Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/93d94a02-2fd6-355a-bf9d-d4fd2f4b8fc2.roa
File:                     93d94a02-2fd6-355a-bf9d-d4fd2f4b8fc2.roa (raw, json)
Hash identifier:          LoRDsqqBwFfCwgMDG0LCVDgG6RiJyjSHbY+fOWtvygQ=
Subject key identifier:   CC:22:DD:BB:18:DB:02:6F:61:1E:81:03:D6:41:9F:37:8D:BD:2C:E6
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584797E13A576B42AB74133A9100
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/93d94a02-2fd6-355a-bf9d-d4fd2f4b8fc2.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     62651
IP address blocks:        216.131.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3a:57:6b:42:ab:74:13:3a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=cc536a86-ccfd-4ab2-b875-3751df69fd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:18:87:e4:62:90:1d:40:e3:59:55:1d:03:
                    bd:9a:7d:ad:bc:94:51:5e:cd:8a:2f:f8:8d:89:f8:
                    77:07:40:c9:10:18:ca:db:fb:da:76:22:7d:d6:cf:
                    94:2f:56:0b:8a:3d:fd:7f:89:4c:36:a6:fa:00:13:
                    84:a7:7c:bb:7a:9d:ec:a4:56:57:a4:b1:c1:0d:4a:
                    2c:5d:a1:4b:ba:4d:7c:c2:7d:2d:04:64:e4:b0:39:
                    b2:55:d4:f0:73:c4:06:31:b8:b5:89:5f:e7:30:12:
                    17:ef:cd:44:b6:ca:dd:6b:c1:56:98:63:01:b7:32:
                    00:10:17:1f:58:2a:6e:04:d7:4d:7c:b7:2f:52:94:
                    a5:17:61:0e:f3:a6:bb:af:10:56:44:a9:4b:cd:67:
                    d5:1d:b5:d5:39:e6:4d:9f:90:73:c7:be:73:db:9a:
                    a5:ef:b8:5c:c0:27:19:e9:b2:51:f7:f4:09:e0:56:
                    81:34:1b:6f:ed:90:03:56:55:3f:d1:96:af:03:38:
                    de:00:24:44:7a:41:fc:89:a2:1f:7f:1e:8e:c7:3d:
                    d3:da:64:a1:a4:32:bc:84:35:30:9d:f4:2e:3f:23:
                    08:08:bd:c5:3c:ce:c7:45:0e:64:72:c9:68:c3:f8:
                    5d:32:d7:c0:b0:d6:9d:2f:e7:4b:68:ab:d0:73:09:
                    ce:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:DD:BB:18:DB:02:6F:61:1E:81:03:D6:41:9F:37:8D:BD:2C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/93d94a02-2fd6-355a-bf9d-d4fd2f4b8fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:69:26:5c:b8:3f:51:c8:eb:f8:2e:29:ed:0a:3c:4e:40:c1:
         ce:69:70:bc:7a:37:36:1c:bd:6a:20:25:ce:77:3f:d4:11:20:
         ce:34:1f:51:0e:08:76:67:33:cb:8c:61:6d:f0:52:2e:ef:2e:
         10:ce:b4:e7:ef:66:1d:5c:46:f8:00:54:5e:59:06:ea:e6:db:
         ba:79:c4:24:13:e2:f4:46:cc:ce:64:2d:1b:5e:2b:af:8a:fd:
         66:a2:e4:d1:d2:22:03:dc:0a:fb:e4:17:f9:60:13:c7:27:8d:
         62:08:73:15:08:e9:1b:cf:1d:58:25:59:cc:a5:2c:87:c8:15:
         43:bc:7c:b5:d5:de:c3:db:7f:90:0c:51:0c:cf:bd:7c:24:72:
         ed:2a:db:c7:7c:e5:14:58:4d:ef:e4:b9:fd:74:41:c9:b9:29:
         e3:d7:bc:76:67:02:ec:8c:8d:ff:35:f3:6c:f1:19:77:e2:11:
         fd:f4:64:49:eb:54:21:e5:75:d6:21:64:40:9d:41:de:06:b8:
         d2:9e:04:5e:d5:62:e4:ef:6c:55:51:ac:f8:b9:e0:a6:ea:90:
         05:20:1e:5f:8c:8b:f0:0a:b8:f2:98:61:00:bf:ca:e3:40:ff:
         be:29:5b:f2:78:05:db:82:e0:0d:5f:ae:19:8a:1c:b9:fe:2c:
         eb:ce:3c:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4TpXa0KrdBM6kQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk
Y2M1MzZhODYtY2NmZC00YWIyLWI4NzUtMzc1MWRmNjlmZDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksQYh+RikB1A41lVHQO9mn2tvJRRXs2KL/iN
ifh3B0DJEBjK2/vadiJ91s+UL1YLij39f4lMNqb6ABOEp3y7ep3spFZXpLHBDUos
XaFLuk18wn0tBGTksDmyVdTwc8QGMbi1iV/nMBIX781Etsrda8FWmGMBtzIAEBcf
WCpuBNdNfLcvUpSlF2EO86a7rxBWRKlLzWfVHbXVOeZNn5Bzx75z25ql77hcwCcZ
6bJR9/QJ4FaBNBtv7ZADVlU/0ZavAzjeACREekH8iaIffx6Oxz3T2mShpDK8hDUw
nfQuPyMICL3FPM7HRQ5kcslow/hdMtfAsNadL+dLaKvQcwnOxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwi3bsY2wJvYR6BA9ZBnzeNvSzmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOTNkOTRhMDItMmZkNi0z
NTVhLWJmOWQtZDRmZDJmNGI4ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlpJly4P1HI6/guKe0KPE5Awc5pcLx6NzYcvWogJc53P9QRIM40H1EO
CHZnM8uMYW3wUi7vLhDOtOfvZh1cRvgAVF5ZBurm27p5xCQT4vRGzM5kLRteK6+K
/Wai5NHSIgPcCvvkF/lgE8cnjWIIcxUI6RvPHVglWcylLIfIFUO8fLXV3sPbf5AM
UQzPvXwkcu0q28d85RRYTe/kuf10Qcm5KePXvHZnAuyMjf8182zxGXfiEf30ZEnr
VCHlddYhZECdQd4GuNKeBF7VYuTvbFVRrPi54KbqkAUgHl+Mi/AKuPKYYQC/yuNA
/74pW/J4BduC4A1frhmKHLn+LOvOPM8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:50 2024 by rpki-client on console-ams.rpki-client.org