Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
File:                     5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa (raw, json)
Hash identifier:          pyQjcMvsEFrPsPQrhYoqjRTh3U9tSjuGhB8/8FkHwog=
Subject key identifier:   D4:B7:1C:4D:43:DF:86:89:04:39:39:EC:77:00:5C:EF:8A:A2:13:50
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F43285847DF2F5057C30EC25AC4B7AD80
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     396982
IP address blocks:        162.240.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:50:57:c3:0e:c2:5a:c4:b7:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=1f3e991d-9432-43dd-bd1f-f0b68d9a8b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:de:6e:82:81:de:f6:1a:29:3a:70:24:69:a7:
                    d6:8a:63:a4:fd:83:e3:b5:39:8e:ce:56:5e:b5:68:
                    9d:6c:c3:01:00:ae:ad:1f:07:ab:b1:a5:24:1e:50:
                    ae:5e:10:67:99:09:28:06:bb:48:32:58:9b:35:88:
                    70:ce:21:c4:8b:45:28:15:b2:56:65:7c:28:3b:fe:
                    96:59:26:b5:f1:9a:ea:55:6f:1a:b9:44:66:b4:08:
                    65:75:d5:b9:de:3f:2d:2e:7e:27:d0:0d:34:02:93:
                    64:5c:20:b9:3f:2a:58:17:c9:9a:10:60:66:ea:72:
                    53:80:f3:58:62:94:cc:03:3b:15:59:8c:ce:a7:73:
                    a2:af:32:84:01:79:dd:2a:75:01:d1:46:f2:3e:06:
                    bb:57:64:a9:cf:35:fd:98:35:1d:7d:d9:40:2d:89:
                    bc:2b:cd:b6:38:bf:32:4a:23:19:0d:b1:59:b0:32:
                    d1:83:3b:a2:6e:5f:a8:08:2c:a0:87:57:26:1e:b1:
                    76:32:f9:d3:a0:e4:90:07:41:a3:ee:b6:58:f2:9d:
                    b7:45:89:49:a3:05:6a:be:8b:95:6a:4c:77:3f:f3:
                    f9:92:ff:92:42:13:7a:c8:65:1e:cb:96:58:9e:83:
                    cd:be:65:b7:f4:80:fb:ea:c4:0c:80:fa:38:03:de:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B7:1C:4D:43:DF:86:89:04:39:39:EC:77:00:5C:EF:8A:A2:13:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.240.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5c:34:57:28:cd:1c:f2:d1:f2:c8:31:22:6c:f3:f4:b0:36:
         7a:0e:46:78:a9:34:5c:87:97:b6:23:59:cb:7d:0b:9b:39:6c:
         6e:76:54:5f:5a:34:a9:d8:40:4d:cb:f4:c9:1d:3d:52:31:44:
         81:3f:3f:f8:f2:97:82:be:24:00:7b:35:16:53:38:d8:6d:77:
         29:f4:17:16:c3:f2:14:ba:35:74:59:79:51:04:dd:31:b9:86:
         aa:32:10:ea:ad:9f:79:a7:42:4e:80:f3:3b:cf:d1:e8:c6:a9:
         df:74:07:5a:1c:0b:98:82:32:6a:99:bf:6d:b3:8e:62:06:32:
         4f:7b:ee:0c:cd:0d:4f:a6:ea:01:4e:e9:31:af:a6:c5:97:f2:
         c2:8c:82:6e:01:99:62:58:61:26:55:d2:ea:0b:55:63:ca:b1:
         2b:f7:ff:28:f3:db:44:84:93:1e:dc:93:db:77:c6:8b:a8:db:
         88:78:d1:2f:18:94:53:48:8f:86:90:48:4e:9a:3f:79:29:cc:
         5b:e4:cc:ad:a2:8f:61:a3:a0:74:0d:53:3e:52:88:97:82:ad:
         09:87:5e:57:0f:a8:7d:ff:74:f7:e4:a2:8b:5d:d6:13:f5:7b:
         bc:1a:97:68:c5:96:59:67:cd:01:d6:c0:da:cd:cf:6e:e6:d4:
         b2:db:36:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL1BXww7CWsS3rYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk
MWYzZTk5MWQtOTQzMi00M2RkLWJkMWYtZjBiNjhkOWE4YjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot5ugoHe9hopOnAkaafWimOk/YPjtTmOzlZe
tWidbMMBAK6tHwersaUkHlCuXhBnmQkoBrtIMlibNYhwziHEi0UoFbJWZXwoO/6W
WSa18ZrqVW8auURmtAhlddW53j8tLn4n0A00ApNkXCC5PypYF8maEGBm6nJTgPNY
YpTMAzsVWYzOp3OirzKEAXndKnUB0UbyPga7V2SpzzX9mDUdfdlALYm8K822OL8y
SiMZDbFZsDLRgzuibl+oCCygh1cmHrF2MvnToOSQB0Gj7rZY8p23RYlJowVqvouV
akx3P/P5kv+SQhN6yGUey5ZYnoPNvmW39ID76sQMgPo4A94VVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNS3HE1D34aJBDk57HcAXO+KohNQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvNTU3NmJiZmUtMWQ2Ni0z
ZDIzLWIyNWUtNTZlNWQzMzdkM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEovDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlcNFcozRzy0fLIMSJs8/SwNnoORnipNFyHl7YjWct9C5s5bG52VF9a
NKnYQE3L9MkdPVIxRIE/P/jyl4K+JAB7NRZTONhtdyn0FxbD8hS6NXRZeVEE3TG5
hqoyEOqtn3mnQk6A8zvP0ejGqd90B1ocC5iCMmqZv22zjmIGMk977gzNDU+m6gFO
6TGvpsWX8sKMgm4BmWJYYSZV0uoLVWPKsSv3/yjz20SEkx7ck9t3xouo24h40S8Y
lFNIj4aQSE6aP3kpzFvkzK2ij2GjoHQNUz5SiJeCrQmHXlcPqH3/dPfkootd1hP1
e7wal2jFlllnzQHWwNrNz27m1LLbNuM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:21 2024 by rpki-client on console-ams.rpki-client.org