Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/00d6eb17-f865-352c-ae6e-6a855981e50d.roa
File:                     00d6eb17-f865-352c-ae6e-6a855981e50d.roa (raw, json)
Hash identifier:          vLsJ7qjSF636jYmxA02mbtqAYVjGqa1rxWrijXrXbG0=
Subject key identifier:   98:D5:C2:67:21:0E:A3:FC:7F:2C:DC:EA:5F:71:E7:9B:B7:90:3E:77
Certificate issuer:       /CN=25283898-2dc3-4477-af3c-b64dd3c800ab
Certificate serial:       010D0C9F43285847A3C6D8E9889075A3253FF000
Authority key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/00d6eb17-f865-352c-ae6e-6a855981e50d.roa
Signing time:             Wed 23 Oct 2024 19:17:22 +0000
ROA not before:           Wed 23 Oct 2024 19:17:22 +0000
ROA not after:            Tue 21 Jan 2025 20:17:22 +0000
asID:                     13692
IP address blocks:        192.55.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:c6:d8:e9:88:90:75:a3:25:3f:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25283898-2dc3-4477-af3c-b64dd3c800ab
        Validity
            Not Before: Oct 23 19:17:22 2024 GMT
            Not After : Jan 21 20:17:22 2025 GMT
        Subject: CN=1de67764-50ca-490b-8800-ce37c9c28646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:e8:06:46:8c:83:a8:c7:68:ed:a1:89:b9:
                    3f:d1:e4:4e:48:17:72:4c:ed:06:10:fe:07:c5:40:
                    64:2f:e2:0a:2c:ac:9e:94:3f:0d:29:74:41:09:dc:
                    47:1c:5e:0e:4c:04:8e:ff:ae:72:3c:b9:89:21:1e:
                    48:33:bc:c7:69:49:9b:cf:09:27:01:90:29:db:85:
                    20:07:59:d0:14:7f:6c:3d:69:26:3f:aa:64:38:3d:
                    de:be:f3:11:7f:14:be:db:3c:30:61:e2:87:eb:bb:
                    8a:14:f9:8c:65:ea:29:e0:53:92:82:e4:87:8f:c3:
                    6e:a4:93:0e:1e:68:09:40:18:50:78:22:3d:ae:ea:
                    fc:9c:f6:3e:23:30:94:12:57:41:27:01:6d:65:d7:
                    5a:4a:6a:37:9b:66:ee:08:60:88:0b:33:b7:13:0e:
                    6a:50:e4:ae:8a:58:62:64:b9:89:01:b7:22:2c:23:
                    95:eb:01:9d:dd:78:35:03:a5:a6:b1:3f:7d:57:0f:
                    4d:92:d9:2a:0c:47:fa:26:3c:f9:44:d9:d2:8f:86:
                    64:03:f8:57:3c:0c:85:be:7d:7e:21:a7:09:52:a3:
                    0c:b7:ff:3c:f7:59:92:56:77:d0:62:34:4d:07:cd:
                    48:78:a5:38:76:6b:2c:7b:bd:8f:c5:8e:09:e7:6a:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:C2:67:21:0E:A3:FC:7F:2C:DC:EA:5F:71:E7:9B:B7:90:3E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/00d6eb17-f865-352c-ae6e-6a855981e50d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:71:a9:01:05:9e:79:22:55:c3:07:99:e2:7c:2d:cb:d8:e2:
         40:df:f7:6f:f9:f1:0f:e3:ec:2b:7b:7b:77:b5:49:dd:ce:20:
         7b:87:ec:21:b8:0a:5a:a0:28:7b:3f:2e:47:fc:dc:fa:8e:e0:
         7f:62:1e:f5:0a:43:2a:08:2e:57:d9:ae:dd:6b:35:93:23:15:
         28:db:d4:35:ba:92:f6:b9:b2:f5:56:12:4f:bf:19:77:84:ab:
         2e:88:48:d0:60:9f:e1:86:7e:86:da:75:6f:3b:a1:86:7f:1e:
         d5:6d:7d:36:90:71:a1:6e:29:9e:80:d0:0f:bc:d5:c3:5b:d3:
         d3:81:6d:a6:1c:b1:65:7b:26:d2:ac:79:9e:eb:54:b5:4f:3d:
         15:a4:71:93:41:c9:d4:c4:48:d3:75:ab:8b:29:36:12:af:55:
         fb:66:3d:b5:60:9e:a5:27:65:fd:bb:1a:4c:3c:1f:45:2f:77:
         3f:f8:e2:4e:af:12:df:58:7b:60:32:c0:d4:be:80:ca:c5:9a:
         66:7d:77:f2:65:ea:c3:96:7e:2a:fc:6e:a0:c2:38:ef:ed:3b:
         3e:2a:a2:e7:3e:62:01:c4:51:c1:5e:b4:56:41:fb:0a:8b:37:
         9e:71:10:41:25:bc:d5:0c:fe:f4:a6:90:8a:2a:3d:2b:1b:5c:
         5d:9a:0a:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEejxtjpiJB1oyU/8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUyODM4OTgtMmRjMy00NDc3LWFmM2MtYjY0ZGQzYzgw
MGFiMB4XDTI0MTAyMzE5MTcyMloXDTI1MDEyMTIwMTcyMlowLzEtMCsGA1UEAxMk
MWRlNjc3NjQtNTBjYS00OTBiLTg4MDAtY2UzN2M5YzI4NjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsnoBkaMg6jHaO2hibk/0eROSBdyTO0GEP4H
xUBkL+IKLKyelD8NKXRBCdxHHF4OTASO/65yPLmJIR5IM7zHaUmbzwknAZAp24Ug
B1nQFH9sPWkmP6pkOD3evvMRfxS+2zwwYeKH67uKFPmMZeop4FOSguSHj8NupJMO
HmgJQBhQeCI9rur8nPY+IzCUEldBJwFtZddaSmo3m2buCGCICzO3Ew5qUOSuilhi
ZLmJAbciLCOV6wGd3Xg1A6WmsT99Vw9NktkqDEf6Jjz5RNnSj4ZkA/hXPAyFvn1+
IacJUqMMt/8891mSVnfQYjRNB81IeKU4dmsse72PxY4J52qNiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJjVwmchDqP8fyzc6l9x55u3kD53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNTI4
Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNjODAwYWIvMDBkNmViMTctZjg2NS0z
NTJjLWFlNmUtNmE4NTU5ODFlNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjUyODM4OTgtMmRjMy00NDc3LWFm
M2MtYjY0ZGQzYzgwMGFiLzI1MjgzODk4LTJkYzMtNDQ3Ny1hZjNjLWI2NGRkM2M4
MDBhYi5jcmwwHwYDVR0jBBgwFoAUHX6NmYvAQseU6/FQOTSqDFBgE98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRk
ZDNjODAwYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwDf8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtxqQEFnnkiVcMHmeJ8LcvY4kDf92/58Q/j7Ct7e3e1Sd3OIHuH7CG4
ClqgKHs/Lkf83PqO4H9iHvUKQyoILlfZrt1rNZMjFSjb1DW6kva5svVWEk+/GXeE
qy6ISNBgn+GGfobadW87oYZ/HtVtfTaQcaFuKZ6A0A+81cNb09OBbaYcsWV7JtKs
eZ7rVLVPPRWkcZNBydTESNN1q4spNhKvVftmPbVgnqUnZf27Gkw8H0Uvdz/44k6v
Et9Ye2AywNS+gMrFmmZ9d/Jl6sOWfir8bqDCOO/tOz4qouc+YgHEUcFetFZB+wqL
N55xEEElvNUM/vSmkIoqPSsbXF2aCio=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org