Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa734de-1d20-37ae-a2ab-72f5f094200c.roa
File:                     5aa734de-1d20-37ae-a2ab-72f5f094200c.roa (raw, json)
Hash identifier:          2P3KPENcAFsgyI+FqCEb1wEq7aGbw1b0Pa+iiKjhRic=
Subject key identifier:   5A:2B:F9:75:3E:FC:14:90:11:A6:CD:F8:0C:E9:C7:8E:BC:3A:21:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF946294B34C5E1C6CDDC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa734de-1d20-37ae-a2ab-72f5f094200c.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     20214
IP address blocks:        162.151.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f9:46:29:4b:34:c5:e1:c6:cd:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=757f2256-b271-4e08-865f-e096f5ed4f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c5:47:9b:b9:de:17:2a:8d:43:f8:e4:45:83:
                    fc:63:ce:e2:e2:bc:9f:2d:81:3d:0a:8b:af:ad:f0:
                    83:c4:b3:c5:e2:af:57:f2:80:35:95:15:0c:ab:43:
                    1b:a3:c8:63:b4:c4:7b:b3:41:ad:82:d3:f5:45:b2:
                    28:01:12:f5:bc:6d:29:f4:fc:ed:64:36:a9:fe:6c:
                    60:da:b6:7f:ab:cf:c0:84:8d:10:58:9f:c0:62:69:
                    d9:90:e5:0d:dd:58:0e:d9:a7:69:95:83:a2:c8:6d:
                    0f:a6:03:eb:13:83:0e:16:5b:6a:34:c7:b5:66:ec:
                    df:1c:ed:c5:61:09:e7:4b:f5:e1:23:2d:04:01:40:
                    b7:64:3c:8d:d0:d7:d2:70:c8:5e:9e:34:ef:49:03:
                    3f:2e:43:2b:ff:7c:a5:5c:1e:8a:f2:dc:53:b7:36:
                    88:fe:13:9a:aa:b7:94:35:5c:9b:f2:67:a6:20:30:
                    ce:1a:22:25:47:cb:97:a8:55:d2:fd:b4:10:07:b5:
                    af:00:9b:8c:d4:bf:c6:7e:26:fe:9e:a5:28:fc:38:
                    4d:aa:22:e8:bc:67:92:cf:75:e1:5b:e5:7e:c0:ca:
                    e6:d2:cc:e5:b5:ba:b8:82:e9:b4:6d:cf:cb:a8:03:
                    ab:bd:cb:d5:9d:e1:3f:16:55:a3:c3:73:1b:76:14:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2B:F9:75:3E:FC:14:90:11:A6:CD:F8:0C:E9:C7:8E:BC:3A:21:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa734de-1d20-37ae-a2ab-72f5f094200c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:b8:a0:35:0b:2b:35:04:39:fd:da:c5:50:6a:e0:00:bb:
         16:65:52:1b:e1:47:8e:f8:ea:30:73:d7:68:2b:89:ea:c5:bf:
         91:9c:01:91:90:c5:19:01:c8:44:33:b5:4b:19:7b:7f:5b:05:
         ba:cf:4a:79:b2:4f:ea:f8:9d:9f:92:d2:41:53:de:41:8d:27:
         e8:d8:e4:7d:86:d6:67:07:70:14:18:4d:e1:4c:c3:5f:0d:b0:
         16:8b:ae:4a:0a:97:a2:ee:db:b6:f8:a9:ec:9b:2d:ed:06:c7:
         1f:5d:2d:b6:81:6a:b9:79:85:8c:3a:7d:6a:b6:e1:10:08:a5:
         f0:36:15:98:8e:33:1e:11:19:35:34:95:3f:b1:1b:85:13:95:
         90:0f:1c:20:32:f1:6b:5a:f3:8a:da:72:6f:c4:88:4b:52:66:
         be:f0:66:33:f6:9d:c9:5d:b6:88:2a:1e:9e:d5:43:71:6d:ea:
         e2:32:2a:b9:fa:33:62:0e:cc:ea:7a:c0:b0:ca:bd:a4:43:4a:
         76:b8:87:c0:87:ac:08:16:f6:ef:6d:cb:fc:2d:0c:18:1c:9a:
         42:12:6b:b0:84:71:9f:6f:8e:0c:73:43:32:b8:b5:e9:6c:cd:
         a6:0a:40:e2:7f:5d:d9:d1:8b:a7:c5:e7:0a:2b:62:0d:8c:bf:
         20:fd:7f:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++UYpSzTF4cbN3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NzU3ZjIyNTYtYjI3MS00ZTA4LTg2NWYtZTA5NmY1ZWQ0ZjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sVHm7neFyqNQ/jkRYP8Y87i4ryfLYE9Couv
rfCDxLPF4q9X8oA1lRUMq0Mbo8hjtMR7s0GtgtP1RbIoARL1vG0p9PztZDap/mxg
2rZ/q8/AhI0QWJ/AYmnZkOUN3VgO2adplYOiyG0PpgPrE4MOFltqNMe1ZuzfHO3F
YQnnS/XhIy0EAUC3ZDyN0NfScMhenjTvSQM/LkMr/3ylXB6K8txTtzaI/hOaqreU
NVyb8memIDDOGiIlR8uXqFXS/bQQB7WvAJuM1L/Gfib+nqUo/DhNqiLovGeSz3Xh
W+V+wMrm0szltbq4gum0bc/LqAOrvcvVneE/FlWjw3MbdhS5nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFor+XU+/BSQEabN+Azpx468OiHuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWFhNzM0ZGUtMWQyMC0z
N2FlLWEyYWItNzJmNWYwOTQyMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBopdyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKqcuKA1Cys1BDn92sVQauAAuxZlUhvhR4746jBz12grierFv5GcAZGQ
xRkByEQztUsZe39bBbrPSnmyT+r4nZ+S0kFT3kGNJ+jY5H2G1mcHcBQYTeFMw18N
sBaLrkoKl6Lu27b4qeybLe0Gxx9dLbaBarl5hYw6fWq24RAIpfA2FZiOMx4RGTU0
lT+xG4UTlZAPHCAy8Wta84racm/EiEtSZr7wZjP2ncldtogqHp7VQ3Ft6uIyKrn6
M2IOzOp6wLDKvaRDSna4h8CHrAgW9u9ty/wtDBgcmkISa7CEcZ9vjgxzQzK4tels
zaYKQOJ/XdnRi6fF5worYg2MvyD9f7o=
-----END CERTIFICATE-----
Generated at Sun Dec 22 12:59:20 2024 by rpki-client on console-ams.rpki-client.org