Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/17777d8e-9e97-3d32-9ee7-55b739f0c855.roa
File:                     17777d8e-9e97-3d32-9ee7-55b739f0c855.roa (raw, json)
Hash identifier:          R7HEQkMJS+E0YrLCQXZfvsuhh0N2ll7EEM7JyXBJihA=
Subject key identifier:   18:B6:58:54:D5:02:28:69:35:7F:04:9C:D9:8C:18:89:5F:25:82:6D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584738F6029677E423F2E45C3D00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/17777d8e-9e97-3d32-9ee7-55b739f0c855.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     22671
IP address blocks:        208.184.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f6:02:96:77:e4:23:f2:e4:5c:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=88c96d61-cab6-47af-ba03-6aa14f7fa713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4b:95:56:0c:40:4d:c1:b2:ae:aa:e2:7e:41:
                    4a:b0:94:cd:3d:1d:37:8b:ca:96:a3:59:fd:e0:3b:
                    d5:8e:57:64:6f:0d:05:b1:c3:0e:11:3d:3a:20:55:
                    3c:09:34:2c:6b:03:fa:e9:4c:75:fe:39:0f:1f:2e:
                    bd:05:37:94:20:ec:33:7d:6b:02:1f:3b:92:ff:1f:
                    dc:40:da:dc:f3:5f:7e:cf:55:15:db:30:50:1f:5d:
                    b9:39:98:b7:60:f5:a9:e1:32:4e:ef:06:5f:ad:b3:
                    dd:81:77:b1:eb:d1:69:7c:fe:e4:e3:25:6f:41:e7:
                    8f:73:c2:44:8e:4b:87:0e:3e:f3:f7:49:d1:b4:45:
                    96:35:c4:55:9c:ca:81:b5:61:d4:56:f4:e5:4f:b5:
                    36:b1:7c:b7:73:2b:3f:22:5b:d7:9c:17:41:de:ce:
                    aa:79:e1:6e:cf:1b:2a:04:74:ae:62:e9:7e:c8:06:
                    f7:35:9f:b6:4f:af:92:f2:c8:05:b4:61:7d:25:68:
                    80:b8:c8:ed:33:ad:6e:d3:79:3b:06:90:cf:b9:ed:
                    f9:a2:b7:1e:72:8e:f4:0a:06:47:41:47:0c:4c:6e:
                    63:0e:ea:42:c0:4b:19:79:72:45:dd:33:22:6e:e3:
                    5a:9a:ba:52:0e:3e:68:c8:94:1b:32:f0:8e:da:01:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B6:58:54:D5:02:28:69:35:7F:04:9C:D9:8C:18:89:5F:25:82:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/17777d8e-9e97-3d32-9ee7-55b739f0c855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:13:9a:db:92:ef:65:8c:53:d2:9a:21:84:3a:df:73:3c:8d:
         42:8f:81:6e:ea:d5:90:34:4a:6d:3b:99:a2:ff:08:ff:db:15:
         f4:ea:ea:28:9e:3b:75:7f:9c:92:88:c4:2f:0a:d3:30:36:84:
         2b:f4:6b:ae:a8:05:c3:54:31:0c:d8:aa:82:d8:33:fc:4b:5c:
         62:c2:bf:f3:67:f3:5f:73:b5:c9:ea:c9:2a:41:7f:e5:05:6e:
         52:87:f9:63:94:33:db:cf:52:ba:22:c2:0b:e4:bd:57:76:47:
         3f:9e:5d:99:70:8f:b1:74:ae:ee:0f:56:83:55:0f:a3:5e:73:
         da:dc:9e:74:7d:77:1b:60:1d:13:2e:4d:48:d1:af:cc:3d:70:
         24:b2:27:1a:a4:22:9d:df:d4:d0:be:84:ae:20:f3:80:b4:7e:
         9e:9d:d1:ca:03:68:b2:26:c3:6e:bf:8a:2e:48:02:de:d8:a3:
         e9:51:68:ea:53:8d:8f:b4:61:25:c9:6e:53:d5:33:37:60:c8:
         d4:86:89:e2:ae:5b:ca:db:41:e1:0c:fb:1c:f2:70:11:30:f7:
         b1:7a:be:85:78:d3:e8:43:f3:a9:16:ac:9c:07:5c:40:b7:ad:
         35:f9:89:01:84:58:5d:e1:1a:68:c0:a3:4b:4c:45:ca:65:62:
         0d:0c:e0:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc49gKWd+Qj8uRcPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkxNTEzMDA0MloXDTI0MTIxNDE0MDA0MlowLzEtMCsGA1UEAxMk
ODhjOTZkNjEtY2FiNi00N2FmLWJhMDMtNmFhMTRmN2ZhNzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0uVVgxATcGyrqrifkFKsJTNPR03i8qWo1n9
4DvVjldkbw0FscMOET06IFU8CTQsawP66Ux1/jkPHy69BTeUIOwzfWsCHzuS/x/c
QNrc819+z1UV2zBQH125OZi3YPWp4TJO7wZfrbPdgXex69FpfP7k4yVvQeePc8JE
jkuHDj7z90nRtEWWNcRVnMqBtWHUVvTlT7U2sXy3cys/IlvXnBdB3s6qeeFuzxsq
BHSuYul+yAb3NZ+2T6+S8sgFtGF9JWiAuMjtM61u03k7BpDPue35orceco70CgZH
QUcMTG5jDupCwEsZeXJF3TMibuNamrpSDj5oyJQbMvCO2gGnxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBi2WFTVAihpNX8EnNmMGIlfJYJtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMTc3NzdkOGUtOWU5Ny0z
ZDMyLTllZTctNTViNzM5ZjBjODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Lj+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHETmtuS72WMU9KaIYQ633M8jUKPgW7q1ZA0Sm07maL/CP/bFfTq6iie
O3V/nJKIxC8K0zA2hCv0a66oBcNUMQzYqoLYM/xLXGLCv/Nn819ztcnqySpBf+UF
blKH+WOUM9vPUroiwgvkvVd2Rz+eXZlwj7F0ru4PVoNVD6Nec9rcnnR9dxtgHRMu
TUjRr8w9cCSyJxqkIp3f1NC+hK4g84C0fp6d0coDaLImw26/ii5IAt7Yo+lRaOpT
jY+0YSXJblPVMzdgyNSGieKuW8rbQeEM+xzycBEw97F6voV40+hD86kWrJwHXEC3
rTX5iQGEWF3hGmjAo0tMRcplYg0M4M8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:55 2024 by rpki-client on console-fra.rpki-client.org