Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa
File:                     0e27b779-c984-3088-944e-5d6cf8237999.roa (raw, json)
Hash identifier:          U0fmNY0VVtSsgMLrl+ydesSnXGMQGqWd71GtIduzkXc=
Subject key identifier:   01:D9:E6:72:C5:01:77:A8:48:88:57:89:0B:34:7B:BE:39:C5:9D:D2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B5FF00EB9A9E78D69CE6D30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa
Signing time:             Mon 16 Sep 2024 09:45:57 +0000
ROA not before:           Mon 16 Sep 2024 09:45:57 +0000
ROA not after:            Sun 15 Dec 2024 10:45:57 +0000
asID:                     13335
IP address blocks:        162.159.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:5f:f0:0e:b9:a9:e7:8d:69:ce:6d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 16 09:45:57 2024 GMT
            Not After : Dec 15 10:45:57 2024 GMT
        Subject: CN=513d28ee-e027-4778-ab12-28180930a937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:59:df:94:9b:34:83:05:d1:30:02:cb:ec:
                    8a:c0:d5:20:22:06:5f:b9:b5:53:84:25:85:8b:f2:
                    29:cd:4b:4a:5d:50:cd:4c:0e:e0:ca:e8:d5:33:3d:
                    9a:42:6d:83:b7:43:e1:17:c9:5c:55:35:cd:ea:e1:
                    ab:22:7e:80:b5:1f:38:99:74:2b:20:9f:b0:3c:d9:
                    16:a1:05:8d:31:c0:17:83:57:b7:39:27:12:e5:91:
                    71:bd:86:a2:43:d7:83:43:fc:14:39:ad:c7:47:4e:
                    64:d0:63:0d:34:c8:d1:78:2e:ab:1b:18:c3:26:c2:
                    ea:a9:68:dd:e5:26:6a:4f:25:90:11:f8:8c:2b:be:
                    a4:d7:82:69:59:08:29:42:f2:bc:d7:14:3a:b1:e7:
                    de:fd:c8:ef:a7:41:97:79:48:8e:c7:80:77:f9:08:
                    a5:ed:f5:98:f3:8a:94:72:10:6b:32:ea:0c:b8:5e:
                    0f:82:6f:d1:ba:2d:65:36:9c:2c:1d:a5:39:35:23:
                    7b:76:9e:bb:dd:c0:33:18:e6:99:44:8d:5d:1a:5c:
                    81:b1:75:99:f1:4c:1f:5d:7d:da:bb:5c:b1:24:ec:
                    fb:66:da:b5:88:da:3a:28:0b:08:60:0c:57:5a:74:
                    3b:d3:97:ca:86:26:63:90:61:3b:f2:5a:8b:77:8f:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D9:E6:72:C5:01:77:A8:48:88:57:89:0B:34:7B:BE:39:C5:9D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:eb:27:26:fb:f1:d4:14:14:f9:24:1f:07:26:6c:0d:6f:66:
         92:ed:84:bb:3c:77:db:c8:e8:8c:d8:5d:58:88:a6:af:c0:3d:
         76:96:2d:4a:24:30:1e:d7:2d:0b:79:d6:ad:b8:29:65:e7:84:
         bb:59:ce:4b:f6:f8:d8:71:fa:f0:7c:38:a8:ff:8c:0e:60:cc:
         92:90:b3:c9:d3:9e:a5:d5:2b:70:87:19:40:92:f8:f7:76:21:
         92:0a:06:c2:37:15:59:ab:d3:4e:10:d2:e4:b9:6d:0e:4b:24:
         bd:7d:0e:77:43:44:3c:c8:f6:d4:ea:26:f3:57:60:fa:37:cd:
         94:47:8b:be:1d:b4:22:49:38:0a:c2:1e:5b:69:1b:99:f9:6a:
         ba:f0:4b:3b:c5:1e:b4:e7:07:29:b5:00:f0:38:ed:12:e4:62:
         d9:03:3c:e4:ed:6d:07:2a:50:a7:e1:c7:95:c9:6d:90:11:ad:
         0d:2f:ae:d6:33:31:14:40:51:6c:d7:fa:64:7d:dc:8a:3c:f5:
         08:4e:23:f4:82:c1:40:ca:80:c9:2d:4e:dc:04:75:cf:c5:2f:
         e1:3b:d0:e3:2b:6e:c0:62:e5:c9:32:da:98:73:94:00:06:36:
         e1:a1:5f:3a:8c:b9:e1:7c:f0:6c:dc:36:1b:f2:20:04:7f:0a:
         62:99:68:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7X/AOuannjWnObTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDkxNjA5NDU1N1oXDTI0MTIxNTEwNDU1N1owLzEtMCsGA1UEAxMk
NTEzZDI4ZWUtZTAyNy00Nzc4LWFiMTItMjgxODA5MzBhOTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCJZ35SbNIMF0TACy+yKwNUgIgZfubVThCWF
i/IpzUtKXVDNTA7gyujVMz2aQm2Dt0PhF8lcVTXN6uGrIn6AtR84mXQrIJ+wPNkW
oQWNMcAXg1e3OScS5ZFxvYaiQ9eDQ/wUOa3HR05k0GMNNMjReC6rGxjDJsLqqWjd
5SZqTyWQEfiMK76k14JpWQgpQvK81xQ6sefe/cjvp0GXeUiOx4B3+Qil7fWY84qU
chBrMuoMuF4Pgm/Rui1lNpwsHaU5NSN7dp673cAzGOaZRI1dGlyBsXWZ8UwfXX3a
u1yxJOz7Ztq1iNo6KAsIYAxXWnQ705fKhiZjkGE78lqLd4/Z9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHZ5nLFAXeoSIhXiQs0e745xZ3SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGUyN2I3NzktYzk4NC0z
MDg4LTk0NGUtNWQ2Y2Y4MjM3OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop8QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvrJyb78dQUFPkkHwcmbA1vZpLthLs8d9vI6IzYXViIpq/APXaWLUok
MB7XLQt51q24KWXnhLtZzkv2+Nhx+vB8OKj/jA5gzJKQs8nTnqXVK3CHGUCS+Pd2
IZIKBsI3FVmr004Q0uS5bQ5LJL19DndDRDzI9tTqJvNXYPo3zZRHi74dtCJJOArC
HltpG5n5arrwSzvFHrTnBym1APA47RLkYtkDPOTtbQcqUKfhx5XJbZARrQ0vrtYz
MRRAUWzX+mR93Io89QhOI/SCwUDKgMktTtwEdc/FL+E70OMrbsBi5cky2phzlAAG
NuGhXzqMueF88GzcNhvyIAR/CmKZaO4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:53 2024 by rpki-client on console-fra.rpki-client.org