Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/434d774b-966f-33b6-a340-389b827db2c3.roa
File:                     434d774b-966f-33b6-a340-389b827db2c3.roa (raw, json)
Hash identifier:          qsDfB+eoGJgm1df427S1Hgr7xviJchD9pWIY+SxZ12k=
Subject key identifier:   DE:93:EF:1B:AF:25:AA:BE:25:5F:EB:59:14:A3:70:D3:FA:B2:60:8A
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285847D404A3B51B58308E2487E6E0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/434d774b-966f-33b6-a340-389b827db2c3.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     19886
IP address blocks:        171.162.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:a3:b5:1b:58:30:8e:24:87:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=47f69f7e-e14d-4b57-880a-dff90643492e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:7e:d6:9a:9d:1d:41:51:da:1f:1d:e5:39:
                    e8:f1:fc:1a:19:0c:70:2e:bb:c4:76:4b:40:41:f7:
                    91:04:e8:98:bf:6e:6d:92:a0:9d:25:89:ae:f6:9b:
                    bb:20:ad:69:d8:91:b4:be:dd:72:31:77:2e:1d:52:
                    9f:ab:39:ae:08:6d:d7:1d:ec:7a:f7:82:f5:cc:52:
                    ad:82:4d:cc:12:8b:f1:d0:c4:15:04:13:8f:fe:17:
                    29:4b:96:62:8d:8e:ec:25:d3:26:44:0e:06:1e:6d:
                    06:d2:69:7b:4c:06:22:a0:7d:a1:5e:89:7d:30:60:
                    3b:4b:e7:bb:04:31:78:00:42:b6:d7:c8:0f:eb:51:
                    0c:54:7e:5d:70:b4:07:31:d5:79:12:23:ca:d2:95:
                    17:39:2e:92:ee:28:5b:ac:d2:51:85:fd:9a:6a:61:
                    20:fd:79:22:19:83:8e:96:2e:cf:91:2a:b1:4a:48:
                    82:e9:a2:98:28:83:29:11:d6:b8:2f:8f:6e:1c:a2:
                    6b:85:77:0e:8f:20:8a:c4:10:30:fe:53:bc:3b:10:
                    db:8d:94:cb:71:24:cb:49:51:ab:80:81:63:51:5c:
                    9f:47:61:80:5d:15:f9:b4:49:54:8b:66:a0:1a:21:
                    d8:f8:89:41:da:a4:b7:32:f7:65:02:26:01:f1:81:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:93:EF:1B:AF:25:AA:BE:25:5F:EB:59:14:A3:70:D3:FA:B2:60:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/434d774b-966f-33b6-a340-389b827db2c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:72:36:6d:c7:8c:ee:79:29:0f:79:67:bd:28:66:66:d5:9c:
         10:34:97:97:cb:86:4d:ab:83:98:54:13:be:51:a1:5b:e2:b7:
         e6:9d:2b:f7:4b:2b:2d:07:f3:5f:7d:dd:2d:9c:e3:fd:97:8c:
         14:a8:f4:21:ec:59:ba:a3:2b:c6:9e:d0:5e:d3:80:f4:da:31:
         69:c2:27:c8:7b:31:f7:19:7b:e3:95:dc:90:01:df:1c:eb:17:
         af:f5:96:b3:1b:04:14:07:74:21:fb:fd:f0:78:43:72:fd:7f:
         72:ad:d9:da:b2:73:45:70:52:4c:20:f1:51:80:0c:78:a4:28:
         89:e7:26:56:00:41:7b:3b:22:6a:e3:a5:99:04:80:fb:d4:b4:
         67:89:bb:0c:2c:aa:78:93:fb:b1:d2:97:3b:38:60:a1:db:9f:
         77:85:bf:ac:43:e9:6d:0a:c6:b6:3d:84:88:85:50:5d:ea:e0:
         51:37:8b:76:67:aa:ed:e9:0e:94:10:84:e1:57:f6:5e:e4:4e:
         c9:24:ee:e2:9d:e5:01:aa:e9:9e:f2:0e:3d:45:12:98:fa:65:
         24:a4:07:62:cd:07:74:50:f3:88:cd:d2:10:c2:00:36:78:04:
         ff:97:f8:d6:66:61:a0:d5:06:6d:7d:56:d3:64:61:ca:52:f5:
         97:4a:e6:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBKO1G1gwjiSH5uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk
NDdmNjlmN2UtZTE0ZC00YjU3LTg4MGEtZGZmOTA2NDM0OTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG1+1pqdHUFR2h8d5Tno8fwaGQxwLrvEdktA
QfeRBOiYv25tkqCdJYmu9pu7IK1p2JG0vt1yMXcuHVKfqzmuCG3XHex694L1zFKt
gk3MEovx0MQVBBOP/hcpS5ZijY7sJdMmRA4GHm0G0ml7TAYioH2hXol9MGA7S+e7
BDF4AEK218gP61EMVH5dcLQHMdV5EiPK0pUXOS6S7ihbrNJRhf2aamEg/XkiGYOO
li7PkSqxSkiC6aKYKIMpEda4L49uHKJrhXcOjyCKxBAw/lO8OxDbjZTLcSTLSVGr
gIFjUVyfR2GAXRX5tElUi2agGiHY+IlB2qS3MvdlAiYB8YFI5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6T7xuvJaq+JV/rWRSjcNP6smCKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNDM0ZDc3NGItOTY2Zi0z
M2I2LWEzNDAtMzg5YjgyN2RiMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6KyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJlyNm3HjO55KQ95Z70oZmbVnBA0l5fLhk2rg5hUE75RoVvit+adK/dL
Ky0H81993S2c4/2XjBSo9CHsWbqjK8ae0F7TgPTaMWnCJ8h7MfcZe+OV3JAB3xzr
F6/1lrMbBBQHdCH7/fB4Q3L9f3Kt2dqyc0VwUkwg8VGADHikKInnJlYAQXs7Imrj
pZkEgPvUtGeJuwwsqniT+7HSlzs4YKHbn3eFv6xD6W0KxrY9hIiFUF3q4FE3i3Zn
qu3pDpQQhOFX9l7kTskk7uKd5QGq6Z7yDj1FEpj6ZSSkB2LNB3RQ84jN0hDCADZ4
BP+X+NZmYaDVBm19VtNkYcpS9ZdK5jQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:55 2024 by rpki-client on console-fra.rpki-client.org