Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/474f7b25-260a-319c-aaf2-dcf85eb4c2c2.roa
File:                     474f7b25-260a-319c-aaf2-dcf85eb4c2c2.roa (raw, json)
Hash identifier:          1BOdqc8ZIbSAfe7fm6ei89sHno46SfNQ6oQzKiTfJM8=
Subject key identifier:   37:65:B6:93:3E:F0:16:66:29:05:5D:EE:A7:B3:4C:70:9A:41:EF:8E
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847F2BA334FD82AF911C67DE380
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/474f7b25-260a-319c-aaf2-dcf85eb4c2c2.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     13692
IP address blocks:        216.110.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:33:4f:d8:2a:f9:11:c6:7d:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=eaee642e-501f-424c-a01f-2f9647d882c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e2:b6:c2:ac:6d:25:48:a7:64:42:b7:cc:d0:
                    0e:f8:94:39:5b:21:44:0d:59:0c:23:1c:04:d1:7d:
                    e1:d4:36:a8:e7:cd:6e:1e:5b:64:17:dc:19:14:7a:
                    01:50:0b:da:ba:3d:79:c5:bb:b8:30:cd:95:e6:9c:
                    8a:07:9a:c3:35:02:0f:97:01:ff:8a:16:ff:6f:17:
                    7f:ee:6d:cd:e3:1d:1f:d0:a6:ee:3f:18:17:08:ad:
                    b9:2e:81:7e:87:fd:55:d8:cb:8c:21:e6:46:bb:b8:
                    30:80:00:ff:f9:79:c7:9e:d1:5c:20:60:32:2f:cb:
                    6f:5b:41:79:37:64:5b:aa:a1:6b:39:23:41:eb:4a:
                    15:06:f5:67:95:34:81:9e:b2:04:b6:04:96:e4:80:
                    05:93:9d:52:90:ad:8c:7c:0b:22:94:1d:9c:f6:16:
                    67:8c:92:89:b7:b1:94:1a:ae:46:79:57:86:d0:fc:
                    11:5d:e6:30:f8:2e:5b:7e:43:09:e8:d2:27:2c:16:
                    4f:92:78:60:7a:19:f5:fe:d1:8d:37:62:48:27:3a:
                    6b:3b:c2:41:0f:90:26:2c:27:0b:c1:b3:cc:1a:7b:
                    97:50:5c:0f:f2:4d:c9:65:29:22:36:cc:12:26:9b:
                    6a:25:06:a8:06:f1:b2:62:c2:b3:ba:f6:df:7c:36:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:B6:93:3E:F0:16:66:29:05:5D:EE:A7:B3:4C:70:9A:41:EF:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/474f7b25-260a-319c-aaf2-dcf85eb4c2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:dd:db:38:19:ca:8f:c7:d6:46:07:02:12:ed:8f:6e:e8:
         0a:01:f1:89:a4:bd:2c:9e:17:21:8a:00:55:d2:24:49:b9:f8:
         f6:b9:ef:3e:90:12:13:1a:0c:da:9d:51:fc:eb:6b:96:07:53:
         c3:9b:aa:d8:5c:6c:54:1e:b6:15:90:8d:39:e5:c5:8e:56:5c:
         5c:75:96:dc:3d:d5:18:bd:13:07:0c:f6:6a:05:32:1e:a0:97:
         2c:11:ab:11:01:9d:8f:35:a0:4a:6c:56:8d:72:88:47:c8:56:
         c0:64:df:5c:36:9c:d8:62:88:87:9c:b3:3e:ea:2b:56:7d:84:
         f3:a5:9d:b2:38:3f:a0:82:02:94:08:f3:8b:4a:7e:b5:d5:4b:
         22:2b:1c:0f:86:66:01:dd:99:58:be:d2:e7:72:e1:f3:96:be:
         7c:5f:5c:2b:af:7b:75:ea:8a:de:b8:ac:38:54:96:62:d9:b1:
         2d:21:4b:b1:3a:be:b8:78:76:1e:5b:ce:25:8d:81:66:f2:a8:
         7e:86:43:73:78:02:a0:ca:18:7c:58:ff:c6:c4:8a:b9:d5:30:
         67:bf:e5:21:fe:f3:fc:2e:2a:1f:47:d6:5c:31:cb:30:bb:fc:
         33:1d:41:42:c4:d8:61:3d:8a:17:0f:71:ec:bf:a7:b3:6a:25:
         c1:e5:27:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyujNP2Cr5EcZ944AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk
ZWFlZTY0MmUtNTAxZi00MjRjLWEwMWYtMmY5NjQ3ZDg4MmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eK2wqxtJUinZEK3zNAO+JQ5WyFEDVkMIxwE
0X3h1Dao581uHltkF9wZFHoBUAvauj15xbu4MM2V5pyKB5rDNQIPlwH/ihb/bxd/
7m3N4x0f0KbuPxgXCK25LoF+h/1V2MuMIeZGu7gwgAD/+XnHntFcIGAyL8tvW0F5
N2RbqqFrOSNB60oVBvVnlTSBnrIEtgSW5IAFk51SkK2MfAsilB2c9hZnjJKJt7GU
Gq5GeVeG0PwRXeYw+C5bfkMJ6NInLBZPknhgehn1/tGNN2JIJzprO8JBD5AmLCcL
wbPMGnuXUFwP8k3JZSkiNswSJptqJQaoBvGyYsKzuvbffDaUdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdltpM+8BZmKQVd7qezTHCaQe+OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDc0ZjdiMjUtMjYwYS0z
MTljLWFhZjItZGNmODVlYjRjMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2G7aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADH13ds4GcqPx9ZGBwIS7Y9u6AoB8YmkvSyeFyGKAFXSJEm5+Pa57z6Q
EhMaDNqdUfzra5YHU8ObqthcbFQethWQjTnlxY5WXFx1ltw91Ri9EwcM9moFMh6g
lywRqxEBnY81oEpsVo1yiEfIVsBk31w2nNhiiIecsz7qK1Z9hPOlnbI4P6CCApQI
84tKfrXVSyIrHA+GZgHdmVi+0udy4fOWvnxfXCuve3Xqit64rDhUlmLZsS0hS7E6
vrh4dh5bziWNgWbyqH6GQ3N4AqDKGHxY/8bEirnVMGe/5SH+8/wuKh9H1lwxyzC7
/DMdQULE2GE9ihcPcey/p7NqJcHlJ3s=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:02 2024 by rpki-client on console-fra.rpki-client.org