Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa
File:                     f8faf337-6f56-36aa-80e4-1bee07bbb914.roa (raw, json)
Hash identifier:          BMKYVcGKtE4puGbmUAZouuCeX/SzN98nxACZ89vlm1A=
Subject key identifier:   13:9F:1D:C8:43:C6:29:DE:F3:F4:C0:91:DB:95:71:52:01:16:44:9D
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285847D404A2A5009C8D4AF6672780
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     19886
IP address blocks:        171.162.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:a2:a5:00:9c:8d:4a:f6:67:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=75f19fa3-e534-46af-b810-4e71cfa23724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:fd:f0:2e:39:e6:47:8e:6e:01:03:f1:f5:
                    18:18:1b:1f:55:38:e6:88:b6:d7:74:43:2a:f7:73:
                    9f:b9:2e:fe:6d:7b:6b:94:81:9a:12:b6:c3:c1:f9:
                    48:47:eb:4d:5d:41:19:b3:f0:b4:2e:50:08:0d:1f:
                    71:9f:fe:a6:45:c4:f6:b7:d2:2a:be:61:86:60:42:
                    03:dc:eb:e3:96:82:f4:67:e8:73:d0:d5:cf:c6:21:
                    8b:47:64:22:16:6c:fd:e8:97:fe:52:dc:78:6b:47:
                    9e:6c:d2:a5:40:91:82:19:e5:00:88:2d:9b:83:bd:
                    01:7e:b8:bb:17:28:d5:b1:ab:2f:0b:04:70:aa:7f:
                    7a:2a:de:a6:f8:4e:2c:04:6e:01:7c:79:f9:de:14:
                    92:cb:e3:a7:c2:bb:ba:28:4a:34:b0:a3:f5:17:88:
                    fb:98:e6:3e:fb:da:c9:b7:0d:b6:11:56:7b:10:ab:
                    90:37:44:91:c8:c3:93:42:5a:d6:05:de:f7:f2:5e:
                    42:ab:98:56:7e:5a:06:37:3d:09:49:3b:40:8d:b4:
                    07:79:b4:d5:4a:ba:f4:fc:78:d4:69:e3:fb:3c:bb:
                    02:c1:27:ff:bd:e6:7c:ed:1a:d2:85:a9:5c:99:de:
                    25:1e:bc:00:7c:01:78:3a:4f:37:04:fe:13:3d:54:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9F:1D:C8:43:C6:29:DE:F3:F4:C0:91:DB:95:71:52:01:16:44:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8faf337-6f56-36aa-80e4-1bee07bbb914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:57:68:7f:4d:3a:7b:45:d0:31:42:59:ca:34:55:8a:fd:0d:
         ad:ed:19:68:e7:0f:8f:48:cb:2d:fa:1e:91:2f:8e:bf:97:e5:
         bf:ff:48:59:69:3f:45:1a:c3:92:a4:6d:1d:d7:2a:2d:ef:37:
         44:96:9e:5c:c4:6f:b5:b6:f0:ad:7c:b6:e0:21:c2:60:80:6f:
         38:36:b9:12:93:fa:c9:0b:0f:48:6a:f0:81:7c:27:a2:e9:a7:
         76:09:e6:a3:37:75:f0:51:09:61:e1:1a:e7:81:af:d8:a3:bd:
         87:98:f4:fc:0f:e5:2f:5e:92:0e:25:bd:78:6a:8d:8d:99:7d:
         12:77:18:9d:75:d0:62:6f:c6:41:b2:e3:49:b8:d5:5a:da:9e:
         69:67:f3:34:48:fe:46:29:4d:b0:33:c2:46:7f:c7:a3:3d:25:
         fe:31:ce:f8:24:97:10:b2:a4:de:73:33:ed:78:48:b0:cc:b5:
         87:58:55:88:69:6d:ee:d3:b0:be:af:4a:ac:be:9e:48:e6:93:
         3b:48:c4:5f:33:65:b4:b5:2a:db:b9:75:b1:89:81:98:b0:5b:
         e8:aa:7a:93:3e:54:eb:84:2d:bd:8c:2c:e8:13:1a:d4:eb:68:
         e3:80:3c:bf:30:d0:65:94:51:46:74:ad:e2:49:7e:ef:cc:29:
         f7:a4:d8:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfUBKKlAJyNSvZnJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI0MTExMDAyMDAyN1oXDTI1MDIwODAyMDAyN1owLzEtMCsGA1UEAxMk
NzVmMTlmYTMtZTUzNC00NmFmLWI4MTAtNGU3MWNmYTIzNzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6798C455keObgED8fUYGBsfVTjmiLbXdEMq
93OfuS7+bXtrlIGaErbDwflIR+tNXUEZs/C0LlAIDR9xn/6mRcT2t9IqvmGGYEID
3OvjloL0Z+hz0NXPxiGLR2QiFmz96Jf+Utx4a0eebNKlQJGCGeUAiC2bg70Bfri7
FyjVsasvCwRwqn96Kt6m+E4sBG4BfHn53hSSy+Onwru6KEo0sKP1F4j7mOY++9rJ
tw22EVZ7EKuQN0SRyMOTQlrWBd738l5Cq5hWfloGNz0JSTtAjbQHebTVSrr0/HjU
aeP7PLsCwSf/veZ87RrShalcmd4lHrwAfAF4Ok83BP4TPVSi8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOfHchDxine8/TAkduVcVIBFkSdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZjhmYWYzMzctNmY1Ni0z
NmFhLTgwZTQtMWJlZTA3YmJiOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6J0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRXaH9NOntF0DFCWco0VYr9Da3tGWjnD49Iyy36HpEvjr+X5b//SFlp
P0Uaw5KkbR3XKi3vN0SWnlzEb7W28K18tuAhwmCAbzg2uRKT+skLD0hq8IF8J6Lp
p3YJ5qM3dfBRCWHhGueBr9ijvYeY9PwP5S9ekg4lvXhqjY2ZfRJ3GJ110GJvxkGy
40m41Vranmln8zRI/kYpTbAzwkZ/x6M9Jf4xzvgklxCypN5zM+14SLDMtYdYVYhp
be7TsL6vSqy+nkjmkztIxF8zZbS1Ktu5dbGJgZiwW+iqepM+VOuELb2MLOgTGtTr
aOOAPL8w0GWUUUZ0reJJfu/MKfek2Aw=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:55 2024 by rpki-client on console-fra.rpki-client.org