Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa
File:                     a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa (raw, json)
Hash identifier:          hgnXPhdh694SpTd264adIv31DVAnAmI9Rx2KN6hvy0A=
Subject key identifier:   7A:CB:FC:A8:6B:A4:39:F4:1A:1F:56:B5:68:F0:07:A7:46:65:3D:46
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584732996272D8F4A223475C7E20
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa
Signing time:             Fri 13 Sep 2024 06:19:25 +0000
ROA not before:           Fri 13 Sep 2024 06:19:25 +0000
ROA not after:            Thu 12 Dec 2024 07:19:25 +0000
asID:                     16839
IP address blocks:        149.96.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:32:99:62:72:d8:f4:a2:23:47:5c:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 13 06:19:25 2024 GMT
            Not After : Dec 12 07:19:25 2024 GMT
        Subject: CN=38c02771-47ce-4e25-aeab-052a02a2a761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:5c:e5:df:12:e9:6e:aa:1d:a5:f8:98:bf:
                    14:c6:3b:ac:fe:b0:28:8a:85:30:fa:9b:c6:2a:34:
                    5b:98:16:2b:57:8e:29:b4:20:ba:aa:6f:99:77:23:
                    11:92:6b:d9:79:44:d6:45:cc:9d:60:55:60:09:ff:
                    32:45:69:2f:dd:c7:49:1d:92:3c:11:72:86:f1:a0:
                    e0:47:63:14:17:f9:8a:f7:8b:4d:ad:59:40:76:a9:
                    fc:d0:17:8a:bf:fa:27:ac:a8:2c:41:eb:68:17:3d:
                    c3:fb:bb:3f:f0:25:66:41:ac:6a:ea:44:f1:57:32:
                    6b:15:06:b0:77:80:8b:c9:c8:a7:f3:db:6e:3b:2a:
                    01:2c:73:2e:97:9c:6a:2e:f5:f0:35:a7:ca:b0:32:
                    9b:b0:05:c6:13:80:a0:77:47:f2:d8:07:ec:de:ad:
                    cc:d1:41:e8:cb:6e:ee:17:2b:cc:74:a3:18:40:6d:
                    9a:e2:f1:20:40:60:12:23:c5:bf:28:23:48:6b:d2:
                    25:3e:01:51:0c:69:52:79:4d:8a:93:8c:ad:04:15:
                    32:66:2e:b6:78:68:5a:f5:97:b9:e6:88:87:74:6b:
                    4e:8b:c7:f8:bf:f8:8e:98:40:48:db:b6:43:01:9a:
                    49:9f:65:05:1d:73:ad:df:fc:8b:ae:fa:56:e4:fc:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CB:FC:A8:6B:A4:39:F4:1A:1F:56:B5:68:F0:07:A7:46:65:3D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/a6ba8f18-cb8d-3fd7-a1a5-4aef27de980b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:71:bf:0a:7a:e5:d4:a7:b7:b4:70:2a:41:bc:a5:b0:5c:08:
         41:59:d7:88:30:34:3b:ee:41:ea:7a:48:a9:db:11:18:6f:fd:
         25:2d:36:a8:c6:ef:32:09:6a:d7:b2:ee:33:02:95:e9:f6:f5:
         4c:fd:d2:c0:ae:a4:11:d8:3c:2b:63:98:39:81:9c:50:06:77:
         2c:87:a2:cc:14:e9:e0:2e:4f:a0:25:a2:84:92:b3:8a:71:a7:
         0b:3b:d8:e0:1e:8a:be:39:32:e7:e3:bb:41:29:94:aa:9c:cb:
         37:8f:5e:4e:9f:9a:c2:77:4f:1d:e1:c9:b5:9f:27:0f:34:40:
         5f:32:e8:4c:59:84:8a:a5:a3:13:f7:7b:b1:04:4e:d6:96:ca:
         33:20:b1:d3:27:4a:47:cd:80:96:73:50:bf:fe:ca:11:b9:55:
         16:ec:fa:4a:20:1e:73:00:76:b6:9a:47:17:7b:fa:7f:a8:3f:
         b2:d7:23:3f:1d:32:ce:ab:6d:ad:b1:e9:b4:25:a5:ac:fe:d8:
         d9:32:86:6d:1e:cf:17:9b:8a:e2:14:00:db:08:1d:03:94:e9:
         c7:23:4b:51:d7:46:6a:d1:01:3f:cd:1f:be:6a:ed:24:bc:65:
         f7:a8:3c:98:90:b4:b4:04:8e:63:4a:a2:e3:02:53:6b:b4:e3:
         35:d1:39:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcymWJy2PSiI0dcfiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MDkxMzA2MTkyNVoXDTI0MTIxMjA3MTkyNVowLzEtMCsGA1UEAxMk
MzhjMDI3NzEtNDdjZS00ZTI1LWFlYWItMDUyYTAyYTJhNzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n5c5d8S6W6qHaX4mL8Uxjus/rAoioUw+pvG
KjRbmBYrV44ptCC6qm+ZdyMRkmvZeUTWRcydYFVgCf8yRWkv3cdJHZI8EXKG8aDg
R2MUF/mK94tNrVlAdqn80BeKv/onrKgsQetoFz3D+7s/8CVmQaxq6kTxVzJrFQaw
d4CLycin89tuOyoBLHMul5xqLvXwNafKsDKbsAXGE4Cgd0fy2Afs3q3M0UHoy27u
FyvMdKMYQG2a4vEgQGASI8W/KCNIa9IlPgFRDGlSeU2Kk4ytBBUyZi62eGha9Ze5
5oiHdGtOi8f4v/iOmEBI27ZDAZpJn2UFHXOt3/yLrvpW5PymBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHrL/KhrpDn0Gh9WtWjwB6dGZT1GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYTZiYThmMTgtY2I4ZC0z
ZmQ3LWExYTUtNGFlZjI3ZGU5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClWBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhxvwp65dSnt7RwKkG8pbBcCEFZ14gwNDvuQep6SKnbERhv/SUtNqjG
7zIJatey7jMClen29Uz90sCupBHYPCtjmDmBnFAGdyyHoswU6eAuT6AlooSSs4px
pws72OAeir45Mufju0EplKqcyzePXk6fmsJ3Tx3hybWfJw80QF8y6ExZhIqloxP3
e7EETtaWyjMgsdMnSkfNgJZzUL/+yhG5VRbs+kogHnMAdraaRxd7+n+oP7LXIz8d
Ms6rba2x6bQlpaz+2Nkyhm0ezxebiuIUANsIHQOU6ccjS1HXRmrRAT/NH75q7SS8
ZfeoPJiQtLQEjmNKouMCU2u04zXROdc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:50 2024 by rpki-client on console-ams.rpki-client.org