Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4265008f-3b4c-3399-b947-c689ea5e2dfc.roa
File:                     4265008f-3b4c-3399-b947-c689ea5e2dfc.roa (raw, json)
Hash identifier:          k55zjON9rpxL7f7sbHck6H1YaBYrtxOtDct0Yx54kNU=
Subject key identifier:   D8:92:B3:B9:8D:78:DC:F6:85:26:AC:EA:C3:1E:5B:57:08:CA:7E:8F
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285847872121241AB2C27C7C3F9640
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4265008f-3b4c-3399-b947-c689ea5e2dfc.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     4181
IP address blocks:        129.189.0.0/16 maxlen: 24
                          167.237.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:21:24:1a:b2:c2:7c:7c:3f:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=6454e5c4-24fd-4f4c-9e7b-65bbed45bab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:46:88:48:c1:44:23:f8:58:61:05:42:bf:
                    89:51:f1:da:6a:21:ff:7b:d9:05:8b:82:8e:1a:7c:
                    98:d0:55:5d:d1:ca:8e:fe:7a:4f:ac:5f:b3:37:26:
                    ee:d0:52:52:23:3d:d2:62:3d:6b:17:fb:87:4a:1f:
                    18:66:41:01:91:39:36:f9:ef:5e:d8:2e:0f:2b:a8:
                    55:64:57:a0:bc:43:7f:88:c4:33:05:f0:da:9b:63:
                    81:77:4a:62:8b:8f:e0:ac:7e:dd:53:a9:eb:fa:89:
                    a1:ad:b8:bb:ac:77:1d:63:fe:bb:35:3b:77:51:6f:
                    43:e7:d0:a8:1e:36:cd:67:40:46:48:9b:fc:51:63:
                    7f:0a:34:e7:dd:df:8d:69:3d:80:e3:d8:a3:9b:85:
                    52:1b:1b:52:35:3d:1a:4f:2e:b0:18:63:f5:cb:eb:
                    22:14:5f:a9:5d:da:35:7f:22:da:3f:5a:ac:21:b8:
                    27:77:b9:ed:3a:55:9a:2a:4c:68:03:f0:78:a1:3b:
                    39:35:b3:13:29:15:fc:ec:4b:67:1e:d3:16:57:da:
                    5d:0d:65:48:34:85:cd:c5:06:84:e0:e6:c3:4a:7d:
                    06:40:03:7d:34:05:29:05:ab:13:1e:55:5f:2f:c3:
                    f9:1a:b0:f0:ba:60:38:3b:0d:f2:70:15:21:85:f7:
                    6b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:92:B3:B9:8D:78:DC:F6:85:26:AC:EA:C3:1E:5B:57:08:CA:7E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4265008f-3b4c-3399-b947-c689ea5e2dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.189.0.0/16
                  167.237.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:83:4a:d7:71:9a:7d:09:51:eb:45:9c:8f:59:8a:5d:15:14:
         82:68:97:f6:08:ff:d4:bb:0c:ae:d3:ca:3c:58:4e:a4:48:4d:
         f4:8d:03:80:69:34:10:d0:58:f2:33:82:1e:81:ae:8a:7c:b1:
         00:2b:10:77:01:81:dc:a3:fd:ce:1d:99:bb:cb:d3:2a:4f:21:
         19:df:21:a8:b3:77:49:48:ed:bf:1f:26:08:5e:b4:d9:42:04:
         95:fb:84:52:51:b1:ab:54:ab:55:a9:2d:6b:d9:21:65:1e:9a:
         21:5f:58:7f:b8:a4:26:de:8d:be:4f:3f:4d:30:ca:a9:02:19:
         cd:b4:cc:6e:68:dd:49:98:0d:3f:52:39:f5:d6:7e:0e:97:79:
         c2:6c:47:68:f2:7a:df:c0:c9:8d:56:95:30:f5:d8:76:af:d3:
         ac:fd:a3:ee:65:57:ee:32:96:86:a8:7b:95:b0:26:b2:04:35:
         d7:ab:e1:b2:e6:02:77:3e:7f:4e:25:46:ca:1a:df:0e:d6:22:
         c4:5d:08:c0:8c:8c:5d:f5:b7:ec:9f:d6:39:fa:66:ad:b2:9f:
         a0:23:11:f8:fa:8a:75:04:84:64:47:f7:b6:1c:dd:7b:88:ed:
         8e:8c:96:28:c6:ca:50:cd:61:94:58:d2:11:8e:f7:9e:19:3c:
         be:99:15:37
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEeHISEkGrLCfHw/lkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI0MTAxMzEzMDA0MloXDTI1MDExMTE0MDA0MlowLzEtMCsGA1UEAxMk
NjQ1NGU1YzQtMjRmZC00ZjRjLTllN2ItNjViYmVkNDViYWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDpGiEjBRCP4WGEFQr+JUfHaaiH/e9kFi4KO
GnyY0FVd0cqO/npPrF+zNybu0FJSIz3SYj1rF/uHSh8YZkEBkTk2+e9e2C4PK6hV
ZFegvEN/iMQzBfDam2OBd0pii4/grH7dU6nr+omhrbi7rHcdY/67NTt3UW9D59Co
HjbNZ0BGSJv8UWN/CjTn3d+NaT2A49ijm4VSGxtSNT0aTy6wGGP1y+siFF+pXdo1
fyLaP1qsIbgnd7ntOlWaKkxoA/B4oTs5NbMTKRX87EtnHtMWV9pdDWVINIXNxQaE
4ObDSn0GQAN9NAUpBasTHlVfL8P5GrDwumA4Ow3ycBUhhfdruQIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFNiSs7mNeNz2hSas6sMeW1cIyn6PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvNDI2NTAwOGYtM2I0Yy0z
Mzk5LWI5NDctYzY4OWVhNWUyZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgb0DAwCn
7TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQCGg0rXcZp9CVHrRZyPWYpdFRSCaJf2CP/Uuwyu08o8WE6kSE30
jQOAaTQQ0FjyM4Iega6KfLEAKxB3AYHco/3OHZm7y9MqTyEZ3yGos3dJSO2/HyYI
XrTZQgSV+4RSUbGrVKtVqS1r2SFlHpohX1h/uKQm3o2+Tz9NMMqpAhnNtMxuaN1J
mA0/Ujn11n4Ol3nCbEdo8nrfwMmNVpUw9dh2r9Os/aPuZVfuMpaGqHuVsCayBDXX
q+Gy5gJ3Pn9OJUbKGt8O1iLEXQjAjIxd9bfsn9Y5+matsp+gIxH4+op1BIRkR/e2
HN17iO2OjJYoxspQzWGUWNIRjveeGTy+mRU3
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:47 2024 by rpki-client on console-ams.rpki-client.org