Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa
File:                     ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa (raw, json)
Hash identifier:          M0PzURUgUQdGpavtZNs1bkIn8Onx6r9uWDKJLK+tcaw=
Subject key identifier:   A5:6B:6B:F1:08:1A:42:60:B1:26:B3:AD:9C:F0:28:C1:CC:99:5C:FC
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285847D404A3CE0AD07A44A6E66150
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     19886
IP address blocks:        171.162.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:a3:ce:0a:d0:7a:44:a6:e6:61:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=6a046a13-4a3f-4ac8-88be-0d011dd3a527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:19:f2:b0:94:b4:fe:99:ad:7f:19:37:54:
                    2e:0c:97:16:ba:b0:b7:03:2f:82:f6:6f:2b:8f:42:
                    c3:ed:67:fd:fa:9d:c0:c2:c5:91:aa:6c:be:db:1f:
                    67:06:ee:5e:f0:a3:e2:7e:ab:8e:9d:e6:b0:ee:82:
                    e7:48:78:bf:5b:6c:54:e0:b8:2c:11:27:2f:74:a1:
                    c5:de:6b:ed:a3:12:66:90:2e:d3:b4:fd:34:0d:ad:
                    3d:21:93:71:d1:d6:c2:38:cd:fa:7a:c1:18:f4:3a:
                    ae:7a:e5:e6:44:82:57:49:d0:34:76:2b:55:4e:23:
                    ac:17:c8:c1:32:7f:7c:76:c8:22:62:e6:4e:57:b3:
                    b9:a4:b0:69:f1:23:fd:cb:e7:9e:c7:50:72:39:a0:
                    6b:bb:62:c5:3e:5a:81:d6:cf:1f:59:43:58:16:31:
                    44:1d:e0:e9:aa:64:f5:98:4a:63:db:8c:5c:73:cb:
                    43:97:50:e1:74:75:8f:63:9e:f2:d4:47:1f:16:47:
                    dd:69:8a:b4:f0:b2:ec:8d:96:ea:a9:ec:26:fe:eb:
                    f3:fa:92:9c:c4:c3:6a:9e:32:2b:fb:27:5f:84:4d:
                    72:24:c7:f1:9e:19:83:d8:ee:35:a0:d6:e7:16:10:
                    8d:9d:d6:dc:cc:29:92:a7:36:de:97:22:2e:21:cf:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6B:6B:F1:08:1A:42:60:B1:26:B3:AD:9C:F0:28:C1:CC:99:5C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:92:a0:e5:d2:4c:cd:c0:bd:d3:e3:7d:28:d1:1b:4e:34:81:
         cc:5b:b9:39:7c:ce:59:fd:79:c8:14:d0:5e:33:73:1d:29:98:
         f7:d8:2f:ad:0d:b7:ce:f6:52:e5:7f:75:05:a8:38:e4:40:65:
         7c:07:99:a6:cd:38:ae:30:40:dd:bf:a9:01:2b:58:8b:aa:5f:
         d7:f3:bc:58:73:ec:25:1d:db:9c:cc:7f:7f:d7:48:90:66:aa:
         a6:79:5f:92:5b:a5:88:56:f4:5a:43:c6:30:80:8c:4f:23:d2:
         e5:e9:a9:5c:86:5c:fd:5c:92:c2:76:19:da:37:89:40:a4:6f:
         9e:7d:ba:88:a0:8d:20:86:33:07:41:ef:ea:0b:a5:36:56:7f:
         39:8d:7c:05:ca:aa:96:4d:0a:99:9c:37:d8:ef:6c:21:84:72:
         a6:3b:ae:a6:51:e4:ca:ac:89:bd:d0:69:0c:7d:98:62:da:2f:
         b2:72:bf:a5:af:b8:27:e2:6f:1e:89:fb:bf:dc:37:83:97:10:
         35:7e:e3:f0:35:2c:8b:6c:91:28:87:be:45:f1:dd:17:7b:fd:
         52:94:2e:2e:d5:f8:3b:c6:2f:2a:4e:ed:b4:d2:f2:8a:6f:03:
         82:23:9f:a5:46:90:8e:d9:37:81:48:69:66:95:ec:ff:39:c2:
         17:ab:1d:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBKPOCtB6RKbmYVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk
NmEwNDZhMTMtNGEzZi00YWM4LTg4YmUtMGQwMTFkZDNhNTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEEZ8rCUtP6ZrX8ZN1QuDJcWurC3Ay+C9m8r
j0LD7Wf9+p3AwsWRqmy+2x9nBu5e8KPifquOneaw7oLnSHi/W2xU4LgsEScvdKHF
3mvtoxJmkC7TtP00Da09IZNx0dbCOM36esEY9DqueuXmRIJXSdA0ditVTiOsF8jB
Mn98dsgiYuZOV7O5pLBp8SP9y+eex1ByOaBru2LFPlqB1s8fWUNYFjFEHeDpqmT1
mEpj24xcc8tDl1DhdHWPY57y1EcfFkfdaYq08LLsjZbqqewm/uvz+pKcxMNqnjIr
+ydfhE1yJMfxnhmD2O41oNbnFhCNndbczCmSpzbelyIuIc8WSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVra/EIGkJgsSazrZzwKMHMmVz8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYWUxNDFiNTAtMzcwMi0z
MWUyLWE2YzktMzRmOGUzYWIwNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWSoOXSTM3AvdPjfSjRG040gcxbuTl8zln9ecgU0F4zcx0pmPfYL60N
t872UuV/dQWoOORAZXwHmabNOK4wQN2/qQErWIuqX9fzvFhz7CUd25zMf3/XSJBm
qqZ5X5JbpYhW9FpDxjCAjE8j0uXpqVyGXP1cksJ2Gdo3iUCkb559uoigjSCGMwdB
7+oLpTZWfzmNfAXKqpZNCpmcN9jvbCGEcqY7rqZR5Mqsib3QaQx9mGLaL7Jyv6Wv
uCfibx6J+7/cN4OXEDV+4/A1LItskSiHvkXx3Rd7/VKULi7V+DvGLypO7bTS8opv
A4Ijn6VGkI7ZN4FIaWaV7P85wherHaw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:16 2024 by rpki-client on console-ams.rpki-client.org