Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/002be3cf-71a8-37fb-9061-7877ebe3758f.roa
File:                     002be3cf-71a8-37fb-9061-7877ebe3758f.roa (raw, json)
Hash identifier:          yNsy+YfJWkmusZ0pUoIMPj2CHPYjQMK5PoJPK+Sib90=
Subject key identifier:   56:95:16:9F:D7:DF:AC:CE:C4:9C:9F:FD:83:45:6C:7B:38:2A:01:8A
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405C9A24EF2774600EBA600
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/002be3cf-71a8-37fb-9061-7877ebe3758f.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     11537
IP address blocks:        163.253.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c9:a2:4e:f2:77:46:00:eb:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=e8fc12fa-6f58-4acc-a7c8-98b421bddf6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:d7:87:21:35:29:6a:c2:16:6c:47:81:c1:
                    f8:f7:3b:72:75:26:57:00:d5:ad:8b:9b:1f:e2:ed:
                    ce:6c:f0:ed:8d:1e:12:43:fb:98:f9:a1:14:0f:d5:
                    51:b7:1c:f4:a3:3c:ee:b3:14:a4:12:b1:e6:69:bd:
                    83:3e:80:e5:99:9d:49:18:33:35:96:bd:51:48:55:
                    f6:7c:8d:0c:d4:a2:24:72:c2:41:2c:41:c9:92:3c:
                    85:55:b3:1d:f9:28:27:7c:37:40:36:4f:96:66:ea:
                    05:ed:d0:c4:46:60:08:fd:21:d3:b7:15:7f:15:a0:
                    99:82:17:04:3b:44:17:db:b2:6a:4e:e2:69:fb:0d:
                    d8:45:89:fc:44:f2:2a:25:e0:68:9f:c3:ce:bd:57:
                    fe:2f:56:a9:51:e9:1e:f3:96:60:96:e2:ed:ca:13:
                    3b:c0:12:01:03:cd:d4:cd:55:cc:b9:b0:45:e2:2c:
                    fe:49:86:72:40:73:bd:f4:7b:bc:f1:78:5d:c3:fa:
                    31:78:a3:f0:61:ec:f4:4e:30:90:e3:a1:c5:b6:94:
                    89:50:46:64:c3:7a:a8:da:cc:86:96:84:db:88:7f:
                    c4:e6:b3:26:ae:21:f8:fd:74:0a:68:d8:6d:fc:04:
                    6d:76:ec:58:1e:4a:b6:e4:32:78:0e:63:19:fa:7b:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:16:9F:D7:DF:AC:CE:C4:9C:9F:FD:83:45:6C:7B:38:2A:01:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/002be3cf-71a8-37fb-9061-7877ebe3758f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:17:91:1c:06:fa:16:ff:b7:6e:37:81:e6:03:e0:23:7b:
         e3:d9:1e:58:76:4e:1f:46:16:3a:44:58:1c:bf:ae:b4:5f:ad:
         13:34:af:8a:a3:5a:10:b1:64:4a:3c:73:74:9a:a8:2d:d2:5d:
         8a:26:af:4f:8a:81:cc:ab:dd:1f:f9:c2:ce:00:80:7e:cd:14:
         33:3a:2a:5b:71:ea:da:a6:65:93:35:78:34:a0:5a:b8:61:9e:
         e3:ac:21:47:cc:a4:9c:98:0b:62:4e:38:6d:a3:c9:0c:26:5e:
         72:13:73:e9:0b:9a:46:57:9e:9e:6a:8d:b2:82:80:c8:2c:1c:
         00:ef:1c:6e:5f:46:94:b7:c2:80:e7:93:18:c7:24:b8:06:f3:
         fe:a7:71:e2:40:fb:fc:0e:5f:cf:1e:84:65:a1:c4:2c:c3:e7:
         8d:c7:20:e7:ec:53:ec:32:fe:5d:a8:90:01:9a:2b:3a:07:ce:
         1a:47:93:90:6e:4b:5e:a9:61:d7:d8:1c:3a:c9:c0:1c:b5:17:
         e4:17:43:61:bd:36:c7:b5:c9:ea:a0:ed:88:1f:fb:97:58:78:
         40:51:3b:60:b4:80:62:f9:b9:da:d0:2f:ae:5f:ba:72:87:0a:
         97:92:81:74:2f:16:ae:32:df:a5:4d:da:88:b2:65:43:98:cb:
         f3:39:16:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBcmiTvJ3RgDrpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZThmYzEyZmEtNmY1OC00YWNjLWE3YzgtOThiNDIxYmRkZjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJjXhyE1KWrCFmxHgcH49ztydSZXANWti5sf
4u3ObPDtjR4SQ/uY+aEUD9VRtxz0ozzusxSkErHmab2DPoDlmZ1JGDM1lr1RSFX2
fI0M1KIkcsJBLEHJkjyFVbMd+SgnfDdANk+WZuoF7dDERmAI/SHTtxV/FaCZghcE
O0QX27JqTuJp+w3YRYn8RPIqJeBon8POvVf+L1apUeke85ZgluLtyhM7wBIBA83U
zVXMubBF4iz+SYZyQHO99Hu88Xhdw/oxeKPwYez0TjCQ46HFtpSJUEZkw3qo2syG
loTbiH/E5rMmriH4/XQKaNht/ARtduxYHkq25DJ4DmMZ+nvZqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFaVFp/X36zOxJyf/YNFbHs4KgGKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMDAyYmUzY2YtNzFhOC0z
N2ZiLTkwNjEtNzg3N2ViZTM3NThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHTF5EcBvoW/7duN4HmA+Aje+PZHlh2Th9GFjpEWBy/rrRfrRM0r4qj
WhCxZEo8c3SaqC3SXYomr0+Kgcyr3R/5ws4AgH7NFDM6Kltx6tqmZZM1eDSgWrhh
nuOsIUfMpJyYC2JOOG2jyQwmXnITc+kLmkZXnp5qjbKCgMgsHADvHG5fRpS3woDn
kxjHJLgG8/6nceJA+/wOX88ehGWhxCzD543HIOfsU+wy/l2okAGaKzoHzhpHk5Bu
S16pYdfYHDrJwBy1F+QXQ2G9Nse1yeqg7Ygf+5dYeEBRO2C0gGL5udrQL65funKH
CpeSgXQvFq4y36VN2oiyZUOYy/M5FjU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:45 2024 by rpki-client on console-fra.rpki-client.org