Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa
File:                     1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa (raw, json)
Hash identifier:          wAX7rwM9VcrnW9a/AzEH5LdAZRpUnY8GxDRw+3JubJY=
Subject key identifier:   9F:74:E5:F9:16:93:3C:5E:2D:3B:D9:03:E1:CD:E8:DA:A6:17:C7:A4
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F432858473360A10AEA2F791743817930
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     46238
IP address blocks:        199.71.228.0/24 maxlen: 24
                          199.71.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:a1:0a:ea:2f:79:17:43:81:79:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=833d1f75-1e1a-4980-bbc6-40ee622c503b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:28:cf:a9:5c:ba:5a:95:9b:73:48:24:b2:
                    a6:23:27:dc:2f:41:0c:3c:e0:ff:65:1a:66:83:3d:
                    56:8f:b8:cb:3f:61:81:02:4e:aa:77:4a:29:3d:e7:
                    56:35:f9:d9:07:11:30:2e:46:46:59:38:63:85:ff:
                    ac:1e:05:a7:fe:e7:f0:da:22:a3:30:e8:ea:e5:a5:
                    5e:88:1e:86:7c:71:6f:9a:0a:ab:99:89:37:05:02:
                    f6:e3:62:e3:7b:05:5d:ff:62:43:2a:04:3c:72:62:
                    00:30:da:09:5b:cb:c4:2a:18:15:1a:01:28:af:38:
                    56:eb:f1:8c:01:bc:76:d1:9e:5e:07:74:0c:c0:a8:
                    19:04:39:bf:07:c8:bd:04:0e:e8:2b:36:f3:f5:0e:
                    27:0c:4e:0c:35:f9:c8:47:ec:7a:c7:9e:d8:f6:09:
                    99:b3:cb:1e:db:a1:db:2c:37:bc:e6:c9:4b:44:57:
                    1a:66:e5:80:4c:26:cb:85:60:8a:43:3f:16:fb:25:
                    cc:c0:bc:e3:33:04:00:7d:e6:75:84:dd:9e:6c:63:
                    b8:a5:a4:ea:5b:61:76:8a:64:b9:f9:97:84:de:b9:
                    62:7f:2d:a7:64:78:ac:39:dd:c2:11:9d:f5:57:32:
                    f0:37:bd:5b:f1:20:d8:d3:ee:d4:fb:0b:60:8d:0b:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:74:E5:F9:16:93:3C:5E:2D:3B:D9:03:E1:CD:E8:DA:A6:17:C7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/1bf7501c-bd8e-3acf-972f-792f0d551c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:92:70:a9:f9:83:16:8e:cd:51:48:92:05:56:a1:8f:b8:67:
         6e:48:7b:33:99:62:bf:4b:89:e3:60:f2:7c:09:d8:67:01:c7:
         d9:2f:ca:4a:5c:32:18:60:1d:42:62:bb:b7:65:12:e4:6e:57:
         e4:c0:8e:b7:01:73:70:5b:c7:54:15:90:6c:a9:6e:85:db:6f:
         50:f4:56:f5:02:1d:60:27:91:b4:fa:b1:e1:0c:a5:b5:00:49:
         b6:53:47:16:4c:b9:e2:e6:a2:3f:bc:2d:28:26:77:f1:91:c2:
         3a:d7:25:7c:4d:b2:dc:70:e6:4f:72:9e:6a:95:4c:4d:fb:77:
         83:5a:4e:a2:ae:63:49:1f:88:86:0c:00:10:12:f7:35:c0:ed:
         62:7a:8f:31:99:56:40:86:db:ba:6d:ae:e0:7f:5e:2e:59:8d:
         f5:1b:9f:2a:f3:ad:65:d0:0a:c9:18:1d:5b:b9:7d:9d:d9:40:
         83:40:83:2f:7e:25:fe:7b:e7:79:fc:ea:bc:7d:1a:11:5d:ec:
         e6:64:b9:c4:b0:a8:80:df:68:69:92:2f:b0:c9:7c:0e:37:f4:
         0e:69:fe:be:c5:56:14:80:22:21:bf:7b:4c:6e:12:7d:fd:51:
         23:bd:a7:26:86:0d:01:66:45:1a:b5:38:99:36:ce:81:c1:ec:
         53:1d:8e:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEczYKEK6i95F0OBeTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw
MTE0MB4XDTI0MDkxMzEzMDA0MVoXDTI0MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk
ODMzZDFmNzUtMWUxYS00OTgwLWJiYzYtNDBlZTYyMmM1MDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueMoz6lculqVm3NIJLKmIyfcL0EMPOD/ZRpm
gz1Wj7jLP2GBAk6qd0opPedWNfnZBxEwLkZGWThjhf+sHgWn/ufw2iKjMOjq5aVe
iB6GfHFvmgqrmYk3BQL242LjewVd/2JDKgQ8cmIAMNoJW8vEKhgVGgEorzhW6/GM
Abx20Z5eB3QMwKgZBDm/B8i9BA7oKzbz9Q4nDE4MNfnIR+x6x57Y9gmZs8se26Hb
LDe85slLRFcaZuWATCbLhWCKQz8W+yXMwLzjMwQAfeZ1hN2ebGO4paTqW2F2imS5
+ZeE3rlify2nZHisOd3CEZ31VzLwN71b8SDY0+7U+wtgjQtHmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ905fkWkzxeLTvZA+HN6NqmF8ekMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1
OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMWJmNzUwMWMtYmQ4ZS0z
YWNmLTk3MmYtNzkyZjBkNTUxYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk
MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk
MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4
N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0fkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeScKn5gxaOzVFIkgVWoY+4Z25IezOZYr9LieNg8nwJ2GcBx9kvykpc
MhhgHUJiu7dlEuRuV+TAjrcBc3Bbx1QVkGypboXbb1D0VvUCHWAnkbT6seEMpbUA
SbZTRxZMueLmoj+8LSgmd/GRwjrXJXxNstxw5k9ynmqVTE37d4NaTqKuY0kfiIYM
ABAS9zXA7WJ6jzGZVkCG27ptruB/Xi5ZjfUbnyrzrWXQCskYHVu5fZ3ZQINAgy9+
Jf5753n86rx9GhFd7OZkucSwqIDfaGmSL7DJfA439A5p/r7FVhSAIiG/e0xuEn39
USO9pyaGDQFmRRq1OJk2zoHB7FMdjiI=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:06 2024 by rpki-client on console-ams.rpki-client.org