Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/924c8170-596c-3428-8eee-dcbfff965c95.roa
File:                     924c8170-596c-3428-8eee-dcbfff965c95.roa (raw, json)
Hash identifier:          p/ra2Pr9CdDwLYDCrHVh624Azo4J6ZGbNzgBLpUBEUE=
Subject key identifier:   6D:C8:CF:30:DD:68:70:70:95:9E:19:E4:BE:C2:83:B0:EC:13:30:8D
Certificate issuer:       /CN=024863fe-f941-4bf2-81d9-ad03d50aa194
Certificate serial:       010D0C9F43285847D0BCA5C50AF87ACF106F4040
Authority key identifier: 26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/924c8170-596c-3428-8eee-dcbfff965c95.roa
Signing time:             Fri 08 Nov 2024 21:48:11 +0000
ROA not before:           Fri 08 Nov 2024 21:48:11 +0000
ROA not after:            Thu 06 Feb 2025 21:48:11 +0000
asID:                     401415
IP address blocks:        204.147.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:bc:a5:c5:0a:f8:7a:cf:10:6f:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=024863fe-f941-4bf2-81d9-ad03d50aa194
        Validity
            Not Before: Nov  8 21:48:11 2024 GMT
            Not After : Feb  6 21:48:11 2025 GMT
        Subject: CN=9f8c5255-2e27-4eb8-8c70-772d80c6d894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:9c:67:d7:3e:be:b2:9f:7e:3e:4d:ca:4a:
                    71:5d:ee:b6:2b:74:2e:a0:90:c4:9a:62:bb:7f:64:
                    f3:f3:84:4e:21:be:79:be:ce:28:4d:b6:2d:1f:aa:
                    06:49:fc:b1:cb:11:e9:41:6d:5a:84:68:22:b9:22:
                    46:7e:d0:91:48:99:33:94:01:a4:11:49:7f:03:5a:
                    26:4b:87:b3:e9:ed:63:59:08:af:3f:23:35:95:16:
                    d7:b7:37:2f:a9:9a:c9:73:8e:6f:11:de:bb:59:75:
                    34:03:27:43:9b:fd:d8:fd:2b:00:d6:fb:ff:83:e9:
                    cb:8f:97:5c:78:8b:45:34:6a:ca:70:1d:b8:53:db:
                    ed:36:22:5c:38:5b:d2:58:0b:91:55:05:a9:d7:84:
                    13:05:56:93:86:e2:13:bd:d4:35:90:df:60:b7:79:
                    77:37:80:3a:90:35:f4:54:de:4b:d0:cf:1b:75:ea:
                    54:2b:16:8f:37:db:a7:1e:e7:39:08:6a:1e:3e:2b:
                    64:6a:59:c6:68:d0:fd:69:0e:22:30:c0:1b:61:87:
                    7c:c0:17:69:af:19:a1:46:18:13:0b:88:c5:bc:70:
                    d5:de:ab:76:40:e3:d6:8b:c3:c9:7a:ed:0a:62:3a:
                    91:06:26:7a:d3:be:50:41:c9:9f:60:fd:a5:8f:57:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C8:CF:30:DD:68:70:70:95:9E:19:E4:BE:C2:83:B0:EC:13:30:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/924c8170-596c-3428-8eee-dcbfff965c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl

            X509v3 Authority Key Identifier:
                keyid:26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.147.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:12:dc:d9:00:64:c2:b5:91:1c:b7:5f:8b:99:77:fb:1f:a1:
         bc:de:d7:e7:99:ba:c1:59:ea:58:e5:81:7c:63:51:41:1e:d0:
         f5:3a:e3:c3:66:cb:af:21:65:6b:74:55:d3:50:77:11:9e:77:
         af:fe:e1:6c:76:e6:7d:4d:2e:e7:cb:50:79:db:8d:fd:3e:17:
         48:c2:2c:d3:1c:96:c2:eb:8c:1c:09:8f:d3:5b:57:7a:6b:5e:
         ef:bb:57:33:6b:70:83:50:04:22:5d:1f:dd:12:04:23:89:9d:
         34:b0:be:3f:46:ed:30:c2:69:a9:77:b5:f5:4c:61:ee:cb:9e:
         e4:97:66:e9:b8:9f:fb:4d:c9:22:67:29:56:82:48:c6:6a:11:
         b6:1f:e0:83:32:6e:38:97:03:20:67:23:52:4b:5b:46:8b:56:
         86:6d:2a:53:14:e8:70:45:ce:45:79:23:f5:fa:99:5f:da:ff:
         b1:04:c7:7b:20:2b:b7:c6:45:d9:af:56:3a:e2:92:53:f3:08:
         36:80:66:e9:0f:31:39:bc:d4:58:ba:b3:92:6b:8c:d1:d1:45:
         28:71:74:6e:ea:0e:c2:24:76:35:e7:66:01:88:e7:62:11:5d:
         bc:09:31:37:9c:00:0c:89:20:bd:8d:3a:0a:66:99:67:5b:6c:
         17:ec:73:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfQvKXFCvh6zxBvQEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDI0ODYzZmUtZjk0MS00YmYyLTgxZDktYWQwM2Q1MGFh
MTk0MB4XDTI0MTEwODIxNDgxMVoXDTI1MDIwNjIxNDgxMVowLzEtMCsGA1UEAxMk
OWY4YzUyNTUtMmUyNy00ZWI4LThjNzAtNzcyZDgwYzZkODk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyGcZ9c+vrKffj5NykpxXe62K3QuoJDEmmK7
f2Tz84ROIb55vs4oTbYtH6oGSfyxyxHpQW1ahGgiuSJGftCRSJkzlAGkEUl/A1om
S4ez6e1jWQivPyM1lRbXtzcvqZrJc45vEd67WXU0AydDm/3Y/SsA1vv/g+nLj5dc
eItFNGrKcB24U9vtNiJcOFvSWAuRVQWp14QTBVaThuITvdQ1kN9gt3l3N4A6kDX0
VN5L0M8bdepUKxaPN9unHuc5CGoePitkalnGaND9aQ4iMMAbYYd8wBdprxmhRhgT
C4jFvHDV3qt2QOPWi8PJeu0KYjqRBiZ6075QQcmfYP2lj1e9twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3IzzDdaHBwlZ4Z5L7Cg7DsEzCNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMjQ4
NjNmZS1mOTQxLTRiZjItODFkOS1hZDAzZDUwYWExOTQvOTI0YzgxNzAtNTk2Yy0z
NDI4LThlZWUtZGNiZmZmOTY1Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDI0ODYzZmUtZjk0MS00YmYyLTgx
ZDktYWQwM2Q1MGFhMTk0LzAyNDg2M2ZlLWY5NDEtNGJmMi04MWQ5LWFkMDNkNTBh
YTE5NC5jcmwwHwYDVR0jBBgwFoAUJs+3LPEpJRh0cw8fUN61/VSjIN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMjQ4NjNmZS1mOTQxLTRiZjItODFkOS1hZDAz
ZDUwYWExOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzJOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcS3NkAZMK1kRy3X4uZd/sfobze1+eZusFZ6ljlgXxjUUEe0PU648Nm
y68hZWt0VdNQdxGed6/+4Wx25n1NLufLUHnbjf0+F0jCLNMclsLrjBwJj9NbV3pr
Xu+7VzNrcINQBCJdH90SBCOJnTSwvj9G7TDCaal3tfVMYe7LnuSXZum4n/tNySJn
KVaCSMZqEbYf4IMybjiXAyBnI1JLW0aLVoZtKlMU6HBFzkV5I/X6mV/a/7EEx3sg
K7fGRdmvVjriklPzCDaAZukPMTm81Fi6s5JrjNHRRShxdG7qDsIkdjXnZgGI52IR
XbwJMTecAAyJIL2NOgpmmWdbbBfsc4w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:17 2024 by rpki-client on console-ams.rpki-client.org