Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa
File:                     d508a1f5-3140-32b0-b64e-df158da10677.roa (raw, json)
Hash identifier:          W6bqixANo/XKtCvCsaE3R1Nm+vLPutabMBce9ejIJ2w=
Subject key identifier:   AB:17:C0:04:66:B4:80:EA:79:F3:E7:74:AD:A3:81:5A:95:69:0E:4F
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F4328584769D0D9B23780217132318C80
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        199.65.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d9:b2:37:80:21:71:32:31:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=081ab7ea-5b00-4e72-b788-eb5a4266a3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:93:68:20:20:81:59:16:89:ea:d1:68:5f:
                    2e:8b:8d:f8:8e:1d:32:a1:2d:66:1e:d2:9d:b7:4a:
                    d1:0d:8a:7d:f7:a2:1f:97:1d:ce:54:e3:cf:0d:89:
                    73:27:1f:cb:1d:44:90:2e:90:77:26:b8:1e:22:b1:
                    ec:32:56:c7:2d:5a:ab:81:b1:ea:13:dc:93:6e:10:
                    a4:ea:97:b0:07:c5:66:90:bf:fb:20:c0:c2:82:24:
                    cb:c6:0e:e6:3b:e4:3b:cb:44:66:c0:fd:22:c0:1b:
                    ec:e4:8f:4f:00:bd:5c:95:90:20:ae:87:bd:66:79:
                    93:03:b5:47:ca:8d:af:ff:20:92:86:81:f7:f5:87:
                    f5:41:5e:0b:fe:e8:df:b2:cd:06:34:8e:db:9a:f4:
                    50:9e:b8:e2:70:32:9c:af:3d:8d:7d:1c:e7:99:11:
                    2e:8c:39:ec:ac:31:b4:91:ca:3a:24:68:7e:ff:cf:
                    9b:2b:08:85:01:7f:98:aa:87:41:2e:8d:97:a7:6e:
                    42:80:e4:b9:3a:9c:a2:f1:0d:75:37:ac:29:57:a9:
                    9b:b7:e6:38:dc:b2:a5:49:b4:5f:a2:ad:66:28:d7:
                    fc:67:4c:d3:57:3a:00:e0:c2:72:a7:e1:21:c9:bc:
                    40:19:2f:7a:bb:d8:c6:4a:f8:09:b4:8c:4b:f5:97:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:17:C0:04:66:B4:80:EA:79:F3:E7:74:AD:A3:81:5A:95:69:0E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/d508a1f5-3140-32b0-b64e-df158da10677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:04:4f:5f:1e:7b:a7:43:5a:f8:65:b2:6c:ff:db:1c:ed:ef:
         b7:8b:f7:aa:93:4b:c5:d1:4c:bf:cf:70:e5:d7:00:7c:28:b8:
         b7:c9:11:76:a0:6b:91:09:51:2e:91:64:01:66:54:67:9e:85:
         08:ff:c9:85:34:e2:be:a3:a5:d3:b4:54:73:7c:2a:75:c8:3f:
         fc:ca:db:48:64:8c:80:69:61:d5:8d:1e:fe:80:cb:5a:05:d8:
         f4:c4:82:6a:ae:b3:a2:3b:9d:88:aa:bb:7e:63:13:75:e8:c7:
         34:49:90:f3:0a:dd:65:34:f7:1e:89:5d:92:14:f4:0b:b2:a6:
         9a:81:1f:f5:26:9c:ab:89:8d:6f:6a:41:96:fa:59:a8:5f:88:
         79:9f:b1:25:b6:42:8b:e4:d5:b4:67:1a:e8:85:25:9e:3b:64:
         a6:f8:31:1c:40:54:25:8f:a6:d4:1e:0a:c3:3d:51:7e:bc:8f:
         d5:3f:f5:e6:f1:51:cc:e3:cf:29:c2:d4:82:5d:ba:9a:50:ec:
         b5:3f:54:9e:82:91:1e:be:48:ce:ec:46:8a:ea:98:0d:7d:77:
         af:50:2d:5f:27:cf:6f:2e:40:d5:8b:b1:11:85:59:da:c3:bc:
         8a:24:a5:d2:ac:70:71:43:6e:49:bf:bf:12:e8:e8:17:89:9f:
         12:05:5a:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0NmyN4AhcTIxjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0
NDY3MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk
MDgxYWI3ZWEtNWIwMC00ZTcyLWI3ODgtZWI1YTQyNjZhM2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoROTaCAggVkWierRaF8ui434jh0yoS1mHtKd
t0rRDYp996Iflx3OVOPPDYlzJx/LHUSQLpB3JrgeIrHsMlbHLVqrgbHqE9yTbhCk
6pewB8VmkL/7IMDCgiTLxg7mO+Q7y0RmwP0iwBvs5I9PAL1clZAgroe9ZnmTA7VH
yo2v/yCShoH39Yf1QV4L/ujfss0GNI7bmvRQnrjicDKcrz2NfRznmREujDnsrDG0
kco6JGh+/8+bKwiFAX+YqodBLo2Xp25CgOS5Opyi8Q11N6wpV6mbt+Y43LKlSbRf
oq1mKNf8Z0zTVzoA4MJyp+EhybxAGS96u9jGSvgJtIxL9ZdDVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKsXwARmtIDqefPndK2jgVqVaQ5PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi
NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvZDUwOGExZjUtMzE0MC0z
MmIwLWI2NGUtZGYxNThkYTEwNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx
MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw
NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw
NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0EQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwET18ee6dDWvhlsmz/2xzt77eL96qTS8XRTL/PcOXXAHwouLfJEXag
a5EJUS6RZAFmVGeehQj/yYU04r6jpdO0VHN8KnXIP/zK20hkjIBpYdWNHv6Ay1oF
2PTEgmqus6I7nYiqu35jE3XoxzRJkPMK3WU09x6JXZIU9AuyppqBH/UmnKuJjW9q
QZb6WahfiHmfsSW2Qovk1bRnGuiFJZ47ZKb4MRxAVCWPptQeCsM9UX68j9U/9ebx
UczjzynC1IJduppQ7LU/VJ6CkR6+SM7sRorqmA19d69QLV8nz28uQNWLsRGFWdrD
vIokpdKscHFDbkm/vxLo6BeJnxIFWns=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:20:13 2024 by rpki-client on console-ams.rpki-client.org