:a1:d2:72:13:ba:6f:a2:72:55:29:98:2e:3d:02:
                    ab:1a:aa:5c:f2:c2:e9:a9:22:fa:07:75:78:9d:8b:
                    2f:e5:a3:9f:d4:1e:4f:0a:db:cc:e1:b2:b7:64:72:
                    32:b6:d1:54:91:86:f4:26:36:fd:0f:66:d7:6a:20:
                    ec:74:7f:b1:3d:41:d0:c5:71:26:c9:a2:1d:77:7c:
                    3c:ec:0a:52:66:35:3c:ca:b2:b5:6c:b7:a9:1a:c1:
                    11:96:10:02:60:57:2a:b2:09:66:63:81:49:0a:73:
                    a2:cc:98:67:04:9d:99:85:21:dc:d1:f5:6a:6e:3b:
                    08:54:66:72:9d:b4:04:d1:70:49:ce:1b:5c:b0:8d:
                    af:25:f2:30:21:51:18:37:14:40:0d:25:03:66:e5:
                    c8:67:4d:b3:48:7a:28:6c:36:72:80:e0:8d:9b:65:
                    5e:c4:11:3f:57:c7:22:d8:55:c5:ca:e2:51:10:d4:
                    83:cc:12:82:7c:63:c0:c6:b4:88:85:5c:93:a2:53:
                    ac:9e:5d:35:a0:b0:02:f6:9e:39:33:0f:97:cf:3b:
                    f4:71:1e:42:0d:73:44:b0:f9:fa:a2:90:24:61:2a:
                    c1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8A:3F:03:D0:81:1B:AD:56:30:38:99:80:21:9E:5E:D4:21:4E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/06259249-f934-3cff-bde7-2d79334f2798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:44:60:33:cc:a9:34:17:d2:70:b7:17:43:df:2d:3e:21:9b:
         c5:87:14:44:ae:05:48:31:33:de:f6:ba:f9:18:5b:36:98:6e:
         a7:7e:a7:66:49:0a:ab:da:f2:27:7d:64:fa:3f:c5:86:1a:49:
         5e:f1:2f:93:77:f2:ee:71:fd:1f:b6:7f:4b:18:b0:72:a5:4f:
         c1:d2:9f:00:80:7f:80:bc:e0:6c:fd:e7:16:40:22:45:77:1b:
         04:52:6e:fb:92:d2:ea:d0:90:01:dc:d2:c1:1c:2d:ff:54:03:
         0d:40:21:5d:e9:ec:e1:12:b8:24:ee:38:14:4a:c5:24:ca:85:
         14:11:24:2e:41:b9:97:1a:68:ce:50:65:17:59:56:44:1a:1e:
         5f:24:1d:86:d9:90:43:df:60:05:cd:0b:fa:98:41:dc:12:41:
         00:45:43:3b:3a:c3:7f:9f:5a:6b:28:55:78:18:b7:a0:25:f8:
         03:c3:4f:77:e2:c6:f7:5a:be:0c:f4:83:8f:1e:a5:93:af:bd:
         69:24:f8:84:c3:40:22:22:3e:1c:8b:8b:77:9a:23:3a:8d:e0:
         b9:ed:c1:aa:67:2f:da:8f:6c:19:1b:e0:25:42:8a:88:6a:2f:
         c1:3d:55:e7:53:18:47:50:ce:79:9b:a3:11:94:a6:3a:50:b8:
         82:c3:1e:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj1hW4VIYPBpo4skwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk
NDk3YTY3MTItYzBmYS00OWE4LWIyNGMtNGJkMTg4NDM2ODcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx0DPTnIOZzOGDlljncx4TzuuDmpfnUV8Bw9
xRolodJyE7pvonJVKZguPQKrGqpc8sLpqSL6B3V4nYsv5aOf1B5PCtvM4bK3ZHIy
ttFUkYb0Jjb9D2bXaiDsdH+xPUHQxXEmyaIdd3w87ApSZjU8yrK1bLepGsERlhAC
YFcqsglmY4FJCnOizJhnBJ2ZhSHc0fVqbjsIVGZynbQE0XBJzhtcsI2vJfIwIVEY
NxRADSUDZuXIZ02zSHoobDZygOCNm2VexBE/V8ci2FXFyuJRENSDzBKCfGPAxrSI
hVyTolOsnl01oLAC9p45Mw+Xzzv0cR5CDXNEsPn6opAkYSrBiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGKPwPQgRutVjA4mYAhnl7UIU4TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMDYyNTkyNDktZjkzNC0z
Y2ZmLWJkZTctMmQ3OTMzNGYyNzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpVWSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABREYDPMqTQX0nC3F0PfLT4hm8WHFESuBUgxM972uvkYWzaYbqd+p2ZJ
Cqva8id9ZPo/xYYaSV7xL5N38u5x/R+2f0sYsHKlT8HSnwCAf4C84Gz95xZAIkV3
GwRSbvuS0urQkAHc0sEcLf9UAw1AIV3p7OESuCTuOBRKxSTKhRQRJC5BuZcaaM5Q
ZRdZVkQaHl8kHYbZkEPfYAXNC/qYQdwSQQBFQzs6w3+fWmsoVXgYt6Al+APDT3fi
xvdavgz0g48epZOvvWkk+ITDQCIiPhyLi3eaIzqN4LntwapnL9qPbBkb4CVCiohq
L8E9VedTGEdQznmboxGUpjpQuILDHoc=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:56 2024 by rpki-client on console-fra.rpki-client.org