Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa
File:                     364b006a-dadb-395d-bc34-448cd3148010.roa (raw, json)
Hash identifier:          EAwmzlJ0x7XLhrrAZMfZLLeEBK44NptXlCbDcyePHzY=
Subject key identifier:   2D:5C:33:94:20:2E:D5:90:51:C7:27:5D:C3:03:19:86:B6:41:6D:A6
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584797E131402AA006C03B9BA1E0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     62651
IP address blocks:        216.131.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:31:40:2a:a0:06:c0:3b:9b:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=a9d99a0e-53fc-4c3d-a453-189a8bb3ae54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:07:e1:84:b5:b5:93:29:e2:58:31:cf:a9:
                    f9:82:fc:9a:ea:ab:06:19:28:3e:48:81:b6:f1:1d:
                    f1:55:ad:ed:60:1f:0f:23:58:8c:fc:7b:ed:a5:25:
                    19:3a:cb:2a:02:84:ae:73:f7:ad:73:ea:e6:92:c2:
                    c2:bc:56:1f:c0:e6:b4:51:c3:ad:74:eb:d0:95:f8:
                    4e:78:1e:8a:34:9d:85:64:2e:64:20:0f:d2:ba:bf:
                    49:ae:1e:df:dd:78:de:82:23:57:3e:45:e2:47:83:
                    da:79:ea:03:82:72:75:0f:d5:20:02:20:b6:a0:96:
                    72:d1:e3:a7:f8:1b:a3:d6:a9:47:44:93:3c:51:a0:
                    46:e0:2d:e8:e7:93:98:a0:84:c1:dc:87:c2:b0:96:
                    e1:88:bf:85:57:e5:a3:e7:5f:81:5a:d6:38:79:0a:
                    f1:bc:a9:7e:10:43:da:f6:d1:83:c9:2a:4a:9d:85:
                    43:81:e2:2a:21:4b:bf:39:08:b4:6c:5e:a1:55:2c:
                    45:52:3a:55:fa:25:17:ff:b3:cb:07:9b:43:17:ea:
                    6b:46:6d:93:31:b8:09:70:9a:cd:fa:a9:f7:e6:12:
                    5a:dd:ee:75:d4:35:5a:2c:7e:ab:95:86:ff:51:e4:
                    67:f1:4f:86:ef:b5:73:e4:1f:64:d5:33:37:47:99:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5C:33:94:20:2E:D5:90:51:C7:27:5D:C3:03:19:86:B6:41:6D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2a:f0:e5:ca:32:ef:86:5c:1c:ff:54:0b:1b:03:19:16:76:
         26:b3:95:42:fb:4f:88:f1:3b:72:fe:e5:6e:3f:1f:40:7d:50:
         2d:22:9e:c7:44:32:67:fa:d7:84:50:ba:cf:8a:24:68:a6:07:
         9e:45:7a:47:9e:38:66:83:7d:6d:b7:1f:19:9e:39:d5:52:13:
         ae:c6:22:2d:3f:2d:04:ec:ac:1c:dc:56:be:31:a2:88:83:38:
         ff:62:a2:f7:55:95:09:c0:6a:0b:10:54:54:a3:da:05:3d:2a:
         43:d4:2e:38:7d:80:e3:43:7b:c4:53:b9:3c:e1:66:3a:07:d0:
         9d:88:19:14:e3:29:77:20:32:bb:f4:e8:73:d6:ed:10:47:6b:
         c2:65:9e:74:78:3e:d1:56:bf:20:81:25:b4:02:e8:be:6c:c1:
         cf:35:b4:c3:07:b7:bf:f9:f7:dd:17:db:45:3e:09:26:21:db:
         6b:e4:6e:4d:98:62:88:3f:53:93:15:35:71:cc:22:7b:73:70:
         b1:23:f5:39:6b:54:68:0d:0c:ea:ac:68:26:ce:92:f7:6d:9b:
         d5:34:24:e5:ad:c8:6c:99:4c:0f:57:f5:02:79:ff:6f:92:5b:
         53:2e:2b:26:45:1d:bd:9b:cf:2a:dd:39:c4:2b:05:78:1c:17:
         c2:82:d7:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4TFAKqAGwDuboeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk
YTlkOTlhMGUtNTNmYy00YzNkLWE0NTMtMTg5YThiYjNhZTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDkH4YS1tZMp4lgxz6n5gvya6qsGGSg+SIG2
8R3xVa3tYB8PI1iM/HvtpSUZOssqAoSuc/etc+rmksLCvFYfwOa0UcOtdOvQlfhO
eB6KNJ2FZC5kIA/Sur9Jrh7f3XjegiNXPkXiR4PaeeoDgnJ1D9UgAiC2oJZy0eOn
+Buj1qlHRJM8UaBG4C3o55OYoITB3IfCsJbhiL+FV+Wj51+BWtY4eQrxvKl+EEPa
9tGDySpKnYVDgeIqIUu/OQi0bF6hVSxFUjpV+iUX/7PLB5tDF+prRm2TMbgJcJrN
+qn35hJa3e511DVaLH6rlYb/UeRn8U+G77Vz5B9k1TM3R5kZJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1cM5QgLtWQUccnXcMDGYa2QW2mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzY0YjAwNmEtZGFkYi0z
OTVkLWJjMzQtNDQ4Y2QzMTQ4MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEq8OXKMu+GXBz/VAsbAxkWdiazlUL7T4jxO3L+5W4/H0B9UC0insdE
Mmf614RQus+KJGimB55FekeeOGaDfW23HxmeOdVSE67GIi0/LQTsrBzcVr4xooiD
OP9iovdVlQnAagsQVFSj2gU9KkPULjh9gONDe8RTuTzhZjoH0J2IGRTjKXcgMrv0
6HPW7RBHa8JlnnR4PtFWvyCBJbQC6L5swc81tMMHt7/5990X20U+CSYh22vkbk2Y
Yog/U5MVNXHMIntzcLEj9TlrVGgNDOqsaCbOkvdtm9U0JOWtyGyZTA9X9QJ5/2+S
W1MuKyZFHb2bzyrdOcQrBXgcF8KC118=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:37 2024 by rpki-client on console-fra.rpki-client.org