Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa
File:                     cae92603-341e-3d54-9fda-0cf1e572484c.roa (raw, json)
Hash identifier:          6MFDFy3AXEjrFDiocg3hiAGAfO4B1YDrv9CIfhXR0M0=
Subject key identifier:   AB:46:BF:77:42:3C:31:3B:50:80:90:9B:57:6C:BC:88:3A:DC:F9:81
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F43285847256B25DE3099E9E9C08D1F00
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa
Signing time:             Sun 08 Sep 2024 13:00:41 +0000
ROA not before:           Sun 08 Sep 2024 13:00:41 +0000
ROA not after:            Sat 07 Dec 2024 14:00:41 +0000
asID:                     21949
IP address blocks:        199.247.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6b:25:de:30:99:e9:e9:c0:8d:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Sep  8 13:00:41 2024 GMT
            Not After : Dec  7 14:00:41 2024 GMT
        Subject: CN=d051f919-8c03-4d38-b1f4-79b341cd1819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:9b:0e:fb:6b:ee:f8:ff:1c:70:8b:43:0a:
                    e5:3c:25:1f:6b:1c:03:8c:8e:0c:f9:8f:6f:3f:de:
                    12:cd:4e:18:d0:b7:86:78:3b:3f:5c:fd:f5:e5:99:
                    72:21:c2:d7:29:86:9b:00:58:10:8b:af:8e:31:64:
                    b9:fa:85:a7:b5:5c:60:e1:4c:b6:87:19:55:5f:bf:
                    94:01:95:12:d9:eb:c2:98:89:12:21:cd:f4:06:2a:
                    a1:7a:3b:63:63:c2:72:95:45:aa:7c:d4:98:ae:03:
                    ee:bf:92:82:c1:cd:a1:79:7c:d3:1f:e0:4d:23:93:
                    7e:33:10:44:1c:50:6c:26:8b:32:4e:fb:0f:23:7d:
                    41:38:d5:db:ef:79:1e:da:c9:eb:95:39:25:99:ca:
                    f5:35:c1:30:c5:f2:06:ca:37:23:cc:dc:16:d7:af:
                    00:3b:d9:01:b7:ee:72:e3:2e:fa:79:55:e0:ce:a9:
                    2d:16:39:e0:31:37:ca:c3:f8:68:49:6e:8c:26:ca:
                    f1:49:ba:ed:15:08:e3:27:fb:f0:c4:76:e5:c7:c1:
                    25:00:8f:10:3d:df:03:e3:8f:02:9e:f4:90:78:3a:
                    a3:9a:db:60:ef:dc:74:93:81:23:c9:ca:80:83:6b:
                    45:3b:22:01:cb:cb:31:de:79:e3:e9:d8:65:d2:c2:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:46:BF:77:42:3C:31:3B:50:80:90:9B:57:6C:BC:88:3A:DC:F9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/cae92603-341e-3d54-9fda-0cf1e572484c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b9:0e:45:04:8c:a1:96:bb:2a:0d:b3:f0:f3:7c:92:34:53:
         83:e5:3d:81:5d:e7:56:78:cb:4b:1e:6d:9f:2e:11:7b:2d:0b:
         7d:2f:99:68:ba:d2:a3:63:31:2a:72:3d:80:66:b5:04:41:4a:
         8f:f4:01:a2:be:23:8c:cc:0c:ea:b2:96:25:de:69:05:de:ef:
         cf:f1:75:55:d4:fd:89:8c:c6:1f:88:09:cf:cd:d2:33:91:e4:
         e7:30:74:11:b0:92:3f:4e:3d:87:c6:83:af:f7:3a:80:33:d5:
         24:7e:e3:bb:71:89:57:d7:16:c4:84:eb:b4:aa:42:0d:95:06:
         f4:da:2c:bb:09:9f:68:ba:ee:1d:d4:4d:f3:b1:14:fd:6c:42:
         16:6d:ba:0c:5a:c7:52:e8:2a:43:d3:79:ad:27:16:88:eb:49:
         7d:10:9a:71:21:ca:a8:2a:fe:0c:9e:c2:00:17:58:ab:4c:ce:
         ae:ba:75:10:44:59:55:93:d6:20:bf:f8:1a:3b:b8:9d:d2:ab:
         43:7b:9d:16:72:bc:51:26:d1:a1:de:fa:56:e4:8c:a9:4f:62:
         9d:b7:4a:d6:34:47:ac:19:6a:c6:d0:39:31:20:7e:87:67:c9:
         72:7b:5c:a6:06:fb:b4:ba:76:a8:c3:89:fe:18:31:91:6a:f6:
         47:c7:70:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEclayXeMJnp6cCNHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI0MDkwODEzMDA0MVoXDTI0MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk
ZDA1MWY5MTktOGMwMy00ZDM4LWIxZjQtNzliMzQxY2QxODE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO6bDvtr7vj/HHCLQwrlPCUfaxwDjI4M+Y9v
P94SzU4Y0LeGeDs/XP315ZlyIcLXKYabAFgQi6+OMWS5+oWntVxg4Uy2hxlVX7+U
AZUS2evCmIkSIc30BiqhejtjY8JylUWqfNSYrgPuv5KCwc2heXzTH+BNI5N+MxBE
HFBsJosyTvsPI31BONXb73ke2snrlTklmcr1NcEwxfIGyjcjzNwW168AO9kBt+5y
4y76eVXgzqktFjngMTfKw/hoSW6MJsrxSbrtFQjjJ/vwxHblx8ElAI8QPd8D448C
nvSQeDqjmttg79x0k4EjycqAg2tFOyIBy8sx3nnj6dhl0sKGPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtGv3dCPDE7UICQm1dsvIg63PmBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvY2FlOTI2MDMtMzQxZS0z
ZDU0LTlmZGEtMGNmMWU1NzI0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/fAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+5DkUEjKGWuyoNs/DzfJI0U4PlPYFd51Z4y0sebZ8uEXstC30vmWi6
0qNjMSpyPYBmtQRBSo/0AaK+I4zMDOqyliXeaQXe78/xdVXU/YmMxh+ICc/N0jOR
5OcwdBGwkj9OPYfGg6/3OoAz1SR+47txiVfXFsSE67SqQg2VBvTaLLsJn2i67h3U
TfOxFP1sQhZtugxax1LoKkPTea0nFojrSX0QmnEhyqgq/gyewgAXWKtMzq66dRBE
WVWT1iC/+Bo7uJ3Sq0N7nRZyvFEm0aHe+lbkjKlPYp23StY0R6wZasbQOTEgfodn
yXJ7XKYG+7S6dqjDif4YMZFq9kfHcGk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:23 2024 by rpki-client on console-ams.rpki-client.org