Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2087e3-ca3d-3e7f-a491-0731c7927092.roa
File:                     3d2087e3-ca3d-3e7f-a491-0731c7927092.roa (raw, json)
Hash identifier:          /3OMrRe4bvuIBiioyX/aasNR+Ek9H77VT0lpmEsijew=
Subject key identifier:   0F:89:81:0A:3A:16:58:AD:BB:B7:57:5D:49:6B:53:0B:F2:10:C8:62
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F803691
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2087e3-ca3d-3e7f-a491-0731c7927092.roa
Signing time:             Mon 30 Sep 2019 00:09:32 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     7019
IP address blocks:        165.254.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:80:36:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=19fcc976-546b-4740-8722-fbeb211def3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:42:a9:3a:bc:6e:fb:ab:fc:2e:c5:fd:d8:
                    e9:a8:89:c2:10:b4:c3:9d:91:19:7c:68:05:28:2f:
                    b9:ec:c3:13:49:99:0e:d2:5f:fe:9b:f0:6e:4b:63:
                    57:d3:a1:9b:c5:78:f8:a6:6a:20:9b:92:ad:b2:e2:
                    c9:10:9c:15:da:8f:4f:4c:e5:e2:c4:fc:ed:76:cd:
                    d3:98:30:41:a6:45:72:12:11:f3:90:18:ad:be:80:
                    18:fc:9d:34:9d:49:07:95:79:66:3d:a7:9c:d5:57:
                    5e:f3:a2:84:78:59:f5:a0:49:ce:ac:e3:de:0f:e3:
                    4e:35:34:af:fe:a9:50:1d:ed:d0:c1:f8:f7:16:d9:
                    12:e2:ff:30:40:19:73:f6:ad:21:62:3a:35:6d:38:
                    25:3d:21:3b:dd:a7:9b:10:5c:67:ca:1d:13:32:03:
                    76:06:bd:d0:8e:72:e1:58:dc:d6:6b:81:01:b0:55:
                    84:44:4f:98:96:98:cb:fb:00:cf:79:f4:c6:ad:ba:
                    6e:de:64:0a:b3:fe:63:9b:f0:6d:19:29:9f:21:52:
                    24:49:9c:d2:a9:15:fd:f5:e4:11:e8:71:be:62:86:
                    fe:8a:ab:0f:a8:38:cf:b4:74:11:08:67:a3:35:51:
                    2c:be:f1:0b:d1:dc:01:ea:1b:e5:cc:a3:03:93:82:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:89:81:0A:3A:16:58:AD:BB:B7:57:5D:49:6B:53:0B:F2:10:C8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2087e3-ca3d-3e7f-a491-0731c7927092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f5:61:47:dc:b2:32:27:b9:c0:27:da:6a:88:5f:39:58:46:
         e0:ff:43:31:7b:36:6b:ad:f0:eb:c3:08:3d:20:19:df:18:d2:
         3a:dd:d0:00:29:27:c3:11:fb:4b:8e:76:05:3c:bc:bb:13:43:
         cf:ea:40:a8:44:60:04:52:d8:7f:81:12:f5:a2:19:2d:6a:bf:
         4a:e3:6f:0d:30:97:19:fb:c7:f9:ab:cd:78:4b:f0:f7:22:a4:
         a8:2e:fb:ad:bc:e9:38:9d:ad:fb:d5:23:ff:69:70:e1:14:c0:
         cb:e8:7a:25:f3:17:96:b6:3a:a2:ac:9e:86:e6:61:1c:f3:70:
         df:85:87:70:35:1a:68:a6:b0:2f:f7:60:44:f8:08:68:f3:52:
         58:1a:41:09:59:00:b9:d2:10:5a:78:54:71:4b:77:b3:53:18:
         1a:d6:e7:a1:f6:41:6a:b1:91:24:f9:44:b6:5b:5f:ff:a8:f9:
         b7:4a:8a:c2:12:29:92:93:d1:70:61:9d:67:e0:fa:14:b3:a1:
         ba:26:c8:f1:b2:3b:10:42:90:a3:a7:e2:af:17:c7:6a:df:0c:
         5a:a7:1a:80:57:11:92:77:2b:14:85:9c:b3:2f:b9:e4:d2:71:
         20:5c:66:6f:c7:ab:07:a1:7b:56:8c:7c:da:0a:02:60:0e:88:
         26:13:ae:fe
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbX+ANpEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDE5
ZmNjOTc2LTU0NmItNDc0MC04NzIyLWZiZWIyMTFkZWYzYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMC1Qqk6vG77q/wuxf3Y6aiJwhC0w52RGXxoBSgv
uezDE0mZDtJf/pvwbktjV9Ohm8V4+KZqIJuSrbLiyRCcFdqPT0zl4sT87XbN05gw
QaZFchIR85AYrb6AGPydNJ1JB5V5Zj2nnNVXXvOihHhZ9aBJzqzj3g/jTjU0r/6p
UB3t0MH49xbZEuL/MEAZc/atIWI6NW04JT0hO92nmxBcZ8odEzIDdga90I5y4Vjc
1muBAbBVhERPmJaYy/sAz3n0xq26bt5kCrP+Y5vwbRkpnyFSJEmc0qkV/fXkEehx
vmKG/oqrD6g4z7R0EQhnozVRLL7xC9HcAeob5cyjA5OC8t8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQPiYEKOhZYrbu3V11Ja1ML8hDIYjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzNkMjA4N2UzLWNhM2QtM2U3
Zi1hNDkxLTA3MzFjNzkyNzA5Mi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKX+KzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAkvVhR9yyMie5wCfaaohfOVhG4P9DMXs2a63w68MIPSAZ3xjSOt3QACknwxH7
S452BTy8uxNDz+pAqERgBFLYf4ES9aIZLWq/SuNvDTCXGfvH+avNeEvw9yKkqC77
rbzpOJ2t+9Uj/2lw4RTAy+h6JfMXlrY6oqyehuZhHPNw34WHcDUaaKawL/dgRPgI
aPNSWBpBCVkAudIQWnhUcUt3s1MYGtbnofZBarGRJPlEtltf/6j5t0qKwhIpkpPR
cGGdZ+D6FLOhuibI8bI7EEKQo6firxfHat8MWqcagFcRkncrFIWcsy+55NJxIFxm
b8erB6F7Vox82goCYA6IJhOu/g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:10 2024 by rpki-client on console-ams.rpki-client.org