Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8912ad6f-5d82-349c-b85a-5f7f5ef37607.roa
File:                     8912ad6f-5d82-349c-b85a-5f7f5ef37607.roa (raw, json)
Hash identifier:          5bjBg2zg6H2vpaTcCQ47jIEZ8sywCCB8KI7yHXBxXug=
Subject key identifier:   27:46:BD:50:1A:C8:A9:29:5C:5D:9E:18:BC:D0:9F:8D:F1:CB:62:94
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584761718CDFE71673ECBEB106A4
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8912ad6f-5d82-349c-b85a-5f7f5ef37607.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     216304
IP address blocks:        192.111.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8c:df:e7:16:73:ec:be:b1:06:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=ee167bd3-233f-417c-8a4d-3808f4a518aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:33:c8:a8:e5:2e:9b:f4:c7:c5:67:fb:d0:
                    09:e2:7e:2b:68:75:2f:45:67:e6:7f:97:c8:04:be:
                    b9:20:8b:20:5a:ee:ca:a8:49:ed:e1:5b:4d:9e:be:
                    cd:3e:78:62:2f:d0:19:ac:c9:a2:00:fd:36:fb:c5:
                    c3:da:d1:21:03:4b:69:28:b8:e3:2d:99:84:75:aa:
                    09:71:51:59:b0:de:c0:1d:e7:89:2f:02:7a:c4:d8:
                    55:99:9e:60:a8:d1:38:85:e8:25:8c:8d:f0:22:f4:
                    fa:54:74:da:7b:a1:16:c1:f6:fd:b2:73:4d:55:12:
                    6f:81:f7:82:21:3a:3c:fb:80:1d:b1:4d:c4:6e:7b:
                    a1:b0:6e:d3:c6:9f:61:76:c9:ac:6d:5c:27:9f:aa:
                    da:49:c1:40:55:ad:8c:cd:6b:4c:a1:d1:ae:32:8e:
                    68:12:82:21:6f:96:32:85:a9:83:c5:76:07:11:63:
                    8d:18:49:50:56:14:09:8d:2d:2e:31:59:15:8d:6b:
                    51:22:79:86:b4:81:14:e0:45:02:21:83:ca:25:81:
                    88:b9:5a:67:c8:98:f7:03:28:e7:e6:93:05:1b:34:
                    11:f8:8b:33:73:7d:27:11:4d:15:f7:da:5a:0b:e9:
                    75:1f:0d:23:f3:56:18:76:31:12:e2:f8:fa:02:e7:
                    23:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:BD:50:1A:C8:A9:29:5C:5D:9E:18:BC:D0:9F:8D:F1:CB:62:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8912ad6f-5d82-349c-b85a-5f7f5ef37607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:36:3f:56:eb:f8:47:83:64:b9:84:7c:c7:29:25:34:7d:68:
         ed:67:c0:ba:cd:f2:a3:23:7a:b9:b2:8f:95:cb:2c:5c:54:e1:
         0d:5c:ec:81:f3:9e:fe:a5:d3:24:55:56:48:b1:79:14:99:c7:
         e5:51:0f:b2:00:cf:cd:2d:e8:8e:f7:12:ea:96:32:9d:d3:f5:
         30:88:59:53:f5:cf:5a:1b:c5:05:25:1e:69:b8:8e:54:16:f3:
         2b:27:2f:4d:4d:32:12:45:02:6a:14:f8:24:97:c6:74:82:81:
         e5:10:bd:3a:87:8d:fc:c2:ac:fd:9b:f2:37:15:ad:0e:31:65:
         e8:1b:6f:3b:d4:fa:0c:4e:50:8f:fd:80:9b:f8:9a:1b:ef:a3:
         90:6b:c6:b8:45:93:92:b8:df:a7:88:e6:42:d9:86:c9:2d:17:
         fc:09:77:fa:5c:dd:00:88:0d:0d:42:0b:f8:55:5c:9d:5d:77:
         69:21:a4:09:6f:c5:d1:6c:85:ba:44:fb:64:d6:91:c7:bd:58:
         f9:35:48:ec:00:35:5c:2a:7b:8a:d2:46:08:dc:27:c7:36:51:
         ef:bb:10:7a:7e:56:03:82:23:99:9a:f3:65:ee:87:16:27:73:
         a0:9c:c3:9c:da:80:1c:0b:00:83:fa:fd:c7:ba:e6:c8:bd:3b:
         1b:54:c7:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdhcYzf5xZz7L6xBqQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1MDQyM2EtYjdhZS00ODc5LWE4ODAtZWEzYmU2ZTE5
M2E4MB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZWUxNjdiZDMtMjMzZi00MTdjLThhNGQtMzgwOGY0YTUxOGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP0zyKjlLpv0x8Vn+9AJ4n4raHUvRWfmf5fI
BL65IIsgWu7KqEnt4VtNnr7NPnhiL9AZrMmiAP02+8XD2tEhA0tpKLjjLZmEdaoJ
cVFZsN7AHeeJLwJ6xNhVmZ5gqNE4hegljI3wIvT6VHTae6EWwfb9snNNVRJvgfeC
ITo8+4AdsU3EbnuhsG7Txp9hdsmsbVwnn6raScFAVa2MzWtModGuMo5oEoIhb5Yy
hamDxXYHEWONGElQVhQJjS0uMVkVjWtRInmGtIEU4EUCIYPKJYGIuVpnyJj3Ayjn
5pMFGzQR+Iszc30nEU0V99paC+l1Hw0j81YYdjES4vj6AucjnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdGvVAayKkpXF2eGLzQn43xy2KUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUw
NDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNiZTZlMTkzYTgvODkxMmFkNmYtNWQ4Mi0z
NDljLWI4NWEtNWY3ZjVlZjM3NjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA1MDQyM2EtYjdhZS00ODc5LWE4
ODAtZWEzYmU2ZTE5M2E4LzkwNTA0MjNhLWI3YWUtNDg3OS1hODgwLWVhM2JlNmUx
OTNhOC5jcmwwHwYDVR0jBBgwFoAU58VCXqDfM4B3q4C4MBhJU0KltnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUwNDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNi
ZTZlMTkzYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwG9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL02P1br+EeDZLmEfMcpJTR9aO1nwLrN8qMjermyj5XLLFxU4Q1c7IHz
nv6l0yRVVkixeRSZx+VRD7IAz80t6I73EuqWMp3T9TCIWVP1z1obxQUlHmm4jlQW
8ysnL01NMhJFAmoU+CSXxnSCgeUQvTqHjfzCrP2b8jcVrQ4xZegbbzvU+gxOUI/9
gJv4mhvvo5BrxrhFk5K436eI5kLZhsktF/wJd/pc3QCIDQ1CC/hVXJ1dd2khpAlv
xdFshbpE+2TWkce9WPk1SOwANVwqe4rSRgjcJ8c2Ue+7EHp+VgOCI5ma82XuhxYn
c6Ccw5zagBwLAIP6/ce65si9OxtUx1I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:12 2024 by rpki-client on console-ams.rpki-client.org