Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/01e54b78-48ee-3135-895f-85f89bc96c96.roa
File:                     01e54b78-48ee-3135-895f-85f89bc96c96.roa (raw, json)
Hash identifier:          OD0XdbktIghH9dDsUZ/y+LzWj5Owh3x6f4IpbA2jckk=
Subject key identifier:   F4:58:0F:BC:E3:C4:90:0E:31:4C:63:65:A6:3A:F3:7A:1B:58:0C:91
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E3D6F0095
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/01e54b78-48ee-3135-895f-85f89bc96c96.roa
Signing time:             Tue 05 Nov 2019 21:18:35 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     17054
IP address blocks:        204.156.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:3d:6f:00:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=2549ba89-dd5d-4670-8610-d39623416e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:87:04:1f:8c:ce:63:08:de:b7:3f:17:d0:
                    c9:e4:39:ab:ea:0b:77:b8:4b:87:aa:a8:af:ff:ae:
                    76:70:41:c8:85:04:3b:b9:b0:8f:82:58:fa:be:11:
                    7a:16:8b:9b:f0:43:5f:fc:b3:33:f8:01:ec:da:d5:
                    92:28:e6:cd:59:9f:fb:28:6f:5b:e1:e5:4a:99:6f:
                    7e:71:09:8c:76:23:98:58:9f:42:43:07:38:2a:a0:
                    6a:3a:20:65:11:0a:17:0c:7a:27:f1:cf:fa:99:eb:
                    48:08:44:ef:53:bb:71:c7:d6:27:a8:ad:19:f5:95:
                    7e:50:ab:4d:55:4c:ca:21:17:57:58:c8:ee:c6:03:
                    d0:f7:c9:c6:0f:2b:bc:57:1b:f1:b2:8e:a9:8c:7a:
                    36:c9:8e:6a:5a:2e:9b:42:91:71:92:6c:d7:ba:61:
                    db:50:bb:3f:0e:42:7a:28:4c:a1:03:e5:7a:f3:c4:
                    e5:ac:45:d6:72:9c:bf:12:03:06:8d:a5:83:e7:8d:
                    d3:6d:d2:4d:ad:de:eb:eb:ce:0c:c8:76:2f:79:f1:
                    2b:6b:99:b4:55:23:00:c3:ef:18:e4:71:08:86:48:
                    8f:4b:6a:7f:4e:ab:43:aa:dc:f4:73:d1:f9:38:05:
                    04:93:86:90:ff:98:bd:21:ed:4d:0f:19:2b:0d:88:
                    85:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:58:0F:BC:E3:C4:90:0E:31:4C:63:65:A6:3A:F3:7A:1B:58:0C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/01e54b78-48ee-3135-895f-85f89bc96c96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2b:1f:1c:8a:6d:b7:1f:d2:76:2d:06:d0:f7:00:5f:c1:e0:
         a5:5d:e5:a2:4c:9f:c8:18:f4:2c:80:71:36:6a:94:f6:6e:da:
         bc:3a:57:57:5f:0c:74:9f:4b:1c:24:3d:8d:f7:3c:3a:8b:01:
         ed:84:d1:29:91:9a:69:23:04:69:78:25:8c:e0:e1:49:78:e4:
         65:9b:05:8f:9e:48:dd:e0:95:15:94:a7:0d:8d:32:54:f7:c2:
         25:0d:bd:b1:51:43:6d:a8:12:b8:be:8f:00:f2:ec:c6:fd:49:
         34:58:8e:f1:77:32:20:49:d6:48:c9:27:f5:e2:5f:e2:77:80:
         8d:13:17:78:55:18:40:b3:bd:6f:a8:50:29:bf:ff:a3:f7:35:
         86:95:d6:39:72:3c:27:a3:6b:7d:1b:10:68:13:3f:65:35:40:
         64:ae:9e:52:ee:1b:5a:9b:31:8a:39:4c:6a:04:67:44:6c:03:
         57:1e:2e:71:38:92:14:1c:b5:f2:f4:ad:ee:37:83:0a:16:c7:
         56:13:47:1c:32:c9:86:84:14:07:ab:1e:fe:44:e1:bf:3f:96:
         5e:2e:f5:95:d6:fb:03:ca:fb:e0:62:86:9d:4b:4a:9c:02:a7:
         22:8d:cd:2c:4c:12:08:a8:2b:ca:53:13:36:b9:17:78:19:2f:
         e6:9a:82:d1
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbj1vAJUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDI1
NDliYTg5LWRkNWQtNDY3MC04NjEwLWQzOTYyMzQxNmU2MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMnfhwQfjM5jCN63PxfQyeQ5q+oLd7hLh6qor/+u
dnBByIUEO7mwj4JY+r4RehaLm/BDX/yzM/gB7NrVkijmzVmf+yhvW+HlSplvfnEJ
jHYjmFifQkMHOCqgajogZREKFwx6J/HP+pnrSAhE71O7ccfWJ6itGfWVflCrTVVM
yiEXV1jI7sYD0PfJxg8rvFcb8bKOqYx6NsmOaloum0KRcZJs17ph21C7Pw5CeihM
oQPlevPE5axF1nKcvxIDBo2lg+eN023STa3e6+vODMh2L3nxK2uZtFUjAMPvGORx
CIZIj0tqf06rQ6rc9HPR+TgFBJOGkP+YvSHtTQ8ZKw2IhXECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT0WA+848SQDjFMY2WmOvN6G1gMkTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzAxZTU0Yjc4LTQ4ZWUtMzEz
NS04OTVmLTg1Zjg5YmM5NmM5Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMycGDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAMCsfHIpttx/Sdi0G0PcAX8HgpV3lokyfyBj0LIBxNmqU9m7avDpXV18MdJ9L
HCQ9jfc8OosB7YTRKZGaaSMEaXgljODhSXjkZZsFj55I3eCVFZSnDY0yVPfCJQ29
sVFDbagSuL6PAPLsxv1JNFiO8XcyIEnWSMkn9eJf4neAjRMXeFUYQLO9b6hQKb//
o/c1hpXWOXI8J6NrfRsQaBM/ZTVAZK6eUu4bWpsxijlMagRnRGwDVx4ucTiSFBy1
8vSt7jeDChbHVhNHHDLJhoQUB6se/kThvz+WXi71ldb7A8r74GKGnUtKnAKnIo3N
LEwSCKgrylMTNrkXeBkv5pqC0Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:57 2024 by rpki-client on console-fra.rpki-client.org