Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/bf44ef86-5382-37ad-a8c6-7028498f62e6.roa
File:                     bf44ef86-5382-37ad-a8c6-7028498f62e6.roa (raw, json)
Hash identifier:          45/r8VwIadvgRTI3090fBcqjChwWCIu95JlhlmsMXdk=
Subject key identifier:   B6:0E:4A:A2:4B:5E:6B:D0:A2:25:83:B5:BF:AF:52:A7:8B:47:4A:8B
Certificate issuer:       /CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
Certificate serial:       010D0C9F43285847299B295E565DE47021344CE0
Authority key identifier: 69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/bf44ef86-5382-37ad-a8c6-7028498f62e6.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     15718
IP address blocks:        185.115.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:29:5e:56:5d:e4:70:21:34:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=6beb2378-dc88-4cfc-901b-a676c507e8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:08:39:f5:ec:20:97:4d:f7:92:21:91:85:
                    89:b1:64:13:b2:3b:34:48:ed:a9:a1:40:6d:ae:ec:
                    23:21:e0:c5:4c:18:47:63:56:28:af:1c:11:d0:3d:
                    1e:71:35:b2:6a:5f:f2:69:e9:01:08:c8:ec:6c:29:
                    09:10:a2:cd:89:54:88:8a:7a:6f:50:34:49:e9:08:
                    fa:8d:e0:4e:67:0a:1b:15:a8:66:11:b1:9c:48:76:
                    ed:49:5b:27:56:78:b5:66:c5:53:09:a0:af:c4:b5:
                    f8:26:17:0f:3c:d4:3c:ec:73:5d:ea:42:72:6a:c4:
                    8e:e6:07:41:5f:08:9a:3f:a3:91:5f:4e:6e:d5:7a:
                    3b:d2:e1:ce:f3:39:b4:7e:4f:82:80:43:41:36:6b:
                    ed:ab:f3:36:10:d3:38:e6:bb:a1:79:6b:2f:79:0d:
                    0a:8d:38:c2:c9:a5:de:43:3a:d3:5c:c4:f3:a7:7b:
                    d7:f0:70:8d:1b:2f:9c:eb:aa:b0:0c:31:7c:d2:0d:
                    f9:e8:cf:47:ea:99:6b:bb:78:7b:63:70:0c:d1:f6:
                    09:0d:9a:e4:89:c5:0c:cf:c9:67:ef:c0:ed:65:1e:
                    5f:49:2d:83:c1:37:52:c5:5e:6b:b2:41:1d:90:30:
                    30:e7:91:89:fe:1a:60:4e:60:c1:b0:8c:dd:58:c3:
                    0d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0E:4A:A2:4B:5E:6B:D0:A2:25:83:B5:BF:AF:52:A7:8B:47:4A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/bf44ef86-5382-37ad-a8c6-7028498f62e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl

            X509v3 Authority Key Identifier:
                keyid:69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b1:05:15:87:2c:b5:88:91:78:cf:80:7f:9c:1c:06:4c:40:
         8a:d7:4c:d7:0a:1a:27:fb:5b:0d:88:a8:93:ce:86:6e:b9:db:
         cd:d2:6d:94:13:f2:26:4d:cb:64:c5:36:75:e2:cc:be:37:d9:
         37:aa:6c:10:04:89:be:f8:bd:d3:82:bc:21:37:6e:c5:46:c3:
         f4:2a:77:bf:9e:fc:fa:9a:d6:24:a3:65:5b:be:6c:02:4b:85:
         62:b7:26:ea:69:2a:04:ff:c0:b7:8b:f0:2d:59:01:29:e9:79:
         2b:54:05:65:f6:25:dd:2d:cf:f0:d0:af:e6:fd:af:9d:ef:88:
         d8:32:1b:ef:9b:ed:02:dc:d7:9f:c0:64:48:78:f4:40:17:a0:
         7a:ee:9c:d2:8f:2f:ba:36:24:17:b3:ac:80:b6:34:08:56:8e:
         b1:86:ba:4e:cc:f0:e4:12:8d:fb:cd:1b:b7:aa:1e:31:6a:ab:
         12:5a:93:40:e2:de:81:0a:30:02:c5:ba:37:44:47:23:3d:25:
         5e:58:22:35:9d:58:e3:25:56:82:03:20:17:e1:3b:5f:56:41:
         65:30:45:8c:c7:df:d9:9d:40:cd:ef:40:4b:8e:25:a7:cf:be:
         48:49:c6:31:f8:40:ce:eb:28:08:47:98:3b:85:a0:6e:c9:23:
         55:87:2a:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyleVl3kcCE0TOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMxZWY5YzYtMjg5Zi00MTZhLTk3ZGItZjlhNjQwYTJi
MmU5MB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk
NmJlYjIzNzgtZGM4OC00Y2ZjLTkwMWItYTY3NmM1MDdlOGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW0IOfXsIJdN95IhkYWJsWQTsjs0SO2poUBt
ruwjIeDFTBhHY1YorxwR0D0ecTWyal/yaekBCMjsbCkJEKLNiVSIinpvUDRJ6Qj6
jeBOZwobFahmEbGcSHbtSVsnVni1ZsVTCaCvxLX4JhcPPNQ87HNd6kJyasSO5gdB
XwiaP6ORX05u1Xo70uHO8zm0fk+CgENBNmvtq/M2ENM45ruheWsveQ0KjTjCyaXe
QzrTXMTzp3vX8HCNGy+c66qwDDF80g356M9H6plru3h7Y3AM0fYJDZrkicUMz8ln
78DtZR5fSS2DwTdSxV5rskEdkDAw55GJ/hpgTmDBsIzdWMMNRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYOSqJLXmvQoiWDtb+vUqeLR0qLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wYzFl
ZjljNi0yODlmLTQxNmEtOTdkYi1mOWE2NDBhMmIyZTkvYmY0NGVmODYtNTM4Mi0z
N2FkLWE4YzYtNzAyODQ5OGY2MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGMxZWY5YzYtMjg5Zi00MTZhLTk3
ZGItZjlhNjQwYTJiMmU5LzBjMWVmOWM2LTI4OWYtNDE2YS05N2RiLWY5YTY0MGEy
YjJlOS5jcmwwHwYDVR0jBBgwFoAUaTljld1dNHWiFhJazNGJTVhHn84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wYzFlZjljNi0yODlmLTQxNmEtOTdkYi1mOWE2
NDBhMmIyZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXOZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWxBRWHLLWIkXjPgH+cHAZMQIrXTNcKGif7Ww2IqJPOhm65283SbZQT
8iZNy2TFNnXizL432TeqbBAEib74vdOCvCE3bsVGw/Qqd7+e/Pqa1iSjZVu+bAJL
hWK3JuppKgT/wLeL8C1ZASnpeStUBWX2Jd0tz/DQr+b9r53viNgyG++b7QLc15/A
ZEh49EAXoHrunNKPL7o2JBezrIC2NAhWjrGGuk7M8OQSjfvNG7eqHjFqqxJak0Di
3oEKMALFujdERyM9JV5YIjWdWOMlVoIDIBfhO19WQWUwRYzH39mdQM3vQEuOJafP
vkhJxjH4QM7rKAhHmDuFoG7JI1WHKt8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:28 2024 by rpki-client on console-ams.rpki-client.org