Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/0f3303fa-3661-3f60-b256-950bc9a09ad4.roa
File:                     0f3303fa-3661-3f60-b256-950bc9a09ad4.roa (raw, json)
Hash identifier:          ZxVFNBYb5NNdjvh+PJwqeKlCLojeb31/dc0qcA2gbTo=
Subject key identifier:   3B:D3:73:4B:F9:69:AE:4A:F1:5B:5D:C4:DC:6F:5B:27:C3:5F:9B:F2
Certificate issuer:       /CN=aed19c9c-a75a-48f8-98f4-685aa357a137
Certificate serial:       010D0C9F4328584774FB9AC75E47C566D6EDBA00
Authority key identifier: 71:BA:16:13:89:DA:69:E7:49:42:23:6D:82:66:01:57:18:E7:83:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/0f3303fa-3661-3f60-b256-950bc9a09ad4.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     46883
IP address blocks:        199.255.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/aed19c9c-a75a-48f8-98f4-685aa357a137.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/aed19c9c-a75a-48f8-98f4-685aa357a137.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:9a:c7:5e:47:c5:66:d6:ed:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed19c9c-a75a-48f8-98f4-685aa357a137
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=18e2e3d2-90d2-4510-be51-0d9566aa01e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:14:f5:de:a1:86:b4:a9:c8:cd:3b:e8:d0:
                    d8:84:a8:1b:b0:c6:f3:b2:ae:6a:27:31:e3:3d:54:
                    c5:11:db:93:4a:86:13:04:04:3d:0d:09:71:c3:59:
                    df:26:63:37:ae:c1:0e:bf:7d:94:f2:75:48:16:ee:
                    39:6c:38:ec:92:e8:a8:a3:8f:d9:b4:66:53:76:1f:
                    64:23:61:27:30:56:e1:23:51:d8:32:65:6a:b7:d8:
                    f9:12:5d:2d:2a:a5:5c:3d:83:5d:42:61:75:fe:06:
                    7f:4b:d6:14:83:b7:14:07:f5:c5:cb:28:09:13:df:
                    2e:39:c0:d5:5c:57:b6:f0:fe:76:f1:2d:9a:41:54:
                    35:d4:32:9f:26:33:5f:80:a6:4c:11:3e:67:55:8d:
                    dd:40:99:cb:b9:fa:fe:1d:a8:6c:22:0f:4b:b6:59:
                    39:f7:e7:34:f3:18:48:3b:eb:07:dd:43:b4:58:dc:
                    0a:a2:8b:cc:6e:ab:4f:36:44:c1:c8:a8:c7:eb:13:
                    51:67:10:a3:68:25:c6:00:30:81:a9:d1:5f:ec:e4:
                    ce:46:f0:24:06:d2:e5:cc:ae:ba:33:e5:1b:82:bf:
                    a0:57:78:20:e1:d0:47:30:39:9a:e5:85:ea:65:38:
                    62:2f:12:a7:c7:fb:bc:81:0e:e4:e9:8a:37:1d:25:
                    76:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D3:73:4B:F9:69:AE:4A:F1:5B:5D:C4:DC:6F:5B:27:C3:5F:9B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/0f3303fa-3661-3f60-b256-950bc9a09ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/aed19c9c-a75a-48f8-98f4-685aa357a137.crl

            X509v3 Authority Key Identifier:
                keyid:71:BA:16:13:89:DA:69:E7:49:42:23:6D:82:66:01:57:18:E7:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:cf:82:c5:76:83:e5:77:6e:26:48:1d:3d:02:4f:5a:c4:
         6c:5f:c7:fe:62:61:16:e7:5d:7b:db:9d:79:01:29:e1:f3:2e:
         68:e1:ec:a1:47:42:ce:a3:0f:30:4e:a2:93:1b:2f:a0:ae:34:
         fb:8c:92:d9:93:d9:e9:e3:cc:c4:12:8e:ea:df:61:cf:db:b2:
         d1:7a:9d:82:45:45:d8:c8:88:c6:6c:85:e1:7b:01:78:a6:f0:
         47:f7:06:32:17:63:69:6b:1a:07:70:18:e1:f7:fe:b2:eb:35:
         c9:59:b5:c7:2c:09:a7:9a:53:66:b5:9e:07:03:09:f8:a0:c9:
         9f:63:d5:40:85:5a:0a:3c:e5:58:2c:b3:81:21:52:22:a8:e5:
         d7:3a:9b:70:7a:38:f0:e5:4e:4f:fb:52:39:87:14:c3:0a:54:
         ae:53:e9:a8:ae:fd:e3:75:cb:7f:47:f3:9f:fe:36:d1:b3:fe:
         2b:f3:6b:2b:fe:d1:ce:b0:68:f7:67:52:b7:94:e3:8c:7b:28:
         1a:90:e7:06:55:12:10:5f:6e:5d:d5:30:f1:f9:ef:e6:98:28:
         f0:80:ed:7b:a0:ad:0f:93:a5:5f:40:6c:c7:70:c1:37:d7:93:
         65:fc:0e:0a:42:c0:07:94:2e:01:bb:50:39:49:93:d6:a4:b7:
         eb:9a:4a:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+5rHXkfFZtbtugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWVkMTljOWMtYTc1YS00OGY4LTk4ZjQtNjg1YWEzNTdh
MTM3MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk
MThlMmUzZDItOTBkMi00NTEwLWJlNTEtMGQ5NTY2YWEwMWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl0U9d6hhrSpyM076NDYhKgbsMbzsq5qJzHj
PVTFEduTSoYTBAQ9DQlxw1nfJmM3rsEOv32U8nVIFu45bDjskuioo4/ZtGZTdh9k
I2EnMFbhI1HYMmVqt9j5El0tKqVcPYNdQmF1/gZ/S9YUg7cUB/XFyygJE98uOcDV
XFe28P528S2aQVQ11DKfJjNfgKZMET5nVY3dQJnLufr+HahsIg9Ltlk59+c08xhI
O+sH3UO0WNwKoovMbqtPNkTByKjH6xNRZxCjaCXGADCBqdFf7OTORvAkBtLlzK66
M+Ubgr+gV3gg4dBHMDma5YXqZThiLxKnx/u8gQ7k6Yo3HSV2GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvTc0v5aa5K8VtdxNxvWyfDX5vyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZWQx
OWM5Yy1hNzVhLTQ4ZjgtOThmNC02ODVhYTM1N2ExMzcvMGYzMzAzZmEtMzY2MS0z
ZjYwLWIyNTYtOTUwYmM5YTA5YWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWVkMTljOWMtYTc1YS00OGY4LTk4
ZjQtNjg1YWEzNTdhMTM3L2FlZDE5YzljLWE3NWEtNDhmOC05OGY0LTY4NWFhMzU3
YTEzNy5jcmwwHwYDVR0jBBgwFoAUcboWE4naaedJQiNtgmYBVxjngyIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZWQxOWM5Yy1hNzVhLTQ4ZjgtOThmNC02ODVh
YTM1N2ExMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/+4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhOz4LFdoPld24mSB09Ak9axGxfx/5iYRbnXXvbnXkBKeHzLmjh7KFH
Qs6jDzBOopMbL6CuNPuMktmT2enjzMQSjurfYc/bstF6nYJFRdjIiMZsheF7AXim
8Ef3BjIXY2lrGgdwGOH3/rLrNclZtccsCaeaU2a1ngcDCfigyZ9j1UCFWgo85Vgs
s4EhUiKo5dc6m3B6OPDlTk/7UjmHFMMKVK5T6aiu/eN1y39H85/+NtGz/ivzayv+
0c6waPdnUreU44x7KBqQ5wZVEhBfbl3VMPH57+aYKPCA7XugrQ+TpV9AbMdwwTfX
k2X8DgpCwAeULgG7UDlJk9akt+uaShs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:56 2024 by rpki-client on console-ams.rpki-client.org