Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/96a41df6-13d4-3e7f-9886-31a376ed6b7e.roa
File:                     96a41df6-13d4-3e7f-9886-31a376ed6b7e.roa (raw, json)
Hash identifier:          rWPVpPnf27TN7SAnwNuzW6eps0B07NUj4ciE2Ecw088=
Subject key identifier:   DD:EB:EE:B3:FA:97:8A:FE:FF:CE:CC:C8:FD:10:C5:1E:58:9A:6C:7D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584738F5FCE44159A500791D3A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/96a41df6-13d4-3e7f-9886-31a376ed6b7e.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     4997
IP address blocks:        208.39.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:fc:e4:41:59:a5:00:79:1d:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=9965f58d-abcf-4fb4-b251-c5830568bccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:d6:13:a9:f7:d7:60:84:b8:33:bb:09:1e:
                    22:c7:ca:97:54:1a:3b:bd:1e:f0:c3:ca:c4:c3:1f:
                    41:9f:0b:dc:72:0b:8f:e8:ed:77:47:e3:83:42:b5:
                    cc:da:88:a6:3d:05:26:e9:20:a7:3a:30:4f:80:c7:
                    d5:59:9c:14:de:9b:25:27:08:95:62:47:91:5d:6b:
                    45:64:7a:ae:df:a8:0b:5e:1c:97:ec:76:9c:9e:65:
                    a9:eb:c7:e8:b5:79:24:fe:a9:c2:01:0b:a8:45:c6:
                    d0:90:bf:20:a9:ea:c5:5e:99:30:7c:66:ed:da:41:
                    9c:bf:54:4a:59:96:84:eb:29:cc:35:00:e7:c9:1c:
                    5c:d9:27:3e:66:24:27:76:38:8d:f9:5f:f8:05:c0:
                    c7:11:8c:1b:c9:15:99:2e:70:f8:d3:d1:a0:4f:09:
                    55:47:40:c2:36:ff:14:52:a1:a0:5a:42:4f:eb:6b:
                    77:2f:3f:fd:ff:a4:31:5e:f4:29:06:72:d9:89:f0:
                    54:0a:c3:a4:62:2b:0f:af:f9:de:bc:8a:fb:d3:27:
                    a8:ad:fc:97:b3:9d:16:dc:cd:20:c4:5f:53:d9:27:
                    e9:66:19:70:d9:62:49:9c:98:cc:5c:a4:c7:13:96:
                    e0:e7:2c:5d:75:c6:ac:8e:5e:d1:33:9b:a2:96:6b:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EB:EE:B3:FA:97:8A:FE:FF:CE:CC:C8:FD:10:C5:1E:58:9A:6C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/96a41df6-13d4-3e7f-9886-31a376ed6b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:19:7a:6c:e6:26:1a:4a:23:21:c2:45:f5:25:ca:66:18:85:
         6c:de:94:81:85:e2:78:9d:b9:44:91:26:78:d7:c8:92:87:b7:
         72:2a:f4:3e:0f:ab:49:a5:dd:03:61:f4:35:c8:a6:69:2b:a7:
         33:9a:68:57:5c:e4:2b:d4:25:fa:f5:95:1b:52:f4:b4:10:77:
         96:d8:82:c4:de:18:bf:ad:a4:bb:b2:47:c1:72:55:29:f6:40:
         60:8a:c0:b7:27:3c:c5:a6:10:60:0d:07:35:f1:70:ff:fb:8e:
         50:64:f0:2b:d8:b9:c8:ec:a7:55:0f:47:00:da:9a:37:50:e4:
         79:02:4c:b7:eb:1c:26:20:dd:01:b2:38:00:7a:70:1f:45:72:
         72:6a:d1:19:e1:fe:2b:7d:f4:65:4c:35:4d:8b:38:cf:f9:17:
         f3:93:f9:ce:e7:81:90:34:2b:f4:ba:7b:d6:6b:f2:c3:2b:c0:
         22:d0:e6:ff:11:c2:f6:08:60:40:65:4b:27:ad:64:56:bc:69:
         79:3b:da:19:eb:08:22:da:1a:24:75:b6:45:59:21:63:25:2b:
         14:5c:6d:89:74:73:29:2b:f9:26:73:d8:b7:da:d6:d0:57:a2:
         67:ed:c4:b2:59:36:f8:9a:6a:f1:dc:90:a1:84:cc:9a:23:bd:
         b1:1b:1f:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc49fzkQVmlAHkdOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkxNTEzMDA0MloXDTI0MTIxNDE0MDA0MlowLzEtMCsGA1UEAxMk
OTk2NWY1OGQtYWJjZi00ZmI0LWIyNTEtYzU4MzA1NjhiY2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm3WE6n312CEuDO7CR4ix8qXVBo7vR7ww8rE
wx9BnwvccguP6O13R+ODQrXM2oimPQUm6SCnOjBPgMfVWZwU3pslJwiVYkeRXWtF
ZHqu36gLXhyX7HacnmWp68fotXkk/qnCAQuoRcbQkL8gqerFXpkwfGbt2kGcv1RK
WZaE6ynMNQDnyRxc2Sc+ZiQndjiN+V/4BcDHEYwbyRWZLnD409GgTwlVR0DCNv8U
UqGgWkJP62t3Lz/9/6QxXvQpBnLZifBUCsOkYisPr/nevIr70yeorfyXs50W3M0g
xF9T2SfpZhlw2WJJnJjMXKTHE5bg5yxddcasjl7RM5uilmuUWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3r7rP6l4r+/87MyP0QxR5Ymmx9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOTZhNDFkZjYtMTNkNC0z
ZTdmLTk4ODYtMzFhMzc2ZWQ2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0CflMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgZemzmJhpKIyHCRfUlymYYhWzelIGF4niduUSRJnjXyJKHt3Iq9D4P
q0ml3QNh9DXIpmkrpzOaaFdc5CvUJfr1lRtS9LQQd5bYgsTeGL+tpLuyR8FyVSn2
QGCKwLcnPMWmEGANBzXxcP/7jlBk8CvYucjsp1UPRwDamjdQ5HkCTLfrHCYg3QGy
OAB6cB9FcnJq0Rnh/it99GVMNU2LOM/5F/OT+c7ngZA0K/S6e9Zr8sMrwCLQ5v8R
wvYIYEBlSyetZFa8aXk72hnrCCLaGiR1tkVZIWMlKxRcbYl0cykr+SZz2Lfa1tBX
omftxLJZNviaavHckKGEzJojvbEbH8A=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:49 2024 by rpki-client on console-ams.rpki-client.org