Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/c8e3c6c9-7eca-3c17-aa01-8122a346fd59.roa
File:                     c8e3c6c9-7eca-3c17-aa01-8122a346fd59.roa (raw, json)
Hash identifier:          7HBXyKZyBAO/EfoA3kzrhqK3SR4LFzEMHdirfnoD1/o=
Subject key identifier:   87:3A:EA:C8:EA:E3:44:8A:8B:21:C6:AB:03:A5:B1:2B:60:6E:2B:B2
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858478E1BC051A888CA6C44DBEE00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/c8e3c6c9-7eca-3c17-aa01-8122a346fd59.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     15313
IP address blocks:        150.252.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c0:51:a8:88:ca:6c:44:db:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=65e1d2a1-dce4-44bc-921e-4be994cda4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:a7:30:92:5e:d0:9f:f0:98:4e:97:60:96:
                    6a:f7:82:e7:c9:13:be:12:29:d2:96:a5:c2:51:7a:
                    5c:39:a9:a9:7f:ee:fb:4b:a5:3c:ca:65:f3:9d:91:
                    22:41:6d:7f:33:6b:38:c0:52:07:85:34:47:df:8b:
                    cb:08:9d:c6:03:e1:e1:ea:3f:8c:fa:03:e6:2b:b1:
                    6b:3f:54:84:84:0b:de:93:29:b8:4b:00:ff:d1:1e:
                    43:20:95:5b:4a:23:bf:ea:71:36:bb:80:38:94:2c:
                    28:56:fe:85:3d:0e:04:c0:0e:24:8f:c1:d1:fa:cb:
                    9c:29:ce:33:c9:a4:79:26:a8:96:8c:df:0b:9f:9e:
                    d8:b5:73:9c:5e:5d:dd:c3:da:8a:b1:2a:e0:b0:b2:
                    0d:e4:87:fb:5c:2e:41:9f:7a:bf:34:4e:ef:0a:05:
                    49:0d:38:b6:e0:96:45:01:dc:16:8b:84:8b:52:02:
                    71:49:ff:31:e1:01:c1:bc:4f:e2:f9:6b:f0:8e:94:
                    ef:33:71:9a:07:9e:b8:2a:d5:8d:ad:b3:28:dc:04:
                    f7:c1:f3:ef:d0:f9:52:9a:15:7b:50:aa:74:22:20:
                    b1:31:0f:c6:d6:b4:9a:f8:30:9f:52:64:95:d7:84:
                    06:7d:f8:5f:79:d6:a6:41:61:bd:fd:49:c7:9a:77:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3A:EA:C8:EA:E3:44:8A:8B:21:C6:AB:03:A5:B1:2B:60:6E:2B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/c8e3c6c9-7eca-3c17-aa01-8122a346fd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5f:f4:b9:79:a2:00:82:c3:ee:3d:41:b6:d0:4e:97:71:95:
         cf:a0:46:a9:ef:75:10:43:a4:45:85:a5:ef:80:45:0c:0c:63:
         f9:69:90:cb:57:8d:25:89:ac:ce:72:9a:52:c3:c2:0c:8c:78:
         10:7c:c9:b0:3e:ed:e6:50:dd:ff:97:27:a9:06:cd:8e:6f:66:
         d3:d0:12:5d:0b:67:dd:d8:f3:5c:e6:2a:95:c1:ec:9a:46:f3:
         05:9f:4a:e0:39:13:3a:05:71:47:e7:8c:37:66:58:0e:3f:8e:
         38:ed:c0:c0:3e:7a:1d:a6:7d:83:4e:b8:8e:04:72:cc:05:ea:
         35:03:28:73:0f:d2:74:5a:3a:48:54:b9:b5:43:5d:b3:dc:16:
         4f:8d:6a:4d:52:df:9f:80:a3:c1:55:ca:78:ba:d7:d5:d7:25:
         58:a3:3f:90:43:e4:82:7b:de:73:b6:59:42:48:25:30:a0:64:
         77:00:a6:da:45:08:44:60:f0:dc:e2:40:a8:45:f2:9c:33:43:
         38:b2:45:ee:41:d5:91:60:fd:75:3f:2e:d4:34:1d:51:dc:6c:
         af:b2:a3:72:1e:ee:c2:58:fc:ef:ea:68:f5:17:b0:42:f2:e6:
         a0:48:a9:a7:70:42:90:e4:98:64:65:7a:43:51:fa:24:51:a9:
         c7:46:07:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG8BRqIjKbETb7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk
NjVlMWQyYTEtZGNlNC00NGJjLTkyMWUtNGJlOTk0Y2RhNGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n+nMJJe0J/wmE6XYJZq94LnyRO+EinSlqXC
UXpcOampf+77S6U8ymXznZEiQW1/M2s4wFIHhTRH34vLCJ3GA+Hh6j+M+gPmK7Fr
P1SEhAvekym4SwD/0R5DIJVbSiO/6nE2u4A4lCwoVv6FPQ4EwA4kj8HR+sucKc4z
yaR5JqiWjN8Ln57YtXOcXl3dw9qKsSrgsLIN5If7XC5Bn3q/NE7vCgVJDTi24JZF
AdwWi4SLUgJxSf8x4QHBvE/i+WvwjpTvM3GaB564KtWNrbMo3AT3wfPv0PlSmhV7
UKp0IiCxMQ/G1rSa+DCfUmSV14QGffhfedamQWG9/UnHmndiUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIc66sjq40SKiyHGqwOlsStgbiuyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvYzhlM2M2YzktN2VjYS0z
YzE3LWFhMDEtODEyMmEzNDZmZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlvzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpf9Ll5ogCCw+49QbbQTpdxlc+gRqnvdRBDpEWFpe+ARQwMY/lpkMtX
jSWJrM5ymlLDwgyMeBB8ybA+7eZQ3f+XJ6kGzY5vZtPQEl0LZ93Y81zmKpXB7JpG
8wWfSuA5EzoFcUfnjDdmWA4/jjjtwMA+eh2mfYNOuI4EcswF6jUDKHMP0nRaOkhU
ubVDXbPcFk+Nak1S35+Ao8FVyni619XXJVijP5BD5IJ73nO2WUJIJTCgZHcAptpF
CERg8NziQKhF8pwzQziyRe5B1ZFg/XU/LtQ0HVHcbK+yo3Ie7sJY/O/qaPUXsELy
5qBIqadwQpDkmGRlekNR+iRRqcdGB6E=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:07 2024 by rpki-client on console-ams.rpki-client.org