Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e186afc-349b-3efe-a320-7513181dc3c0.roa
File:                     2e186afc-349b-3efe-a320-7513181dc3c0.roa (raw, json)
Hash identifier:          EmAY/JtddcdIYyh5oF2htbwK9aXjMMWaMRW0FnSahNw=
Subject key identifier:   4A:AE:97:D5:12:79:C3:C8:49:3A:72:6F:C9:6C:D7:25:6F:52:9F:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF859E003244D6B8FFB1800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e186afc-349b-3efe-a320-7513181dc3c0.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        107.3.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:59:e0:03:24:4d:6b:8f:fb:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=51e891d6-9797-4f1b-a273-f8183366b658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:3e:a5:44:2a:11:b3:2f:df:97:52:d9:34:
                    12:55:7e:84:4b:ed:b2:68:53:bc:57:6f:0d:3e:6b:
                    a5:34:f0:99:6b:cf:8c:59:72:fb:25:7c:e0:49:4e:
                    4e:95:f9:aa:9f:6d:ef:cb:3f:f7:da:04:7d:92:1c:
                    a2:f5:6f:44:96:0d:d1:52:e2:05:36:d1:7d:fb:e4:
                    ad:0a:ba:d3:2c:59:dd:bf:79:96:53:75:1d:fc:ee:
                    4d:60:ad:84:33:85:f7:1d:90:75:35:be:1c:a7:ba:
                    71:7a:cc:52:1a:ff:86:5d:13:d1:a0:33:d2:81:33:
                    1e:e7:61:25:7d:6f:11:1d:96:a0:d4:66:5e:c9:03:
                    09:aa:a3:ca:46:ed:19:6b:fb:f9:14:cd:e9:e0:40:
                    11:51:98:26:6a:ed:2a:55:36:04:12:bf:c6:b2:55:
                    0b:96:98:58:58:7d:06:95:4e:58:ea:f0:9f:69:17:
                    8c:2d:89:3b:f5:5b:fb:72:ab:d0:11:aa:06:bb:f7:
                    d6:4c:f1:49:75:b7:c4:2d:4f:46:94:56:70:50:d6:
                    8e:bc:81:a7:2e:4e:74:8e:41:06:a5:78:ae:13:8a:
                    f2:57:ec:b8:83:f7:c0:3b:cb:0c:0d:eb:d8:91:34:
                    97:97:03:02:00:4a:e5:be:29:02:b1:6d:ae:21:af:
                    9e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AE:97:D5:12:79:C3:C8:49:3A:72:6F:C9:6C:D7:25:6F:52:9F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e186afc-349b-3efe-a320-7513181dc3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.3.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5a:66:01:2a:27:d8:b9:73:4e:c2:68:5c:ca:a5:8e:15:8d:
         7b:5b:3b:5f:6b:f3:2f:e9:4b:eb:24:d6:da:98:c3:7e:26:70:
         e0:e4:f2:3c:c8:99:5b:c3:aa:d8:89:d0:d5:98:5e:31:9f:1f:
         b7:c2:12:a6:2e:af:7b:6b:da:63:6b:7a:08:78:30:e8:e8:e7:
         ea:3e:25:51:7f:1f:13:cc:7e:37:10:09:ba:92:77:ba:31:1b:
         26:c0:38:bb:55:36:67:3e:cf:0a:86:c1:1e:b0:c0:43:7a:ed:
         a6:8c:06:04:82:b6:18:24:b7:8a:73:6c:37:7a:5a:ea:20:ca:
         c8:43:74:a9:1e:37:ad:a3:86:00:d7:5e:41:49:f5:91:b0:b2:
         ac:e0:e5:66:14:ce:82:5f:4d:f5:38:9d:18:43:40:23:39:99:
         41:2b:29:7d:8f:5c:fd:d8:9f:ed:ef:41:ab:84:f4:8f:28:9f:
         65:5b:07:2c:50:6b:7a:6d:5c:9a:cb:55:61:23:e5:3f:b9:28:
         35:8b:6a:02:63:70:de:96:d6:f1:80:b8:d2:d0:c8:e8:50:e5:
         0b:e8:9f:db:1d:47:b0:a9:5f:0b:42:7b:83:13:47:a5:3d:b6:
         0f:34:52:41:5d:80:2a:05:26:46:b1:e6:cc:38:f4:39:58:e5:
         5f:ac:0e:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++FngAyRNa4/7GAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NTFlODkxZDYtOTc5Ny00ZjFiLWEyNzMtZjgxODMzNjZiNjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPI+pUQqEbMv35dS2TQSVX6ES+2yaFO8V28N
PmulNPCZa8+MWXL7JXzgSU5Olfmqn23vyz/32gR9khyi9W9Elg3RUuIFNtF9++St
CrrTLFndv3mWU3Ud/O5NYK2EM4X3HZB1Nb4cp7pxesxSGv+GXRPRoDPSgTMe52El
fW8RHZag1GZeyQMJqqPKRu0Za/v5FM3p4EARUZgmau0qVTYEEr/GslULlphYWH0G
lU5Y6vCfaReMLYk79Vv7cqvQEaoGu/fWTPFJdbfELU9GlFZwUNaOvIGnLk50jkEG
pXiuE4ryV+y4g/fAO8sMDevYkTSXlwMCAErlvikCsW2uIa+eIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqul9USecPISTpyb8ls1yVvUp/QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmUxODZhZmMtMzQ5Yi0z
ZWZlLWEzMjAtNzUxMzE4MWRjM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawP8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9aZgEqJ9i5c07CaFzKpY4VjXtbO19r8y/pS+sk1tqYw34mcODk8jzI
mVvDqtiJ0NWYXjGfH7fCEqYur3tr2mNregh4MOjo5+o+JVF/HxPMfjcQCbqSd7ox
GybAOLtVNmc+zwqGwR6wwEN67aaMBgSCthgkt4pzbDd6WuogyshDdKkeN62jhgDX
XkFJ9ZGwsqzg5WYUzoJfTfU4nRhDQCM5mUErKX2PXP3Yn+3vQauE9I8on2VbByxQ
a3ptXJrLVWEj5T+5KDWLagJjcN6W1vGAuNLQyOhQ5Qvon9sdR7CpXwtCe4MTR6U9
tg80UkFdgCoFJkax5sw49DlY5V+sDqU=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:04:39 2024 by rpki-client on console-fra.rpki-client.org