Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c319074f-d22d-3539-bdea-c51a20056c0d.roa
File:                     c319074f-d22d-3539-bdea-c51a20056c0d.roa (raw, json)
Hash identifier:          bYCfvTtNuD34eCPcRyfFhdhRfGJHDrDJw1vM5mWZFhM=
Subject key identifier:   FF:44:6C:A3:6F:A9:45:0E:6E:FA:C4:5B:6A:DA:84:55:33:63:C1:00
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858481A3CAA0721C8B69131990200
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c319074f-d22d-3539-bdea-c51a20056c0d.roa
Signing time:             Thu 05 Dec 2024 05:40:08 +0000
ROA not before:           Thu 05 Dec 2024 05:40:08 +0000
ROA not after:            Wed 05 Mar 2025 05:40:08 +0000
asID:                     9009
IP address blocks:        172.111.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1a:3c:aa:07:21:c8:b6:91:31:99:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec  5 05:40:08 2024 GMT
            Not After : Mar  5 05:40:08 2025 GMT
        Subject: CN=fc8e5416-c323-4a08-8fd3-ffba8f723795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:bd:77:b7:1a:43:91:4e:a9:2b:66:5f:6f:
                    2d:4e:d2:eb:8d:84:01:3b:36:12:6d:67:af:60:28:
                    87:ec:c1:c6:87:37:94:aa:0f:7a:bf:95:d2:01:66:
                    80:fe:60:9c:19:13:61:9f:5a:a1:56:b9:32:33:1f:
                    4f:4a:27:31:ee:ac:25:9c:a0:34:93:1d:2e:80:4c:
                    b1:08:d6:b9:68:77:d2:41:f4:0f:11:f3:b6:6f:8c:
                    d5:6b:58:c3:e2:1b:fd:99:9b:01:92:fd:55:14:a8:
                    d0:b0:5f:1b:6c:1d:c7:2e:54:67:a4:d5:77:53:78:
                    fa:d6:ad:74:5a:ae:6d:65:17:f3:06:fe:e4:8c:b9:
                    1d:76:20:69:52:21:89:1e:26:cb:28:5d:fa:fa:15:
                    4a:e7:b7:f9:54:3f:95:db:8a:e6:90:58:16:59:fe:
                    12:5d:90:e4:dd:f6:07:32:1b:62:98:a3:b4:2d:55:
                    e4:7d:1a:dc:9d:e7:f6:ce:64:16:6f:2c:ad:55:e4:
                    73:b6:8f:f0:68:13:e9:ca:13:d1:14:07:53:a2:98:
                    da:18:9a:16:ee:01:8e:9d:f0:c9:09:83:20:19:b7:
                    0a:2d:04:8c:fb:0a:a9:cb:f1:4d:8c:bd:17:e8:3c:
                    e3:99:50:64:b3:13:e6:50:4f:69:8b:df:c1:be:81:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:44:6C:A3:6F:A9:45:0E:6E:FA:C4:5B:6A:DA:84:55:33:63:C1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c319074f-d22d-3539-bdea-c51a20056c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:de:f8:83:21:3a:1c:e8:90:e7:10:96:28:24:ae:55:e3:
         7f:88:0c:89:7d:85:43:09:5e:31:bf:b0:0c:ad:99:f2:b2:04:
         0d:1f:af:47:9a:62:f0:ff:fc:8a:c2:ff:19:f6:26:6b:80:c8:
         fd:eb:a0:1a:e6:43:1b:f6:5b:1a:b2:9b:f5:71:d2:72:fe:30:
         a1:5a:4d:4f:60:b1:5b:6d:57:e2:38:4e:45:ec:b9:6e:a4:85:
         66:5c:36:50:26:64:09:85:c7:e2:c9:74:c2:ad:a1:6d:46:c1:
         dd:44:84:43:8d:53:99:1c:0b:37:ff:b8:0d:eb:11:e4:6b:bb:
         3a:46:07:e3:ef:11:0c:61:c6:50:6e:12:02:c9:6d:69:df:db:
         6c:8a:8e:9a:5c:c3:d6:8b:4d:9f:6f:ac:56:33:1f:ff:fb:4f:
         6a:3b:25:a6:95:12:1d:89:a5:ec:9c:83:99:ba:f0:ae:12:76:
         e2:a1:f6:fe:a8:90:4d:44:6b:62:2a:12:5a:67:29:c0:9e:93:
         68:22:0d:2a:f1:1a:05:9c:3d:c3:6f:a3:f8:c6:a0:3f:89:cc:
         d6:bd:e1:6e:90:09:02:a8:c3:3e:82:54:ee:0b:36:1f:e6:cc:
         c8:da:4b:20:1c:ca:63:a1:5c:ac:a8:af:95:d1:60:41:d6:9e:
         c7:31:20:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgaPKoHIci2kTGZAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIwNTA1NDAwOFoXDTI1MDMwNTA1NDAwOFowLzEtMCsGA1UEAxMk
ZmM4ZTU0MTYtYzMyMy00YTA4LThmZDMtZmZiYThmNzIzNzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeS9d7caQ5FOqStmX28tTtLrjYQBOzYSbWev
YCiH7MHGhzeUqg96v5XSAWaA/mCcGRNhn1qhVrkyMx9PSicx7qwlnKA0kx0ugEyx
CNa5aHfSQfQPEfO2b4zVa1jD4hv9mZsBkv1VFKjQsF8bbB3HLlRnpNV3U3j61q10
Wq5tZRfzBv7kjLkddiBpUiGJHibLKF36+hVK57f5VD+V24rmkFgWWf4SXZDk3fYH
MhtimKO0LVXkfRrcnef2zmQWbyytVeRzto/waBPpyhPRFAdTopjaGJoW7gGOnfDJ
CYMgGbcKLQSM+wqpy/FNjL0X6DzjmVBksxPmUE9pi9/BvoFpMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9EbKNvqUUObvrEW2rahFUzY8EAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzMxOTA3NGYtZDIyZC0z
NTM5LWJkZWEtYzUxYTIwMDU2YzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXS3viDIToc6JDnEJYoJK5V43+IDIl9hUMJXjG/sAytmfKyBA0fr0ea
YvD//IrC/xn2JmuAyP3roBrmQxv2Wxqym/Vx0nL+MKFaTU9gsVttV+I4TkXsuW6k
hWZcNlAmZAmFx+LJdMKtoW1Gwd1EhEONU5kcCzf/uA3rEeRruzpGB+PvEQxhxlBu
EgLJbWnf22yKjppcw9aLTZ9vrFYzH//7T2o7JaaVEh2Jpeycg5m68K4SduKh9v6o
kE1Ea2IqElpnKcCek2giDSrxGgWcPcNvo/jGoD+JzNa94W6QCQKowz6CVO4LNh/m
zMjaSyAcymOhXKyor5XRYEHWnscxICY=
-----END CERTIFICATE-----
Generated at Thu Dec 26 09:00:18 2024 by rpki-client on console-ams.rpki-client.org