Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c05b354f-1791-35e5-92c6-b06bb74c7f49.roa
File:                     c05b354f-1791-35e5-92c6-b06bb74c7f49.roa (raw, json)
Hash identifier:          LhZ4MDYqlc9TNAiztGSZEPzHau7Qk6oZvaIDk5iEtc4=
Subject key identifier:   D3:17:EC:95:0E:47:0D:C1:DC:CE:78:56:00:1A:C5:C4:DB:38:DF:06
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584774FB980ECE1131A643B85100
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c05b354f-1791-35e5-92c6-b06bb74c7f49.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     18434
IP address blocks:        69.36.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:98:0e:ce:11:31:a6:43:b8:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=4b370c97-63bd-43e3-985b-e371a8d333e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:ec:8e:7b:52:34:e2:4a:d1:c3:a0:80:da:
                    a3:7c:a2:49:40:b2:f7:5e:02:e3:56:7d:e8:1c:e9:
                    9f:da:81:c7:1f:2f:61:39:18:4c:7b:cc:4b:8d:fb:
                    e4:b1:2d:0a:3d:02:a2:d9:fa:7f:47:2e:4c:3e:67:
                    bc:67:2a:47:1e:8e:ec:87:90:ee:f9:07:4e:7f:ae:
                    48:41:f3:fa:25:0d:71:bd:3b:ad:7c:df:e4:ba:aa:
                    24:bc:a1:10:8a:71:1a:0c:e9:f9:de:e7:3f:89:61:
                    fd:c1:62:c3:34:47:41:ec:93:3c:9f:94:8e:9d:39:
                    aa:d7:30:23:f8:42:56:45:8f:11:7e:14:ae:99:ed:
                    55:44:d9:ce:f1:74:55:34:04:eb:a8:17:fa:fb:c3:
                    b7:90:cb:ad:91:00:68:6d:67:84:d2:28:02:9f:01:
                    07:c5:90:f5:cc:5c:1f:7b:b0:c0:19:4a:64:16:87:
                    f0:e9:a0:3e:65:6c:a8:92:b6:5f:b5:a6:3d:e8:33:
                    aa:fc:43:e0:16:56:ae:16:7b:9c:b8:18:0b:91:d8:
                    6f:14:15:6b:34:68:e0:ab:71:4f:1b:e6:0d:3d:50:
                    fa:3b:b4:37:db:e9:e1:42:90:2a:79:45:63:03:b7:
                    38:a1:2a:73:29:78:2b:c4:41:a9:36:04:29:5c:5b:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:EC:95:0E:47:0D:C1:DC:CE:78:56:00:1A:C5:C4:DB:38:DF:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c05b354f-1791-35e5-92c6-b06bb74c7f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:32:0a:87:b7:80:aa:67:42:ef:e1:f5:77:fb:54:bd:b1:6a:
         f6:bf:22:ab:af:1b:22:3b:cd:9c:b3:79:e5:82:db:9e:cd:ef:
         f0:7a:19:ec:0d:de:e3:a3:b8:9d:9e:0b:ff:a2:04:00:81:8e:
         be:d3:c1:18:ab:73:18:4b:16:31:2d:ad:d5:3b:01:ff:74:1c:
         4f:e7:29:90:0c:d8:6b:72:04:1f:1a:43:b7:e3:af:67:df:00:
         c0:10:dd:2f:82:5b:d2:09:d7:04:d8:60:7e:b2:2a:5d:53:86:
         c0:b5:bb:9e:38:15:90:96:8c:b7:ce:37:73:29:be:28:6a:26:
         fd:83:ce:aa:a6:33:8c:0e:ae:fb:66:48:b3:54:d2:f5:8c:8b:
         b6:77:7f:e8:8b:d8:40:db:67:89:41:a2:41:83:ae:1b:46:24:
         4b:3c:3f:e4:38:7f:ab:02:5d:55:06:19:3d:0b:c5:d0:62:31:
         8e:6d:dc:66:ae:12:a0:2c:38:32:d8:80:a6:74:f5:09:89:45:
         de:25:59:a3:89:d9:9b:0f:4b:1d:73:19:63:5b:d0:00:03:9a:
         82:03:db:18:5d:a6:7c:69:54:17:0b:68:19:1d:a6:7d:fe:03:
         f8:dd:1c:1f:d9:d6:1f:8d:38:05:0d:f5:5c:ad:55:4c:e9:fe:
         e1:99:7f:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+5gOzhExpkO4UQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli
OTcxMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk
NGIzNzBjOTctNjNiZC00M2UzLTk4NWItZTM3MWE4ZDMzM2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvjsjntSNOJK0cOggNqjfKJJQLL3XgLjVn3o
HOmf2oHHHy9hORhMe8xLjfvksS0KPQKi2fp/Ry5MPme8ZypHHo7sh5Du+QdOf65I
QfP6JQ1xvTutfN/kuqokvKEQinEaDOn53uc/iWH9wWLDNEdB7JM8n5SOnTmq1zAj
+EJWRY8RfhSume1VRNnO8XRVNATrqBf6+8O3kMutkQBobWeE0igCnwEHxZD1zFwf
e7DAGUpkFofw6aA+ZWyokrZftaY96DOq/EPgFlauFnucuBgLkdhvFBVrNGjgq3FP
G+YNPVD6O7Q32+nhQpAqeUVjA7c4oSpzKXgrxEGpNgQpXFtZZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMX7JUORw3B3M54VgAaxcTbON8GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh
NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYzA1YjM1NGYtMTc5MS0z
NWU1LTkyYzYtYjA2YmI3NGM3ZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw
YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5
Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2
MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEyCoe3gKpnQu/h9Xf7VL2xava/IquvGyI7zZyzeeWC257N7/B6GewN
3uOjuJ2eC/+iBACBjr7TwRircxhLFjEtrdU7Af90HE/nKZAM2GtyBB8aQ7fjr2ff
AMAQ3S+CW9IJ1wTYYH6yKl1ThsC1u544FZCWjLfON3MpvihqJv2DzqqmM4wOrvtm
SLNU0vWMi7Z3f+iL2EDbZ4lBokGDrhtGJEs8P+Q4f6sCXVUGGT0LxdBiMY5t3Gau
EqAsODLYgKZ09QmJRd4lWaOJ2ZsPSx1zGWNb0AADmoID2xhdpnxpVBcLaBkdpn3+
A/jdHB/Z1h+NOAUN9VytVUzp/uGZfxs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:20 2024 by rpki-client on console-ams.rpki-client.org