Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa
File:                     c4aaba14-e935-386d-a66a-5f8a5674acb5.roa (raw, json)
Hash identifier:          XEN2AKexAYvEhTwa6lwAIVkQz2g4Rj6jSSXH3ozXGVY=
Subject key identifier:   69:DD:4D:05:9E:12:01:C5:C4:E6:BB:AF:2D:C5:08:99:7E:E1:D5:14
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858476BBC1D347D7B8BD946C3DD4C
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa
Signing time:             Thu 03 Oct 2024 17:30:28 +0000
ROA not before:           Thu 03 Oct 2024 17:30:28 +0000
ROA not after:            Wed 01 Jan 2025 18:30:28 +0000
asID:                     6939
IP address blocks:        143.109.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:bc:1d:34:7d:7b:8b:d9:46:c3:dd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  3 17:30:28 2024 GMT
            Not After : Jan  1 18:30:28 2025 GMT
        Subject: CN=24dcac42-a17b-4c94-a6aa-819347f884fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:72:d8:be:92:34:80:ca:60:4d:92:5d:c7:
                    13:ac:92:e9:ee:19:b9:63:71:5b:5e:ae:8d:ac:a8:
                    36:55:c1:41:18:43:a0:bc:af:55:92:ff:b1:48:61:
                    9e:d9:a5:29:ce:c5:1d:4d:74:6c:dd:e6:01:ad:31:
                    6d:f3:0c:47:06:18:39:2f:ad:7b:8f:3b:ef:11:44:
                    98:3b:4d:cb:96:af:45:22:85:3d:9f:4b:a7:ea:c0:
                    fa:1c:c9:b7:d6:a9:68:06:85:c9:ad:73:42:b4:8a:
                    8f:d2:31:5a:1b:bc:89:e8:d9:05:05:aa:42:90:36:
                    ff:83:fc:95:ba:d7:c6:d3:a7:31:c0:2f:0b:43:2e:
                    67:df:52:32:b8:ff:46:0e:76:cc:ee:db:34:66:30:
                    6a:36:4d:a6:5a:b5:c3:76:8e:5c:89:aa:48:b4:19:
                    59:35:70:f5:85:38:30:72:2b:ba:2b:94:43:1c:81:
                    a4:a5:4d:cb:10:f0:83:1e:5f:5f:3d:7e:f5:8b:81:
                    c8:a6:76:76:df:ff:8b:d3:86:44:b3:00:6d:1a:b6:
                    47:14:0e:5b:1e:ca:af:dc:ef:36:96:2d:7d:7c:ba:
                    7e:3b:df:a2:c5:b3:25:30:d8:14:52:dd:63:aa:be:
                    5e:a8:60:9c:05:a3:e8:93:1a:d5:b9:1b:25:85:65:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DD:4D:05:9E:12:01:C5:C4:E6:BB:AF:2D:C5:08:99:7E:E1:D5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4aaba14-e935-386d-a66a-5f8a5674acb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:81:0e:40:0d:cc:73:bc:e0:84:09:67:4f:b5:df:7e:8c:f6:
         47:a5:96:e9:2e:34:61:c4:e1:be:af:3a:df:95:38:be:f1:a7:
         ed:40:e5:df:f4:db:75:7d:61:6a:3f:dc:85:f6:a4:4a:34:23:
         dd:cf:c8:17:d3:b6:fa:c2:27:96:b4:76:2e:90:96:de:6f:b8:
         b5:1c:1f:49:f2:9a:5d:62:28:3e:32:76:84:72:62:e0:cb:3f:
         cf:9a:e6:33:c3:b9:82:05:cb:e3:6e:cb:a9:0e:cd:bb:27:8f:
         5b:7f:35:c6:23:80:ee:7a:a9:77:f4:08:f5:64:ee:ae:68:ef:
         da:26:50:11:b6:60:b4:00:94:4b:8d:fb:46:c9:8c:a9:25:62:
         45:60:92:fd:d9:19:df:c1:07:2a:94:f7:78:a1:87:cc:a5:bd:
         e8:4a:c0:b8:4e:e2:76:42:03:e6:2c:ac:00:0e:b8:99:26:21:
         6d:fb:37:b0:7a:75:c4:1d:29:76:f6:fa:94:62:99:08:cf:24:
         18:d2:8b:26:c5:dd:b0:3c:90:7d:12:a4:76:fe:b2:05:c6:80:
         48:be:2c:ed:cf:3b:cf:fe:f5:56:56:6e:3c:e3:9b:9a:a6:cd:
         ee:44:78:90:77:62:84:a2:bc:8e:c2:64:49:39:3c:a5:f0:05:
         ba:39:66:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrvB00fXuL2UbD3UwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTAwMzE3MzAyOFoXDTI1MDEwMTE4MzAyOFowLzEtMCsGA1UEAxMk
MjRkY2FjNDItYTE3Yi00Yzk0LWE2YWEtODE5MzQ3Zjg4NGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5py2L6SNIDKYE2SXccTrJLp7hm5Y3FbXq6N
rKg2VcFBGEOgvK9Vkv+xSGGe2aUpzsUdTXRs3eYBrTFt8wxHBhg5L617jzvvEUSY
O03Llq9FIoU9n0un6sD6HMm31qloBoXJrXNCtIqP0jFaG7yJ6NkFBapCkDb/g/yV
utfG06cxwC8LQy5n31IyuP9GDnbM7ts0ZjBqNk2mWrXDdo5ciapItBlZNXD1hTgw
ciu6K5RDHIGkpU3LEPCDHl9fPX71i4HIpnZ23/+L04ZEswBtGrZHFA5bHsqv3O82
li19fLp+O9+ixbMlMNgUUt1jqr5eqGCcBaPokxrVuRslhWX3twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGndTQWeEgHFxOa7ry3FCJl+4dUUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzRhYWJhMTQtZTkzNS0z
ODZkLWE2NmEtNWY4YTU2NzRhY2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj20gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaBDkANzHO84IQJZ0+1336M9kellukuNGHE4b6vOt+VOL7xp+1A5d/0
23V9YWo/3IX2pEo0I93PyBfTtvrCJ5a0di6Qlt5vuLUcH0nyml1iKD4ydoRyYuDL
P8+a5jPDuYIFy+Nuy6kOzbsnj1t/NcYjgO56qXf0CPVk7q5o79omUBG2YLQAlEuN
+0bJjKklYkVgkv3ZGd/BByqU93ihh8ylvehKwLhO4nZCA+YsrAAOuJkmIW37N7B6
dcQdKXb2+pRimQjPJBjSiybF3bA8kH0SpHb+sgXGgEi+LO3PO8/+9VZWbjzjm5qm
ze5EeJB3YoSivI7CZEk5PKXwBbo5Znc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:37 2024 by rpki-client on console-ams.rpki-client.org