Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/897c6f20-9699-364f-b5b2-a47eaee653dc.roa
File:                     897c6f20-9699-364f-b5b2-a47eaee653dc.roa (raw, json)
Hash identifier:          qAUU/7fwWuN1i6cweQuh4Wz6N3OhTY8mtzRMt3x9KW4=
Subject key identifier:   B3:76:3A:FE:CD:7D:38:FE:E0:2C:55:43:7F:69:0D:E5:05:41:DB:D3
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB767E07FB29E9D63798C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/897c6f20-9699-364f-b5b2-a47eaee653dc.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        209.146.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:76:7e:07:fb:29:e9:d6:37:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=32531dde-2375-4cec-8a34-4fb064b41b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:a5:af:df:bc:ff:0c:fc:04:36:65:82:5c:
                    5f:89:f6:fe:09:7c:e1:f7:a6:9b:93:95:5a:d3:30:
                    56:94:af:1a:05:ef:a5:e2:fc:bf:64:fc:2f:8f:02:
                    06:24:79:84:00:46:73:fe:8f:d6:cc:12:43:96:fe:
                    a9:37:2d:9a:6c:91:3d:99:59:95:dc:3f:a0:05:63:
                    45:72:07:a1:90:fb:0f:17:05:88:65:74:f3:89:b6:
                    2c:04:96:0a:72:41:ab:a3:15:86:bc:b2:47:11:84:
                    68:37:9e:66:54:de:05:8b:39:be:e9:6d:c3:49:1b:
                    d9:40:6e:8b:fb:08:04:01:0d:97:35:17:be:8c:79:
                    42:57:f8:4f:0d:3e:6c:da:1c:9e:ce:71:14:46:13:
                    2e:b7:06:98:b5:a1:a4:1a:7f:92:9d:7d:1f:88:28:
                    8e:3f:c1:7c:e5:45:e9:1a:f8:ee:4d:6b:56:85:0a:
                    7f:2b:e3:c5:92:66:07:d1:3d:a0:84:1f:df:b7:aa:
                    c7:5a:2a:ae:55:ae:9a:4f:7d:62:3e:06:78:5e:97:
                    35:bb:7f:5b:4c:38:6d:84:8d:52:ce:b4:75:7e:8c:
                    c7:d0:3b:ac:35:ff:f9:77:ac:c6:78:7b:cc:8d:7e:
                    e9:5c:79:38:c1:4a:38:43:db:3a:9e:bf:76:05:df:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:76:3A:FE:CD:7D:38:FE:E0:2C:55:43:7F:69:0D:E5:05:41:DB:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/897c6f20-9699-364f-b5b2-a47eaee653dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:94:45:21:df:25:51:08:93:11:23:03:ee:30:3f:16:d8:
         7e:e6:c8:cd:e1:be:ab:12:72:53:b0:c5:b3:6e:20:79:2f:b4:
         ae:08:09:b5:78:17:4e:e7:d5:d4:59:8f:af:a6:04:9e:46:b2:
         53:2c:ca:c8:07:f4:6d:65:3c:36:a4:fc:89:aa:11:cc:cc:f0:
         58:c8:4f:8d:ae:c1:00:ea:c8:09:1a:66:1a:3d:20:4b:5a:42:
         da:9d:86:51:65:de:b6:79:cf:6c:30:f5:8f:91:e4:79:c7:7f:
         52:ac:b8:28:87:f4:fa:fe:4f:37:a0:af:ee:69:2e:2e:4d:ec:
         48:fc:67:95:84:a3:18:ec:4b:39:f4:19:86:90:24:61:8d:00:
         65:fa:c6:5e:4a:35:ff:4a:94:35:3a:95:22:db:13:9e:c6:72:
         2d:df:e0:62:c9:fd:bc:15:fc:2d:c8:6f:96:ac:a2:6b:15:ca:
         38:f7:f0:72:b9:0d:1b:e1:fc:49:13:0a:73:79:9f:44:10:2e:
         4f:ed:3d:ac:a8:be:f0:ea:6c:af:6c:1b:4e:07:f7:cf:d5:38:
         b2:73:f2:a9:df:64:cd:8c:5f:d4:2e:be:34:4b:ae:a7:05:b9:
         69:2a:57:da:dd:e2:36:8b:0d:ec:db:39:1c:f3:8a:96:cd:f1:
         cf:af:aa:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdb23Z+B/sp6dY3mMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDkyODAxMDAzMVoXDTI0MTIyNzAyMDAzMVowLzEtMCsGA1UEAxMk
MzI1MzFkZGUtMjM3NS00Y2VjLThhMzQtNGZiMDY0YjQxYjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5ilr9+8/wz8BDZlglxfifb+CXzh96abk5Va
0zBWlK8aBe+l4vy/ZPwvjwIGJHmEAEZz/o/WzBJDlv6pNy2abJE9mVmV3D+gBWNF
cgehkPsPFwWIZXTzibYsBJYKckGroxWGvLJHEYRoN55mVN4Fizm+6W3DSRvZQG6L
+wgEAQ2XNRe+jHlCV/hPDT5s2hyeznEURhMutwaYtaGkGn+SnX0fiCiOP8F85UXp
GvjuTWtWhQp/K+PFkmYH0T2ghB/ft6rHWiquVa6aT31iPgZ4Xpc1u39bTDhthI1S
zrR1fozH0DusNf/5d6zGeHvMjX7pXHk4wUo4Q9s6nr92Bd8MJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLN2Ov7NfTj+4CxVQ39pDeUFQdvTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvODk3YzZmMjAtOTY5OS0z
NjRmLWI1YjItYTQ3ZWFlZTY1M2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZKmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1rlEUh3yVRCJMRIwPuMD8W2H7myM3hvqsSclOwxbNuIHkvtK4ICbV4
F07n1dRZj6+mBJ5GslMsysgH9G1lPDak/ImqEczM8FjIT42uwQDqyAkaZho9IEta
QtqdhlFl3rZ5z2ww9Y+R5HnHf1KsuCiH9Pr+Tzegr+5pLi5N7Ej8Z5WEoxjsSzn0
GYaQJGGNAGX6xl5KNf9KlDU6lSLbE57Gci3f4GLJ/bwV/C3Ib5asomsVyjj38HK5
DRvh/EkTCnN5n0QQLk/tPayovvDqbK9sG04H98/VOLJz8qnfZM2MX9QuvjRLrqcF
uWkqV9rd4jaLDezbORzzipbN8c+vquI=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:08 2024 by rpki-client on console-ams.rpki-client.org