Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e0d95b9b-b3da-3622-9bef-a250edc564b1.roa
File:                     e0d95b9b-b3da-3622-9bef-a250edc564b1.roa (raw, json)
Hash identifier:          t1QbUnj+97tfGj7xkI0ceoSh1eJxfEw58Kcm9pG76sE=
Subject key identifier:   E6:A4:4E:8F:8E:9A:4C:F5:AB:48:CA:4E:C7:3F:C3:D1:02:AA:28:A8
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB751B7E2D678FF94991C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e0d95b9b-b3da-3622-9bef-a250edc564b1.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        207.245.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:75:1b:7e:2d:67:8f:f9:49:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=f32d0e52-8366-439e-9f90-37941b324d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:5f:10:de:dd:64:fe:53:74:b8:a3:5f:ff:
                    d6:50:4a:3e:c9:5c:53:f8:8c:4c:fd:7e:15:d2:4f:
                    1f:bf:a7:dc:0a:31:a6:48:32:73:c5:ce:11:4c:8f:
                    cf:5d:dc:7c:c2:68:ca:8e:98:7e:ed:11:21:b9:c8:
                    1a:ff:f8:f3:1d:e1:58:8f:67:c3:4b:3c:d5:c5:65:
                    3d:b9:ee:e4:e5:e4:3b:fe:48:27:c8:2b:81:83:ad:
                    6e:c8:cf:df:61:cb:f7:e6:e7:75:05:16:80:70:0c:
                    2c:ef:05:c6:9c:03:7d:81:1d:a5:1d:1c:c9:63:16:
                    78:f4:f0:73:f2:76:03:44:e7:ca:e6:e2:69:05:1a:
                    89:53:e2:40:39:6c:91:89:21:99:e7:c2:29:e5:c3:
                    9b:2c:7c:de:aa:08:88:35:e9:ad:55:e1:89:31:8b:
                    e5:61:a1:8e:77:34:f9:8e:eb:89:8f:fb:1e:24:51:
                    a1:a8:f2:25:a9:22:91:dc:76:24:ec:a6:34:09:f5:
                    6b:b3:31:b6:b5:0d:85:1c:28:db:0f:5b:dc:51:1a:
                    13:35:1b:04:10:47:d9:2b:72:e8:7a:34:2f:27:44:
                    b5:3c:24:0e:30:ef:bc:4f:2f:7b:f1:40:d3:2e:94:
                    1b:ec:95:70:bb:71:b4:1a:6c:3a:1e:b0:de:fe:16:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A4:4E:8F:8E:9A:4C:F5:AB:48:CA:4E:C7:3F:C3:D1:02:AA:28:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e0d95b9b-b3da-3622-9bef-a250edc564b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:72:26:d6:e2:c9:69:f1:d2:37:e9:94:c5:3f:79:69:ec:dd:
         94:4d:02:ff:bb:12:b6:a7:30:5c:d2:ed:ef:b8:d5:68:e3:c6:
         45:6b:2c:02:e3:a8:f7:fc:ea:30:7a:2f:8f:2b:37:7b:68:5a:
         b7:a4:93:d8:d8:78:60:d1:44:6c:75:cf:8d:6c:93:d2:6e:1f:
         e5:0f:9f:9e:f4:cb:17:eb:71:ea:9f:ac:fc:42:91:5a:4f:fc:
         b2:1c:94:11:05:ba:d2:5b:29:04:6b:cd:77:e3:fc:4b:dd:0c:
         8e:8a:69:c1:d1:af:68:11:df:6b:22:f7:6d:20:48:40:92:d8:
         5e:bf:f7:a4:dd:61:64:3a:58:7e:38:22:02:59:43:b9:be:c3:
         1c:bc:59:81:f8:94:8f:03:57:fa:1a:17:c0:1e:f2:46:19:ec:
         81:da:88:cf:58:74:b3:e6:9e:b2:b0:37:f1:bc:64:da:ce:4e:
         87:0e:57:fb:45:07:cd:c9:05:f9:06:04:11:6f:f1:17:bd:91:
         17:7d:d9:ee:88:e6:16:95:a0:67:24:55:be:89:4b:80:a5:aa:
         95:b6:7c:c6:04:df:bc:a6:b0:e6:33:83:b3:ec:59:53:13:8b:
         52:e5:c4:e1:8c:56:de:fd:58:fc:ce:51:46:e9:9e:b1:9a:78:
         26:a6:cf:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdb23Ubfi1nj/lJkcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MDkyODAxMDAzMVoXDTI0MTIyNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZjMyZDBlNTItODM2Ni00MzllLTlmOTAtMzc5NDFiMzI0ZDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+5fEN7dZP5TdLijX//WUEo+yVxT+IxM/X4V
0k8fv6fcCjGmSDJzxc4RTI/PXdx8wmjKjph+7REhucga//jzHeFYj2fDSzzVxWU9
ue7k5eQ7/kgnyCuBg61uyM/fYcv35ud1BRaAcAws7wXGnAN9gR2lHRzJYxZ49PBz
8nYDROfK5uJpBRqJU+JAOWyRiSGZ58Ip5cObLHzeqgiINemtVeGJMYvlYaGOdzT5
juuJj/seJFGhqPIlqSKR3HYk7KY0CfVrszG2tQ2FHCjbD1vcURoTNRsEEEfZK3Lo
ejQvJ0S1PCQOMO+8Ty978UDTLpQb7JVwu3G0Gmw6HrDe/hbU7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOakTo+Omkz1q0jKTsc/w9ECqiioMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvZTBkOTViOWItYjNkYS0z
NjIyLTliZWYtYTI1MGVkYzU2NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/XeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExyJtbiyWnx0jfplMU/eWns3ZRNAv+7EranMFzS7e+41WjjxkVrLALj
qPf86jB6L48rN3toWrekk9jYeGDRRGx1z41sk9JuH+UPn570yxfrceqfrPxCkVpP
/LIclBEFutJbKQRrzXfj/EvdDI6KacHRr2gR32si920gSECS2F6/96TdYWQ6WH44
IgJZQ7m+wxy8WYH4lI8DV/oaF8Ae8kYZ7IHaiM9YdLPmnrKwN/G8ZNrOTocOV/tF
B83JBfkGBBFv8Re9kRd92e6I5haVoGckVb6JS4ClqpW2fMYE37ymsOYzg7PsWVMT
i1LlxOGMVt79WPzOUUbpnrGaeCamz3g=
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:23 2024 by rpki-client on console-fra.rpki-client.org