Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/d0e92a67-d4e9-3360-a978-d3ed4803057f.roa
File:                     d0e92a67-d4e9-3360-a978-d3ed4803057f.roa (raw, json)
Hash identifier:          mVelrGKNkSn5a9DRBthjhWiO8Pewkc48ITW/oeU7mv0=
Subject key identifier:   42:1E:99:BF:A5:DD:A7:65:DC:85:DF:27:25:FB:7D:CE:93:E9:F0:F6
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F432858475BDB6EFF8A993F723680DC00
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/d0e92a67-d4e9-3360-a978-d3ed4803057f.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     23158
IP address blocks:        208.75.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:6e:ff:8a:99:3f:72:36:80:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=b33adc22-450c-4279-9bd8-ba7b6134b967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:aa:81:35:ee:d4:e0:ca:8a:a3:23:01:b3:
                    93:f7:7a:10:53:5f:a4:a6:d3:02:24:fb:c4:90:52:
                    22:88:e8:64:d0:c2:18:8a:74:81:53:cb:e9:12:6c:
                    81:94:d6:18:ca:d4:a2:70:8d:44:dd:74:39:8b:79:
                    c3:81:f0:bd:dc:35:b3:c5:72:25:da:63:31:47:05:
                    95:11:66:2c:8c:ba:01:57:d3:e3:54:ed:90:d1:b1:
                    7a:68:54:05:d9:45:d4:6c:6f:69:f3:89:df:0d:fb:
                    4e:ee:d9:75:29:11:89:3c:57:69:82:c7:bb:aa:70:
                    e9:91:e4:2f:e2:e5:2c:cc:3d:41:ab:67:78:7e:ad:
                    9f:d8:67:f5:7c:76:63:96:7d:3d:69:01:6a:8b:1d:
                    57:64:04:ea:e7:f4:ab:11:48:0c:f8:2b:04:ad:55:
                    fe:35:5c:c5:bb:c6:78:5c:71:15:7d:aa:d4:f3:38:
                    96:2f:1a:c8:ff:85:df:f7:90:b0:98:36:da:64:90:
                    2b:0d:e6:f4:28:fe:11:94:aa:74:45:18:85:b6:dc:
                    2b:e0:de:ce:34:83:e7:0f:b9:9f:b2:f7:8f:9a:17:
                    3f:ce:7f:af:04:84:90:90:b3:ca:ef:ee:cb:e0:7d:
                    f2:fd:f5:d1:ee:8a:5b:61:0b:1a:74:ae:6d:a3:68:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1E:99:BF:A5:DD:A7:65:DC:85:DF:27:25:FB:7D:CE:93:E9:F0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/d0e92a67-d4e9-3360-a978-d3ed4803057f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:22:45:54:2a:1d:9c:f9:af:fd:bd:b0:ed:4d:d2:e1:e9:3a:
         ce:f6:38:1c:eb:c0:82:4e:75:ea:e6:94:3d:2b:67:a0:e9:07:
         7b:fb:44:32:3c:b6:ca:9d:21:76:7a:f5:b7:d0:cc:ee:47:33:
         ea:62:e8:9e:66:0c:0a:8c:db:8f:1a:ae:64:b8:bf:05:52:57:
         37:08:0b:cc:3e:fb:5f:17:16:fc:30:03:a0:5d:c4:7e:22:18:
         59:c4:32:01:56:61:1a:c6:ce:b8:2c:4d:c3:a4:47:a1:10:7a:
         aa:c3:27:d3:1f:01:3b:a1:3b:11:14:ad:86:02:2e:4d:20:d0:
         d1:05:f8:f7:39:b3:dd:57:5d:8b:c8:c5:6d:f7:8e:10:e0:34:
         3c:af:68:6d:05:bb:82:17:20:48:e0:e8:6e:43:01:d1:be:73:
         ad:2f:4a:cf:15:75:8c:7f:10:c8:45:d1:19:c7:18:ca:8d:34:
         db:ed:86:1b:b9:fa:85:c3:03:f9:7a:dd:a0:b6:ee:d3:38:a6:
         15:db:22:73:03:87:35:2f:e3:9a:00:c5:c1:86:fa:e5:8c:d4:
         57:d8:a0:ca:f7:59:b7:00:a9:39:81:a8:ef:04:79:3e:13:35:
         5d:3f:a1:78:bf:02:9a:c6:29:78:68:ef:e0:5d:be:5a:5b:d6:
         6e:0c:ed:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdb227/ipk/cjaA3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy
ZDUyMB4XDTI0MDkyODAxMDAzMVoXDTI0MTIyNzAyMDAzMVowLzEtMCsGA1UEAxMk
YjMzYWRjMjItNDUwYy00Mjc5LTliZDgtYmE3YjYxMzRiOTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCGqgTXu1ODKiqMjAbOT93oQU1+kptMCJPvE
kFIiiOhk0MIYinSBU8vpEmyBlNYYytSicI1E3XQ5i3nDgfC93DWzxXIl2mMxRwWV
EWYsjLoBV9PjVO2Q0bF6aFQF2UXUbG9p84nfDftO7tl1KRGJPFdpgse7qnDpkeQv
4uUszD1Bq2d4fq2f2Gf1fHZjln09aQFqix1XZATq5/SrEUgM+CsErVX+NVzFu8Z4
XHEVfarU8ziWLxrI/4Xf95CwmDbaZJArDeb0KP4RlKp0RRiFttwr4N7ONIPnD7mf
svePmhc/zn+vBISQkLPK7+7L4H3y/fXR7opbYQsadK5to2iCFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEIemb+l3adl3IXfJyX7fc6T6fD2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj
NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvZDBlOTJhNjctZDRlOS0z
MzYwLWE5NzgtZDNlZDQ4MDMwNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll
MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi
MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0
MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EsYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMiRVQqHZz5r/29sO1N0uHpOs72OBzrwIJOdermlD0rZ6DpB3v7RDI8
tsqdIXZ69bfQzO5HM+pi6J5mDAqM248armS4vwVSVzcIC8w++18XFvwwA6BdxH4i
GFnEMgFWYRrGzrgsTcOkR6EQeqrDJ9MfATuhOxEUrYYCLk0g0NEF+Pc5s91XXYvI
xW33jhDgNDyvaG0Fu4IXIEjg6G5DAdG+c60vSs8VdYx/EMhF0RnHGMqNNNvthhu5
+oXDA/l63aC27tM4phXbInMDhzUv45oAxcGG+uWM1FfYoMr3WbcAqTmBqO8EeT4T
NV0/oXi/AprGKXho7+Bdvlpb1m4M7a4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:33 2024 by rpki-client on console-ams.rpki-client.org