Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/b22e9d94-d361-3493-8487-039bd5b943fb.roa
File:                     b22e9d94-d361-3493-8487-039bd5b943fb.roa (raw, json)
Hash identifier:          pr+p5r2jF6B97c3vzhckm7BnAJafz2dR7a8jIDUtGyk=
Subject key identifier:   0B:54:D7:B0:DB:D4:1B:25:67:5D:B8:1A:B6:DB:09:AE:10:2F:B7:31
Certificate issuer:       /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial:       010D0C9F4328584793B12220FCDBD1C8558D7F00
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/b22e9d94-d361-3493-8487-039bd5b943fb.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     8075
IP address blocks:        208.103.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:22:20:fc:db:d1:c8:55:8d:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=85c53390-fc4c-4422-8210-28eb51b3b333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:99:47:72:58:d1:af:39:1b:26:c5:c9:16:
                    11:b5:e6:ca:81:b7:62:17:68:73:c4:f4:bc:f7:0e:
                    39:41:01:4e:71:da:59:e1:0f:c8:95:89:f4:2c:9a:
                    6e:7d:d5:04:c6:c9:6e:06:6c:49:60:0a:50:a4:ab:
                    79:21:08:19:52:fe:45:39:e7:03:f9:9e:97:99:3c:
                    19:d2:dc:21:3a:1f:be:02:6f:43:60:98:e7:b0:50:
                    5b:e2:b7:3b:c5:b8:71:a4:b5:74:a7:4c:f4:86:51:
                    f3:b5:e8:ea:fb:22:54:63:e5:18:24:ef:4c:4e:a8:
                    ad:4f:9b:6c:7c:80:13:74:e9:a9:ae:d7:ad:de:3a:
                    8a:e1:d3:c6:4f:8a:0d:09:a6:ce:00:b3:b0:e2:5b:
                    5f:cb:e8:b9:c2:05:15:dc:93:cc:09:82:98:c4:75:
                    4f:4f:04:ce:1f:fa:2a:4c:7f:a3:aa:d9:e1:36:cf:
                    87:a1:94:c2:c2:cf:b6:b7:ae:97:5c:6f:a3:09:b5:
                    a9:c5:ec:23:2a:74:43:83:aa:ea:a6:78:08:03:bd:
                    42:7a:e6:bf:bb:33:d9:71:a7:c2:1a:1a:ba:3a:76:
                    81:c6:62:2b:f1:a5:84:b6:6d:46:b1:42:b5:3a:cb:
                    b1:5b:2a:6d:4b:f5:57:7f:a1:e3:07:fc:d6:46:a3:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:54:D7:B0:DB:D4:1B:25:67:5D:B8:1A:B6:DB:09:AE:10:2F:B7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/b22e9d94-d361-3493-8487-039bd5b943fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:16:ad:48:15:91:39:8e:6d:91:a2:2c:f2:4b:7a:11:a7:0b:
         0b:fa:ef:e7:91:4f:eb:3d:35:c2:5c:9d:ac:f6:56:54:2d:b5:
         9f:8c:fd:03:e4:be:09:26:eb:68:73:05:23:d5:9c:0d:58:4a:
         7d:a9:e8:a2:41:37:7b:59:11:8d:4e:e0:4a:86:88:8c:1f:29:
         30:2d:03:81:6e:e3:db:a1:73:a2:0f:84:5e:7a:8e:ca:a5:cd:
         61:0e:c3:13:f5:a7:1e:57:1e:51:72:38:7c:0e:b0:60:58:0c:
         7f:7e:ff:68:91:df:cb:65:6e:75:82:3c:0f:92:78:64:17:38:
         c3:01:b5:70:3e:64:1a:4e:42:5b:00:fc:e8:4d:11:7d:f3:88:
         ce:01:9e:69:9f:d9:14:ec:67:b9:83:19:1c:57:f0:5d:d6:a4:
         34:9a:18:36:64:80:22:02:a4:49:59:9b:67:ba:96:76:d6:cf:
         f4:11:e4:a3:fa:00:1c:65:ca:73:83:a1:28:cd:e7:ba:c4:e5:
         95:1f:b8:7b:94:6e:4a:5e:82:c4:e2:83:9a:66:1a:23:17:2c:
         59:9a:8c:42:d0:78:80:ae:76:fd:89:93:24:af:2e:39:a6:78:
         e3:62:50:e1:b1:16:3b:07:70:70:5e:34:ab:a6:4e:d0:8c:e9:
         1d:19:a9:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsSIg/NvRyFWNfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBmZDMzNzgtNGJjMy00MjE2LTk0ZjctOTBjN2VmYjQ3
ZDgwMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
ODVjNTMzOTAtZmM0Yy00NDIyLTgyMTAtMjhlYjUxYjNiMzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKCZR3JY0a85GybFyRYRtebKgbdiF2hzxPS8
9w45QQFOcdpZ4Q/IlYn0LJpufdUExsluBmxJYApQpKt5IQgZUv5FOecD+Z6XmTwZ
0twhOh++Am9DYJjnsFBb4rc7xbhxpLV0p0z0hlHztejq+yJUY+UYJO9MTqitT5ts
fIATdOmprtet3jqK4dPGT4oNCabOALOw4ltfy+i5wgUV3JPMCYKYxHVPTwTOH/oq
TH+jqtnhNs+HoZTCws+2t66XXG+jCbWpxewjKnRDg6rqpngIA71Ceua/uzPZcafC
Ghq6OnaBxmIr8aWEtm1GsUK1OsuxWyptS/VXf6HjB/zWRqNvhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtU17Db1BslZ124GrbbCa4QL7cxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMGZk
MzM3OC00YmMzLTQyMTYtOTRmNy05MGM3ZWZiNDdkODAvYjIyZTlkOTQtZDM2MS0z
NDkzLTg0ODctMDM5YmQ1Yjk0M2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDBmZDMzNzgtNGJjMy00MjE2LTk0
ZjctOTBjN2VmYjQ3ZDgwLzAwZmQzMzc4LTRiYzMtNDIxNi05NGY3LTkwYzdlZmI0
N2Q4MC5jcmwwHwYDVR0jBBgwFoAUTemfyYN+g1YTOa+RlpqRNb0IIk8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMGZkMzM3OC00YmMzLTQyMTYtOTRmNy05MGM3
ZWZiNDdkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GeuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIWrUgVkTmObZGiLPJLehGnCwv67+eRT+s9NcJcnaz2VlQttZ+M/QPk
vgkm62hzBSPVnA1YSn2p6KJBN3tZEY1O4EqGiIwfKTAtA4Fu49uhc6IPhF56jsql
zWEOwxP1px5XHlFyOHwOsGBYDH9+/2iR38tlbnWCPA+SeGQXOMMBtXA+ZBpOQlsA
/OhNEX3ziM4Bnmmf2RTsZ7mDGRxX8F3WpDSaGDZkgCICpElZm2e6lnbWz/QR5KP6
ABxlynODoSjN57rE5ZUfuHuUbkpegsTig5pmGiMXLFmajELQeICudv2JkySvLjmm
eONiUOGxFjsHcHBeNKumTtCM6R0ZqYg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:34 2024 by rpki-client on console-fra.rpki-client.org