Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa
File:                     d2bbd598-d050-3e9c-b8b7-18a976731d02.roa (raw, json)
Hash identifier:          6oMMwd8Ws6ZfPw63LNf2AtwBgG4N0cbcjEl7D2T5gPs=
Subject key identifier:   10:78:C5:43:40:13:27:FF:79:A7:2D:2B:3D:17:53:F1:96:8C:0E:D1
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F43285847B696BE02D18033409558B440
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     397976
IP address blocks:        158.247.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:be:02:d1:80:33:40:95:58:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=bc111254-7999-41f7-a607-6272fbd0d2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:04:2f:25:b2:7e:88:65:4d:24:de:a1:1c:
                    18:f0:e6:4e:81:26:3d:8b:0f:79:60:5b:7b:0a:92:
                    ae:35:be:46:03:c0:0c:13:43:a1:f7:00:21:75:42:
                    3f:5f:25:5d:94:d3:48:04:96:58:be:e2:b3:66:55:
                    b4:db:e7:63:1d:f8:ef:ac:f2:a3:5a:17:e5:d5:a1:
                    28:4f:17:3b:da:da:d7:3e:4e:5c:66:c5:a9:ae:76:
                    84:69:f9:a5:22:48:26:72:9a:56:3b:3c:2f:ef:09:
                    62:14:0b:80:91:37:88:bf:fa:11:69:91:1c:c3:26:
                    f0:e7:5e:72:d4:82:ff:cc:8a:b4:96:71:34:17:a8:
                    e1:26:a7:4c:97:f1:bc:f6:9f:01:5a:d7:89:dd:0c:
                    c8:7a:6c:4f:c4:32:cf:c0:e1:da:d2:ce:9c:e1:a6:
                    2b:2b:88:94:20:86:e2:49:d3:ce:1f:e1:d7:5f:ea:
                    a4:0c:30:a7:fc:88:54:37:40:69:88:11:85:e8:b7:
                    e7:03:db:b7:2e:a3:44:8f:a4:01:6b:83:10:f7:98:
                    1c:b1:fa:f1:30:0b:fd:e1:0a:b5:90:90:43:fb:6b:
                    b0:5f:d2:0e:ca:2f:71:89:25:88:6e:58:63:7b:24:
                    c1:39:1c:17:0d:6d:b6:59:91:f1:9f:8e:1f:b4:c2:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:78:C5:43:40:13:27:FF:79:A7:2D:2B:3D:17:53:F1:96:8C:0E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:27:b7:08:c3:2c:0a:d5:70:32:2e:0c:34:cc:2d:ad:5c:5c:
         8b:45:65:ab:c9:c9:6f:b0:c1:8c:6d:33:e1:2b:6f:df:a0:95:
         1b:2c:dd:28:12:a9:7a:09:1f:7f:cb:0c:bd:03:4b:af:77:c4:
         55:d9:e7:d4:4c:a0:d3:7f:e1:e3:7b:95:8b:f0:e5:2f:63:dc:
         9f:ca:fa:8c:50:34:da:b3:4b:78:8a:e2:bc:51:22:8f:7b:43:
         bb:6c:1d:c5:75:b7:76:f9:2f:1b:b7:1e:f7:56:a1:60:51:2e:
         00:93:d1:08:b6:4e:b7:1c:03:1d:8c:05:fb:c5:0d:73:a2:7f:
         c7:62:20:e3:2a:47:1b:98:83:51:3c:f4:5c:de:61:43:0e:23:
         d6:a1:c9:ba:63:24:a1:77:4b:b6:18:ad:2f:51:68:09:2c:85:
         39:0e:92:de:80:26:93:ce:ec:26:94:6d:da:c1:79:78:d9:ed:
         71:08:ad:e6:3d:40:ab:82:e1:e0:f6:8a:79:94:15:4a:fe:c9:
         eb:92:6e:7e:d3:94:a0:14:be:2c:04:f7:d5:36:0e:ac:e1:6f:
         ed:3c:e5:42:e1:4c:af:72:7a:39:52:cc:74:54:da:cc:18:36:
         7d:90:7d:9a:cd:3f:a3:c1:b5:be:82:de:42:67:6e:d9:7a:e4:
         b6:61:61:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2lr4C0YAzQJVYtEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3
ODQyMB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk
YmMxMTEyNTQtNzk5OS00MWY3LWE2MDctNjI3MmZiZDBkMmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09EELyWyfohlTSTeoRwY8OZOgSY9iw95YFt7
CpKuNb5GA8AME0Oh9wAhdUI/XyVdlNNIBJZYvuKzZlW02+djHfjvrPKjWhfl1aEo
Txc72trXPk5cZsWprnaEafmlIkgmcppWOzwv7wliFAuAkTeIv/oRaZEcwybw515y
1IL/zIq0lnE0F6jhJqdMl/G89p8BWteJ3QzIemxPxDLPwOHa0s6c4aYrK4iUIIbi
SdPOH+HXX+qkDDCn/IhUN0BpiBGF6LfnA9u3LqNEj6QBa4MQ95gcsfrxMAv94Qq1
kJBD+2uwX9IOyi9xiSWIblhjeyTBORwXDW22WZHxn44ftMLCVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBB4xUNAEyf/eactKz0XU/GWjA7RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh
YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvZDJiYmQ1OTgtZDA1MC0z
ZTljLWI4YjctMThhOTc2NzMxZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx
OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh
Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy
OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnvcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkntwjDLArVcDIuDDTMLa1cXItFZavJyW+wwYxtM+Erb9+glRss3SgS
qXoJH3/LDL0DS693xFXZ59RMoNN/4eN7lYvw5S9j3J/K+oxQNNqzS3iK4rxRIo97
Q7tsHcV1t3b5Lxu3HvdWoWBRLgCT0Qi2TrccAx2MBfvFDXOif8diIOMqRxuYg1E8
9FzeYUMOI9ahybpjJKF3S7YYrS9RaAkshTkOkt6AJpPO7CaUbdrBeXjZ7XEIreY9
QKuC4eD2inmUFUr+yeuSbn7TlKAUviwE99U2Dqzhb+085ULhTK9yejlSzHRU2swY
Nn2QfZrNP6PBtb6C3kJnbtl65LZhYS8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:44 2024 by rpki-client on console-fra.rpki-client.org