Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c270b70e-14c9-3f76-bf91-207ed816af7f.roa
File:                     c270b70e-14c9-3f76-bf91-207ed816af7f.roa (raw, json)
Hash identifier:          A/+Euquf7C7uE7xrgsDRrDtFGkGdbHBn9WtF+VvowB8=
Subject key identifier:   59:4C:5B:38:5E:42:47:A6:96:5F:BC:8C:50:2A:1D:F4:63:49:E5:90
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847C5157DD6A1BB7F382F5CD140
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c270b70e-14c9-3f76-bf91-207ed816af7f.roa
Signing time:             Mon 04 Nov 2024 17:37:30 +0000
ROA not before:           Mon 04 Nov 2024 17:37:30 +0000
ROA not after:            Sun 02 Feb 2025 17:37:30 +0000
asID:                     11233
IP address blocks:        216.110.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:15:7d:d6:a1:bb:7f:38:2f:5c:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov  4 17:37:30 2024 GMT
            Not After : Feb  2 17:37:30 2025 GMT
        Subject: CN=386190b9-c08c-4985-9cbf-96e36efca46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:79:a6:c1:3a:b5:ee:32:12:4b:0b:c6:c0:cb:
                    81:1c:f5:e4:25:0b:c2:e0:8e:b5:84:0f:b0:d7:d0:
                    f5:ea:0d:e3:c8:38:dd:5e:91:fa:9f:b2:2b:ed:82:
                    e9:aa:aa:41:28:04:24:ef:0f:7d:cc:5d:fe:ab:5a:
                    15:fe:4c:a4:33:1b:76:bd:a3:54:cc:81:17:c7:e1:
                    c0:fa:41:d8:21:06:43:55:4b:1a:5f:b7:14:61:f5:
                    c2:a0:45:3f:01:4c:25:0a:38:31:a4:ce:ea:4d:37:
                    ec:41:68:c8:5f:3a:d8:e0:e7:19:59:37:63:b3:e8:
                    c6:c7:25:4d:7c:71:d1:fe:a6:15:dd:ea:0e:f4:0f:
                    80:0a:9d:13:98:78:9d:d4:21:6f:4a:a5:80:3e:92:
                    46:de:d2:bc:63:33:0a:a5:69:10:21:8e:6b:fb:e1:
                    e3:80:33:87:93:c5:45:e4:5c:97:87:bd:76:bb:93:
                    3e:30:6c:43:3b:19:ce:52:d2:33:45:e5:d9:3d:0e:
                    b6:16:75:24:57:f3:2d:de:6f:59:f3:7a:93:eb:c8:
                    b7:1d:c5:8f:f3:f1:d7:cb:ca:d6:2a:b1:a7:2b:33:
                    da:c4:63:72:fc:bb:05:34:60:5d:85:02:43:b2:27:
                    60:ff:6f:9d:ef:27:33:5b:39:a3:7f:00:a4:f5:41:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4C:5B:38:5E:42:47:A6:96:5F:BC:8C:50:2A:1D:F4:63:49:E5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c270b70e-14c9-3f76-bf91-207ed816af7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:17:00:ee:e5:30:22:d7:e7:7a:31:d9:d8:17:25:36:65:54:
         cd:b7:65:8b:db:74:fd:4f:8b:b6:29:ad:08:40:83:a6:d9:9b:
         f7:ec:17:bd:41:05:56:c3:b2:04:8f:fa:9e:03:c3:84:a4:97:
         43:0b:ec:1b:0a:de:8c:dc:2c:10:4e:26:ed:e6:6b:01:0d:ca:
         e3:d1:06:ba:db:3d:a1:43:dc:1a:3a:da:75:eb:0f:be:d2:65:
         d7:cf:25:ca:c7:bb:56:58:b0:95:df:42:04:22:29:76:4f:5c:
         8c:2f:76:8e:ef:26:c0:12:13:e9:19:ea:7c:bc:53:a2:db:d0:
         5e:fb:0d:0b:b7:41:02:a3:f0:89:9c:dc:be:41:03:7a:d7:88:
         73:8f:8e:d1:c8:60:09:77:5d:23:36:6f:d3:e9:ef:6d:31:bc:
         e5:de:ae:3e:1d:8d:b4:4a:0d:4c:62:f7:fd:00:1d:1f:17:51:
         0a:d4:b9:63:ff:b7:40:05:ac:99:88:63:d9:69:5c:16:08:21:
         3a:7a:4e:25:5b:bd:cb:17:50:ce:f4:7e:dd:b7:76:7a:ac:ea:
         62:f9:97:d0:5b:eb:c5:3f:16:db:e5:07:6b:c0:c8:91:f3:a5:
         d3:9f:81:00:fb:ee:ed:0e:31:2c:d7:8b:8a:cc:d7:8e:5d:fc:
         88:7b:df:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfFFX3Wobt/OC9c0UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTEwNDE3MzczMFoXDTI1MDIwMjE3MzczMFowLzEtMCsGA1UEAxMk
Mzg2MTkwYjktYzA4Yy00OTg1LTljYmYtOTZlMzZlZmNhNDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXmmwTq17jISSwvGwMuBHPXkJQvC4I61hA+w
19D16g3jyDjdXpH6n7Ir7YLpqqpBKAQk7w99zF3+q1oV/kykMxt2vaNUzIEXx+HA
+kHYIQZDVUsaX7cUYfXCoEU/AUwlCjgxpM7qTTfsQWjIXzrY4OcZWTdjs+jGxyVN
fHHR/qYV3eoO9A+ACp0TmHid1CFvSqWAPpJG3tK8YzMKpWkQIY5r++HjgDOHk8VF
5FyXh712u5M+MGxDOxnOUtIzReXZPQ62FnUkV/Mt3m9Z83qT68i3HcWP8/HXy8rW
KrGnKzPaxGNy/LsFNGBdhQJDsidg/2+d7yczWzmjfwCk9UF80QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFlMWzheQkemll+8jFAqHfRjSeWQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYzI3MGI3MGUtMTRjOS0z
Zjc2LWJmOTEtMjA3ZWQ4MTZhZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2G7KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0XAO7lMCLX53ox2dgXJTZlVM23ZYvbdP1Pi7YprQhAg6bZm/fsF71B
BVbDsgSP+p4Dw4Skl0ML7BsK3ozcLBBOJu3mawENyuPRBrrbPaFD3Bo62nXrD77S
ZdfPJcrHu1ZYsJXfQgQiKXZPXIwvdo7vJsASE+kZ6ny8U6Lb0F77DQu3QQKj8Imc
3L5BA3rXiHOPjtHIYAl3XSM2b9Pp720xvOXerj4djbRKDUxi9/0AHR8XUQrUuWP/
t0AFrJmIY9lpXBYIITp6TiVbvcsXUM70ft23dnqs6mL5l9Bb68U/FtvlB2vAyJHz
pdOfgQD77u0OMSzXi4rM145d/Ih7370=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:17 2024 by rpki-client on console-ams.rpki-client.org