Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa
File:                     0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa (raw, json)
Hash identifier:          Bg23CYM2c7IxP0q+stFBKEl4YEv4NpWNfLtiOH5Qk4Y=
Subject key identifier:   CC:5F:84:41:FA:01:58:D6:DE:BF:29:DC:E8:5E:AA:EE:87:08:97:7C
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285847686B8D4A87BC761C00456580
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa
Signing time:             Wed 02 Oct 2024 13:00:42 +0000
ROA not before:           Wed 02 Oct 2024 13:00:42 +0000
ROA not after:            Tue 31 Dec 2024 14:00:42 +0000
asID:                     35946
IP address blocks:        207.45.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:6b:8d:4a:87:bc:76:1c:00:45:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct  2 13:00:42 2024 GMT
            Not After : Dec 31 14:00:42 2024 GMT
        Subject: CN=3994c523-681b-42c7-888b-9b18ccaf35b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:f3:04:e8:d1:f4:22:f3:cd:2f:e5:6c:18:
                    58:ba:f0:48:12:00:c5:6d:98:cf:41:63:6c:97:ca:
                    b0:54:e7:4f:5d:38:86:6c:15:0b:d9:04:9e:2b:95:
                    8c:fb:58:6d:8e:1c:ce:a6:ca:95:d3:10:0c:b3:7b:
                    7c:79:bc:7b:8b:42:65:97:62:8d:0c:1d:3e:6c:8e:
                    28:9a:be:98:20:fa:bd:3f:bb:67:73:ee:4f:28:3d:
                    3b:11:ef:10:6d:84:3d:f7:1c:99:1c:c5:ed:6e:67:
                    11:93:ac:71:7f:a8:60:4d:8e:e8:e5:eb:01:e2:4f:
                    d6:60:55:fb:f6:9c:e8:34:e9:98:ca:53:47:4b:53:
                    1c:f0:3c:ba:f5:ed:9d:be:d8:ec:ff:88:da:54:d8:
                    07:34:ae:9a:66:1c:57:a6:56:0c:77:92:34:27:2d:
                    0d:5e:bd:76:b2:b9:f2:55:ef:f7:6d:9b:88:52:d3:
                    ac:05:c4:dd:54:e4:f7:9c:8e:1e:8d:72:67:38:6f:
                    8f:09:23:69:e6:62:f4:5e:71:af:5d:70:97:74:b3:
                    a0:d0:40:3f:ba:ab:4f:24:7d:1d:f1:0a:9e:a4:fc:
                    d8:19:94:36:cb:db:76:d1:ef:16:cb:a0:6b:36:d1:
                    3d:3e:52:5c:e6:ab:fa:bd:e6:a7:75:1e:0a:d2:cb:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:84:41:FA:01:58:D6:DE:BF:29:DC:E8:5E:AA:EE:87:08:97:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:87:13:36:f0:f0:d3:63:74:b1:a3:2d:31:f6:8f:89:64:
         9d:18:19:e7:33:97:e3:11:33:49:de:fe:52:d5:1b:e2:9e:5b:
         4e:9b:f0:04:06:ba:7c:d1:92:74:04:96:d2:68:26:ee:86:19:
         73:1e:f6:de:fb:c5:ae:7e:3b:0c:5e:3a:e1:54:4b:b1:4d:c7:
         32:56:3f:16:9b:58:98:1e:d5:4f:d7:54:a9:48:87:1c:2e:4f:
         d5:01:55:10:da:90:91:7e:3e:55:13:e3:a5:cf:10:75:7f:d4:
         3c:26:db:e6:59:e6:ca:f2:79:ed:61:13:b8:52:8f:92:cc:7f:
         1b:38:e9:4b:bd:34:2e:66:4f:f3:4a:2e:46:85:14:58:d2:3a:
         b7:50:7b:32:59:8e:0d:d0:49:eb:f5:8f:e5:a8:cc:23:c9:1d:
         37:f8:9a:bb:2f:28:9f:b3:25:80:c6:59:c5:9a:34:42:2a:2c:
         0f:3f:cc:29:d8:e7:ff:ab:a7:ea:12:5d:a9:82:39:36:3c:50:
         29:54:d2:bf:9b:c0:f8:4b:af:9a:d9:a5:78:ba:83:82:16:00:
         f8:4d:37:c6:af:21:60:26:3f:49:81:b8:b7:49:db:64:9c:e9:
         31:e0:54:9c:ef:43:53:76:80:92:5d:f8:3f:38:8b:52:19:1c:
         73:3b:20:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdoa41Kh7x2HABFZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI0MTAwMjEzMDA0MloXDTI0MTIzMTE0MDA0MlowLzEtMCsGA1UEAxMk
Mzk5NGM1MjMtNjgxYi00MmM3LTg4OGItOWIxOGNjYWYzNWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDbzBOjR9CLzzS/lbBhYuvBIEgDFbZjPQWNs
l8qwVOdPXTiGbBUL2QSeK5WM+1htjhzOpsqV0xAMs3t8ebx7i0Jll2KNDB0+bI4o
mr6YIPq9P7tnc+5PKD07Ee8QbYQ99xyZHMXtbmcRk6xxf6hgTY7o5esB4k/WYFX7
9pzoNOmYylNHS1Mc8Dy69e2dvtjs/4jaVNgHNK6aZhxXplYMd5I0Jy0NXr12srny
Ve/3bZuIUtOsBcTdVOT3nI4ejXJnOG+PCSNp5mL0XnGvXXCXdLOg0EA/uqtPJH0d
8QqepPzYGZQ2y9t20e8Wy6BrNtE9PlJc5qv6veandR4K0ssKjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxfhEH6AVjW3r8p3Ohequ6HCJd8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvMGVmMDg2Y2YtNTE2Yi0z
MWZkLWIwZmEtMTEyMmU4Yjc0OWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzy2kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAfIhxM28PDTY3Sxoy0x9o+JZJ0YGeczl+MRM0ne/lLVG+KeW06b8AQG
unzRknQEltJoJu6GGXMe9t77xa5+OwxeOuFUS7FNxzJWPxabWJge1U/XVKlIhxwu
T9UBVRDakJF+PlUT46XPEHV/1Dwm2+ZZ5sryee1hE7hSj5LMfxs46Uu9NC5mT/NK
LkaFFFjSOrdQezJZjg3QSev1j+WozCPJHTf4mrsvKJ+zJYDGWcWaNEIqLA8/zCnY
5/+rp+oSXamCOTY8UClU0r+bwPhLr5rZpXi6g4IWAPhNN8avIWAmP0mBuLdJ22Sc
6THgVJzvQ1N2gJJd+D84i1IZHHM7IIw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org