Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa
File:                     e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa (raw, json)
Hash identifier:          aTaJEwGb0dd0UfgrV3jRKFwPy5wh/bYRVSupnGZ3Ips=
Subject key identifier:   55:78:BE:7E:FF:75:52:B7:28:8F:45:49:0D:3A:34:F4:03:D1:18:DA
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858477230F1B286AE5FA2F96FC880
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     212238
IP address blocks:        172.111.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f1:b2:86:ae:5f:a2:f9:6f:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=069ff64d-3a36-4ff9-bc00-0a66f4caa141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c1:64:a0:37:0c:90:8a:5c:bb:01:e7:a6:6f:
                    37:3e:02:1f:78:04:7c:aa:7a:9a:c5:f5:76:48:96:
                    6e:f1:16:a4:fe:aa:68:86:bd:72:39:53:24:eb:a8:
                    21:2b:8a:15:8f:9a:d4:c0:0e:f4:6e:5e:9e:85:c9:
                    74:9a:2b:d4:1e:2c:cd:12:d9:af:61:c2:8c:63:f4:
                    70:95:f4:d7:b5:e2:5a:47:65:0d:63:6e:c1:9d:51:
                    f3:7c:64:3f:c1:1b:4a:d6:4e:71:42:d3:a8:17:66:
                    0a:e7:83:98:91:f4:cd:19:aa:19:53:8a:21:00:c2:
                    08:c5:ec:39:3a:23:be:3b:3e:42:f4:c6:a1:38:23:
                    81:ae:cb:8c:ce:63:28:87:db:d1:e7:7e:39:4c:0e:
                    b8:9a:67:bd:4e:27:bd:bd:5a:a0:bf:14:97:f2:94:
                    3c:ca:46:33:8a:68:d7:dc:dd:be:5f:d7:ea:dc:e4:
                    44:23:82:60:46:a3:92:d6:e7:c3:f9:45:ef:32:cc:
                    7e:d2:9a:78:9d:56:52:f0:a0:a6:cd:6a:5a:e1:3d:
                    f3:13:00:c1:3c:cb:60:af:87:43:d9:c3:50:62:c5:
                    ba:44:22:44:58:f9:7f:27:84:19:f1:e7:6b:11:59:
                    55:86:fe:2e:f6:10:b3:31:eb:0b:61:1a:d2:7c:5f:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:78:BE:7E:FF:75:52:B7:28:8F:45:49:0D:3A:34:F4:03:D1:18:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:13:5e:0c:cd:77:2c:42:13:dc:0f:14:c3:dc:5a:ac:f9:
         7a:43:a6:22:09:8c:41:6f:fc:cf:9a:26:78:43:7f:15:dc:3e:
         79:90:e5:dd:33:98:16:c3:40:ee:c3:10:35:55:a6:74:27:26:
         98:73:43:0d:98:67:84:7c:43:6b:ab:bb:b3:7c:de:0f:f2:3b:
         cb:9a:67:2f:b2:3e:09:c1:8f:14:ce:17:c3:92:af:8e:ce:47:
         a5:90:ee:36:55:9f:15:51:e4:78:fa:eb:81:ea:63:2b:45:ac:
         51:6a:32:36:74:87:1c:8e:da:f4:bf:b1:e8:81:c9:41:74:a5:
         93:62:d1:dc:89:92:a4:3d:b2:cb:51:9a:8a:0c:4a:70:38:6f:
         9f:2d:0a:7e:00:51:c3:b2:55:97:b3:68:65:78:e8:e0:7e:04:
         02:11:50:6a:37:1d:fe:8f:e9:9e:7b:49:75:0a:97:df:ca:d3:
         58:bc:8a:0b:45:37:06:c5:15:03:80:10:b7:da:6a:91:ae:98:
         fc:3c:65:25:6d:c5:10:03:a7:a7:d2:71:4a:36:aa:55:57:c3:
         92:12:27:e3:08:ad:27:75:82:69:b3:7d:53:66:48:d4:a3:8a:
         cb:df:31:88:56:02:e6:92:8a:41:8a:4e:14:0d:4a:42:fe:30:
         14:7d:cc:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMPGyhq5fovlvyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
MDY5ZmY2NGQtM2EzNi00ZmY5LWJjMDAtMGE2NmY0Y2FhMTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cFkoDcMkIpcuwHnpm83PgIfeAR8qnqaxfV2
SJZu8Rak/qpohr1yOVMk66ghK4oVj5rUwA70bl6ehcl0mivUHizNEtmvYcKMY/Rw
lfTXteJaR2UNY27BnVHzfGQ/wRtK1k5xQtOoF2YK54OYkfTNGaoZU4ohAMIIxew5
OiO+Oz5C9MahOCOBrsuMzmMoh9vR5345TA64mme9Tie9vVqgvxSX8pQ8ykYzimjX
3N2+X9fq3OREI4JgRqOS1ufD+UXvMsx+0pp4nVZS8KCmzWpa4T3zEwDBPMtgr4dD
2cNQYsW6RCJEWPl/J4QZ8edrEVlVhv4u9hCzMesLYRrSfF8TtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFV4vn7/dVK3KI9FSQ06NPQD0RjaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTg5NmIyYTUtMjljZC0z
NDJmLWIxMmEtOGYxZmY3NmQwYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC/tE14MzXcsQhPcDxTD3Fqs+XpDpiIJjEFv/M+aJnhDfxXcPnmQ5d0z
mBbDQO7DEDVVpnQnJphzQw2YZ4R8Q2uru7N83g/yO8uaZy+yPgnBjxTOF8OSr47O
R6WQ7jZVnxVR5Hj664HqYytFrFFqMjZ0hxyO2vS/seiByUF0pZNi0dyJkqQ9sstR
mooMSnA4b58tCn4AUcOyVZezaGV46OB+BAIRUGo3Hf6P6Z57SXUKl9/K01i8igtF
NwbFFQOAELfaapGumPw8ZSVtxRADp6fScUo2qlVXw5ISJ+MIrSd1gmmzfVNmSNSj
isvfMYhWAuaSikGKThQNSkL+MBR9zFg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:55 2024 by rpki-client on console-fra.rpki-client.org