Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa
File:                     d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa (raw, json)
Hash identifier:          Hh1cioupeGw3B3aKaoeuZSsmpZDjdJO0CS6RFiCe/Z0=
Subject key identifier:   6B:07:86:08:EC:53:C6:B9:F0:3F:64:AE:60:C2:02:79:A2:8B:86:11
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F432858471E709B629C4AD1AE37AE00C0
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     62695
IP address blocks:        162.246.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:9b:62:9c:4a:d1:ae:37:ae:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=0087991c-18e4-47a8-974a-0696cff3cb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:31:0e:ec:97:60:fc:3e:56:a0:0b:39:60:
                    7c:b3:47:2b:56:ae:36:e7:26:b3:df:bf:3d:56:f4:
                    dd:a3:d9:30:4a:12:ba:fd:79:a2:e7:66:67:61:a8:
                    8b:64:70:5a:e2:ed:51:f0:af:9c:b8:4e:9e:b7:4e:
                    cb:fe:de:1d:29:cc:24:59:5d:9e:b0:44:af:b2:79:
                    96:71:49:80:ff:61:a6:a6:99:3a:09:be:be:0b:2f:
                    12:6f:c8:af:e9:94:41:25:3f:92:b8:b1:bf:12:d4:
                    67:45:60:48:9e:e3:61:f8:46:f7:df:43:60:df:c1:
                    32:de:66:1b:4f:ab:5d:bf:b4:43:78:1d:dd:1f:1a:
                    81:1d:8a:52:d1:d7:3f:e8:0c:d4:12:5e:5c:a5:49:
                    25:94:2c:a7:2e:d4:c9:74:5a:b4:36:ec:56:ec:84:
                    5d:81:cb:95:e9:2e:e0:01:7f:bf:6d:f9:f8:27:8b:
                    d6:ba:d9:50:54:32:0c:67:40:da:39:ea:99:1d:f6:
                    ac:1c:34:e1:3a:87:cf:1e:1d:f3:59:ad:7c:8e:d6:
                    b9:54:03:4e:0a:28:f5:e3:92:40:8c:34:59:bd:dc:
                    27:c3:57:a3:85:09:6c:f4:79:f9:81:d2:89:a1:dc:
                    a0:4d:64:f9:a8:5b:8c:a9:ae:73:4c:9a:47:77:ac:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:86:08:EC:53:C6:B9:F0:3F:64:AE:60:C2:02:79:A2:8B:86:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/d352ca4f-8b63-3dcb-92f6-b64c3ee6a787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:14:83:b2:67:06:06:ab:67:d0:e1:df:90:4c:a7:a5:5b:dd:
         f6:43:4a:71:cb:90:29:29:04:25:7b:1b:c0:02:f7:44:96:25:
         03:ed:f6:f1:6c:b0:15:f8:84:06:6f:b5:6e:9b:80:f5:b2:46:
         9a:93:bc:7d:03:3d:59:60:09:d1:a6:d7:1a:06:20:ce:b2:93:
         74:77:e8:cc:4e:71:a1:7a:7c:b8:c6:d4:9e:51:5f:bf:d2:ba:
         66:dd:ce:20:87:32:10:dc:cb:93:2b:cd:f8:af:91:95:d2:c9:
         c0:d9:49:e0:17:fd:b4:84:be:5a:14:e7:8c:c3:c5:09:90:47:
         8e:19:e7:df:5e:f8:c7:ad:9f:d5:8b:55:47:46:bd:bb:73:d8:
         3a:80:f2:76:28:43:0d:ed:60:0a:55:32:6c:7b:9e:cb:6f:94:
         e3:fd:f0:4d:c7:9d:a5:44:98:bf:a1:a2:73:64:23:2c:5a:d2:
         e7:24:22:c4:da:d0:b9:6e:bb:4c:58:40:0c:b3:f2:93:a7:20:
         39:93:fc:44:11:8c:be:66:4e:c3:bb:c1:64:2e:f0:15:ca:db:
         46:c4:cf:f5:0e:1b:f9:f4:1a:94:63:d5:f4:d2:29:b4:b8:8b:
         5a:87:7d:d6:a9:9b:e2:97:98:f5:ff:68:87:ef:24:87:08:63:
         0c:47:5f:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecJtinErRrjeuAMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFhYmQ0ZDItZDAwNy00N2NlLWFlYjEtMDk4ZjlkYjJj
YzgxMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
MDA4Nzk5MWMtMThlNC00N2E4LTk3NGEtMDY5NmNmZjNjYjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGgxDuyXYPw+VqALOWB8s0crVq425yaz3789
VvTdo9kwShK6/Xmi52ZnYaiLZHBa4u1R8K+cuE6et07L/t4dKcwkWV2esESvsnmW
cUmA/2Gmppk6Cb6+Cy8Sb8iv6ZRBJT+SuLG/EtRnRWBInuNh+Eb330Ng38Ey3mYb
T6tdv7RDeB3dHxqBHYpS0dc/6AzUEl5cpUkllCynLtTJdFq0NuxW7IRdgcuV6S7g
AX+/bfn4J4vWutlQVDIMZ0DaOeqZHfasHDThOofPHh3zWa18jta5VANOCij145JA
jDRZvdwnw1ejhQls9Hn5gdKJodygTWT5qFuMqa5zTJpHd6y63wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsHhgjsU8a58D9krmDCAnmii4YRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFi
ZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThmOWRiMmNjODEvZDM1MmNhNGYtOGI2My0z
ZGNiLTkyZjYtYjY0YzNlZTZhNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmFhYmQ0ZDItZDAwNy00N2NlLWFl
YjEtMDk4ZjlkYjJjYzgxL2ZhYWJkNGQyLWQwMDctNDdjZS1hZWIxLTA5OGY5ZGIy
Y2M4MS5jcmwwHwYDVR0jBBgwFoAUxUfVTESwcD5oVY8GruvS/C3QaawwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFiZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThm
OWRiMmNjODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovYsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0Ug7JnBgarZ9Dh35BMp6Vb3fZDSnHLkCkpBCV7G8AC90SWJQPt9vFs
sBX4hAZvtW6bgPWyRpqTvH0DPVlgCdGm1xoGIM6yk3R36MxOcaF6fLjG1J5RX7/S
umbdziCHMhDcy5MrzfivkZXSycDZSeAX/bSEvloU54zDxQmQR44Z599e+Metn9WL
VUdGvbtz2DqA8nYoQw3tYApVMmx7nstvlOP98E3HnaVEmL+honNkIyxa0uckIsTa
0Lluu0xYQAyz8pOnIDmT/EQRjL5mTsO7wWQu8BXK20bEz/UOG/n0GpRj1fTSKbS4
i1qHfdapm+KXmPX/aIfvJIcIYwxHX1k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:05 2024 by rpki-client on console-fra.rpki-client.org