Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa
File:                     c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa (raw, json)
Hash identifier:          i1OOcd4//lE3lg9hG5IBjpdxlAjHOxE0/JkkyLtx4M0=
Subject key identifier:   AA:11:CB:29:39:FA:B1:A1:F8:4B:BE:33:04:0D:B4:03:E0:D1:2A:74
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584762D660E86512CD1FB3535DC0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        162.249.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:60:e8:65:12:cd:1f:b3:53:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=ffa3a50c-97a3-4582-a6e0-af769c77ef87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:5d:79:07:06:bc:dd:09:b8:77:e7:9d:72:
                    0f:07:07:ea:2a:5e:ae:10:2d:29:05:6d:a9:2e:ea:
                    f8:33:36:82:f2:e1:7c:da:08:c8:15:d2:f3:9f:43:
                    fb:08:0f:1e:5f:fd:04:4d:f4:ac:3e:28:bf:4f:ae:
                    3b:37:5b:73:13:e2:a1:79:32:5f:3f:91:d6:7b:d9:
                    54:14:f0:78:62:7e:97:e8:0f:8e:9f:bf:eb:88:7c:
                    1e:07:43:33:96:b0:cb:aa:24:60:7c:92:13:e9:f5:
                    f1:c7:f2:c2:c2:ab:27:4f:3b:ee:32:9e:94:18:52:
                    66:ff:20:78:fb:5b:28:2a:98:e7:18:b1:17:1b:32:
                    60:27:c7:d8:a4:78:5c:e5:08:52:8f:7f:e0:e2:01:
                    a3:70:07:93:bc:44:ff:68:59:14:10:8b:27:97:1e:
                    7f:fd:3c:5b:71:19:f2:a8:e4:a2:15:6a:d1:22:0e:
                    a8:36:c3:29:86:c1:a7:0c:b1:3f:da:cc:c9:0e:b8:
                    c6:2c:28:80:1b:8d:ed:25:1b:8b:ef:ee:2f:13:3c:
                    51:57:bc:ac:d3:39:bb:c5:fd:6a:c7:c0:3f:dd:67:
                    d3:00:61:d8:ea:23:8d:33:18:b5:47:59:07:fe:7f:
                    cb:ab:ca:7a:28:85:55:24:26:3d:72:4f:a0:4e:84:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:11:CB:29:39:FA:B1:A1:F8:4B:BE:33:04:0D:B4:03:E0:D1:2A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8a:3e:fa:21:88:2c:6c:61:21:b5:b4:a6:fb:4a:61:08:fb:
         cb:32:52:b9:d5:91:8c:d4:99:60:c7:04:88:b0:f5:da:39:43:
         ef:ab:5c:dc:95:11:b0:70:28:39:4e:b1:04:5e:14:5d:3d:da:
         c4:ea:dc:ff:19:53:a5:c7:1e:2c:16:77:5b:31:20:49:30:90:
         ad:d5:2c:6a:c9:b1:72:13:db:51:94:fa:18:76:8c:3e:9d:72:
         ec:8d:c4:db:b5:c8:83:fe:ea:7a:e6:d6:d2:d4:39:a8:25:e1:
         53:9d:2f:e2:02:49:d2:9b:00:ca:5a:d9:6c:cc:1d:e8:12:04:
         29:32:13:23:fc:9a:42:a2:3a:c1:af:17:12:33:68:d3:f7:24:
         b8:e8:aa:87:04:17:10:85:6e:c7:20:c6:2f:c1:c0:f8:9e:86:
         9b:d4:a1:24:35:f2:48:8e:3b:af:c4:16:f4:83:21:e8:5c:00:
         79:c5:8c:1e:d8:11:b4:3e:12:d1:db:b0:55:2b:07:70:91:32:
         8a:9d:5a:eb:59:22:f6:26:7f:b1:8b:c7:2c:2c:c6:39:98:12:
         ab:7b:73:92:61:5e:66:58:79:ff:a8:86:c0:3a:2c:a5:d2:63:
         3d:16:5c:2d:8b:75:a8:ce:e3:c2:c3:c6:fd:47:af:7d:e2:d9:
         97:8b:ab:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1mDoZRLNH7NTXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
ZmZhM2E1MGMtOTdhMy00NTgyLWE2ZTAtYWY3NjljNzdlZjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst5deQcGvN0JuHfnnXIPBwfqKl6uEC0pBW2p
Lur4MzaC8uF82gjIFdLzn0P7CA8eX/0ETfSsPii/T647N1tzE+KheTJfP5HWe9lU
FPB4Yn6X6A+On7/riHweB0MzlrDLqiRgfJIT6fXxx/LCwqsnTzvuMp6UGFJm/yB4
+1soKpjnGLEXGzJgJ8fYpHhc5QhSj3/g4gGjcAeTvET/aFkUEIsnlx5//TxbcRny
qOSiFWrRIg6oNsMphsGnDLE/2szJDrjGLCiAG43tJRuL7+4vEzxRV7ys0zm7xf1q
x8A/3WfTAGHY6iONMxi1R1kH/n/Lq8p6KIVVJCY9ck+gToTS7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKoRyyk5+rGh+Eu+MwQNtAPg0Sp0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvYzkwYThhNDktNWNjMi0z
MzU1LWFjZDgtODc4NGVjZTlhYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovlYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiKPvohiCxsYSG1tKb7SmEI+8syUrnVkYzUmWDHBIiw9do5Q++rXNyV
EbBwKDlOsQReFF092sTq3P8ZU6XHHiwWd1sxIEkwkK3VLGrJsXIT21GU+hh2jD6d
cuyNxNu1yIP+6nrm1tLUOagl4VOdL+ICSdKbAMpa2WzMHegSBCkyEyP8mkKiOsGv
FxIzaNP3JLjoqocEFxCFbscgxi/BwPiehpvUoSQ18kiOO6/EFvSDIehcAHnFjB7Y
EbQ+EtHbsFUrB3CRMoqdWutZIvYmf7GLxywsxjmYEqt7c5JhXmZYef+ohsA6LKXS
Yz0WXC2LdajO48LDxv1Hr33i2ZeLqx4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org