Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5d860859-f015-3204-9975-21fa70183683.roa
File:                     5d860859-f015-3204-9975-21fa70183683.roa (raw, json)
Hash identifier:          /ynjzCvTgRiLYyx0b3zkNtH1Bz1Qj/bnMSDDghYoVPU=
Subject key identifier:   E0:4E:2E:64:70:0F:CE:4C:6B:74:34:EE:5A:09:9A:E3:1E:44:0C:78
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F43285847D999FA0A3E48FB54293FED40
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5d860859-f015-3204-9975-21fa70183683.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     23341
IP address blocks:        143.55.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:fa:0a:3e:48:fb:54:29:3f:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=cbf681f6-b8c5-4554-a77e-7935460e5b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:2a:7a:ec:89:f8:89:fb:26:90:49:54:cc:
                    ac:58:62:dd:ca:69:2b:c7:d8:1c:f2:2a:0e:a1:84:
                    09:73:07:3b:e1:c5:e9:6b:cb:4b:49:f4:2b:7c:42:
                    3d:e6:61:7b:a3:27:24:21:45:70:08:ed:19:94:78:
                    d4:68:04:90:01:9a:2c:e4:f1:be:9d:13:fd:0a:4c:
                    82:01:12:83:8c:df:78:34:bf:6c:af:00:79:66:f8:
                    a9:82:19:01:9c:1e:31:d3:bb:a3:6a:b3:2f:bc:5e:
                    a1:ed:78:cd:f3:c5:40:b1:94:e9:5e:0e:53:fc:74:
                    65:98:fe:5e:d2:8e:73:a7:33:30:d3:53:6a:68:57:
                    f4:d9:c6:7e:0c:e4:5d:a9:41:4d:48:17:51:ea:cc:
                    59:40:0c:5c:f1:80:64:4b:3f:7f:37:a8:97:b7:a4:
                    d5:02:1a:15:76:3e:87:60:04:34:2d:08:d2:a8:17:
                    52:e1:60:d1:64:68:6b:89:75:50:c3:64:34:9b:1d:
                    29:46:c7:b7:15:cb:97:15:d5:fa:57:b3:7f:fe:d3:
                    d5:98:5a:19:33:7b:74:8d:ae:b7:ee:b5:09:64:01:
                    90:16:f8:12:95:35:3f:9e:17:ad:68:14:75:71:0a:
                    5f:7b:9e:a5:a0:a1:67:93:94:b5:19:3c:25:3f:63:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4E:2E:64:70:0F:CE:4C:6B:74:34:EE:5A:09:9A:E3:1E:44:0C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5d860859-f015-3204-9975-21fa70183683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e9:67:50:09:f2:9f:09:c2:df:97:1a:8e:ae:5f:cc:5b:60:
         d8:ba:dd:3c:25:9b:e2:ba:79:9b:22:d1:2c:f2:c4:7d:81:11:
         e8:5c:d4:fc:06:5d:24:6c:65:2f:27:76:d4:36:6c:e7:ad:dd:
         bf:87:5e:4c:34:71:ad:66:31:4a:35:a2:f9:05:27:c1:c3:f5:
         78:16:ff:e3:95:0a:a5:bf:af:f3:cd:45:2d:7f:c3:08:1d:3d:
         e1:a1:93:f1:8e:5e:57:4d:e7:75:d5:a4:18:b0:1d:35:a4:ce:
         f5:d7:f2:2c:63:89:f6:17:8b:d6:16:67:15:6f:ed:31:d3:82:
         d8:b1:f7:c6:8b:97:99:55:79:96:3c:f0:15:00:c5:38:3b:33:
         24:4b:e5:3e:a1:76:43:e8:92:b0:35:44:ea:83:6b:57:dd:a4:
         e4:a4:16:7f:09:7c:f4:cc:ff:80:8a:f3:90:4e:13:8e:d1:9a:
         fc:1f:0e:f1:e1:e0:32:09:39:70:6a:4b:d9:b3:15:5c:bb:03:
         2a:e3:96:23:83:65:3b:4c:30:b6:a2:66:e8:7c:86:1f:1f:73:
         38:1a:0c:e7:ab:32:cc:9b:04:4b:ff:61:5e:a3:01:5e:fb:29:
         fe:f2:de:6a:0a:b8:df:46:3f:f0:85:52:e0:0b:b6:4c:74:7e:
         20:7c:6f:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfoKPkj7VCk/7UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI2ZmQyNjItOTRlYS00ZTMzLWFmM2UtMjEyYWJlMGZj
NjI4MB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
Y2JmNjgxZjYtYjhjNS00NTU0LWE3N2UtNzkzNTQ2MGU1YjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMUqeuyJ+In7JpBJVMysWGLdymkrx9gc8ioO
oYQJcwc74cXpa8tLSfQrfEI95mF7oyckIUVwCO0ZlHjUaASQAZos5PG+nRP9CkyC
ARKDjN94NL9srwB5ZvipghkBnB4x07ujarMvvF6h7XjN88VAsZTpXg5T/HRlmP5e
0o5zpzMw01NqaFf02cZ+DORdqUFNSBdR6sxZQAxc8YBkSz9/N6iXt6TVAhoVdj6H
YAQ0LQjSqBdS4WDRZGhriXVQw2Q0mx0pRse3FcuXFdX6V7N//tPVmFoZM3t0ja63
7rUJZAGQFvgSlTU/nhetaBR1cQpfe56loKFnk5S1GTwlP2PYlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOBOLmRwD85Ma3Q07loJmuMeRAx4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjZm
ZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJhYmUwZmM2MjgvNWQ4NjA4NTktZjAxNS0z
MjA0LTk5NzUtMjFmYTcwMTgzNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWI2ZmQyNjItOTRlYS00ZTMzLWFm
M2UtMjEyYWJlMGZjNjI4LzViNmZkMjYyLTk0ZWEtNGUzMy1hZjNlLTIxMmFiZTBm
YzYyOC5jcmwwHwYDVR0jBBgwFoAUNjzIUHmlbKUy9HhU//w8/Bj4M/cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YjZmZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJh
YmUwZmM2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjzegMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjpZ1AJ8p8Jwt+XGo6uX8xbYNi63Twlm+K6eZsi0SzyxH2BEehc1PwG
XSRsZS8ndtQ2bOet3b+HXkw0ca1mMUo1ovkFJ8HD9XgW/+OVCqW/r/PNRS1/wwgd
PeGhk/GOXldN53XVpBiwHTWkzvXX8ixjifYXi9YWZxVv7THTgtix98aLl5lVeZY8
8BUAxTg7MyRL5T6hdkPokrA1ROqDa1fdpOSkFn8JfPTM/4CK85BOE47RmvwfDvHh
4DIJOXBqS9mzFVy7AyrjliODZTtMMLaiZuh8hh8fczgaDOerMsybBEv/YV6jAV77
Kf7y3moKuN9GP/CFUuALtkx0fiB8b2U=
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:21:53 2024 by rpki-client on console-fra.rpki-client.org