Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa
File:                     12213f9b-00c6-35c4-84a6-0964642f7e08.roa (raw, json)
Hash identifier:          y1L8mpOvvrbsFZqI6tj7izJuBykRNtBALzSExBAfS3U=
Subject key identifier:   B6:21:C9:19:4F:70:60:D4:EC:00:54:FA:5F:75:64:2A:E5:DA:A1:D8
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584793B116CCB446528BB9626840
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     22781
IP address blocks:        216.131.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:16:cc:b4:46:52:8b:b9:62:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=b691b8e2-ada0-4aeb-8eae-1428fe8bd08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:fb:88:6a:5c:2f:3b:b8:2e:48:f1:2d:cb:
                    74:3a:33:0d:d8:71:34:e1:f4:64:c1:10:64:85:87:
                    84:33:50:17:9a:79:fa:58:13:0c:bc:cc:bf:ca:75:
                    36:61:db:83:b0:86:b2:0f:11:7a:e3:a0:e5:a0:2c:
                    e6:20:9b:c3:19:92:8a:9f:68:6d:35:88:b1:9a:33:
                    ab:94:70:ee:6c:1e:cf:9e:11:6f:cd:98:83:83:f9:
                    0c:26:a8:99:25:9a:c0:cf:26:60:78:55:fc:d9:28:
                    70:1c:fd:66:13:27:ef:3a:c4:62:f8:d8:a6:ac:e8:
                    ef:48:4a:88:d6:18:33:11:6d:72:ec:93:ab:e9:39:
                    f3:c2:1a:52:b5:14:ab:42:64:b9:3d:ae:c2:22:56:
                    ee:39:b7:4d:ba:e9:98:42:09:bb:47:4f:22:92:62:
                    ec:78:df:38:57:95:62:48:10:6c:a0:f7:57:57:7d:
                    82:84:2e:76:bb:11:78:97:31:64:9f:b4:34:c4:6a:
                    5a:fc:2f:04:47:59:f7:1f:31:c7:ba:cd:00:57:bd:
                    31:cd:9a:1f:ce:21:2d:46:ea:35:7b:e2:14:9d:f2:
                    cb:de:a9:23:c6:62:4f:3b:ed:3f:12:2f:9f:17:25:
                    40:1c:07:ac:f0:b2:cc:35:f8:a4:62:d7:76:95:c1:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:21:C9:19:4F:70:60:D4:EC:00:54:FA:5F:75:64:2A:E5:DA:A1:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/12213f9b-00c6-35c4-84a6-0964642f7e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:59:7b:f0:16:c3:da:92:de:1f:c1:81:5c:7b:b6:8f:fb:5a:
         3d:5e:32:6e:b9:29:4d:16:01:89:fa:97:48:38:e5:8c:ef:20:
         f4:c6:a9:36:32:43:e7:65:67:af:10:c7:be:22:f3:6f:bf:21:
         94:90:e5:f0:1a:1f:f9:68:8f:7c:80:2c:2d:1d:3f:d3:b2:e8:
         43:0d:19:95:0e:88:08:50:f5:8d:38:5e:7d:38:7b:4e:10:d5:
         00:49:fd:47:f1:d5:b3:52:bb:91:4d:df:26:93:1d:47:13:bd:
         dd:34:60:b5:7c:17:10:c2:63:06:3e:39:a4:df:e0:2d:74:7d:
         ad:f9:cb:68:24:6b:8a:e0:36:10:67:d2:fa:06:7d:d0:96:70:
         06:53:a3:97:76:d6:c6:ec:9b:8e:6d:7c:8e:f6:ec:03:d7:0a:
         82:62:d1:bb:5b:3f:fc:31:bb:84:b5:a4:c2:71:41:55:a7:5b:
         aa:74:17:18:21:4a:48:1e:6e:3e:80:e6:98:df:71:74:48:5a:
         24:06:19:ac:17:b4:9e:e2:b4:58:c5:a0:bd:ca:3e:8f:8d:20:
         d3:9d:08:9f:dc:6d:f1:33:fc:c4:1a:63:2b:83:03:d2:ac:f6:
         a3:12:80:34:c1:27:d4:9f:3b:36:e6:8d:2c:91:2c:d7:6f:09:
         9b:1b:b2:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsRbMtEZSi7liaEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
YjY5MWI4ZTItYWRhMC00YWViLThlYWUtMTQyOGZlOGJkMDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhf7iGpcLzu4LkjxLct0OjMN2HE04fRkwRBk
hYeEM1AXmnn6WBMMvMy/ynU2YduDsIayDxF646DloCzmIJvDGZKKn2htNYixmjOr
lHDubB7PnhFvzZiDg/kMJqiZJZrAzyZgeFX82ShwHP1mEyfvOsRi+NimrOjvSEqI
1hgzEW1y7JOr6TnzwhpStRSrQmS5Pa7CIlbuObdNuumYQgm7R08ikmLseN84V5Vi
SBBsoPdXV32ChC52uxF4lzFkn7Q0xGpa/C8ER1n3HzHHus0AV70xzZofziEtRuo1
e+IUnfLL3qkjxmJPO+0/Ei+fFyVAHAes8LLMNfikYtd2lcGLUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYhyRlPcGDU7ABU+l91ZCrl2qHYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMTIyMTNmOWItMDBjNi0z
NWM0LTg0YTYtMDk2NDY0MmY3ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFZe/AWw9qS3h/BgVx7to/7Wj1eMm65KU0WAYn6l0g45YzvIPTGqTYy
Q+dlZ68Qx74i82+/IZSQ5fAaH/loj3yALC0dP9Oy6EMNGZUOiAhQ9Y04Xn04e04Q
1QBJ/Ufx1bNSu5FN3yaTHUcTvd00YLV8FxDCYwY+OaTf4C10fa35y2gka4rgNhBn
0voGfdCWcAZTo5d21sbsm45tfI727APXCoJi0btbP/wxu4S1pMJxQVWnW6p0Fxgh
Skgebj6A5pjfcXRIWiQGGawXtJ7itFjFoL3KPo+NINOdCJ/cbfEz/MQaYyuDA9Ks
9qMSgDTBJ9SfOzbmjSyRLNdvCZsbsk8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:49 2024 by rpki-client on console-ams.rpki-client.org