Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/60556c8c-05cb-360b-a89c-f5e9f9bb6246.roa
File:                     60556c8c-05cb-360b-a89c-f5e9f9bb6246.roa (raw, json)
Hash identifier:          mpzF+WO2TfL5zLzlrzLIbtBfnpSpcN0B48uw4+UpXGc=
Subject key identifier:   EC:66:A8:2C:DB:E7:31:83:5F:3B:74:AC:F8:36:23:08:04:A6:76:C2
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858471A6F4D2E0312C9E95AB444C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/60556c8c-05cb-360b-a89c-f5e9f9bb6246.roa
Signing time:             Wed 04 Sep 2024 14:35:14 +0000
ROA not before:           Wed 04 Sep 2024 14:35:14 +0000
ROA not after:            Tue 03 Dec 2024 15:35:14 +0000
asID:                     137409
IP address blocks:        172.94.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:6f:4d:2e:03:12:c9:e9:5a:b4:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  4 14:35:14 2024 GMT
            Not After : Dec  3 15:35:14 2024 GMT
        Subject: CN=e3bd2979-9ad6-4761-9f10-9a2883f849ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:7b:07:6a:68:24:cb:fb:47:ac:a6:c2:b7:
                    c5:da:1d:98:d8:23:f2:ae:a3:08:de:54:60:d6:3d:
                    b7:87:a3:1d:b2:03:42:ec:7f:19:fe:f9:7c:2c:75:
                    9b:8e:88:c4:fb:24:b1:a2:aa:dd:32:4f:ec:7d:90:
                    b6:4d:42:17:1e:ab:db:52:99:68:c5:82:ad:b3:9d:
                    c8:1f:45:bf:b5:14:cb:d1:bc:a2:bc:da:e9:ae:f1:
                    2b:46:39:e5:27:0b:d5:9d:35:8e:8b:65:d7:2d:47:
                    78:f2:69:35:f0:29:59:e3:93:14:c8:00:e0:b3:51:
                    5f:53:e8:77:db:31:3f:1e:bf:45:bc:72:7e:0c:cf:
                    87:00:e4:ac:65:06:3e:e1:b8:fa:52:ae:8b:95:c5:
                    ee:f3:ad:8a:06:02:a0:1c:fd:31:3e:7a:46:3e:0b:
                    15:b3:a5:ae:73:56:99:a6:38:e7:5f:43:6b:01:e3:
                    89:36:4b:54:dd:2e:55:9f:17:70:ee:f5:22:60:b4:
                    da:1d:b2:c1:95:95:6f:5f:d5:79:c1:42:8a:63:68:
                    c9:14:98:9d:d8:f3:55:09:d0:b8:f3:96:26:2d:ce:
                    06:72:1f:01:4e:64:bc:68:d4:7c:07:4c:ea:42:32:
                    6f:03:f2:cb:fd:34:8a:e3:6b:56:07:70:4e:89:48:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:66:A8:2C:DB:E7:31:83:5F:3B:74:AC:F8:36:23:08:04:A6:76:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/60556c8c-05cb-360b-a89c-f5e9f9bb6246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ef:78:a3:b2:80:68:67:52:57:8a:2a:76:25:29:d9:0b:04:
         5e:c3:3e:2c:95:69:e8:34:d5:78:6c:83:80:b1:39:0e:c0:29:
         a8:30:79:fd:a6:67:19:6e:7d:b9:b1:bd:2e:78:c3:07:97:b9:
         b7:e9:16:96:4f:85:cc:61:bc:14:6b:6a:97:3f:ae:a1:19:19:
         1f:a5:1f:37:25:16:0c:3a:60:e2:f6:a8:c3:40:1c:47:a2:ce:
         77:20:3c:5c:ab:02:ba:1b:f6:e2:57:20:fe:95:d4:63:b0:6a:
         f9:91:3a:4a:b0:28:17:4b:85:7b:62:e9:42:69:a9:fd:e0:4c:
         4f:c1:c6:65:2c:ae:8b:63:26:87:3d:37:df:65:0b:60:70:e0:
         f4:f6:38:ce:11:ab:96:3d:17:fa:70:4b:b6:9b:3c:01:68:6b:
         48:90:42:9f:77:b3:c0:47:82:09:a1:a4:26:b3:c6:e2:8e:51:
         39:6d:fe:98:94:a9:e4:ec:72:7a:4a:85:7c:e4:7a:96:cd:cd:
         1c:b9:0d:84:ca:87:f8:52:53:43:25:89:60:34:5d:1e:45:71:
         d9:42:9d:03:7b:09:c2:bf:ec:84:cb:50:8b:3c:df:b7:18:71:
         03:27:52:00:c0:53:8e:37:73:c2:b1:15:28:a3:32:92:fb:7c:
         01:d6:e1:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcab00uAxLJ6Vq0RMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDkwNDE0MzUxNFoXDTI0MTIwMzE1MzUxNFowLzEtMCsGA1UEAxMk
ZTNiZDI5NzktOWFkNi00NzYxLTlmMTAtOWEyODgzZjg0OWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwN7B2poJMv7R6ymwrfF2h2Y2CPyrqMI3lRg
1j23h6MdsgNC7H8Z/vl8LHWbjojE+ySxoqrdMk/sfZC2TUIXHqvbUploxYKts53I
H0W/tRTL0byivNrprvErRjnlJwvVnTWOi2XXLUd48mk18ClZ45MUyADgs1FfU+h3
2zE/Hr9FvHJ+DM+HAOSsZQY+4bj6Uq6LlcXu862KBgKgHP0xPnpGPgsVs6Wuc1aZ
pjjnX0NrAeOJNktU3S5Vnxdw7vUiYLTaHbLBlZVvX9V5wUKKY2jJFJid2PNVCdC4
85YmLc4Gch8BTmS8aNR8B0zqQjJvA/LL/TSK42tWB3BOiUjhWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxmqCzb5zGDXzt0rPg2IwgEpnbCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjA1NTZjOGMtMDVjYi0z
NjBiLWE4OWMtZjVlOWY5YmI2MjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHveKOygGhnUleKKnYlKdkLBF7DPiyVaeg01Xhsg4CxOQ7AKagwef2m
ZxlufbmxvS54wweXubfpFpZPhcxhvBRrapc/rqEZGR+lHzclFgw6YOL2qMNAHEei
zncgPFyrArob9uJXIP6V1GOwavmROkqwKBdLhXti6UJpqf3gTE/BxmUsrotjJoc9
N99lC2Bw4PT2OM4Rq5Y9F/pwS7abPAFoa0iQQp93s8BHggmhpCazxuKOUTlt/piU
qeTscnpKhXzkepbNzRy5DYTKh/hSU0MliWA0XR5FcdlCnQN7CcK/7ITLUIs837cY
cQMnUgDAU443c8KxFSijMpL7fAHW4Sk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org