Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/ae3540b1-fdde-32c5-a0b5-0ab41391fc74.roa
File:                     ae3540b1-fdde-32c5-a0b5-0ab41391fc74.roa (raw, json)
Hash identifier:          rXTPkrwyZ+OsbcvzPvvGS6y4Vq21vyrRhzz9SNoSrps=
Subject key identifier:   D5:DA:9B:6E:72:68:4E:2A:3D:BF:24:D8:04:EA:27:BB:42:69:BC:0A
Certificate issuer:       /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial:       010D0C9F4328584768943D03028E720C5FC99000
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/ae3540b1-fdde-32c5-a0b5-0ab41391fc74.roa
Signing time:             Wed 02 Oct 2024 14:22:42 +0000
ROA not before:           Wed 02 Oct 2024 14:22:42 +0000
ROA not after:            Tue 31 Dec 2024 15:22:42 +0000
asID:                     54363
IP address blocks:        199.79.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:94:3d:03:02:8e:72:0c:5f:c9:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
        Validity
            Not Before: Oct  2 14:22:42 2024 GMT
            Not After : Dec 31 15:22:42 2024 GMT
        Subject: CN=c81636b1-a812-4618-8cac-bb6f4115499a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:99:f8:cb:b4:45:6b:26:46:7a:b6:f7:d1:
                    db:67:7f:d5:9f:51:4f:f5:b4:86:7f:40:05:82:5c:
                    58:ce:5d:48:60:d3:4f:0f:b8:53:44:8a:a8:d0:8e:
                    72:ea:4a:06:34:a6:62:e2:d2:7e:69:c7:64:98:31:
                    69:c4:4d:36:c1:99:ad:c6:e4:79:5b:88:dc:72:2a:
                    55:b1:aa:a6:23:38:19:b9:01:a5:7a:ae:22:ff:62:
                    af:ae:4b:79:db:98:e6:5a:64:ff:bb:23:b7:98:1c:
                    36:03:34:64:a4:28:f8:16:5e:24:41:31:c4:13:93:
                    46:dc:8d:52:d4:55:20:1b:86:4d:23:de:29:41:78:
                    02:b3:76:de:bf:ec:3f:84:76:fc:cc:a5:6b:17:49:
                    ee:dd:12:83:f6:3d:19:c7:62:2a:5e:8e:39:d3:66:
                    44:ea:43:f9:3b:3e:3f:6b:3d:24:92:ba:ec:2b:30:
                    2e:9b:5e:72:5f:f6:90:dc:7f:1a:29:a9:2b:19:a4:
                    e4:f6:d8:61:ff:ba:3d:e4:99:cf:8c:56:f7:d5:00:
                    8a:c1:de:26:3f:ae:33:c1:a7:c8:92:30:b2:76:b9:
                    0b:c3:86:dc:2d:2b:64:79:a7:3c:fb:b4:ec:f2:40:
                    dd:6c:7d:65:24:f6:f1:aa:66:54:af:ec:ba:84:21:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DA:9B:6E:72:68:4E:2A:3D:BF:24:D8:04:EA:27:BB:42:69:BC:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/ae3540b1-fdde-32c5-a0b5-0ab41391fc74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.79.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:41:c6:9c:bf:b4:97:b2:94:4f:ea:a8:c3:80:6b:0d:89:55:
         aa:67:9f:56:af:cd:eb:98:e5:9a:9c:dc:68:d5:4e:08:45:b7:
         93:c1:59:b9:13:bc:02:e3:89:f6:7e:3b:8b:1b:e6:73:49:36:
         f5:de:ce:b4:26:fe:3c:b0:91:a6:f4:2d:3e:42:43:88:b5:ca:
         5f:74:53:80:03:2a:6b:e0:a0:e3:31:c3:2b:47:9a:c7:89:b9:
         1f:e1:20:dc:3f:96:3d:c6:64:bc:d8:0d:b7:0f:c8:f9:10:3e:
         ca:9d:24:7f:bc:53:9b:b3:4e:81:96:6a:2d:cb:c8:34:6a:2b:
         ab:0d:b3:77:18:2f:31:0c:cf:64:8b:99:d4:f9:b3:0c:58:15:
         38:4b:ea:ab:15:91:c6:a9:f5:ca:ed:71:a2:f2:f1:9d:8c:2a:
         7c:f1:1f:90:15:6c:d0:1d:6c:c1:bd:27:2f:ed:2f:b5:68:48:
         e2:a4:d1:cc:3d:40:74:a7:ab:7e:38:e7:64:f2:73:65:66:6b:
         4b:fe:fb:fe:51:11:ba:ca:4f:35:c6:b7:73:90:48:5b:e7:f8:
         46:6d:a3:2d:e9:3f:a9:7e:f9:d8:96:9e:a7:fb:5f:60:85:87:
         6f:32:f1:03:5c:46:ad:01:ca:57:06:8b:70:3b:f7:bf:46:16:
         ab:5d:5a:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdolD0DAo5yDF/JkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTYxODM1MDItOTgzZC00MTE0LWEwNzQtYmYwZWFhOTAx
ZGUzMB4XDTI0MTAwMjE0MjI0MloXDTI0MTIzMTE1MjI0MlowLzEtMCsGA1UEAxMk
YzgxNjM2YjEtYTgxMi00NjE4LThjYWMtYmI2ZjQxMTU0OTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztiZ+Mu0RWsmRnq299HbZ3/Vn1FP9bSGf0AF
glxYzl1IYNNPD7hTRIqo0I5y6koGNKZi4tJ+acdkmDFpxE02wZmtxuR5W4jccipV
saqmIzgZuQGleq4i/2Kvrkt525jmWmT/uyO3mBw2AzRkpCj4Fl4kQTHEE5NG3I1S
1FUgG4ZNI94pQXgCs3bev+w/hHb8zKVrF0nu3RKD9j0Zx2IqXo4502ZE6kP5Oz4/
az0kkrrsKzAum15yX/aQ3H8aKakrGaTk9thh/7o95JnPjFb31QCKwd4mP64zwafI
kjCydrkLw4bcLStkeac8+7Ts8kDdbH1lJPbxqmZUr+y6hCG9xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXam25yaE4qPb8k2ATqJ7tCabwKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81NjE4
MzUwMi05ODNkLTQxMTQtYTA3NC1iZjBlYWE5MDFkZTMvYWUzNTQwYjEtZmRkZS0z
MmM1LWEwYjUtMGFiNDEzOTFmYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTYxODM1MDItOTgzZC00MTE0LWEw
NzQtYmYwZWFhOTAxZGUzLzU2MTgzNTAyLTk4M2QtNDExNC1hMDc0LWJmMGVhYTkw
MWRlMy5jcmwwHwYDVR0jBBgwFoAUp3AX7rO8kXjkf31jk/Ul2o6ebCcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81NjE4MzUwMi05ODNkLTQxMTQtYTA3NC1iZjBl
YWE5MDFkZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx08RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElBxpy/tJeylE/qqMOAaw2JVapnn1avzeuY5Zqc3GjVTghFt5PBWbkT
vALjifZ+O4sb5nNJNvXezrQm/jywkab0LT5CQ4i1yl90U4ADKmvgoOMxwytHmseJ
uR/hINw/lj3GZLzYDbcPyPkQPsqdJH+8U5uzToGWai3LyDRqK6sNs3cYLzEMz2SL
mdT5swxYFThL6qsVkcap9crtcaLy8Z2MKnzxH5AVbNAdbMG9Jy/tL7VoSOKk0cw9
QHSnq34452Tyc2Vma0v++/5REbrKTzXGt3OQSFvn+EZtoy3pP6l++diWnqf7X2CF
h28y8QNcRq0BylcGi3A7979GFqtdWts=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:35 2024 by rpki-client on console-ams.rpki-client.org