Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/a7210f78-a226-35a8-a9ae-d70caff61f75.roa
File:                     a7210f78-a226-35a8-a9ae-d70caff61f75.roa (raw, json)
Hash identifier:          2am+2Zp2YU1VG11V2xNMFzm1T1OaQ397aTqonF6xeek=
Subject key identifier:   D8:6E:9A:48:2F:1C:82:9E:A7:4B:B8:5F:0A:34:50:14:8D:6C:B0:63
Certificate issuer:       /CN=1e6b1e4c-be11-4e48-a0ee-190ac58209a6
Certificate serial:       010D0C9F4328584774FB97859AE288929416FBC0
Authority key identifier: D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/a7210f78-a226-35a8-a9ae-d70caff61f75.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     40739
IP address blocks:        192.55.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:97:85:9a:e2:88:92:94:16:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b1e4c-be11-4e48-a0ee-190ac58209a6
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=dc5c639e-571d-4f4b-969c-b17809652d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0f:a1:e7:82:42:cb:f0:82:82:ca:5b:22:33:
                    aa:74:0b:10:bd:9b:4c:4e:b0:99:0a:45:db:00:30:
                    b5:b9:18:30:b2:66:11:ee:ba:b8:cd:97:be:e6:dc:
                    cd:ea:07:ac:ac:62:0a:dd:e2:25:50:c6:84:e8:57:
                    61:a7:05:b0:5c:24:77:1e:ae:a2:b1:5a:25:c8:d1:
                    73:a1:e2:f8:0b:2d:df:2e:42:7a:16:23:4b:99:43:
                    d4:ca:2e:69:45:d5:95:9d:bf:55:99:b7:8f:27:08:
                    9e:3f:10:c4:aa:cf:f2:c9:f1:35:d7:fc:6e:fd:12:
                    d3:86:f4:04:d3:cf:3b:2a:45:ff:9e:6b:cc:e9:f8:
                    cd:9d:de:9e:30:76:58:09:ad:2f:2f:55:49:36:94:
                    51:ca:de:6e:ea:dd:f3:45:1b:ac:7a:84:70:ef:e8:
                    ab:2d:6d:ed:30:1c:2d:02:07:85:ff:96:72:ea:de:
                    8f:c7:99:4d:a8:27:21:a8:60:74:e6:f8:0a:a7:14:
                    70:1b:4b:b6:b5:c7:cb:1c:8f:72:76:15:fa:4d:38:
                    ac:86:c0:3c:20:49:5f:84:c3:31:93:d4:45:62:d8:
                    f6:d5:bf:0f:92:b8:ea:60:aa:c3:92:70:94:91:2a:
                    34:a7:0b:4e:e8:93:8e:b1:d6:34:19:6d:fa:2b:4d:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6E:9A:48:2F:1C:82:9E:A7:4B:B8:5F:0A:34:50:14:8D:6C:B0:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/a7210f78-a226-35a8-a9ae-d70caff61f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.crl

            X509v3 Authority Key Identifier:
                keyid:D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:16:a7:4c:8a:30:7b:7e:f0:9c:b6:6f:8f:d4:d7:5d:26:6b:
         93:f9:b3:4e:c8:18:52:d8:e6:5c:d0:59:c7:e2:61:3e:99:5c:
         53:06:5f:05:ae:d1:76:8b:ea:2b:a7:15:ef:c7:d1:f3:96:53:
         d6:6d:03:3b:ac:29:9c:c8:b1:a3:85:e6:25:82:3d:bb:b9:b3:
         ef:b2:02:58:2f:61:ac:cd:51:4a:be:99:8e:f3:6c:72:76:5d:
         70:85:d8:77:60:30:8f:50:b5:58:bf:3b:f9:21:ec:c6:01:84:
         45:2f:20:db:69:4f:91:c4:00:8b:47:a2:5f:50:04:2b:6b:b4:
         26:26:59:82:11:24:46:ac:2f:c5:3d:a3:15:ce:18:d7:c5:38:
         48:e3:98:44:dd:d1:66:d9:ea:9e:1d:b3:9f:94:d0:fc:95:74:
         aa:0b:62:2a:b1:e7:8c:b2:c0:f6:1b:9a:e3:d4:9c:60:7e:dd:
         fe:2a:f8:b0:d6:7c:6b:d0:43:1f:e2:2b:28:47:e5:aa:65:7a:
         9b:8d:97:86:71:b1:11:d8:68:ca:c2:65:35:ca:40:53:b7:11:
         2b:87:e7:89:73:7e:3e:a0:cf:5a:0d:d5:7f:00:da:7c:7c:fb:
         72:83:3f:7b:f7:29:dd:54:d0:fa:ea:7d:d1:9d:c2:c2:e2:76:
         94:59:bd:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+5eFmuKIkpQW+8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU2YjFlNGMtYmUxMS00ZTQ4LWEwZWUtMTkwYWM1ODIw
OWE2MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk
ZGM1YzYzOWUtNTcxZC00ZjRiLTk2OWMtYjE3ODA5NjUyZDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw+h54JCy/CCgspbIjOqdAsQvZtMTrCZCkXb
ADC1uRgwsmYR7rq4zZe+5tzN6gesrGIK3eIlUMaE6FdhpwWwXCR3Hq6isVolyNFz
oeL4Cy3fLkJ6FiNLmUPUyi5pRdWVnb9VmbePJwiePxDEqs/yyfE11/xu/RLThvQE
0887KkX/nmvM6fjNnd6eMHZYCa0vL1VJNpRRyt5u6t3zRRuseoRw7+irLW3tMBwt
AgeF/5Zy6t6Px5lNqCchqGB05vgKpxRwG0u2tcfLHI9ydhX6TTishsA8IElfhMMx
k9RFYtj21b8PkrjqYKrDknCUkSo0pwtO6JOOsdY0GW36K02lAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNhumkgvHIKep0u4Xwo0UBSNbLBjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTZi
MWU0Yy1iZTExLTRlNDgtYTBlZS0xOTBhYzU4MjA5YTYvYTcyMTBmNzgtYTIyNi0z
NWE4LWE5YWUtZDcwY2FmZjYxZjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU2YjFlNGMtYmUxMS00ZTQ4LWEw
ZWUtMTkwYWM1ODIwOWE2LzFlNmIxZTRjLWJlMTEtNGU0OC1hMGVlLTE5MGFjNTgy
MDlhNi5jcmwwHwYDVR0jBBgwFoAU0IJeehO5o18qO7bD10KRjcTrPRswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTZiMWU0Yy1iZTExLTRlNDgtYTBlZS0xOTBh
YzU4MjA5YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDdVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYWp0yKMHt+8Jy2b4/U110ma5P5s07IGFLY5lzQWcfiYT6ZXFMGXwWu
0XaL6iunFe/H0fOWU9ZtAzusKZzIsaOF5iWCPbu5s++yAlgvYazNUUq+mY7zbHJ2
XXCF2HdgMI9QtVi/O/kh7MYBhEUvINtpT5HEAItHol9QBCtrtCYmWYIRJEasL8U9
oxXOGNfFOEjjmETd0WbZ6p4ds5+U0PyVdKoLYiqx54yywPYbmuPUnGB+3f4q+LDW
fGvQQx/iKyhH5aplepuNl4ZxsRHYaMrCZTXKQFO3ESuH54lzfj6gz1oN1X8A2nx8
+3KDP3v3Kd1U0PrqfdGdwsLidpRZvcw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:22 2024 by rpki-client on console-ams.rpki-client.org