Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa
File:                     129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa (raw, json)
Hash identifier:          5WVkHRdEAjLWxR5nrTB1ItKynDdZQfBSE+kpSph4wBc=
Subject key identifier:   D8:06:0B:EF:EC:17:6D:C3:24:DA:EC:C5:DB:8B:A1:26:24:AA:13:15
Certificate issuer:       /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Certificate serial:       010D0C9F4328584765A0E83F738032E48FDC8800
Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     14618
IP address blocks:        144.86.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:e8:3f:73:80:32:e4:8f:dc:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=03e16866-c3cc-4d05-a125-d89c7225e0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:5f:af:4c:49:68:62:56:a0:51:b5:a4:ae:
                    6f:ae:a8:21:46:a9:a9:99:5e:9f:a8:57:72:63:7d:
                    d2:f8:1a:31:be:3b:aa:e7:84:1d:85:b7:8e:4c:61:
                    78:f5:ef:1f:4d:90:31:6d:80:32:6a:1f:dd:55:9c:
                    b7:95:07:1e:25:e7:15:49:3f:84:d8:01:39:ee:a0:
                    36:cb:e1:00:e6:ec:93:c6:8e:cf:9f:c4:ab:d0:b2:
                    e1:56:5d:4e:cc:6b:e9:f2:c4:5c:f4:9a:45:fe:37:
                    3e:71:f4:06:d2:77:31:64:de:64:6a:a8:4e:57:9e:
                    16:8c:a7:81:4e:2a:df:6f:13:64:bb:4f:c1:00:40:
                    55:d9:52:5b:a0:ec:3a:07:41:ed:40:e9:df:5d:47:
                    3f:6a:7f:5f:bb:58:1d:3c:84:a2:69:25:bb:0e:01:
                    76:20:eb:76:d3:52:80:0c:ca:d2:ea:d0:28:23:2f:
                    35:b4:a1:ef:29:9e:54:d3:47:5a:6d:f2:f3:f3:c2:
                    de:a6:43:b5:f1:62:94:84:ce:5a:85:60:ed:a4:e0:
                    7a:14:7c:8c:91:bb:37:9d:71:42:a4:d7:52:60:ef:
                    c0:1b:43:4b:d1:f2:14:48:a8:e5:6e:2a:42:ad:26:
                    e3:3c:ad:2a:87:70:ab:4b:13:ea:a6:ed:2b:c6:12:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:06:0B:EF:EC:17:6D:C3:24:DA:EC:C5:DB:8B:A1:26:24:AA:13:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl

            X509v3 Authority Key Identifier:
                keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a8:b0:5f:7a:31:3a:38:95:ac:70:e4:32:d5:99:f4:0c:40:
         61:30:eb:d6:dd:3d:99:e1:9a:89:db:9a:8b:b2:8a:6f:6c:35:
         05:03:99:df:f0:6c:07:03:a4:e8:07:35:25:16:b3:14:97:1c:
         5f:a3:b4:7e:ae:18:02:7c:6e:a8:b4:bf:5b:f3:59:16:27:36:
         29:16:b6:b1:cd:ad:3e:71:f4:9f:43:76:5b:45:77:18:8c:0b:
         61:e0:86:99:a6:4f:e5:c7:ae:70:3b:a4:ff:63:99:16:5d:dc:
         c3:61:ad:62:e0:8e:c6:de:3d:a2:11:bb:a9:94:7f:2c:01:a3:
         5e:e7:8f:19:7f:9e:71:6c:70:fc:d4:f2:ab:f3:74:e3:bf:4e:
         a7:c5:dd:fa:55:be:d4:d7:cd:48:5e:a6:24:7d:85:71:2a:cf:
         73:cb:b0:75:67:7c:37:51:64:be:ed:1d:83:75:73:f1:b2:2e:
         40:2d:d2:c4:7c:5c:53:37:6c:51:90:67:f7:b6:0a:f1:1e:e9:
         f8:fb:16:df:4a:d4:99:e9:25:eb:fb:89:2b:74:d4:b5:51:39:
         b1:b7:2b:68:d6:3e:d7:34:b1:2a:ef:02:9f:8f:6b:46:93:c6:
         14:c4:5a:00:43:af:4e:b8:0d:6b:8c:64:64:47:05:97:88:4c:
         6f:2f:4f:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloOg/c4Ay5I/ciAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl
OTQwMB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk
MDNlMTY4NjYtYzNjYy00ZDA1LWExMjUtZDg5YzcyMjVlMGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyBfr0xJaGJWoFG1pK5vrqghRqmpmV6fqFdy
Y33S+Boxvjuq54QdhbeOTGF49e8fTZAxbYAyah/dVZy3lQceJecVST+E2AE57qA2
y+EA5uyTxo7Pn8Sr0LLhVl1OzGvp8sRc9JpF/jc+cfQG0ncxZN5kaqhOV54WjKeB
TirfbxNku0/BAEBV2VJboOw6B0HtQOnfXUc/an9fu1gdPISiaSW7DgF2IOt201KA
DMrS6tAoIy81tKHvKZ5U00dabfLz88LepkO18WKUhM5ahWDtpOB6FHyMkbs3nXFC
pNdSYO/AG0NL0fIUSKjlbipCrSbjPK0qh3CrSxPqpu0rxhLDFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNgGC+/sF23DJNrsxduLoSYkqhMVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz
OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMTI5ZWU1MmItNjA5ZC0z
NmQ5LWE1YWMtMTEwOGUwYjBkMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0
ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi
ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1
ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWosF96MTo4laxw5DLVmfQMQGEw69bdPZnhmonbmouyim9sNQUDmd/w
bAcDpOgHNSUWsxSXHF+jtH6uGAJ8bqi0v1vzWRYnNikWtrHNrT5x9J9DdltFdxiM
C2HghpmmT+XHrnA7pP9jmRZd3MNhrWLgjsbePaIRu6mUfywBo17njxl/nnFscPzU
8qvzdOO/TqfF3fpVvtTXzUhepiR9hXEqz3PLsHVnfDdRZL7tHYN1c/GyLkAt0sR8
XFM3bFGQZ/e2CvEe6fj7Ft9K1JnpJev7iSt01LVRObG3K2jWPtc0sSrvAp+Pa0aT
xhTEWgBDr064DWuMZGRHBZeITG8vT/4=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:10 2024 by rpki-client on console-ams.rpki-client.org