Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fe2dd5e-f7ef-3d39-a148-ce59a64bbb79.roa
File:                     6fe2dd5e-f7ef-3d39-a148-ce59a64bbb79.roa (raw, json)
Hash identifier:          8L9Iy+QgthlWfPLC4CnaiMkiAGbn3z6f1JWieK1vkZs=
Subject key identifier:   02:FD:06:22:A5:88:A0:5D:05:07:2B:C9:61:A0:7F:2D:34:9F:D1:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9EFE515A0D5A9269BC1B10
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fe2dd5e-f7ef-3d39-a148-ce59a64bbb79.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33287
IP address blocks:        174.173.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:fe:51:5a:0d:5a:92:69:bc:1b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=f17153e2-093a-445e-88ff-d32d2a62b368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3c:42:01:66:42:18:a3:27:d0:ca:ec:10:4b:
                    b7:97:f4:91:07:bb:fe:2e:64:d2:4b:82:c2:91:5c:
                    3a:73:93:83:60:36:87:34:12:1f:34:3d:af:3e:55:
                    97:03:bc:e2:c1:28:03:a4:6d:fe:e7:57:43:16:23:
                    7a:d3:72:eb:89:53:d4:15:1b:da:b3:58:8f:06:17:
                    f7:15:ca:d5:87:72:87:eb:8c:f4:7e:f5:4c:31:42:
                    71:f3:e4:e8:42:a1:a3:86:c6:3e:b6:48:9d:c1:89:
                    59:7b:4a:d3:ab:ed:4a:46:a2:af:39:e3:15:10:dc:
                    0c:0b:21:e2:14:5b:ca:c1:77:2a:45:a8:96:54:eb:
                    09:80:9f:18:61:4a:a4:be:58:b5:8a:91:3d:5d:a2:
                    72:36:d4:ce:d4:2b:12:bc:ac:9c:72:8e:5d:45:80:
                    4d:94:df:cf:5d:d7:49:6b:60:c4:7b:b3:9f:c5:d2:
                    56:0e:26:91:28:2a:93:52:6f:e5:f3:ab:03:34:07:
                    99:9f:5d:b4:7c:37:46:4d:de:b2:9e:fa:ea:6f:71:
                    c8:ec:45:9d:10:3b:20:e2:f4:91:83:16:76:48:e4:
                    c4:d6:1e:a7:fa:b3:17:b4:06:ce:0a:fa:5c:92:68:
                    3c:34:da:91:8e:6e:bc:6c:95:35:84:41:ec:f2:66:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FD:06:22:A5:88:A0:5D:05:07:2B:C9:61:A0:7F:2D:34:9F:D1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fe2dd5e-f7ef-3d39-a148-ce59a64bbb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.173.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:3f:ab:86:c2:ef:ed:29:47:f2:eb:fd:ce:b8:ea:58:98:
         95:53:2d:9f:98:10:2e:73:34:3c:cd:57:a9:0f:8f:98:15:2a:
         14:77:2e:bf:98:7a:92:04:2b:66:f9:4c:09:ce:cf:c4:9a:f8:
         3b:fb:48:9a:4d:95:a9:28:83:2b:49:64:b2:37:67:74:02:b1:
         77:3a:f0:b3:ee:8f:e3:c5:e8:d5:18:09:45:e7:aa:cc:d1:45:
         29:3c:a5:99:8f:48:08:af:3f:6b:77:af:bd:b7:ab:b6:e9:ac:
         3c:2c:f7:90:7e:9a:f5:88:17:e0:26:4c:1b:3c:5f:a8:9f:ba:
         eb:7a:68:2c:d3:48:11:48:0d:8b:2c:6f:0d:98:4b:b9:83:3e:
         5e:c6:c2:26:f8:ad:6a:eb:83:54:46:00:a5:94:f1:ac:ce:d9:
         32:be:1a:24:07:83:42:4f:52:b3:f1:b7:5a:4f:ad:47:e9:f2:
         19:10:09:03:51:5f:96:93:53:1c:41:10:27:fb:94:55:25:a9:
         3b:f1:c9:5f:ae:74:5e:20:b9:28:48:e8:37:96:ee:be:24:7f:
         e0:a2:16:9e:fe:62:ea:5f:57:8f:ed:14:d3:d8:6e:ac:07:ba:
         9f:69:20:58:dc:be:39:07:62:0e:a6:cc:6c:40:37:24:c3:b6:
         b5:7a:74:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnv5RWg1akmm8GxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZjE3MTUzZTItMDkzYS00NDVlLTg4ZmYtZDMyZDJhNjJiMzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTxCAWZCGKMn0MrsEEu3l/SRB7v+LmTSS4LC
kVw6c5ODYDaHNBIfND2vPlWXA7ziwSgDpG3+51dDFiN603LriVPUFRvas1iPBhf3
FcrVh3KH64z0fvVMMUJx8+ToQqGjhsY+tkidwYlZe0rTq+1KRqKvOeMVENwMCyHi
FFvKwXcqRaiWVOsJgJ8YYUqkvli1ipE9XaJyNtTO1CsSvKycco5dRYBNlN/PXddJ
a2DEe7OfxdJWDiaRKCqTUm/l86sDNAeZn120fDdGTd6ynvrqb3HI7EWdEDsg4vSR
gxZ2SOTE1h6n+rMXtAbOCvpckmg8NNqRjm68bJU1hEHs8mZnJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAL9BiKliKBdBQcryWGgfy00n9HNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmZlMmRkNWUtZjdlZi0z
ZDM5LWExNDgtY2U1OWE2NGJiYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrq3YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKAIP6uGwu/tKUfy6/3OuOpYmJVTLZ+YEC5zNDzNV6kPj5gVKhR3Lr+Y
epIEK2b5TAnOz8Sa+Dv7SJpNlakogytJZLI3Z3QCsXc68LPuj+PF6NUYCUXnqszR
RSk8pZmPSAivP2t3r723q7bprDws95B+mvWIF+AmTBs8X6ifuut6aCzTSBFIDYss
bw2YS7mDPl7Gwib4rWrrg1RGAKWU8azO2TK+GiQHg0JPUrPxt1pPrUfp8hkQCQNR
X5aTUxxBECf7lFUlqTvxyV+udF4guShI6DeW7r4kf+CiFp7+YupfV4/tFNPYbqwH
up9pIFjcvjkHYg6mzGxANyTDtrV6dH0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:48 2024 by rpki-client on console-ams.rpki-client.org