Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/a9091f7e-3fbe-3215-9318-6fdc9e2138b9.roa
File:                     a9091f7e-3fbe-3215-9318-6fdc9e2138b9.roa (raw, json)
Hash identifier:          fV6X1iwiygdIsqTNNS2fEcPyNY+AWfv3pZFpJWJst5A=
Subject key identifier:   53:71:B0:4C:BC:47:F0:48:20:3B:D1:6F:03:FF:29:CC:8E:22:96:B4
Certificate issuer:       /CN=d689207a-c713-4157-97a1-5bb990bd3816
Certificate serial:       010D0C9F432858472405C54A7376155254098E40
Authority key identifier: C9:B3:C7:F4:BA:34:D4:0E:33:66:60:6E:75:59:F9:43:9E:75:34:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/a9091f7e-3fbe-3215-9318-6fdc9e2138b9.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        192.225.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/d689207a-c713-4157-97a1-5bb990bd3816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/d689207a-c713-4157-97a1-5bb990bd3816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c5:4a:73:76:15:52:54:09:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d689207a-c713-4157-97a1-5bb990bd3816
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=d979adfe-9d44-468c-a6c9-238fa67ac77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:15:d8:fa:6f:49:ad:49:db:85:7a:48:ea:
                    c7:eb:40:b2:00:34:31:5c:1b:7c:eb:ad:3e:2e:ff:
                    f1:2a:cd:84:8f:af:7b:2e:98:af:1d:4a:52:49:12:
                    df:f6:36:7a:6c:55:93:df:95:80:0e:73:51:07:09:
                    ae:00:72:96:eb:ef:4a:db:68:81:be:b9:25:04:0f:
                    8c:21:a6:0b:64:25:3f:44:ee:98:8f:5f:94:95:46:
                    5d:91:69:2b:c0:a4:3d:d4:16:7d:e1:ab:28:ea:00:
                    7e:f5:7b:13:c5:83:53:49:93:89:4a:e9:5f:35:de:
                    a3:fb:ca:d8:51:18:16:9d:62:c3:2e:46:82:37:60:
                    3d:8e:bd:28:28:6c:86:8a:cd:07:48:0f:49:84:1f:
                    6c:8d:ac:48:4a:90:09:a9:e8:cd:ad:81:8b:53:e6:
                    c4:72:43:66:80:a4:af:33:81:90:a0:70:c6:e9:36:
                    61:ee:a5:7e:98:8c:1d:6a:c6:7a:86:c1:ac:4f:1b:
                    43:c0:56:c5:33:e7:e3:32:c6:e2:ae:56:d0:40:06:
                    b0:df:1e:46:8b:bf:00:72:6f:4f:bc:32:74:84:a8:
                    14:a7:97:a5:13:62:a1:e3:b2:81:27:39:49:82:a3:
                    e7:f1:18:93:e1:5b:6c:a9:41:86:bc:b4:a6:08:36:
                    68:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:71:B0:4C:BC:47:F0:48:20:3B:D1:6F:03:FF:29:CC:8E:22:96:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/a9091f7e-3fbe-3215-9318-6fdc9e2138b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/d689207a-c713-4157-97a1-5bb990bd3816.crl

            X509v3 Authority Key Identifier:
                keyid:C9:B3:C7:F4:BA:34:D4:0E:33:66:60:6E:75:59:F9:43:9E:75:34:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:95:eb:73:b6:0a:33:3a:1e:bd:5e:ec:2e:57:64:b9:57:39:
         ef:14:31:7f:43:28:91:a6:22:68:07:7a:97:c5:2c:eb:24:56:
         9e:16:bc:f3:bc:cc:0e:10:c3:29:47:37:7d:28:51:a4:06:77:
         b4:67:38:b2:c2:af:75:ca:2e:b3:ec:93:20:3b:8d:d3:d9:bb:
         14:61:61:5d:7a:85:6d:41:cc:12:ad:43:ed:d1:f2:64:e2:c8:
         04:e4:01:38:26:d0:6e:ea:4b:29:ec:15:15:08:0a:0f:b5:ab:
         93:04:a4:2e:76:d9:9f:39:a4:8a:fa:df:c6:48:6f:f9:e2:08:
         74:f2:4b:65:77:4a:39:9e:54:a2:59:13:b6:15:b9:e9:c9:77:
         28:5c:88:78:92:80:f1:59:ba:c2:f5:e8:c5:94:e2:e0:14:62:
         aa:42:8d:cd:22:0e:e8:03:2a:a8:b5:e0:44:b0:7c:16:b6:70:
         22:b7:d1:8d:74:e4:78:6f:b3:ca:2f:e5:60:77:c2:a6:50:e7:
         c2:ed:06:6e:19:c8:03:73:de:35:01:22:f0:c9:27:5d:04:11:
         3f:e0:34:b6:29:fe:79:8c:13:8c:a9:bb:2e:8a:b7:86:90:5a:
         79:bc:51:63:6d:57:72:80:bd:15:99:9b:4c:15:0c:7c:0e:9f:
         e6:96:4c:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBcVKc3YVUlQJjkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDY4OTIwN2EtYzcxMy00MTU3LTk3YTEtNWJiOTkwYmQz
ODE2MB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZDk3OWFkZmUtOWQ0NC00NjhjLWE2YzktMjM4ZmE2N2FjNzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9wV2PpvSa1J24V6SOrH60CyADQxXBt8660+
Lv/xKs2Ej697LpivHUpSSRLf9jZ6bFWT35WADnNRBwmuAHKW6+9K22iBvrklBA+M
IaYLZCU/RO6Yj1+UlUZdkWkrwKQ91BZ94aso6gB+9XsTxYNTSZOJSulfNd6j+8rY
URgWnWLDLkaCN2A9jr0oKGyGis0HSA9JhB9sjaxISpAJqejNrYGLU+bEckNmgKSv
M4GQoHDG6TZh7qV+mIwdasZ6hsGsTxtDwFbFM+fjMsbirlbQQAaw3x5Gi78Acm9P
vDJ0hKgUp5elE2Kh47KBJzlJgqPn8RiT4VtsqUGGvLSmCDZoEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNxsEy8R/BIIDvRbwP/KcyOIpa0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjg5
MjA3YS1jNzEzLTQxNTctOTdhMS01YmI5OTBiZDM4MTYvYTkwOTFmN2UtM2ZiZS0z
MjE1LTkzMTgtNmZkYzllMjEzOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY4OTIwN2EtYzcxMy00MTU3LTk3
YTEtNWJiOTkwYmQzODE2L2Q2ODkyMDdhLWM3MTMtNDE1Ny05N2ExLTViYjk5MGJk
MzgxNi5jcmwwHwYDVR0jBBgwFoAUybPH9Lo01A4zZmBudVn5Q551NLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjg5MjA3YS1jNzEzLTQxNTctOTdhMS01YmI5
OTBiZDM4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOHaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOV63O2CjM6Hr1e7C5XZLlXOe8UMX9DKJGmImgHepfFLOskVp4WvPO8
zA4QwylHN30oUaQGd7RnOLLCr3XKLrPskyA7jdPZuxRhYV16hW1BzBKtQ+3R8mTi
yATkATgm0G7qSynsFRUICg+1q5MEpC522Z85pIr638ZIb/niCHTyS2V3SjmeVKJZ
E7YVuenJdyhciHiSgPFZusL16MWU4uAUYqpCjc0iDugDKqi14ESwfBa2cCK30Y10
5Hhvs8ov5WB3wqZQ58LtBm4ZyANz3jUBIvDJJ10EET/gNLYp/nmME4ypuy6Kt4aQ
Wnm8UWNtV3KAvRWZm0wVDHwOn+aWTHY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:21 2024 by rpki-client on console-ams.rpki-client.org