Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/6d58a1d7-ccd8-3df5-8770-939b25a6b67c.roa
File:                     6d58a1d7-ccd8-3df5-8770-939b25a6b67c.roa (raw, json)
Hash identifier:          AQp+aJLCP8QGUm3bg95zj8vaADJrjg1dY4IQY4Mu0Vg=
Subject key identifier:   23:47:F9:18:5F:E0:DC:04:6A:1D:9F:05:7A:93:C0:06:98:B3:1B:AD
Certificate issuer:       /CN=ee195698-fb60-40ef-a454-85fcbf3381b9
Certificate serial:       010D0C9F432858478CB687561F4821F7B7DB7880
Authority key identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/6d58a1d7-ccd8-3df5-8770-939b25a6b67c.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     11607
IP address blocks:        137.216.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:87:56:1f:48:21:f7:b7:db:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee195698-fb60-40ef-a454-85fcbf3381b9
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=87d1d410-92f1-4606-9e12-a0fa29cc2fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:ab:22:e4:a0:83:61:de:85:c1:17:5b:3b:
                    b0:f3:16:d3:88:80:96:df:fa:3e:09:01:55:dc:e4:
                    31:1c:2d:98:ed:56:92:9c:fb:e8:60:e8:48:38:95:
                    4c:60:c2:79:ca:d4:57:c5:e7:64:76:49:49:56:ec:
                    f4:e7:36:e8:d9:0d:1f:17:be:68:40:d2:fb:fd:2d:
                    52:19:55:12:da:a2:59:03:a5:fa:26:24:b7:7e:c9:
                    48:41:e4:39:84:ea:b5:eb:b1:35:6a:1d:48:67:8d:
                    5d:14:d0:4e:2e:87:fc:f7:92:0b:2f:20:09:d1:03:
                    a5:a3:14:ae:92:df:e0:0b:c5:99:7b:6b:05:83:44:
                    24:75:20:cf:eb:12:82:aa:da:f3:a2:ff:8d:df:ee:
                    8a:24:de:34:68:be:c8:01:30:ad:ef:bb:d4:f8:83:
                    d5:27:ec:ac:c1:87:49:d0:9e:d9:32:95:65:33:4e:
                    af:4c:ca:7a:f3:f0:c2:d0:3a:45:57:aa:4d:90:1a:
                    30:b7:0d:96:6e:48:70:ec:d6:8f:77:97:46:ed:08:
                    3d:92:ed:2a:4c:dc:21:bd:53:25:98:79:ff:e2:01:
                    2b:03:f4:14:7b:db:bf:95:33:09:0a:e0:1f:38:bc:
                    fe:49:83:9c:87:a3:ec:7b:1f:b3:c2:e0:ac:48:be:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:47:F9:18:5F:E0:DC:04:6A:1D:9F:05:7A:93:C0:06:98:B3:1B:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/6d58a1d7-ccd8-3df5-8770-939b25a6b67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl

            X509v3 Authority Key Identifier:
                keyid:3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:99:5d:8e:a0:a7:0a:83:96:f9:ea:cd:6a:65:e2:f4:c6:ec:
         da:d3:4c:55:e0:3b:b1:de:4e:43:02:25:f4:40:3d:23:d5:fc:
         4b:71:ff:56:c8:5c:08:13:b6:20:a0:29:7e:06:da:4f:35:79:
         ae:8e:66:4f:5e:ad:2d:5c:49:ce:f7:ea:50:c9:c4:4d:b0:11:
         3b:39:67:83:3b:18:c5:e9:8a:ba:a4:f0:90:97:ca:fa:93:1f:
         e1:a7:59:f6:89:cf:4b:6a:be:4f:c3:ff:69:d4:a7:26:8e:7c:
         5e:f5:a2:85:58:08:da:40:28:07:cb:c5:a6:66:57:cd:59:91:
         0f:20:12:8d:9b:91:ec:54:d5:c3:08:66:c1:1d:8c:07:71:d8:
         79:68:dd:c5:08:50:d7:55:d9:e9:47:14:de:37:78:e4:52:dd:
         7d:e5:7f:29:71:01:b4:a8:b0:17:66:b5:db:6c:54:25:d5:90:
         b3:ca:ee:11:8a:32:41:84:03:f7:fa:cc:e7:20:6d:ab:fe:5e:
         06:27:b7:80:9c:7f:50:09:72:bb:03:76:c2:10:d2:72:bb:30:
         56:b1:80:be:72:47:09:5a:89:95:ab:ba:a1:4e:b3:f5:64:55:
         b3:76:49:6b:32:ed:c4:77:ae:13:c5:2f:58:7c:b6:c0:96:bf:
         4e:94:40:5a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEeMtodWH0gh97fbeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWUxOTU2OTgtZmI2MC00MGVmLWE0NTQtODVmY2JmMzM4
MWI5MB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
ODdkMWQ0MTAtOTJmMS00NjA2LTllMTItYTBmYTI5Y2MyZmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcmrIuSgg2HehcEXWzuw8xbTiICW3/o+CQFV
3OQxHC2Y7VaSnPvoYOhIOJVMYMJ5ytRXxedkdklJVuz05zbo2Q0fF75oQNL7/S1S
GVUS2qJZA6X6JiS3fslIQeQ5hOq167E1ah1IZ41dFNBOLof895ILLyAJ0QOloxSu
kt/gC8WZe2sFg0QkdSDP6xKCqtrzov+N3+6KJN40aL7IATCt77vU+IPVJ+yswYdJ
0J7ZMpVlM06vTMp68/DC0DpFV6pNkBowtw2Wbkhw7NaPd5dG7Qg9ku0qTNwhvVMl
mHn/4gErA/QUe9u/lTMJCuAfOLz+SYOch6Psex+zwuCsSL7I5QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCNH+Rhf4NwEah2fBXqTwAaYsxutMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTE5
NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZjYmYzMzgxYjkvNmQ1OGExZDctY2NkOC0z
ZGY1LTg3NzAtOTM5YjI1YTZiNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWUxOTU2OTgtZmI2MC00MGVmLWE0
NTQtODVmY2JmMzM4MWI5L2VlMTk1Njk4LWZiNjAtNDBlZi1hNDU0LTg1ZmNiZjMz
ODFiOS5jcmwwHwYDVR0jBBgwFoAUPRcl8dsCqK/Mc9Thv4Fa9vmMCBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTE5NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZj
YmYzMzgxYjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAidgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhJldjqCnCoOW+erNamXi9Mbs2tNMVeA7sd5OQwIl9EA9I9X8S3H/Vshc
CBO2IKApfgbaTzV5ro5mT16tLVxJzvfqUMnETbAROzlngzsYxemKuqTwkJfK+pMf
4adZ9onPS2q+T8P/adSnJo58XvWihVgI2kAoB8vFpmZXzVmRDyASjZuR7FTVwwhm
wR2MB3HYeWjdxQhQ11XZ6UcU3jd45FLdfeV/KXEBtKiwF2a122xUJdWQs8ruEYoy
QYQD9/rM5yBtq/5eBie3gJx/UAlyuwN2whDScrswVrGAvnJHCVqJlau6oU6z9WRV
s3ZJazLtxHeuE8UvWHy2wJa/TpRAWg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:39 2024 by rpki-client on console-fra.rpki-client.org