Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2719a8cc-cce9-37e0-86d6-3ae5a1d10a5a.roa
File:                     2719a8cc-cce9-37e0-86d6-3ae5a1d10a5a.roa (raw, json)
Hash identifier:          1oQ3fDu4gUk1LrRPjPCrj0UWJkuYRry6sD0j64we3Ps=
Subject key identifier:   DA:B1:38:3E:AD:83:74:E7:E1:0D:A8:78:51:28:9B:83:39:D5:9A:07
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7FA48617
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2719a8cc-cce9-37e0-86d6-3ae5a1d10a5a.roa
Signing time:             Mon 30 Sep 2019 00:49:11 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     22633
IP address blocks:        165.254.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:a4:86:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=99770857-7aca-4f67-8c4b-9d5b7365c6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:31:1a:94:88:00:f3:8a:d3:ab:bd:5e:e0:
                    94:7f:fa:96:49:ab:50:4a:19:9f:41:4e:2e:13:65:
                    ac:46:30:9b:86:0c:75:43:0a:7c:43:1e:ad:89:a3:
                    53:4d:78:30:03:27:d1:19:64:d3:f8:a4:fd:9e:2c:
                    45:2e:bf:90:27:83:a1:b6:e1:df:09:7a:2f:fd:0b:
                    61:51:55:cf:0e:58:6d:05:5d:1c:76:d2:15:42:31:
                    58:7f:5d:3b:c7:32:17:36:cc:e7:d3:73:c2:7b:3d:
                    76:95:85:d7:88:09:18:03:b1:49:c5:f3:95:c6:c7:
                    12:3b:f6:49:cc:f5:3e:f8:06:5a:83:09:29:83:61:
                    67:40:31:60:47:b2:c6:c9:f5:86:45:db:27:63:a0:
                    c2:b0:d0:17:e7:0c:5e:7d:10:e4:22:fe:df:88:24:
                    35:cc:45:1f:a3:09:a9:5c:a9:f6:96:b0:13:33:1c:
                    9f:61:12:4d:ca:39:a0:60:af:92:c6:1b:cc:c8:9f:
                    d1:09:00:10:f1:3f:ad:36:ed:85:6c:c0:f1:81:fd:
                    35:83:8a:3f:17:07:e8:99:d0:36:30:02:66:3f:b4:
                    93:fb:7d:41:a6:f8:74:9d:06:a3:a3:71:08:60:e4:
                    7a:4b:c4:d8:84:bd:3a:8d:60:c2:55:9c:89:9e:bf:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B1:38:3E:AD:83:74:E7:E1:0D:A8:78:51:28:9B:83:39:D5:9A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2719a8cc-cce9-37e0-86d6-3ae5a1d10a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:64:7b:a9:d5:bc:66:e8:14:ff:d2:cb:3c:56:b4:be:17:
         ff:18:ea:3d:1d:7b:68:57:38:92:8e:b7:a3:dd:61:1a:0c:0a:
         c3:54:f0:90:68:62:45:0a:72:d0:3e:e8:4d:95:91:6a:ca:73:
         fd:c1:0a:43:ff:3d:2c:7b:d1:29:9a:80:d2:34:78:ad:18:1c:
         f3:97:56:14:21:aa:eb:08:97:95:74:e0:79:13:0f:f8:78:a9:
         10:bc:dd:47:05:2b:32:f8:93:a9:ef:6f:dc:59:d7:8d:cc:04:
         4a:21:47:10:ae:06:f0:29:52:1e:76:73:0e:71:76:b9:e0:6e:
         47:7d:15:c2:6a:eb:ac:29:54:cb:d8:2d:7d:bd:47:46:95:58:
         8f:57:88:44:11:d1:5b:57:eb:8d:32:4a:49:a5:38:41:ca:c0:
         d7:ff:ec:0a:45:e7:f0:91:16:e0:32:98:d2:52:90:a0:89:f2:
         83:8d:2f:57:ef:0f:16:3e:ee:d4:93:66:c7:cd:94:f9:77:71:
         d3:b7:6f:dc:66:2a:f9:76:21:52:27:46:9f:c8:49:f6:be:44:
         3a:19:81:e9:2c:ed:93:2c:a5:75:2e:e7:18:12:cd:cd:11:da:
         0e:56:67:51:09:e7:a2:99:61:03:6e:30:87:02:7a:0c:46:58:
         af:14:b1:16
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbX+khhcwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDk5
NzcwODU3LTdhY2EtNGY2Ny04YzRiLTlkNWI3MzY1YzZlYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAK89MRqUiADzitOrvV7glH/6lkmrUEoZn0FOLhNl
rEYwm4YMdUMKfEMerYmjU014MAMn0Rlk0/ik/Z4sRS6/kCeDobbh3wl6L/0LYVFV
zw5YbQVdHHbSFUIxWH9dO8cyFzbM59Nzwns9dpWF14gJGAOxScXzlcbHEjv2Scz1
PvgGWoMJKYNhZ0AxYEeyxsn1hkXbJ2OgwrDQF+cMXn0Q5CL+34gkNcxFH6MJqVyp
9pawEzMcn2ESTco5oGCvksYbzMif0QkAEPE/rTbthWzA8YH9NYOKPxcH6JnQNjAC
Zj+0k/t9Qab4dJ0Go6NxCGDkekvE2IS9Oo1gwlWciZ6/l0MCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTasTg+rYN05+ENqHhRKJuDOdWaBzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzI3MTlhOGNjLWNjZTktMzdl
MC04NmQ2LTNhZTVhMWQxMGE1YS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKX+8jBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAOPBke6nVvGboFP/SyzxWtL4X/xjqPR17aFc4ko63o91hGgwKw1TwkGhiRQpy
0D7oTZWRaspz/cEKQ/89LHvRKZqA0jR4rRgc85dWFCGq6wiXlXTgeRMP+HipELzd
RwUrMviTqe9v3FnXjcwESiFHEK4G8ClSHnZzDnF2ueBuR30VwmrrrClUy9gtfb1H
RpVYj1eIRBHRW1frjTJKSaU4QcrA1//sCkXn8JEW4DKY0lKQoInyg40vV+8PFj7u
1JNmx82U+Xdx07dv3GYq+XYhUidGn8hJ9r5EOhmB6SztkyyldS7nGBLNzRHaDlZn
UQnnoplhA24whwJ6DEZYrxSxFg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:59 2024 by rpki-client on console-fra.rpki-client.org