Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/705b7e41-2b49-31cd-b88a-3090b6f6218c.roa
File:                     705b7e41-2b49-31cd-b88a-3090b6f6218c.roa (raw, json)
Hash identifier:          yHQSYVEKTPS5Nf0Q6D3Fq0Sb7nUBZOtN2K0FCxJiVr4=
Subject key identifier:   72:D2:F1:91:94:80:19:6B:10:5C:93:F3:B2:BC:14:E4:2C:A5:EC:2F
Certificate issuer:       /CN=2044bf03-a0f3-4eed-9707-b517f4923781
Certificate serial:       010D0C9F432858475910CBBD748F91C683669B80
Authority key identifier: 63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/705b7e41-2b49-31cd-b88a-3090b6f6218c.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     16428
IP address blocks:        162.254.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cb:bd:74:8f:91:c6:83:66:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2044bf03-a0f3-4eed-9707-b517f4923781
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=56601e1b-922c-47e2-8b2d-54a9c8695066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:4b:15:bf:8b:86:26:28:8f:af:9d:2e:9b:
                    a7:9c:e9:64:e7:6e:c1:83:87:71:63:37:74:5f:24:
                    e9:ad:67:38:f9:1a:6a:19:f2:a6:84:74:2c:35:a4:
                    13:5b:d4:c1:24:01:a8:b6:62:16:c5:90:c5:85:f4:
                    fe:d6:05:cb:45:ca:93:00:37:f9:65:d2:82:02:02:
                    a7:24:d8:cf:5e:b7:1c:63:43:96:90:29:f1:be:33:
                    c3:64:94:71:a9:9d:85:66:2a:c3:39:8c:20:34:ad:
                    f6:c0:52:79:b5:3c:77:a0:70:bf:d1:33:12:1c:ca:
                    98:e4:62:0e:0e:8c:2e:33:de:1a:c3:17:f5:41:fc:
                    b6:e5:8c:da:a1:eb:3f:f4:5f:0a:36:e5:08:8b:d4:
                    b0:67:fd:17:3c:65:b9:45:73:4a:95:e0:fb:c9:50:
                    04:ca:7d:c6:fc:4a:2d:76:dc:c7:d3:4d:e0:bb:b0:
                    86:1b:3f:a5:ab:6c:de:a1:c7:2d:f3:c4:e1:10:2d:
                    65:5b:83:5e:5c:39:f7:03:6a:9a:e3:d6:aa:da:46:
                    18:f4:7d:bc:b1:66:8d:59:65:2e:b8:bc:55:8c:1e:
                    91:13:5a:dd:03:d0:13:d6:15:44:fb:cb:76:53:7d:
                    3e:8e:6b:35:f4:cd:e3:35:f0:5b:7f:3d:c1:16:06:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:F1:91:94:80:19:6B:10:5C:93:F3:B2:BC:14:E4:2C:A5:EC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/705b7e41-2b49-31cd-b88a-3090b6f6218c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl

            X509v3 Authority Key Identifier:
                keyid:63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:27:50:4a:a9:69:06:76:f9:5d:fe:33:c7:d1:6f:fd:fa:5c:
         3b:66:01:bc:da:74:81:c1:07:35:8d:a4:42:a1:f6:44:0f:55:
         80:d1:d4:bb:df:db:6c:e2:df:80:45:31:e5:c7:f1:4d:26:6a:
         01:db:ca:c0:10:dc:86:d3:c0:c4:8e:24:2c:48:e3:60:30:be:
         e2:1f:7d:ee:23:b9:25:65:76:b7:b1:77:6b:0e:1d:f8:e2:61:
         f6:69:14:9e:39:cb:50:85:4a:07:b3:cd:eb:d1:b6:0f:1b:14:
         5e:a8:f3:e4:58:ea:03:85:31:1e:bf:10:44:bc:ba:f8:3d:e3:
         f8:d5:f1:d7:0c:d5:1d:95:61:c0:47:32:3c:df:3c:a0:d6:9d:
         96:13:30:c1:15:5f:b9:fd:b8:0b:e4:8f:6e:3b:fa:14:9a:b1:
         c3:ed:6f:ba:f7:bb:1f:df:5e:96:d4:dd:fd:4f:d9:15:60:e6:
         b8:70:d9:8f:6e:33:e5:7e:bb:98:6e:8a:5f:c4:39:95:33:e1:
         83:44:aa:f7:23:c5:99:71:f4:59:0e:4b:9d:c9:d5:76:07:c9:
         0f:08:39:4f:9b:32:0f:ef:62:d3:9f:44:c0:71:2f:ab:70:9e:
         76:d2:0b:5f:ed:31:97:6d:ec:4b:56:2c:54:bc:9e:6a:89:23:
         92:c7:69:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEMu9dI+RxoNmm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA0NGJmMDMtYTBmMy00ZWVkLTk3MDctYjUxN2Y0OTIz
NzgxMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NTY2MDFlMWItOTIyYy00N2UyLThiMmQtNTRhOWM4Njk1MDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmJLFb+LhiYoj6+dLpunnOlk527Bg4dxYzd0
XyTprWc4+RpqGfKmhHQsNaQTW9TBJAGotmIWxZDFhfT+1gXLRcqTADf5ZdKCAgKn
JNjPXrccY0OWkCnxvjPDZJRxqZ2FZirDOYwgNK32wFJ5tTx3oHC/0TMSHMqY5GIO
DowuM94awxf1Qfy25Yzaoes/9F8KNuUIi9SwZ/0XPGW5RXNKleD7yVAEyn3G/Eot
dtzH003gu7CGGz+lq2zeocct88ThEC1lW4NeXDn3A2qa49aq2kYY9H28sWaNWWUu
uLxVjB6RE1rdA9AT1hVE+8t2U30+jms19M3jNfBbfz3BFgY1UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHLS8ZGUgBlrEFyT87K8FOQspewvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yMDQ0
YmYwMy1hMGYzLTRlZWQtOTcwNy1iNTE3ZjQ5MjM3ODEvNzA1YjdlNDEtMmI0OS0z
MWNkLWI4OGEtMzA5MGI2ZjYyMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjA0NGJmMDMtYTBmMy00ZWVkLTk3
MDctYjUxN2Y0OTIzNzgxLzIwNDRiZjAzLWEwZjMtNGVlZC05NzA3LWI1MTdmNDky
Mzc4MS5jcmwwHwYDVR0jBBgwFoAUY8nt4wrLtsag6GHwiy+XHe4vrrwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yMDQ0YmYwMy1hMGYzLTRlZWQtOTcwNy1iNTE3
ZjQ5MjM3ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKcnUEqpaQZ2+V3+M8fRb/36XDtmAbzadIHBBzWNpEKh9kQPVYDR1Lvf
22zi34BFMeXH8U0magHbysAQ3IbTwMSOJCxI42AwvuIffe4juSVldrexd2sOHfji
YfZpFJ45y1CFSgezzevRtg8bFF6o8+RY6gOFMR6/EES8uvg94/jV8dcM1R2VYcBH
MjzfPKDWnZYTMMEVX7n9uAvkj247+hSascPtb7r3ux/fXpbU3f1P2RVg5rhw2Y9u
M+V+u5huil/EOZUz4YNEqvcjxZlx9FkOS53J1XYHyQ8IOU+bMg/vYtOfRMBxL6tw
nnbSC1/tMZdt7EtWLFS8nmqJI5LHaaA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:26 2024 by rpki-client on console-fra.rpki-client.org