Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8ce0bd3a-6879-3011-8e33-35e1910ce5f7.roa
File:                     8ce0bd3a-6879-3011-8e33-35e1910ce5f7.roa (raw, json)
Hash identifier:          WN6EQioHDc4Qlm5SYRvACrSL9tRZhQgDHBN0uu1bBfw=
Subject key identifier:   E9:0C:E1:AF:65:AD:CF:77:47:B4:2C:4C:88:74:34:B0:67:75:99:6D
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847C50EA027687D5BE17C0EF6B4
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8ce0bd3a-6879-3011-8e33-35e1910ce5f7.roa
Signing time:             Mon 04 Nov 2024 17:23:40 +0000
ROA not before:           Mon 04 Nov 2024 17:23:40 +0000
ROA not after:            Sun 02 Feb 2025 17:23:40 +0000
asID:                     11233
IP address blocks:        199.182.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:0e:a0:27:68:7d:5b:e1:7c:0e:f6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov  4 17:23:40 2024 GMT
            Not After : Feb  2 17:23:40 2025 GMT
        Subject: CN=95f1b73b-d8b6-4600-bdea-7c5259f5924c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ea:49:6d:83:38:df:72:16:e9:44:0e:00:4e:
                    2d:61:41:f8:3d:a6:03:14:c7:72:c6:7e:a9:d8:be:
                    b2:99:20:a3:5e:fc:80:65:b1:ba:19:a5:f9:54:97:
                    9a:28:88:71:4b:55:45:88:89:b5:92:3b:ed:db:31:
                    1f:5d:3f:d3:1b:37:fe:6e:3b:cd:a6:62:59:e6:5b:
                    29:19:5e:23:c4:84:8c:9b:df:02:2c:1c:8c:70:b3:
                    e7:42:09:e8:ea:e1:54:32:bc:74:8c:c4:03:10:43:
                    f4:f9:65:a5:b6:75:15:c8:c0:04:6a:0a:03:22:b9:
                    c0:bc:db:d2:79:c8:e1:4b:0c:24:ff:6b:b0:cf:7b:
                    93:b8:d0:04:8c:be:7f:20:22:00:65:fb:79:6e:6d:
                    64:72:5b:d4:4b:f7:08:02:0e:1a:21:c3:07:ad:ca:
                    5e:42:e5:b6:f6:21:4f:c0:df:2b:05:3a:82:d0:0d:
                    fe:b6:9f:3a:25:4c:5f:9d:ed:43:6f:22:db:95:78:
                    fa:bf:d1:0f:a7:4f:9f:32:97:d0:18:73:53:a8:5f:
                    00:4c:3a:d7:3d:e0:72:9d:a8:65:c9:c7:d6:2a:51:
                    06:dd:b0:5e:6b:5e:e3:83:1c:94:0c:c1:db:d7:56:
                    52:06:9b:1f:90:a7:30:e6:22:ba:2b:4b:0f:04:24:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:E1:AF:65:AD:CF:77:47:B4:2C:4C:88:74:34:B0:67:75:99:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8ce0bd3a-6879-3011-8e33-35e1910ce5f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5f:04:30:71:cf:7d:22:e4:6e:9a:b7:70:2d:9d:48:6c:88:
         fa:25:7a:c0:ab:7e:21:2e:23:f1:0a:60:36:91:99:0f:f3:b7:
         07:d3:2d:43:6f:3f:8b:93:41:5d:19:4a:09:14:3f:d2:38:fd:
         fa:69:ef:57:ec:41:ef:be:3a:f0:c0:2d:05:e3:b7:8a:d3:34:
         f3:2d:c8:ba:11:9d:50:19:e2:07:56:2a:8f:8f:2b:1f:94:43:
         a8:55:cc:22:fc:c6:82:8f:53:96:e1:85:41:18:29:38:a2:ff:
         1c:ca:16:34:c5:14:5f:c8:68:76:35:36:ab:e9:69:12:44:2c:
         2c:97:24:5d:0d:d5:88:ab:e4:b5:2f:43:cf:00:b5:d0:e5:97:
         1b:05:67:e1:a0:8d:51:23:0c:26:31:dd:10:65:79:a0:28:0a:
         e2:cf:ac:03:da:08:eb:78:4a:86:67:d9:dc:af:7b:25:43:5e:
         51:fe:62:18:cd:70:e1:69:96:4b:43:0a:a6:8d:fd:87:cd:37:
         95:97:98:b1:ff:ad:67:47:9e:dc:2e:38:15:fd:9c:72:1e:71:
         9a:67:b0:47:25:4e:7e:a9:f6:99:51:a9:2f:dc:e7:11:b2:9d:
         e2:b3:e1:6e:13:b9:de:9c:6e:79:a7:7e:e8:28:81:f0:ba:32:
         67:2d:90:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfFDqAnaH1b4XwO9rQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTEwNDE3MjM0MFoXDTI1MDIwMjE3MjM0MFowLzEtMCsGA1UEAxMk
OTVmMWI3M2ItZDhiNi00NjAwLWJkZWEtN2M1MjU5ZjU5MjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+pJbYM433IW6UQOAE4tYUH4PaYDFMdyxn6p
2L6ymSCjXvyAZbG6GaX5VJeaKIhxS1VFiIm1kjvt2zEfXT/TGzf+bjvNpmJZ5lsp
GV4jxISMm98CLByMcLPnQgno6uFUMrx0jMQDEEP0+WWltnUVyMAEagoDIrnAvNvS
ecjhSwwk/2uwz3uTuNAEjL5/ICIAZft5bm1kclvUS/cIAg4aIcMHrcpeQuW29iFP
wN8rBTqC0A3+tp86JUxfne1DbyLblXj6v9EPp0+fMpfQGHNTqF8ATDrXPeBynahl
ycfWKlEG3bBea17jgxyUDMHb11ZSBpsfkKcw5iK6K0sPBCRDQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOkM4a9lrc93R7QsTIh0NLBndZltMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvOGNlMGJkM2EtNjg3OS0z
MDExLThlMzMtMzVlMTkxMGNlNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7bJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFfBDBxz30i5G6at3AtnUhsiPolesCrfiEuI/EKYDaRmQ/ztwfTLUNv
P4uTQV0ZSgkUP9I4/fpp71fsQe++OvDALQXjt4rTNPMtyLoRnVAZ4gdWKo+PKx+U
Q6hVzCL8xoKPU5bhhUEYKTii/xzKFjTFFF/IaHY1NqvpaRJELCyXJF0N1Yir5LUv
Q88AtdDllxsFZ+GgjVEjDCYx3RBleaAoCuLPrAPaCOt4SoZn2dyveyVDXlH+YhjN
cOFplktDCqaN/YfNN5WXmLH/rWdHntwuOBX9nHIecZpnsEclTn6p9plRqS/c5xGy
neKz4W4Tud6cbnmnfugogfC6MmctkA4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:15 2024 by rpki-client on console-ams.rpki-client.org