Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa
File:                     f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa (raw, json)
Hash identifier:          3MtDdBzjHnOgh+E1XYc1dz0mL4FTzH890/sezDrt3xM=
Subject key identifier:   E7:EF:86:01:F5:37:D2:6D:C4:11:A8:AA:31:85:1D:CB:8F:C0:77:77
Certificate issuer:       /CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
Certificate serial:       010D0C9F432858474C80BE2EB1FA9D408089EDC0
Authority key identifier: 3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     40328
IP address blocks:        162.249.96.0/21 maxlen: 21
                          162.249.98.0/23 maxlen: 23
                          162.249.100.0/23 maxlen: 23
                          162.249.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:be:2e:b1:fa:9d:40:80:89:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=21fa3b62-0faf-4f71-8ae7-c1b0858f55ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:30:e7:65:d2:c4:f3:c6:15:d9:dc:a8:b9:06:
                    90:c8:d8:5f:0d:d0:c5:ab:ab:ba:91:f2:6c:f5:30:
                    3a:4e:dd:1e:ec:f0:83:a5:79:7b:57:f0:62:e3:29:
                    69:79:74:bd:26:04:bb:b8:ec:a5:ac:c3:53:2b:f3:
                    1b:bf:da:b4:3a:95:04:c1:c8:e2:37:7c:21:8f:34:
                    41:61:50:94:d4:c5:26:ad:be:fc:c8:f9:32:0d:ab:
                    1c:4a:cd:1a:56:7d:f3:a5:95:ec:66:ac:07:5e:c8:
                    c3:5e:2e:b2:d9:e9:d9:61:c9:66:cd:77:af:2b:9d:
                    ac:3a:b4:14:ea:88:d2:ff:63:2c:94:d8:9b:5e:7e:
                    68:b2:64:fc:d4:c5:99:59:27:aa:32:2d:9b:ee:c4:
                    0b:0a:1c:9c:64:51:60:37:23:30:a9:0d:9b:68:68:
                    ed:6e:c7:58:a2:e7:22:23:89:06:6a:ee:5e:86:fd:
                    87:75:52:9a:f8:d1:67:b3:ce:3e:5d:1f:40:e8:5c:
                    b3:cb:d2:4a:e2:5d:19:fa:f8:97:01:4d:f5:fd:3a:
                    9c:92:6f:89:d0:02:37:68:52:ac:86:89:37:ba:71:
                    6a:81:a7:47:13:29:f5:2d:7f:90:bc:e5:99:24:8f:
                    85:c6:77:cd:ed:7d:2a:4f:2a:13:c8:80:65:45:2f:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EF:86:01:F5:37:D2:6D:C4:11:A8:AA:31:85:1D:CB:8F:C0:77:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/f73023ac-2cc0-37d9-9161-8ffac01ff8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl

            X509v3 Authority Key Identifier:
                keyid:3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:12:ae:5d:5c:1a:09:ea:b5:dc:74:8e:44:0b:3c:f2:1a:
         bc:49:b8:8d:d8:48:18:6d:06:9c:17:5e:34:5f:ac:ec:21:0b:
         b5:c3:99:84:0c:a6:f9:15:44:fb:3c:a9:6c:7b:cb:bb:5b:c1:
         30:54:61:ea:59:86:5f:aa:b8:b8:91:bd:ee:90:d2:ca:c9:a8:
         b4:a8:a9:1c:e5:86:a8:91:25:db:7b:bf:09:57:da:a9:f0:e5:
         88:79:1e:fd:7d:1f:2c:c8:d7:18:a3:94:26:4c:46:2d:07:ce:
         be:02:4d:ad:1d:96:4c:1b:50:39:e3:73:dd:2c:c6:e0:10:49:
         a4:da:3e:b9:99:3d:d6:c1:17:00:53:63:7c:75:7b:de:88:a0:
         28:17:ce:e4:3d:18:bb:22:85:24:88:af:ec:0a:a3:5a:b4:5e:
         38:65:e1:cb:a4:85:ec:4f:92:bb:90:aa:5e:9b:86:6f:c2:23:
         57:2f:5d:17:f0:33:b1:f4:fa:08:b7:30:da:34:2f:75:c7:28:
         8e:d5:41:64:35:24:d1:84:8b:90:14:5f:e4:6d:93:d3:10:ab:
         39:85:72:76:f9:82:04:1f:11:98:09:df:a4:05:27:5d:02:1a:
         c7:c3:7a:3f:2f:7a:7d:a4:2b:2d:f8:97:01:97:6e:fa:bb:97:
         4a:85:72:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgL4usfqdQICJ7cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ODYxMTMtNTJlYy00ZDIyLTljN2YtZDQ5M2Y4ZTI3
Y2IzMB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk
MjFmYTNiNjItMGZhZi00ZjcxLThhZTctYzFiMDg1OGY1NWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDDnZdLE88YV2dyouQaQyNhfDdDFq6u6kfJs
9TA6Tt0e7PCDpXl7V/Bi4ylpeXS9JgS7uOylrMNTK/Mbv9q0OpUEwcjiN3whjzRB
YVCU1MUmrb78yPkyDascSs0aVn3zpZXsZqwHXsjDXi6y2enZYclmzXevK52sOrQU
6ojS/2MslNibXn5osmT81MWZWSeqMi2b7sQLChycZFFgNyMwqQ2baGjtbsdYouci
I4kGau5ehv2HdVKa+NFns84+XR9A6Fyzy9JK4l0Z+viXAU31/Tqckm+J0AI3aFKs
hok3unFqgadHEyn1LX+QvOWZJI+FxnfN7X0qTyoTyIBlRS+6LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOfvhgH1N9JtxBGoqjGFHcuPwHd3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MzQ4
NjExMy01MmVjLTRkMjItOWM3Zi1kNDkzZjhlMjdjYjMvZjczMDIzYWMtMmNjMC0z
N2Q5LTkxNjEtOGZmYWMwMWZmOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTM0ODYxMTMtNTJlYy00ZDIyLTlj
N2YtZDQ5M2Y4ZTI3Y2IzLzkzNDg2MTEzLTUyZWMtNGQyMi05YzdmLWQ0OTNmOGUy
N2NiMy5jcmwwHwYDVR0jBBgwFoAUPKLLhsDGfvNxQzjdSXz0I9al9KcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MzQ4NjExMy01MmVjLTRkMjItOWM3Zi1kNDkz
ZjhlMjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaoEq5dXBoJ6rXcdI5ECzzyGrxJuI3YSBhtBpwXXjRfrOwhC7XDmYQM
pvkVRPs8qWx7y7tbwTBUYepZhl+quLiRve6Q0srJqLSoqRzlhqiRJdt7vwlX2qnw
5Yh5Hv19HyzI1xijlCZMRi0Hzr4CTa0dlkwbUDnjc90sxuAQSaTaPrmZPdbBFwBT
Y3x1e96IoCgXzuQ9GLsihSSIr+wKo1q0Xjhl4cukhexPkruQql6bhm/CI1cvXRfw
M7H0+gi3MNo0L3XHKI7VQWQ1JNGEi5AUX+Rtk9MQqzmFcnb5ggQfEZgJ36QFJ10C
GsfDej8ven2kKy34lwGXbvq7l0qFcig=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:17 2024 by rpki-client on console-fra.rpki-client.org