Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/552ebcdb-7aa0-36af-ab63-0331d8c79f5c.roa
File:                     552ebcdb-7aa0-36af-ab63-0331d8c79f5c.roa (raw, json)
Hash identifier:          iVKJgD6QKeRPGd+/wov4XbI6fm/jKG02sNqQBjOuhZo=
Subject key identifier:   E1:B1:B4:BF:E6:B0:4D:7B:E2:A9:51:8D:D9:A2:E3:11:E5:15:82:34
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB6600DDBA6F2FCD547400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/552ebcdb-7aa0-36af-ab63-0331d8c79f5c.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     19955
IP address blocks:        216.119.18.0/24 maxlen: 24
                          216.119.19.0/24 maxlen: 24
                          216.119.20.0/24 maxlen: 24
                          216.119.21.0/24 maxlen: 24
                          216.119.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:66:00:dd:ba:6f:2f:cd:54:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=c8d414fe-1fbb-4fda-bee8-b8bcb4388552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:70:d7:33:46:f0:05:75:c8:ff:34:a3:67:2e:
                    f3:64:36:a2:c1:9b:27:2e:cd:51:4e:e0:bb:35:df:
                    2b:e8:b1:13:85:56:01:17:5d:25:7d:4d:33:f6:40:
                    03:de:25:4f:a0:6b:d8:e6:11:38:3e:51:bd:d3:72:
                    2b:e5:a4:8e:cc:28:12:0d:88:b0:4d:03:e4:ad:83:
                    d4:cf:64:4f:a4:64:35:53:af:9c:a3:7b:e4:a1:da:
                    00:5a:32:7c:a3:1c:81:05:40:03:c8:fb:61:78:d4:
                    80:ca:7c:89:b5:09:f4:f7:1f:94:53:2d:85:12:f2:
                    80:b9:3a:6b:63:1b:ec:49:86:62:af:a5:99:d4:26:
                    8d:1e:1b:f4:df:92:e5:5e:e5:dd:4f:d7:0a:ac:01:
                    64:73:6d:8a:9e:63:10:e2:43:2c:dc:e6:53:d3:45:
                    8e:6d:d9:c7:60:e1:69:11:08:44:79:ef:ea:91:03:
                    c1:f4:6c:ed:e8:a0:52:d6:b4:ca:ab:5d:bb:d1:9d:
                    c4:65:7f:6f:86:4e:c8:71:39:2f:7f:9a:bc:57:2b:
                    01:e2:33:b8:19:94:1d:8a:c9:7b:88:3d:bb:e4:71:
                    81:18:23:b7:94:52:4d:e6:6f:c7:72:31:70:01:51:
                    a7:18:81:d2:b2:e7:e6:48:25:cd:d0:97:8f:ec:76:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B1:B4:BF:E6:B0:4D:7B:E2:A9:51:8D:D9:A2:E3:11:E5:15:82:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/552ebcdb-7aa0-36af-ab63-0331d8c79f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.18.0-216.119.22.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:0c:b4:e2:b5:a2:05:9f:53:f0:16:e5:a7:29:6f:8a:2e:
         76:0f:9f:4b:00:b1:ae:97:8e:2b:3e:f1:47:81:9a:c6:a4:c5:
         14:a8:65:12:87:44:a1:7e:13:ec:9e:91:a1:2d:9b:31:0b:a2:
         84:52:1c:f3:9d:08:d1:f8:87:39:e7:e1:41:4c:95:b0:c0:8c:
         ba:8d:0e:cf:d7:7c:ab:91:c9:f1:94:c6:7f:97:a5:59:9a:c9:
         c3:da:e7:4c:a3:cc:9b:68:7f:34:32:21:f7:7d:97:41:59:b6:
         84:74:fc:f6:02:3a:98:b5:5f:7d:35:4c:91:8b:d2:6c:4b:a4:
         3a:6a:1c:07:9a:89:43:92:5b:09:6e:9f:ab:78:ec:25:d8:ba:
         3a:c2:6a:5f:89:a2:e8:7b:f4:af:0a:da:25:55:3e:c2:f3:42:
         4d:88:43:bb:df:4c:67:af:d2:84:be:99:72:52:d3:21:26:18:
         9c:c8:e1:fa:2f:10:cd:e6:ee:79:b9:0e:2c:89:07:71:b9:d9:
         be:f5:3a:87:6f:9b:16:9b:ca:a9:c0:40:e5:3c:0f:63:c7:35:
         ee:1a:4c:64:54:86:0e:cd:0c:0f:e4:c1:f2:12:9b:a0:d4:32:
         cb:ff:88:58:d2:71:6f:2b:92:7a:82:ee:4f:72:16:95:9f:f6:
         11:ea:d8:17
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEdG62YA3bpvL81UdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkyMDEzMDA0MloXDTI0MTIxOTE0MDA0MlowLzEtMCsGA1UEAxMk
YzhkNDE0ZmUtMWZiYi00ZmRhLWJlZTgtYjhiY2I0Mzg4NTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHDXM0bwBXXI/zSjZy7zZDaiwZsnLs1RTuC7
Nd8r6LEThVYBF10lfU0z9kAD3iVPoGvY5hE4PlG903Ir5aSOzCgSDYiwTQPkrYPU
z2RPpGQ1U6+co3vkodoAWjJ8oxyBBUADyPtheNSAynyJtQn09x+UUy2FEvKAuTpr
YxvsSYZir6WZ1CaNHhv035LlXuXdT9cKrAFkc22KnmMQ4kMs3OZT00WObdnHYOFp
EQhEee/qkQPB9Gzt6KBS1rTKq1270Z3EZX9vhk7IcTkvf5q8VysB4jO4GZQdisl7
iD275HGBGCO3lFJN5m/HcjFwAVGnGIHSsufmSCXN0JeP7HaRVQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFOGxtL/msE174qlRjdmi4xHlFYI0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNTUyZWJjZGItN2FhMC0z
NmFmLWFiNjMtMDMzMWQ4Yzc5ZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHYdxID
BADYdxYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEADMcMtOK1ogWfU/AW5acpb4oudg+fSwCxrpeOKz7xR4Ga
xqTFFKhlEodEoX4T7J6RoS2bMQuihFIc850I0fiHOefhQUyVsMCMuo0Oz9d8q5HJ
8ZTGf5elWZrJw9rnTKPMm2h/NDIh932XQVm2hHT89gI6mLVffTVMkYvSbEukOmoc
B5qJQ5JbCW6fq3jsJdi6OsJqX4mi6Hv0rwraJVU+wvNCTYhDu99MZ6/ShL6ZclLT
ISYYnMjh+i8QzebuebkOLIkHcbnZvvU6h2+bFpvKqcBA5TwPY8c17hpMZFSGDs0M
D+TB8hKboNQyy/+IWNJxbyuSeoLuT3IWlZ/2EerYFw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:56 2024 by rpki-client on console-fra.rpki-client.org