Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdce30b-3b34-3061-aa3a-ac5c1a61c983.roa
File:                     dfdce30b-3b34-3061-aa3a-ac5c1a61c983.roa (raw, json)
Hash identifier:          J7T5OSYg4dAcXyjp2UckEFipaEuoouiZYfUYRWpFD1Y=
Subject key identifier:   53:E3:5D:50:D4:34:38:0F:5E:E3:D4:2A:1B:07:65:98:24:64:2B:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF8AE55B54CEEDAC3E27BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdce30b-3b34-3061-aa3a-ac5c1a61c983.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        162.148.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:ae:55:b5:4c:ee:da:c3:e2:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=e3aa10df-9543-4bd4-b6e5-028530073334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:42:28:16:12:b1:e5:fc:ac:ac:b3:bf:4f:
                    e4:39:3d:ad:c4:d3:f9:76:e6:2b:ca:66:4f:34:3b:
                    01:db:c6:41:1b:c2:76:9d:12:fa:8c:02:df:4e:95:
                    1d:5d:95:91:7f:45:c8:9f:20:db:0a:d1:68:5f:85:
                    e0:f1:a9:54:d0:54:ca:60:61:82:50:42:55:05:46:
                    65:02:78:fb:34:d1:75:f4:e6:63:99:6a:de:b5:59:
                    45:c7:9f:1c:62:e8:f5:fb:a4:0f:b4:7d:07:8e:9f:
                    1d:4f:75:39:6b:80:8d:2a:62:d8:e9:10:aa:f9:f3:
                    27:5b:40:d6:71:a5:01:0a:70:df:1b:b2:ad:a7:89:
                    f7:a0:f4:e4:53:01:31:55:e5:12:ad:8b:a1:76:66:
                    53:ef:f5:2b:7a:e9:21:72:50:5c:9c:6f:ae:26:4f:
                    1f:63:32:18:dd:a5:d3:a4:ad:cf:88:3e:a4:23:43:
                    6a:94:6e:02:88:55:c1:06:a8:73:bb:28:de:b1:27:
                    c1:26:88:4c:af:64:0f:db:e8:15:f2:b2:93:ef:3e:
                    82:e0:4e:c6:f2:a4:fd:84:10:3a:8d:32:c2:e2:22:
                    e3:61:99:f3:33:03:f5:6d:7b:f0:09:0a:ab:02:c3:
                    ef:b6:41:ba:81:d5:dd:75:c8:8c:16:ac:b2:62:85:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E3:5D:50:D4:34:38:0F:5E:E3:D4:2A:1B:07:65:98:24:64:2B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdce30b-3b34-3061-aa3a-ac5c1a61c983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:bb:1e:1b:e7:d2:00:0b:5e:cc:e3:f1:51:a0:a5:b5:28:51:
         db:73:87:1d:9d:a8:93:8b:00:c7:58:f4:63:d7:29:47:ad:f9:
         04:41:7e:dd:b7:97:d7:2f:db:65:57:73:fb:67:1e:50:50:2f:
         fc:26:e6:28:57:5b:4c:e9:9a:fb:95:f8:9d:c3:e2:31:5b:fd:
         c9:9f:af:8f:d1:bb:59:2c:a2:fc:6f:51:6a:53:d1:d6:6e:20:
         1f:90:57:71:1b:37:51:d5:89:98:5d:62:f1:cb:f0:cd:87:a3:
         a3:68:67:e9:3c:40:4e:f8:cc:c3:6d:f2:9e:ce:87:10:89:54:
         a6:19:af:25:96:50:ec:35:78:b7:f5:eb:88:03:43:2a:1e:87:
         2d:d2:e4:ef:59:28:2f:22:77:eb:77:79:30:78:4b:59:75:3e:
         0b:43:80:9e:cb:f8:96:a2:85:a4:22:6a:bf:82:22:a0:67:31:
         d2:9a:0f:f8:f8:e8:4a:8c:80:9e:66:17:87:d4:fb:ae:ce:3d:
         1f:4b:28:8a:02:51:f5:49:7b:cb:46:ec:21:4a:bb:a2:b2:39:
         04:fa:e9:75:3b:59:95:9b:f6:13:10:62:52:7b:98:a6:4a:0a:
         e1:9f:9f:d3:2e:75:a8:de:0e:4c:fe:71:db:18:3b:b1:92:e9:
         9f:24:09:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++K5VtUzu2sPie8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZTNhYTEwZGYtOTU0My00YmQ0LWI2ZTUtMDI4NTMwMDczMzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC1CKBYSseX8rKyzv0/kOT2txNP5duYrymZP
NDsB28ZBG8J2nRL6jALfTpUdXZWRf0XInyDbCtFoX4Xg8alU0FTKYGGCUEJVBUZl
Anj7NNF19OZjmWretVlFx58cYuj1+6QPtH0Hjp8dT3U5a4CNKmLY6RCq+fMnW0DW
caUBCnDfG7Ktp4n3oPTkUwExVeUSrYuhdmZT7/UreukhclBcnG+uJk8fYzIY3aXT
pK3PiD6kI0NqlG4CiFXBBqhzuyjesSfBJohMr2QP2+gV8rKT7z6C4E7G8qT9hBA6
jTLC4iLjYZnzMwP1bXvwCQqrAsPvtkG6gdXddciMFqyyYoVGYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFPjXVDUNDgPXuPUKhsHZZgkZCuOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZkY2UzMGItM2IzNC0z
MDYxLWFhM2EtYWM1YzFhNjFjOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCopRUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAS7Hhvn0gALXszj8VGgpbUoUdtzhx2dqJOLAMdY9GPXKUet+QRBft23
l9cv22VXc/tnHlBQL/wm5ihXW0zpmvuV+J3D4jFb/cmfr4/Ru1ksovxvUWpT0dZu
IB+QV3EbN1HViZhdYvHL8M2Ho6NoZ+k8QE74zMNt8p7OhxCJVKYZryWWUOw1eLf1
64gDQyoehy3S5O9ZKC8id+t3eTB4S1l1PgtDgJ7L+JaihaQiar+CIqBnMdKaD/j4
6EqMgJ5mF4fU+67OPR9LKIoCUfVJe8tG7CFKu6KyOQT66XU7WZWb9hMQYlJ7mKZK
CuGfn9MudajeDkz+cdsYO7GS6Z8kCeA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:47:24 2024 by rpki-client on console-fra.rpki-client.org