Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/757ed140-a31e-39a3-8ca4-34123d3ce5dd.roa
File:                     757ed140-a31e-39a3-8ca4-34123d3ce5dd.roa (raw, json)
Hash identifier:          0FC6wNAQXmUnvypZ3R1JUvhkD40T6a7kfOTh52HLBQk=
Subject key identifier:   1B:AB:53:E1:FE:E3:37:00:4D:AF:4A:FA:75:C0:F7:B0:9B:49:49:47
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475EA62EF4B2857E5F611D5C00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/757ed140-a31e-39a3-8ca4-34123d3ce5dd.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     20940
IP address blocks:        165.254.145.64/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:2e:f4:b2:85:7e:5f:61:1d:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=8b873bac-df0f-430a-a2b9-2abf43f8eab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:67:46:dd:52:45:bc:db:16:0d:81:91:6c:83:
                    69:da:1e:6c:4b:93:9c:4a:16:31:f0:bc:82:33:53:
                    c9:c2:88:06:74:eb:b6:b6:21:7e:92:ac:96:0e:51:
                    ba:50:45:b7:5a:a9:18:cd:ca:e6:71:ee:e0:c5:62:
                    db:0c:d3:c7:5f:a0:db:af:44:cd:9c:11:a5:85:60:
                    d6:48:3b:93:2f:8e:ce:b1:a2:ab:91:9d:93:5b:ff:
                    e2:34:5a:df:bc:34:03:8c:2f:f4:3c:80:e6:53:0a:
                    49:02:65:82:c8:f4:b5:50:9a:c1:7b:83:e8:95:0b:
                    e6:c2:60:76:18:f8:ab:e0:0c:d8:10:aa:39:96:61:
                    9f:df:64:6c:8b:74:9a:d5:30:08:b3:af:31:3b:cf:
                    e6:96:88:5c:6a:b4:b2:39:24:d8:aa:c5:d3:22:d0:
                    6e:ba:0a:9d:fb:ff:b8:4e:3e:45:25:24:85:f4:eb:
                    98:52:bd:bf:05:9d:f6:6a:16:a8:44:98:cf:67:02:
                    b4:53:f0:16:23:9a:ef:03:c2:3f:13:0f:2f:aa:17:
                    14:dc:65:2e:b0:aa:80:e6:de:8a:e0:1e:5b:f0:08:
                    a4:03:3a:0d:b5:be:4c:ac:42:a8:f0:5f:7b:1d:a8:
                    a7:a4:f8:82:e3:13:b8:66:0f:d1:55:b8:be:74:98:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AB:53:E1:FE:E3:37:00:4D:AF:4A:FA:75:C0:F7:B0:9B:49:49:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/757ed140-a31e-39a3-8ca4-34123d3ce5dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.145.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:64:92:59:b2:ea:e5:48:21:f2:60:81:a0:87:09:20:76:
         c8:5e:d3:8b:ea:01:98:37:dc:47:83:e7:ab:ac:5e:f2:42:2a:
         a4:04:44:aa:9c:f0:20:a2:ca:d1:56:0a:a8:56:8f:4c:31:5f:
         41:88:66:e6:12:8b:c7:ad:d3:a8:37:22:7d:b2:32:b1:8d:93:
         b1:a9:2c:56:d7:3d:3d:b2:aa:52:67:aa:11:a3:7d:71:30:14:
         49:47:13:f8:f0:fe:e8:ab:57:b5:23:6f:8b:bf:da:80:a6:2c:
         e2:3f:0e:bb:07:0d:7d:e0:39:c8:4f:85:1f:d1:1a:27:26:89:
         b7:18:36:24:28:53:bb:3a:4a:c5:c7:01:df:b7:9e:90:7f:7f:
         3d:f7:20:53:13:2a:e1:8f:ec:62:2e:96:60:bb:9f:17:42:05:
         b3:ca:67:73:77:a1:0e:99:95:23:41:d3:f0:67:77:eb:90:f1:
         d1:ae:66:b7:80:f7:3a:9f:55:8e:cb:26:a7:90:95:96:26:0c:
         38:3a:21:e9:52:2c:72:ca:ac:ea:04:41:db:fc:db:de:f2:b5:
         58:23:99:7d:d6:ac:c7:a4:a3:e9:9c:fc:89:54:f5:01:bd:79:
         6c:21:2e:98:ad:f1:3c:b0:21:b0:d8:4d:43:af:09:5b:05:67:
         92:3d:8b:27
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdepi70soV+X2EdXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk
OGI4NzNiYWMtZGYwZi00MzBhLWEyYjktMmFiZjQzZjhlYWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWdG3VJFvNsWDYGRbINp2h5sS5OcShYx8LyC
M1PJwogGdOu2tiF+kqyWDlG6UEW3WqkYzcrmce7gxWLbDNPHX6Dbr0TNnBGlhWDW
SDuTL47OsaKrkZ2TW//iNFrfvDQDjC/0PIDmUwpJAmWCyPS1UJrBe4PolQvmwmB2
GPir4AzYEKo5lmGf32Rsi3Sa1TAIs68xO8/mlohcarSyOSTYqsXTItBuugqd+/+4
Tj5FJSSF9OuYUr2/BZ32ahaoRJjPZwK0U/AWI5rvA8I/Ew8vqhcU3GUusKqA5t6K
4B5b8AikAzoNtb5MrEKo8F97HainpPiC4xO4Zg/RVbi+dJjvnwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBurU+H+4zcATa9K+nXA97CbSUlHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzU3ZWQxNDAtYTMxZS0z
OWEzLThjYTQtMzQxMjNkM2NlNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGpf6RQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBz9mSSWbLq5Ugh8mCBoIcJIHbIXtOL6gGYN9xHg+errF7yQiqkBESq
nPAgosrRVgqoVo9MMV9BiGbmEovHrdOoNyJ9sjKxjZOxqSxW1z09sqpSZ6oRo31x
MBRJRxP48P7oq1e1I2+Lv9qApiziPw67Bw194DnIT4Uf0RonJom3GDYkKFO7OkrF
xwHft56Qf3899yBTEyrhj+xiLpZgu58XQgWzymdzd6EOmZUjQdPwZ3frkPHRrma3
gPc6n1WOyyankJWWJgw4OiHpUixyyqzqBEHb/Nve8rVYI5l91qzHpKPpnPyJVPUB
vXlsIS6YrfE8sCGw2E1DrwlbBWeSPYsn
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:13 2024 by rpki-client on console-ams.rpki-client.org