Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa
File:                     efa85352-f35c-30e0-843c-54ae2ccbec9a.roa (raw, json)
Hash identifier:          b0rlH0xUqEfZKmuYFgcSQFIC56y93SD7tc+X2jfHyPk=
Subject key identifier:   3A:29:12:14:54:94:68:A7:D6:21:4C:5E:D4:DE:1D:36:23:63:90:CA
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584774FBA4614865D141B3BDA300
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     56274
IP address blocks:        198.208.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:a4:61:48:65:d1:41:b3:bd:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=89140084-f5f5-4a33-b38d-b79e6427cd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:87:a0:d2:75:cf:93:e1:f8:ca:b9:c1:68:
                    b1:7f:94:ba:3a:fa:19:c1:45:12:d7:97:b5:57:69:
                    dd:47:d1:8f:d5:12:61:57:d4:82:d6:dd:1a:40:3e:
                    9f:7d:6d:d7:09:08:2f:ba:ae:1c:27:b2:97:b1:43:
                    cb:2d:67:1d:75:aa:f3:a3:b0:8d:ea:30:68:23:69:
                    fc:4f:2a:1a:16:fe:0c:bc:2c:8f:99:a8:64:0d:29:
                    06:38:03:e9:21:60:07:17:ad:6d:96:35:3c:b9:ab:
                    0f:e8:01:6a:fa:ff:cf:1e:e2:29:40:93:2f:22:2b:
                    b4:45:f2:c3:73:dd:66:a8:55:ad:fa:b4:9b:6d:31:
                    d5:33:a2:13:1b:80:ae:b5:56:87:67:0c:ca:06:90:
                    23:80:63:ba:e6:d2:e3:7f:99:83:93:a5:97:e8:3e:
                    86:a0:94:49:6d:7d:64:80:3d:8f:a6:b3:86:1e:a2:
                    04:97:23:cc:50:36:5f:dd:c2:89:13:8e:3f:07:c7:
                    67:9b:16:4d:09:59:55:42:87:04:a7:d4:56:aa:fa:
                    88:9e:10:0e:9e:8e:18:82:ad:ce:b3:9a:ca:1e:a8:
                    de:65:a3:14:1f:37:74:1e:b0:37:67:0c:20:72:31:
                    b7:5e:9a:f8:65:93:e1:f2:4c:c8:12:28:96:81:b3:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:29:12:14:54:94:68:A7:D6:21:4C:5E:D4:DE:1D:36:23:63:90:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:08:51:c6:fc:68:3f:b8:5f:78:40:04:99:79:87:68:e7:18:
         ea:d7:bc:38:71:4a:b0:4c:44:69:35:2c:12:95:54:db:57:e4:
         fe:cc:1e:67:b6:78:b8:1a:c7:11:1d:02:35:d1:c2:e5:c3:4a:
         9c:43:ca:1d:07:c0:da:0b:32:0e:1e:e0:1a:65:51:ae:79:22:
         3b:c5:16:88:2f:62:1c:ab:e5:47:ea:98:ed:d1:5f:45:04:99:
         dd:b8:97:c7:d1:92:25:a6:20:fb:15:61:85:89:30:7c:0e:81:
         73:cb:5a:e7:a6:4f:3c:81:16:aa:33:33:eb:66:d6:9e:16:5a:
         71:f8:eb:ab:97:71:fb:a7:73:1d:6a:d7:0f:35:22:2d:c7:2e:
         ea:86:d3:61:1b:75:f0:7b:f1:ca:0b:7d:86:d9:06:cc:a8:89:
         2a:1d:8e:af:91:1e:97:9d:61:e5:37:0f:ea:4c:52:dd:7b:a0:
         b2:60:3c:ef:89:af:0a:d4:7d:7c:12:7f:d1:64:96:c6:e1:d7:
         23:1c:28:a8:30:b7:be:91:90:cb:44:ca:91:c7:c5:48:fb:d8:
         b5:5f:27:a2:8c:0a:a9:e8:4e:9f:94:a7:74:59:d3:72:3a:d7:
         2e:cf:24:9e:b7:32:8a:ea:2a:1e:f5:e8:ec:1a:bc:3f:78:9b:
         22:c5:77:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+6RhSGXRQbO9owAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl
M2U0MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk
ODkxNDAwODQtZjVmNS00YTMzLWIzOGQtYjc5ZTY0MjdjZDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRqHoNJ1z5Ph+Mq5wWixf5S6OvoZwUUS15e1
V2ndR9GP1RJhV9SC1t0aQD6ffW3XCQgvuq4cJ7KXsUPLLWcddarzo7CN6jBoI2n8
TyoaFv4MvCyPmahkDSkGOAPpIWAHF61tljU8uasP6AFq+v/PHuIpQJMvIiu0RfLD
c91mqFWt+rSbbTHVM6ITG4CutVaHZwzKBpAjgGO65tLjf5mDk6WX6D6GoJRJbX1k
gD2PprOGHqIElyPMUDZf3cKJE44/B8dnmxZNCVlVQocEp9RWqvqInhAOno4Ygq3O
s5rKHqjeZaMUHzd0HrA3ZwwgcjG3Xpr4ZZPh8kzIEiiWgbN9wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDopEhRUlGin1iFMXtTeHTYjY5DKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2
N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvZWZhODUzNTItZjM1Yy0z
MGUwLTg0M2MtNTRhZTJjY2JlYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm
YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0
ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj
NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIIUcb8aD+4X3hABJl5h2jnGOrXvDhxSrBMRGk1LBKVVNtX5P7MHme2
eLgaxxEdAjXRwuXDSpxDyh0HwNoLMg4e4BplUa55IjvFFogvYhyr5UfqmO3RX0UE
md24l8fRkiWmIPsVYYWJMHwOgXPLWuemTzyBFqozM+tm1p4WWnH466uXcfuncx1q
1w81Ii3HLuqG02EbdfB78coLfYbZBsyoiSodjq+RHpedYeU3D+pMUt17oLJgPO+J
rwrUfXwSf9Fklsbh1yMcKKgwt76RkMtEypHHxUj72LVfJ6KMCqnoTp+Up3RZ03I6
1y7PJJ63MorqKh716OwavD94myLFd18=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:32 2024 by rpki-client on console-fra.rpki-client.org