Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1420da40-f5ad-3dca-9e74-2967059640ba.roa
File:                     1420da40-f5ad-3dca-9e74-2967059640ba.roa (raw, json)
Hash identifier:          EG8tkv79zsrmmA5/IsmtZskzzRVLRzhPqQgywYg4pe4=
Subject key identifier:   75:22:D2:84:0C:65:7D:2D:95:12:F9:86:46:D8:89:B9:ED:CB:03:67
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285847E03366A2E1FE8C2930560080
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1420da40-f5ad-3dca-9e74-2967059640ba.roa
Signing time:             Thu 14 Nov 2024 10:44:35 +0000
ROA not before:           Thu 14 Nov 2024 10:44:35 +0000
ROA not after:            Wed 12 Feb 2025 10:44:35 +0000
asID:                     16509
IP address blocks:        155.226.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:33:66:a2:e1:fe:8c:29:30:56:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Nov 14 10:44:35 2024 GMT
            Not After : Feb 12 10:44:35 2025 GMT
        Subject: CN=899e19da-91b9-4c8d-9726-4fb62154b0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:93:58:2a:3f:88:13:ac:cc:a9:32:9c:16:
                    7f:46:55:c2:ef:5e:bc:56:cd:8d:38:ee:f9:41:7d:
                    19:96:13:4d:5d:ff:e8:d2:0c:79:95:9e:f5:6c:e6:
                    5a:c4:43:c9:65:64:a6:96:c7:b3:04:8c:4e:08:9b:
                    59:ed:3c:d3:11:da:d4:e4:78:fb:7f:9c:6c:71:96:
                    50:f2:0b:63:4d:9b:0f:7f:81:db:16:8b:5e:3a:d4:
                    30:c4:8e:96:67:03:3b:67:75:45:80:97:08:01:62:
                    c2:9b:93:89:0d:c1:aa:50:a8:8e:92:ca:a0:75:83:
                    63:9c:b0:03:5d:b9:8f:66:e9:8b:96:27:e4:ea:87:
                    0d:62:a8:ea:8c:ef:07:09:67:49:e2:94:af:32:46:
                    2e:ee:02:6a:80:99:00:f5:eb:15:5e:d9:86:33:00:
                    69:27:bd:14:1e:bd:fe:c4:9f:40:01:4a:25:82:98:
                    c0:29:06:b8:f2:80:3c:84:65:62:19:29:f0:58:0b:
                    0e:c5:7d:db:5d:85:47:1a:9a:36:6b:28:16:93:61:
                    f1:53:de:ea:3e:24:be:58:c6:12:a7:cd:11:50:e3:
                    c2:5d:1a:67:bd:e9:3e:8a:17:2b:82:17:d5:12:43:
                    ab:d0:4f:6b:a8:c0:e2:ad:a6:5c:26:75:13:a6:d6:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:22:D2:84:0C:65:7D:2D:95:12:F9:86:46:D8:89:B9:ED:CB:03:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/1420da40-f5ad-3dca-9e74-2967059640ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:83:3d:b6:6a:09:e8:7c:12:e0:cd:88:a3:60:ab:5c:b6:9d:
         c9:fc:0d:31:eb:1b:04:ea:42:77:23:3b:ef:39:6f:7b:86:73:
         f2:13:0b:6f:58:7a:e6:92:1e:3c:78:21:d2:01:d9:53:1d:28:
         d0:bb:97:64:5d:1a:e7:f3:30:bf:d1:a3:a0:ad:13:f2:f9:c6:
         a4:7d:2b:a3:e6:1f:4c:91:7d:0e:96:4d:b7:e1:26:66:21:1b:
         6c:6f:8a:c9:4e:3f:4e:16:67:d4:dc:ab:d5:71:16:6f:ac:a1:
         ee:da:68:92:fa:0d:7c:b8:0b:e1:4f:f2:fa:98:6b:14:08:22:
         af:f4:1e:80:42:cd:d0:1d:b8:e0:57:ac:bd:07:7d:c1:b5:41:
         02:cb:10:bd:cf:ae:3e:ec:d1:25:a0:b4:2e:3f:43:73:d1:c9:
         80:7e:5f:44:11:c0:2b:60:ca:ed:8f:e4:2d:b4:39:b9:a3:68:
         41:87:1c:db:7a:a7:c2:cd:7f:64:78:02:30:90:74:62:0b:b8:
         83:a3:7e:55:54:1c:f1:d3:e6:1c:10:12:7b:70:5f:c6:54:a2:
         0d:42:53:ce:21:2a:f8:78:b2:e5:13:23:3a:f1:89:52:01:9c:
         ff:42:c6:5e:86:d4:10:50:4e:97:7c:80:94:36:11:70:88:6f:
         3c:69:81:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfgM2ai4f6MKTBWAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI0MTExNDEwNDQzNVoXDTI1MDIxMjEwNDQzNVowLzEtMCsGA1UEAxMk
ODk5ZTE5ZGEtOTFiOS00YzhkLTk3MjYtNGZiNjIxNTRiMGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms2TWCo/iBOszKkynBZ/RlXC7168Vs2NOO75
QX0ZlhNNXf/o0gx5lZ71bOZaxEPJZWSmlsezBIxOCJtZ7TzTEdrU5Hj7f5xscZZQ
8gtjTZsPf4HbFoteOtQwxI6WZwM7Z3VFgJcIAWLCm5OJDcGqUKiOksqgdYNjnLAD
XbmPZumLlifk6ocNYqjqjO8HCWdJ4pSvMkYu7gJqgJkA9esVXtmGMwBpJ70UHr3+
xJ9AAUolgpjAKQa48oA8hGViGSnwWAsOxX3bXYVHGpo2aygWk2HxU97qPiS+WMYS
p80RUOPCXRpnvek+ihcrghfVEkOr0E9rqMDiraZcJnUTptYIzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHUi0oQMZX0tlRL5hkbYibntywNnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMTQyMGRhNDAtZjVhZC0z
ZGNhLTllNzQtMjk2NzA1OTY0MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm+IgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6DPbZqCeh8EuDNiKNgq1y2ncn8DTHrGwTqQncjO+85b3uGc/ITC29Y
euaSHjx4IdIB2VMdKNC7l2RdGufzML/Ro6CtE/L5xqR9K6PmH0yRfQ6WTbfhJmYh
G2xvislOP04WZ9Tcq9VxFm+soe7aaJL6DXy4C+FP8vqYaxQIIq/0HoBCzdAduOBX
rL0HfcG1QQLLEL3Prj7s0SWgtC4/Q3PRyYB+X0QRwCtgyu2P5C20ObmjaEGHHNt6
p8LNf2R4AjCQdGILuIOjflVUHPHT5hwQEntwX8ZUog1CU84hKvh4suUTIzrxiVIB
nP9Cxl6G1BBQTpd8gJQ2EXCIbzxpgZc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:18 2024 by rpki-client on console-ams.rpki-client.org