Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa
File:                     c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa (raw, json)
Hash identifier:          dhRGgatUav1LDmAUvNnxP8JBw2FtZnQGhV0W0c5hafE=
Subject key identifier:   46:23:85:0A:44:31:04:D6:6D:4E:5E:04:EC:ED:D7:18:54:AE:27:EE
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F432858474F31E9340F2EC92C93E21580
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa
Signing time:             Mon 23 Sep 2024 12:09:22 +0000
ROA not before:           Mon 23 Sep 2024 12:09:22 +0000
ROA not after:            Sun 22 Dec 2024 13:09:22 +0000
asID:                     17012
IP address blocks:        192.160.215.0/24 maxlen: 24
                          198.54.216.0/23 maxlen: 24
                          198.199.247.0/24 maxlen: 24
                          205.189.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:31:e9:34:0f:2e:c9:2c:93:e2:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Sep 23 12:09:22 2024 GMT
            Not After : Dec 22 13:09:22 2024 GMT
        Subject: CN=8cf54a4d-841e-4076-bf24-c4f15443ba8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:15:bb:07:62:fa:d8:6f:35:f1:46:a1:9e:
                    96:2f:8c:8b:f9:be:0a:0a:ff:27:f6:cc:b1:75:a0:
                    db:70:e9:ca:18:e6:e1:08:7e:ec:bb:b4:d8:f3:0d:
                    a6:ff:19:02:32:48:0e:70:58:41:7e:5d:43:4f:90:
                    5b:24:ce:07:54:dc:9b:03:3a:16:23:50:95:87:32:
                    f9:fd:c9:78:50:08:80:02:e2:cc:a4:b3:00:c4:3f:
                    29:e6:74:99:f9:d0:5d:69:41:39:e8:65:77:36:8b:
                    36:f7:61:69:7c:8c:82:7f:aa:16:f6:11:72:03:f6:
                    e1:40:1e:b0:8b:10:f5:e1:e0:48:71:e5:f7:0f:b1:
                    7f:ce:18:42:a7:f9:5a:fd:7b:62:4b:60:29:a7:0b:
                    21:eb:dc:b4:0f:79:75:ec:cc:3e:63:8d:14:e6:17:
                    95:04:b3:a6:9c:46:a2:fa:7b:d5:81:3c:ad:46:1e:
                    68:1c:33:52:33:5c:7f:b4:1f:de:1c:29:2f:84:20:
                    b8:4a:c0:95:81:c1:13:f9:a2:ba:59:ee:c7:62:38:
                    65:3e:a8:79:b5:4e:b3:c1:ff:c7:67:a8:37:6e:83:
                    e6:af:1e:d2:99:3b:6a:5c:3d:b0:b8:9e:e9:ce:c4:
                    3a:17:ef:0a:c2:ad:ef:a1:44:b4:78:ef:86:27:35:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:23:85:0A:44:31:04:D6:6D:4E:5E:04:EC:ED:D7:18:54:AE:27:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.215.0/24
                  198.54.216.0/23
                  198.199.247.0/24
                  205.189.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:89:4d:44:23:51:78:c3:07:d7:58:56:3a:09:ec:d2:15:69:
         dd:89:c0:2e:79:ef:d7:cb:5b:bb:0c:54:a6:12:d9:19:27:77:
         19:08:ef:40:d1:fc:0d:9c:86:3e:53:8b:e3:72:e3:b0:37:be:
         44:ed:95:ea:d4:de:98:78:52:5d:a9:5e:71:5d:9e:48:ec:0c:
         a7:5f:51:7b:cd:64:1b:38:6c:df:71:0d:ef:d9:5d:5e:24:e1:
         bb:e2:31:1c:47:8d:b7:2e:78:3e:eb:be:e8:df:ec:c0:49:84:
         34:dd:3e:d7:bb:72:bb:e6:26:78:05:2f:99:a8:df:23:fc:a1:
         59:da:74:0e:de:70:dd:9d:b8:2b:3d:ab:42:ba:96:da:31:58:
         90:bc:c1:fc:c2:cb:c6:c2:f6:85:f6:1d:34:fa:19:7b:15:df:
         c7:00:9f:48:16:05:45:78:00:79:30:5d:e6:13:89:1f:e3:29:
         49:16:69:5d:5c:0d:bc:c7:2e:fd:5f:85:30:58:75:f9:b9:b0:
         07:cc:26:14:2c:60:a9:d0:ca:41:bd:e2:d4:50:0d:d0:cf:99:
         3d:13:39:49:0a:da:7d:ba:4c:24:d0:44:25:c6:09:39:56:c5:
         a9:79:d6:13:b1:1e:33:50:2d:79:f6:f8:3f:a0:ad:6d:19:d3:
         0f:93:24:87
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEdPMek0Dy7JLJPiFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI0MDkyMzEyMDkyMloXDTI0MTIyMjEzMDkyMlowLzEtMCsGA1UEAxMk
OGNmNTRhNGQtODQxZS00MDc2LWJmMjQtYzRmMTU0NDNiYThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5kVuwdi+thvNfFGoZ6WL4yL+b4KCv8n9syx
daDbcOnKGObhCH7su7TY8w2m/xkCMkgOcFhBfl1DT5BbJM4HVNybAzoWI1CVhzL5
/cl4UAiAAuLMpLMAxD8p5nSZ+dBdaUE56GV3Nos292FpfIyCf6oW9hFyA/bhQB6w
ixD14eBIceX3D7F/zhhCp/la/XtiS2Appwsh69y0D3l17Mw+Y40U5heVBLOmnEai
+nvVgTytRh5oHDNSM1x/tB/eHCkvhCC4SsCVgcET+aK6We7HYjhlPqh5tU6zwf/H
Z6g3boPmrx7SmTtqXD2wuJ7pzsQ6F+8Kwq3voUS0eO+GJzWpiwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFEYjhQpEMQTWbU5eBOzt1xhUrifuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvYzZlNDY1YjEtYmM3Ny0z
ZWYyLWIwNjctMmIzNmZjMmE1ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwKDXAwQB
xjbYAwQAxsf3AwQBzb1mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC6JTUQjUXjDB9dYVjoJ7NIVad2JwC55
79fLW7sMVKYS2RkndxkI70DR/A2chj5Ti+Ny47A3vkTtlerU3ph4Ul2pXnFdnkjs
DKdfUXvNZBs4bN9xDe/ZXV4k4bviMRxHjbcueD7rvujf7MBJhDTdPte7crvmJngF
L5mo3yP8oVnadA7ecN2duCs9q0K6ltoxWJC8wfzCy8bC9oX2HTT6GXsV38cAn0gW
BUV4AHkwXeYTiR/jKUkWaV1cDbzHLv1fhTBYdfm5sAfMJhQsYKnQykG94tRQDdDP
mT0TOUkK2n26TCTQRCXGCTlWxal51hOxHjNQLXn2+D+grW0Z0w+TJIc=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:53 2024 by rpki-client on console-fra.rpki-client.org