Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa
File:                     a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa (raw, json)
Hash identifier:          uyUF8WeJBo9lCOyxNL3P+OhCR/sIP6Nc6DqUQhqZcog=
Subject key identifier:   02:25:F8:A6:95:18:03:90:54:B4:86:E1:E5:AC:65:A4:09:40:5A:FD
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285847A30BF45DCB22E3005DBC9700
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     13536
IP address blocks:        208.20.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f4:5d:cb:22:e3:00:5d:bc:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=17601702-c484-4a3c-9193-731e4053388b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:02:1f:39:b0:63:63:3c:34:b0:31:05:06:
                    16:16:b7:da:00:d2:41:73:e1:a6:92:a5:31:62:0d:
                    c0:03:4b:8e:2a:1d:49:9f:b7:4b:57:fd:3b:a8:e3:
                    f6:c3:37:3c:1b:36:e3:b9:47:f2:54:1d:94:bb:6a:
                    2d:e2:42:25:de:a7:3d:87:7b:ab:d8:fc:6e:79:cb:
                    c1:cb:cd:b8:50:29:c9:10:e8:84:0b:a2:40:6f:ec:
                    e3:9f:4b:ea:47:18:e5:af:02:4f:82:dc:06:0d:62:
                    06:66:78:ec:5c:87:e8:de:5b:b8:49:2f:0c:c1:da:
                    b5:93:7d:e6:42:09:e3:42:55:7b:6d:d2:e2:69:96:
                    33:88:a4:be:bf:85:0c:35:98:99:36:5e:1b:5b:75:
                    48:1b:f2:9c:4f:e4:4d:f2:91:a9:78:68:c8:8b:fb:
                    50:b5:c9:63:9d:cb:57:8d:0b:34:6f:f6:06:41:79:
                    f9:3f:31:1f:dd:e4:1b:96:71:0a:d3:04:2c:32:f9:
                    8f:bc:b4:3d:16:c8:cd:0e:9b:91:fc:03:42:63:85:
                    71:f4:5e:17:a8:5c:08:18:1a:3f:4e:93:16:55:09:
                    0d:f6:7d:2c:f9:42:33:c5:b2:26:2b:1f:8b:ed:4c:
                    e9:c7:63:d2:13:19:06:58:83:fc:58:42:47:4f:f5:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:25:F8:A6:95:18:03:90:54:B4:86:E1:E5:AC:65:A4:09:40:5A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.20.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6d:26:df:79:45:9c:50:56:ea:3c:99:79:2b:d6:9e:a2:7e:
         4f:6d:08:4a:60:57:19:fe:01:62:8c:3c:79:bd:87:85:60:ae:
         a7:8b:f9:a0:05:82:fb:0b:19:7c:86:96:33:53:f9:35:c7:4c:
         57:d3:c1:2e:ed:a5:9c:4b:96:99:be:76:b4:99:01:db:f3:27:
         30:7c:8f:a1:97:09:3f:d3:31:cd:df:fd:84:6c:3d:ed:92:60:
         b8:c5:66:16:c1:2f:3e:66:2d:a9:89:9e:9e:d3:ac:a2:bf:f5:
         bb:fc:af:3e:ab:1c:0b:23:1f:c9:dc:87:d8:1e:1d:36:79:10:
         85:b2:dc:45:b9:67:da:64:00:02:80:aa:63:ad:ae:cf:73:e9:
         d7:74:98:03:1b:51:35:13:53:96:8e:78:07:51:ec:f9:6b:8b:
         ad:57:c5:70:2d:99:a9:94:b6:5c:9e:e8:dc:42:66:8f:44:ad:
         ec:27:e0:35:64:5d:46:f9:cb:a3:b8:13:86:b7:62:9a:e7:e5:
         45:22:cb:fd:df:5f:c9:aa:3b:4e:f2:b7:7c:12:93:25:c6:5a:
         fe:68:d5:fe:13:61:bd:09:0b:fe:74:ef:85:de:ec:2f:6f:27:
         75:19:fe:06:69:3a:07:ec:a2:2e:93:c4:9a:15:73:bd:ea:ee:
         b9:c2:0e:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejC/RdyyLjAF28lwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI0MTAyMzEzMDA0MVoXDTI1MDEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
MTc2MDE3MDItYzQ4NC00YTNjLTkxOTMtNzMxZTQwNTMzODhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmACHzmwY2M8NLAxBQYWFrfaANJBc+GmkqUx
Yg3AA0uOKh1Jn7dLV/07qOP2wzc8GzbjuUfyVB2Uu2ot4kIl3qc9h3ur2PxuecvB
y824UCnJEOiEC6JAb+zjn0vqRxjlrwJPgtwGDWIGZnjsXIfo3lu4SS8Mwdq1k33m
QgnjQlV7bdLiaZYziKS+v4UMNZiZNl4bW3VIG/KcT+RN8pGpeGjIi/tQtcljnctX
jQs0b/YGQXn5PzEf3eQblnEK0wQsMvmPvLQ9FsjNDpuR/ANCY4Vx9F4XqFwIGBo/
TpMWVQkN9n0s+UIzxbImKx+L7Uzpx2PSExkGWIP8WEJHT/W97wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIl+KaVGAOQVLSG4eWsZaQJQFr9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYTgwZjMzMTktYTFhOS0z
ZjAxLThkMDAtNGY1ZDA4M2I2ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdtJt95RZxQVuo8mXkr1p6ifk9tCEpgVxn+AWKMPHm9h4VgrqeL+aAF
gvsLGXyGljNT+TXHTFfTwS7tpZxLlpm+drSZAdvzJzB8j6GXCT/TMc3f/YRsPe2S
YLjFZhbBLz5mLamJnp7TrKK/9bv8rz6rHAsjH8nch9geHTZ5EIWy3EW5Z9pkAAKA
qmOtrs9z6dd0mAMbUTUTU5aOeAdR7Plri61XxXAtmamUtlye6NxCZo9Erewn4DVk
XUb5y6O4E4a3Yprn5UUiy/3fX8mqO07yt3wSkyXGWv5o1f4TYb0JC/5074Xe7C9v
J3UZ/gZpOgfsoi6TxJoVc73q7rnCDl4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:25 2024 by rpki-client on console-ams.rpki-client.org