Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0413fdf9-9ac3-31a7-aa3b-6076a69c57e9.roa
File:                     0413fdf9-9ac3-31a7-aa3b-6076a69c57e9.roa (raw, json)
Hash identifier:          8fFYNOqFNeDbanUH2OZO8mgS8zLO+Fim9uqmGS2dowo=
Subject key identifier:   D4:5E:3B:BA:B1:36:6B:FB:00:9D:7E:59:FC:A4:26:E6:79:E6:75:FD
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285847A4712EF66496157885A78300
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0413fdf9-9ac3-31a7-aa3b-6076a69c57e9.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     396450
IP address blocks:        163.253.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:2e:f6:64:96:15:78:85:a7:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=8e0ef3f9-52c4-48f8-87a9-2b49d6070104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4b:e4:6d:9e:d6:dd:b2:f6:7b:a3:d8:f8:d2:
                    2f:6f:71:d5:b8:6f:b3:c7:f0:79:e6:d9:a2:c7:48:
                    e9:f2:a3:80:84:b8:b3:ee:ae:ab:49:9c:d4:2b:39:
                    63:59:5f:c6:cc:60:e3:ac:ad:84:de:ca:89:f7:d2:
                    9a:60:41:6a:12:e9:1a:1f:ba:b6:c6:de:dd:10:84:
                    12:37:3c:2a:4a:47:ba:08:74:2d:2e:d6:89:24:09:
                    ab:e5:b7:85:99:c9:ee:74:2f:97:d4:5d:69:a4:6b:
                    b6:c2:13:a7:64:c7:01:fa:88:7c:fc:07:ca:64:c1:
                    aa:f4:11:a6:48:58:4e:ea:e3:00:2b:ee:0f:c8:bc:
                    0c:af:55:03:1d:90:51:97:df:3c:74:da:c7:49:05:
                    95:ac:9b:15:9c:59:8e:9b:b2:99:b5:5c:e1:d9:76:
                    2b:a3:69:dc:1e:aa:6c:74:fd:eb:6d:66:0c:1c:72:
                    5f:0f:55:13:54:12:1c:30:b5:85:1c:0e:6b:9a:79:
                    02:42:72:97:82:d5:44:5b:49:fc:9c:bd:6e:15:cb:
                    35:08:09:81:30:7f:d1:6c:f6:f8:52:92:b2:ca:b6:
                    0e:86:3e:98:80:ff:8d:e2:cf:21:9f:46:62:ea:90:
                    1d:30:0e:1a:62:65:eb:e6:ec:62:a0:cb:86:ea:de:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5E:3B:BA:B1:36:6B:FB:00:9D:7E:59:FC:A4:26:E6:79:E6:75:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0413fdf9-9ac3-31a7-aa3b-6076a69c57e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:80:64:94:9f:a3:78:08:4d:a2:20:aa:92:d5:81:c9:9e:3d:
         3c:f4:de:62:30:a2:bf:c6:c0:f4:e6:b8:6d:79:30:58:a9:8a:
         cd:23:b6:a0:5f:e3:db:57:3b:3f:4b:84:3b:6e:f4:ee:d5:94:
         7b:23:36:08:40:96:cc:7f:9a:cc:d4:9e:d7:26:35:42:88:01:
         f4:13:83:7a:24:c7:3d:7a:0e:eb:29:53:05:b3:04:43:6e:52:
         7a:6a:7b:fa:69:70:f1:44:33:7d:d9:53:ad:6a:8a:1d:71:ba:
         aa:a9:65:1f:c0:39:83:95:0f:d5:6d:2f:a6:42:29:b7:db:a3:
         6b:78:be:06:9d:9c:be:b4:90:b6:f8:8e:6b:79:36:fd:d3:13:
         dc:83:42:e5:52:e7:fe:11:ba:85:c1:db:8b:0b:3c:9a:b4:02:
         c5:81:28:a6:f9:0c:81:6e:ed:33:67:99:50:27:ed:86:50:88:
         2e:51:5e:ce:06:2d:17:6b:d4:3c:3b:fd:ca:1a:42:1e:8b:67:
         ae:df:9b:0b:45:a3:58:4d:aa:b5:c0:77:95:cd:72:d3:3d:37:
         f2:67:0e:e8:a2:27:09:ae:06:dc:43:ff:9d:c3:72:bf:3e:9a:
         5b:72:88:0d:2e:5e:a7:c1:97:38:76:df:b9:45:7e:85:45:be:
         fc:15:9e:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekcS72ZJYVeIWngwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk
OGUwZWYzZjktNTJjNC00OGY4LTg3YTktMmI0OWQ2MDcwMTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEvkbZ7W3bL2e6PY+NIvb3HVuG+zx/B55tmi
x0jp8qOAhLiz7q6rSZzUKzljWV/GzGDjrK2E3sqJ99KaYEFqEukaH7q2xt7dEIQS
NzwqSke6CHQtLtaJJAmr5beFmcnudC+X1F1ppGu2whOnZMcB+oh8/AfKZMGq9BGm
SFhO6uMAK+4PyLwMr1UDHZBRl988dNrHSQWVrJsVnFmOm7KZtVzh2XYro2ncHqps
dP3rbWYMHHJfD1UTVBIcMLWFHA5rmnkCQnKXgtVEW0n8nL1uFcs1CAmBMH/RbPb4
UpKyyrYOhj6YgP+N4s8hn0Zi6pAdMA4aYmXr5uxioMuG6t5FxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNReO7qxNmv7AJ1+WfykJuZ55nX9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMDQxM2ZkZjktOWFjMy0z
MWE3LWFhM2ItNjA3NmE2OWM1N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2AZJSfo3gITaIgqpLVgcmePTz03mIwor/GwPTmuG15MFipis0jtqBf
49tXOz9LhDtu9O7VlHsjNghAlsx/mszUntcmNUKIAfQTg3okxz16DuspUwWzBENu
Unpqe/ppcPFEM33ZU61qih1xuqqpZR/AOYOVD9VtL6ZCKbfbo2t4vgadnL60kLb4
jmt5Nv3TE9yDQuVS5/4RuoXB24sLPJq0AsWBKKb5DIFu7TNnmVAn7YZQiC5RXs4G
LRdr1Dw7/coaQh6LZ67fmwtFo1hNqrXAd5XNctM9N/JnDuiiJwmuBtxD/53Dcr8+
mltyiA0uXqfBlzh237lFfoVFvvwVnog=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:55 2024 by rpki-client on console-ams.rpki-client.org