Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa
File:                     78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa (raw, json)
Hash identifier:          ES1dJLTuEAhJN1rmsk524oAYl4GQgQnMflZYcqBOx2Y=
Subject key identifier:   A4:0F:0F:3A:DC:D5:FA:B0:9D:3E:8C:7A:87:BF:8D:AC:AC:B0:BA:D9
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285847D404A4B610EC56014012C700
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     19886
IP address blocks:        171.162.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:a4:b6:10:ec:56:01:40:12:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=22343e70-7a7e-4d37-bf20-e958c0280359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:93:d5:64:8c:63:f9:f6:5c:74:aa:3e:30:91:
                    9b:bb:ba:c3:74:20:91:dc:04:c4:29:0c:85:24:5e:
                    56:b8:55:d8:92:3f:e0:e6:de:12:26:28:2a:ac:77:
                    3e:63:2f:7c:c1:9d:e7:4d:70:8c:f9:d6:2f:92:8f:
                    6d:af:19:ba:30:20:98:dd:9b:32:f5:3d:7e:3a:f7:
                    f8:3b:50:fd:52:0b:30:19:8b:3b:3b:99:95:e8:0d:
                    e0:01:52:7a:be:2b:19:d8:fb:3e:3c:43:0a:18:19:
                    ad:8e:0b:67:a8:e8:c6:e4:9d:a7:01:dc:d9:ba:99:
                    d7:be:cf:73:91:36:c0:d6:96:5e:c6:e4:d6:ac:6b:
                    82:64:8a:a6:78:11:89:f8:29:59:a3:27:c8:6a:c2:
                    59:2c:48:4c:52:83:36:3e:4e:f9:18:5f:39:cc:c8:
                    7b:c7:8c:c9:75:9f:36:3d:d8:b6:c1:27:f8:6d:ec:
                    4a:53:04:59:45:45:04:d8:b2:46:9e:55:62:28:4d:
                    24:16:c7:b6:37:ca:0b:3c:e3:e8:97:88:55:14:33:
                    d5:f4:db:29:02:6e:03:08:de:b9:65:ef:b7:77:88:
                    37:51:6b:8c:90:aa:fc:67:fc:3d:e9:a8:c8:cc:32:
                    a1:2e:36:62:6a:20:21:9a:a9:f1:34:5f:4c:2f:93:
                    0f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0F:0F:3A:DC:D5:FA:B0:9D:3E:8C:7A:87:BF:8D:AC:AC:B0:BA:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:43:67:26:f3:3e:4e:4e:c9:40:b9:6c:58:18:94:00:3e:7f:
         84:0a:f7:63:ae:d9:71:83:4c:e0:e9:50:5f:4e:4c:48:93:ad:
         d6:60:3e:94:d2:08:c6:5d:1b:ad:77:b8:9b:38:6b:0b:f8:fa:
         dd:13:77:f6:84:1e:76:31:e4:c7:2c:77:84:e1:3f:b9:ca:55:
         c7:ca:96:f6:96:4a:09:39:86:08:8c:96:d7:66:09:72:4d:fc:
         22:67:c9:62:bc:6a:54:ca:1a:b3:61:1d:6e:52:28:09:95:ba:
         74:cc:c6:2b:b6:56:81:9c:ea:b5:9a:c9:35:45:e9:66:19:a7:
         92:1d:8d:f6:b6:89:64:66:ce:87:93:ee:a2:7f:e3:ee:93:17:
         72:2c:1f:4b:85:8e:24:62:d6:7f:74:d5:56:93:79:a1:12:5b:
         1d:7a:bb:4d:c3:b5:24:36:fb:30:54:e9:f0:73:fe:bb:55:dc:
         3d:45:d0:bb:1c:0e:d6:da:10:7a:14:85:76:0a:23:78:98:37:
         9d:7e:73:1d:91:94:e1:5e:d3:cb:da:2f:68:ff:aa:3b:83:f5:
         0d:31:ce:ce:a2:02:9e:b1:e0:d7:f2:10:30:2b:30:cb:ad:da:
         ad:c4:74:f3:2b:b4:2d:d5:a9:eb:ac:64:87:3f:e3:cf:d3:9a:
         ba:07:7a:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBKS2EOxWAUASxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk
MjIzNDNlNzAtN2E3ZS00ZDM3LWJmMjAtZTk1OGMwMjgwMzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JPVZIxj+fZcdKo+MJGbu7rDdCCR3ATEKQyF
JF5WuFXYkj/g5t4SJigqrHc+Yy98wZ3nTXCM+dYvko9trxm6MCCY3Zsy9T1+Ovf4
O1D9UgswGYs7O5mV6A3gAVJ6visZ2Ps+PEMKGBmtjgtnqOjG5J2nAdzZupnXvs9z
kTbA1pZexuTWrGuCZIqmeBGJ+ClZoyfIasJZLEhMUoM2Pk75GF85zMh7x4zJdZ82
Pdi2wSf4bexKUwRZRUUE2LJGnlViKE0kFse2N8oLPOPol4hVFDPV9NspAm4DCN65
Ze+3d4g3UWuMkKr8Z/w96ajIzDKhLjZiaiAhmqnxNF9ML5MP5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKQPDzrc1fqwnT6Meoe/jayssLrZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNzhkMDQyMDUtMmIxYi0z
YTg5LThhNmItOGVmYWFmYmQ0ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJDZybzPk5OyUC5bFgYlAA+f4QK92Ou2XGDTODpUF9OTEiTrdZgPpTS
CMZdG613uJs4awv4+t0Td/aEHnYx5Mcsd4ThP7nKVcfKlvaWSgk5hgiMltdmCXJN
/CJnyWK8alTKGrNhHW5SKAmVunTMxiu2VoGc6rWayTVF6WYZp5Idjfa2iWRmzoeT
7qJ/4+6TF3IsH0uFjiRi1n901VaTeaESWx16u03DtSQ2+zBU6fBz/rtV3D1F0Lsc
DtbaEHoUhXYKI3iYN51+cx2RlOFe08vaL2j/qjuD9Q0xzs6iAp6x4NfyEDArMMut
2q3EdPMrtC3VqeusZIc/48/TmroHeiw=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:55 2024 by rpki-client on console-fra.rpki-client.org