Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/4c16f448-b373-391e-b0c6-01474106fbae.roa
File:                     4c16f448-b373-391e-b0c6-01474106fbae.roa (raw, json)
Hash identifier:          5vwuSjiSx7nXxPHoX3LlPxB4JkUOmYuDnYQqBPG6GYg=
Subject key identifier:   0D:B3:AB:7F:38:AF:B2:DB:BB:8A:F1:EB:1B:38:F8:40:7B:71:1E:23
Certificate issuer:       /CN=09a6e101-d379-454b-8947-39f1f150481a
Certificate serial:       010D0C9F43285846E1D0E28114D798AD2E1139D0
Authority key identifier: BD:4D:C0:AA:9B:E0:60:F8:77:5B:E3:76:97:40:14:1B:93:A2:A8:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/4c16f448-b373-391e-b0c6-01474106fbae.roa
Signing time:             Thu 15 Aug 2024 07:50:46 +0000
ROA not before:           Thu 15 Aug 2024 07:50:46 +0000
ROA not after:            Wed 13 Nov 2024 08:50:46 +0000
asID:                     26658
IP address blocks:        216.12.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e1:d0:e2:81:14:d7:98:ad:2e:11:39:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a6e101-d379-454b-8947-39f1f150481a
        Validity
            Not Before: Aug 15 07:50:46 2024 GMT
            Not After : Nov 13 08:50:46 2024 GMT
        Subject: CN=2d66c40e-59e0-47e2-b39b-537da8d4e896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b2:61:80:71:25:4b:7e:0a:eb:e8:7b:d0:e0:
                    1c:a4:0e:9c:51:ea:9c:a5:58:2e:f6:b4:50:29:fe:
                    b5:20:72:c4:b1:6e:2e:ca:37:cf:55:f2:e4:43:6e:
                    6b:ef:24:88:75:8a:ec:cb:d2:c7:b1:67:58:0d:0e:
                    f6:27:27:a8:ec:f7:1d:59:36:eb:62:3a:f0:a9:e4:
                    fc:1b:eb:ae:6e:e1:1b:8c:54:83:5c:43:c9:6f:b7:
                    bb:3d:fb:1e:e9:77:9d:e0:3f:3e:2e:fa:01:6a:05:
                    14:61:1f:7e:1d:8e:d4:40:8e:c0:fd:ca:e3:d0:8d:
                    2a:a5:9f:fc:fa:08:ed:01:69:c8:97:f1:19:6f:77:
                    49:cc:97:5d:79:36:1f:65:9d:b6:c7:09:61:f8:b2:
                    63:0d:9b:68:60:46:67:bc:70:18:8f:1b:a0:29:5c:
                    02:d9:58:eb:d8:ac:22:54:10:e5:6a:56:dc:28:f0:
                    11:6e:29:b9:b6:e2:72:00:13:c5:68:43:9e:35:8e:
                    e1:b9:30:6e:9f:ad:04:3c:f4:05:f1:bd:84:28:0d:
                    de:f0:14:b8:67:42:4f:07:af:55:b7:6d:a0:ae:a0:
                    dc:4c:5e:9b:3f:bc:0e:e9:25:24:cf:bd:8b:af:d6:
                    39:3d:fb:e2:d6:88:3f:aa:55:ed:89:8f:82:49:ec:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:AB:7F:38:AF:B2:DB:BB:8A:F1:EB:1B:38:F8:40:7B:71:1E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/4c16f448-b373-391e-b0c6-01474106fbae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a/09a6e101-d379-454b-8947-39f1f150481a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:4D:C0:AA:9B:E0:60:F8:77:5B:E3:76:97:40:14:1B:93:A2:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/09a6e101-d379-454b-8947-39f1f150481a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.12.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4f:5d:e8:30:47:4f:dc:bd:b0:54:22:53:b3:37:00:7f:cb:
         ce:2f:a0:22:50:3a:62:71:4c:b0:da:da:14:22:4a:6d:76:b7:
         53:20:3e:bb:ae:d0:15:9d:a3:cd:77:15:6a:62:d3:d4:ce:14:
         51:9d:79:1e:ad:0d:f3:8c:fc:c2:d7:b7:ea:00:31:a5:c5:4d:
         9a:d2:0a:5d:dc:73:bb:2b:63:bf:fd:ed:3f:0f:6f:ed:3f:d2:
         b5:89:78:70:cb:55:8b:ab:7a:2f:46:7e:1d:ae:cc:c4:69:0b:
         21:bf:9c:28:ae:f6:c4:88:4f:6b:a5:e3:13:2d:c0:57:41:2d:
         cb:10:cd:5a:29:97:41:48:99:67:6b:2e:91:96:70:98:44:f4:
         6e:29:1c:a2:0a:ae:29:2d:a2:0c:53:87:8b:d5:04:5e:ac:fd:
         a5:da:83:d2:55:9f:84:31:ac:80:07:70:10:91:a3:9d:8b:43:
         d0:20:b8:26:59:89:d3:dd:3b:20:c9:ad:0f:9c:36:71:85:86:
         8a:3e:54:8f:1d:e3:1f:f4:7c:1f:55:c7:d1:02:83:1c:e6:f0:
         b3:0f:13:d6:33:59:b3:5a:eb:12:99:1f:c9:0d:c9:e6:b8:77:
         23:d4:ca:46:bd:c3:d3:bd:69:8c:93:2e:5e:97:01:96:8b:24:
         31:59:8b:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbh0OKBFNeYrS4ROdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhNmUxMDEtZDM3OS00NTRiLTg5NDctMzlmMWYxNTA0
ODFhMB4XDTI0MDgxNTA3NTA0NloXDTI0MTExMzA4NTA0NlowLzEtMCsGA1UEAxMk
MmQ2NmM0MGUtNTllMC00N2UyLWIzOWItNTM3ZGE4ZDRlODk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibJhgHElS34K6+h70OAcpA6cUeqcpVgu9rRQ
Kf61IHLEsW4uyjfPVfLkQ25r7ySIdYrsy9LHsWdYDQ72Jyeo7PcdWTbrYjrwqeT8
G+uubuEbjFSDXEPJb7e7Pfse6Xed4D8+LvoBagUUYR9+HY7UQI7A/crj0I0qpZ/8
+gjtAWnIl/EZb3dJzJddeTYfZZ22xwlh+LJjDZtoYEZnvHAYjxugKVwC2Vjr2Kwi
VBDlalbcKPARbim5tuJyABPFaEOeNY7huTBun60EPPQF8b2EKA3e8BS4Z0JPB69V
t22grqDcTF6bP7wO6SUkz72Lr9Y5Pfvi1og/qlXtiY+CSewz8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2zq384r7Lbu4rx6xs4+EB7cR4jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wOWE2
ZTEwMS1kMzc5LTQ1NGItODk0Ny0zOWYxZjE1MDQ4MWEvNGMxNmY0NDgtYjM3My0z
OTFlLWIwYzYtMDE0NzQxMDZmYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDlhNmUxMDEtZDM3OS00NTRiLTg5
NDctMzlmMWYxNTA0ODFhLzA5YTZlMTAxLWQzNzktNDU0Yi04OTQ3LTM5ZjFmMTUw
NDgxYS5jcmwwHwYDVR0jBBgwFoAUvU3AqpvgYPh3W+N2l0AUG5OiqNAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wOWE2ZTEwMS1kMzc5LTQ1NGItODk0Ny0zOWYx
ZjE1MDQ4MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAItPXegwR0/cvbBUIlOzNwB/y84voCJQOmJxTLDa2hQiSm12t1MgPruu
0BWdo813FWpi09TOFFGdeR6tDfOM/MLXt+oAMaXFTZrSCl3cc7srY7/97T8Pb+0/
0rWJeHDLVYurei9Gfh2uzMRpCyG/nCiu9sSIT2ul4xMtwFdBLcsQzVopl0FImWdr
LpGWcJhE9G4pHKIKriktogxTh4vVBF6s/aXag9JVn4QxrIAHcBCRo52LQ9AguCZZ
idPdOyDJrQ+cNnGFhoo+VI8d4x/0fB9Vx9ECgxzm8LMPE9YzWbNa6xKZH8kNyea4
dyPUyka9w9O9aYyTLl6XAZaLJDFZi0k=
-----END CERTIFICATE-----
Generated at Thu Sep 19 19:54:54 2024 by rpki-client on console-ams.rpki-client.org