Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa
File:                     95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa (raw, json)
Hash identifier:          hgWEqIYoessP3jxsT7qMVfHAU1yNbAg6WH8us79Oyh8=
Subject key identifier:   DA:35:D5:63:9C:A9:F8:AD:79:B2:D7:F4:DE:27:12:6F:58:E1:5F:6A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4DDE70F2C36A049AD39E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:dd:e7:0f:2c:36:a0:49:ad:39:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=40a4a6b0-b196-4910-b6c1-604e24caf445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d4:bd:ad:a3:44:d7:ac:3a:87:de:f6:36:96:
                    e4:aa:a2:56:df:01:09:0e:b6:7e:63:ea:0d:64:3f:
                    ab:5b:1f:1f:82:aa:14:a6:79:a9:e2:a5:95:a5:15:
                    fd:93:14:03:54:1c:21:c4:a2:d4:e0:76:99:8b:aa:
                    47:3a:84:7b:84:fd:45:f9:51:70:57:a6:4d:df:7b:
                    a9:87:05:22:c1:23:9d:2c:45:48:41:63:2f:5d:ff:
                    43:c8:76:7f:9c:0d:bb:c6:d5:15:d4:36:a1:33:ac:
                    cf:f9:1c:c8:83:f1:1b:b2:ce:33:8b:e9:37:0c:7f:
                    b5:30:82:b6:2b:91:b1:cd:b7:21:6d:0d:bc:17:d1:
                    96:fb:1f:48:a1:ea:c7:9b:cd:c8:31:8e:d0:8b:df:
                    ee:e5:49:ac:e4:d8:5b:e1:cf:fe:cb:6e:cd:8a:fe:
                    c1:f4:7c:7a:e9:b7:65:18:11:9f:56:55:bd:98:60:
                    19:52:1e:59:7c:03:6f:7b:b2:7d:31:5e:10:f6:9c:
                    79:a5:63:66:5f:13:90:25:95:89:ee:87:4b:10:00:
                    d2:8a:43:1f:e0:f7:c5:62:6f:7a:18:e9:d9:91:79:
                    7a:f1:18:86:53:65:4a:e5:cd:9a:26:7c:34:a6:ac:
                    4c:8f:03:db:c5:3a:f5:35:de:bc:b5:7b:0d:ba:b6:
                    5b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:D5:63:9C:A9:F8:AD:79:B2:D7:F4:DE:27:12:6F:58:E1:5F:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:21:35:8c:fe:0c:0e:59:95:92:a4:2e:5f:dc:d1:db:22:d3:
         4b:ed:b7:e5:f2:97:d4:67:c0:67:14:0e:44:ca:a6:09:a0:33:
         d0:91:fa:77:3d:4d:72:b4:bb:4e:91:6b:28:97:04:94:dc:b5:
         a5:c9:77:61:7a:6e:3f:bf:aa:c5:c2:cd:ca:4e:7f:29:a9:08:
         9c:78:bc:66:a9:98:6f:38:6f:4e:d2:52:1f:31:83:10:a6:d1:
         69:58:e7:28:ff:f5:2e:75:68:1a:b8:4c:5c:54:42:b8:7f:53:
         cb:8b:0e:95:10:4e:59:c0:a3:c8:54:f6:a7:eb:de:6d:db:a6:
         d6:69:60:b1:cd:3c:12:07:22:de:2d:e4:6a:a8:af:e1:05:a9:
         bc:3b:43:48:7b:b9:6d:e3:97:b3:36:7e:0b:f9:8b:67:66:6b:
         8c:d5:b2:47:9a:55:61:b2:f2:a2:c2:69:7f:04:62:d3:0e:30:
         c3:42:18:fc:a0:63:bf:a0:9d:99:29:6b:f3:97:44:37:cd:a2:
         cf:89:13:e6:77:71:ee:30:ac:13:92:9a:97:33:10:6f:29:6a:
         f5:61:02:f1:35:a0:18:4a:0b:29:f8:34:e7:a3:fb:6b:59:eb:
         43:24:f9:0e:7c:4f:2d:c4:e3:4f:65:fa:2c:08:94:5a:b1:da:
         29:04:b2:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1N3nDyw2oEmtOeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk
NDBhNGE2YjAtYjE5Ni00OTEwLWI2YzEtNjA0ZTI0Y2FmNDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldS9raNE16w6h972NpbkqqJW3wEJDrZ+Y+oN
ZD+rWx8fgqoUpnmp4qWVpRX9kxQDVBwhxKLU4HaZi6pHOoR7hP1F+VFwV6ZN33up
hwUiwSOdLEVIQWMvXf9DyHZ/nA27xtUV1DahM6zP+RzIg/Ebss4zi+k3DH+1MIK2
K5GxzbchbQ28F9GW+x9IoerHm83IMY7Qi9/u5Ums5Nhb4c/+y27Niv7B9Hx66bdl
GBGfVlW9mGAZUh5ZfANve7J9MV4Q9px5pWNmXxOQJZWJ7odLEADSikMf4PfFYm96
GOnZkXl68RiGU2VK5c2aJnw0pqxMjwPbxTr1Nd68tXsNurZbgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNo11WOcqfitebLX9N4nEm9Y4V9qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTVlN2NiMGUtNTkwZC0z
MDlkLTliYzUtM2NkZTY5YjZlMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUhNYz+DA5ZlZKkLl/c0dsi00vtt+Xyl9RnwGcUDkTKpgmgM9CR+nc9
TXK0u06RayiXBJTctaXJd2F6bj+/qsXCzcpOfympCJx4vGapmG84b07SUh8xgxCm
0WlY5yj/9S51aBq4TFxUQrh/U8uLDpUQTlnAo8hU9qfr3m3bptZpYLHNPBIHIt4t
5Gqor+EFqbw7Q0h7uW3jl7M2fgv5i2dma4zVskeaVWGy8qLCaX8EYtMOMMNCGPyg
Y7+gnZkpa/OXRDfNos+JE+Z3ce4wrBOSmpczEG8pavVhAvE1oBhKCyn4NOej+2tZ
60Mk+Q58Ty3E409l+iwIlFqx2ikEst0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:32 2024 by rpki-client on console-ams.rpki-client.org