Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa
File:                     7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa (raw, json)
Hash identifier:          MfXkn4bEN9LxZ47Yw3r3x2ryT1IoylI/KmueGvWuWyE=
Subject key identifier:   E8:00:BD:66:50:49:3A:34:D6:65:E4:40:8E:0B:B2:4B:0A:9C:AC:2B
Certificate issuer:       /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial:       010D0C9F43285847A2FB8AEF47906B6057588380
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa
Signing time:             Wed 23 Oct 2024 12:27:44 +0000
ROA not before:           Wed 23 Oct 2024 12:27:44 +0000
ROA not after:            Tue 21 Jan 2025 13:27:44 +0000
asID:                     398573
IP address blocks:        151.161.0.0/16 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a2:fb:8a:ef:47:90:6b:60:57:58:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
        Validity
            Not Before: Oct 23 12:27:44 2024 GMT
            Not After : Jan 21 13:27:44 2025 GMT
        Subject: CN=5d3b958f-a1c7-4f35-89dc-c25b3706a794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:da:6f:c1:e6:b1:33:3d:b1:99:10:03:4d:
                    cc:66:81:53:eb:2a:70:b3:7a:6a:72:84:77:57:a2:
                    86:54:0d:fe:21:2d:f4:af:fd:a0:dd:02:1a:d0:19:
                    76:59:ce:76:52:24:f7:49:29:ca:51:a0:48:71:04:
                    49:c5:bc:ac:62:d8:c5:6f:5d:9e:f1:59:e3:bc:bc:
                    20:66:93:0e:dd:b2:7c:54:17:56:cb:8a:af:13:22:
                    49:f2:2d:11:8f:e4:80:d2:1b:e2:6b:f8:fb:82:f8:
                    d1:1c:ca:4f:4d:08:02:f1:2f:c0:95:e7:e2:53:30:
                    be:55:50:fd:a2:d4:02:3b:72:6f:a3:99:36:38:b6:
                    86:9f:43:a0:28:ea:23:de:9f:d3:a6:ae:f2:5b:ae:
                    fe:02:7e:5d:6c:cf:35:0f:9c:99:ac:2d:82:45:bd:
                    e9:f5:7f:5a:07:ec:96:fd:4e:e7:34:cc:a3:a8:0f:
                    66:23:bb:c0:c2:2d:37:20:41:37:78:24:1b:35:12:
                    9c:b5:1c:c5:bb:4b:d0:a7:67:92:54:79:0c:ef:00:
                    cb:4a:d6:4d:52:30:02:1d:ff:b3:ab:97:ac:85:a0:
                    bb:d1:81:fc:92:e2:3a:a8:b5:ca:e2:e3:c8:4a:22:
                    f9:db:f8:5f:c1:ae:e2:c3:9f:66:6c:c5:16:3e:a0:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:00:BD:66:50:49:3A:34:D6:65:E4:40:8E:0B:B2:4B:0A:9C:AC:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/7c4b09ec-4eac-3a3c-b5af-86337a91fe6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl

            X509v3 Authority Key Identifier:
                keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c1:e5:b9:84:cc:3b:9f:2e:b2:1d:14:e0:0a:f9:98:51:9e:
         10:c4:f3:56:ad:42:96:ec:32:dd:01:23:ac:f4:2a:8f:49:19:
         be:94:90:d0:5f:ac:52:05:7c:97:f7:b5:76:13:1a:23:b4:b0:
         6f:3d:2b:0d:4f:f2:40:c5:48:da:e3:27:c3:f5:a0:46:22:4f:
         86:f6:96:dc:d4:0c:1b:56:d5:eb:7d:3e:be:23:c1:ad:c9:62:
         d6:c4:28:d5:b5:c6:1e:0e:35:b2:56:f4:4b:5c:67:58:94:85:
         ac:01:88:a7:0f:31:88:1e:fe:a0:48:56:2e:59:03:a5:65:22:
         ff:56:a7:56:64:14:cc:ca:24:69:c8:81:bf:bf:25:5b:b2:51:
         45:79:d9:ed:e2:df:d9:93:bd:df:a8:f0:1b:12:c5:89:c3:7c:
         a2:bd:7f:03:94:8c:04:ad:60:4b:2f:8c:2f:79:d2:80:f2:90:
         65:8f:53:f3:dd:78:2e:85:eb:27:fb:c2:c0:25:33:04:fb:88:
         19:c6:64:8f:dd:7f:ae:b6:5b:55:17:fe:f0:ee:f4:9c:e5:d2:
         5a:c4:fa:8c:7c:e8:38:bc:e5:e0:34:36:1f:0b:37:fd:1c:70:
         4a:90:9c:1b:48:92:eb:f2:39:94:f1:ae:f6:65:d8:e0:61:f9:
         bd:60:74:2b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEei+4rvR5BrYFdYg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz
YWExMB4XDTI0MTAyMzEyMjc0NFoXDTI1MDEyMTEzMjc0NFowLzEtMCsGA1UEAxMk
NWQzYjk1OGYtYTFjNy00ZjM1LTg5ZGMtYzI1YjM3MDZhNzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBfab8HmsTM9sZkQA03MZoFT6ypws3pqcoR3
V6KGVA3+IS30r/2g3QIa0Bl2Wc52UiT3SSnKUaBIcQRJxbysYtjFb12e8VnjvLwg
ZpMO3bJ8VBdWy4qvEyJJ8i0Rj+SA0hvia/j7gvjRHMpPTQgC8S/AlefiUzC+VVD9
otQCO3Jvo5k2OLaGn0OgKOoj3p/Tpq7yW67+An5dbM81D5yZrC2CRb3p9X9aB+yW
/U7nNMyjqA9mI7vAwi03IEE3eCQbNRKctRzFu0vQp2eSVHkM7wDLStZNUjACHf+z
q5eshaC70YH8kuI6qLXK4uPISiL52/hfwa7iw59mbMUWPqC8+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOgAvWZQSTo01mXkQI4LsksKnKwrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw
ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvN2M0YjA5ZWMtNGVhYy0z
YTNjLWI1YWYtODYzMzdhOTFmZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk
YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx
M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0
YjRmMTNhYTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAl6EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAl8HluYTMO58ush0U4Ar5mFGeEMTzVq1Cluwy3QEjrPQqj0kZvpSQ0F+s
UgV8l/e1dhMaI7Swbz0rDU/yQMVI2uMnw/WgRiJPhvaW3NQMG1bV630+viPBrcli
1sQo1bXGHg41slb0S1xnWJSFrAGIpw8xiB7+oEhWLlkDpWUi/1anVmQUzMokaciB
v78lW7JRRXnZ7eLf2ZO936jwGxLFicN8or1/A5SMBK1gSy+ML3nSgPKQZY9T8914
LoXrJ/vCwCUzBPuIGcZkj91/rrZbVRf+8O70nOXSWsT6jHzoOLzl4DQ2Hws3/Rxw
SpCcG0iS6/I5lPGu9mXY4GH5vWB0Kw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:01 2024 by rpki-client on console-ams.rpki-client.org