Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa
File:                     725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa (raw, json)
Hash identifier:          IC6gwQoaOjQfUxtM2tKPZf7L8jKmy0k6F3ccXYSaNUU=
Subject key identifier:   38:36:3D:98:B3:B4:D1:62:9F:70:2A:9E:3A:DC:15:F0:C1:C3:AF:C3
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584792CA48FB1C4672B004930C80
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa
Signing time:             Thu 17 Oct 2024 17:15:33 +0000
ROA not before:           Thu 17 Oct 2024 17:15:33 +0000
ROA not after:            Wed 15 Jan 2025 18:15:33 +0000
asID:                     46165
IP address blocks:        148.59.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:ca:48:fb:1c:46:72:b0:04:93:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Oct 17 17:15:33 2024 GMT
            Not After : Jan 15 18:15:33 2025 GMT
        Subject: CN=9a7afbba-3246-4211-a0c9-229616a91cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:fa:13:69:17:e3:bb:55:34:1d:fa:cb:dc:
                    02:66:ca:85:5e:fa:4b:40:c4:3b:2d:5f:62:14:b0:
                    91:df:7f:5a:58:e0:8d:06:b6:8c:d5:f2:37:f6:02:
                    f0:90:e8:18:81:fe:81:d3:f7:35:2d:98:6c:b8:6e:
                    3b:f9:78:5e:be:a4:e9:1e:8e:b7:7d:a8:d8:74:2a:
                    1c:ba:78:b7:7e:e5:03:5c:f4:ea:19:d6:27:bb:35:
                    1d:bc:b8:1f:06:62:75:19:50:62:53:0b:15:0a:bb:
                    4c:9d:82:67:4e:20:21:58:57:3f:b2:33:86:3b:1f:
                    8f:cf:50:4b:2a:bd:98:1e:ed:6f:98:00:a0:c7:d7:
                    f8:03:d0:0d:87:38:9a:14:6d:31:9f:ce:63:67:83:
                    18:36:33:ec:6a:41:b6:9d:3c:a4:ad:b9:6c:30:a1:
                    f0:e1:52:7f:4f:d0:cd:b7:34:6a:40:20:ec:a5:f1:
                    13:9b:14:b1:d1:97:a8:39:c8:55:ec:96:de:0e:55:
                    73:3a:15:2d:01:9d:23:cb:9c:0f:cf:d5:6a:22:99:
                    e6:c3:f8:91:db:cd:30:06:e0:2a:9f:0f:04:cc:63:
                    a6:72:9f:70:dd:73:0d:e7:e2:8c:8c:23:df:01:f5:
                    2f:21:f5:eb:d6:89:3b:96:72:b6:ff:af:02:4a:14:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:36:3D:98:B3:B4:D1:62:9F:70:2A:9E:3A:DC:15:F0:C1:C3:AF:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/725e45fe-f00b-39b2-a9df-2a34e9b0a00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:7e:bd:92:63:7d:70:f7:74:12:ae:6d:b4:1d:a3:53:da:
         e0:e6:b7:4a:2a:46:00:95:b4:10:99:90:8f:82:6d:dc:e5:d3:
         1f:2c:14:fb:58:ca:17:a9:a7:2a:01:92:bc:69:01:73:a8:61:
         05:fa:77:82:b8:2d:21:c8:34:11:37:3c:df:4d:77:74:3f:d5:
         ff:ab:a9:65:71:fd:22:73:3e:12:95:29:09:ee:42:5c:7e:c6:
         b8:5e:b3:80:dc:47:05:93:fb:9b:5e:d0:fe:2d:19:29:f5:b8:
         a6:df:ae:5a:a1:02:b0:9e:ab:bc:c4:4d:67:24:b0:e8:06:92:
         d2:6c:a8:98:bd:ff:bf:94:66:e5:12:4c:08:68:27:53:87:56:
         46:34:94:2d:55:57:2c:34:e9:25:8c:a5:db:1f:3d:af:7d:57:
         4d:c7:d2:23:6e:f5:90:67:13:8c:db:66:ff:43:8b:b2:66:65:
         6d:70:0d:b9:4a:a2:76:aa:86:4f:f3:57:04:c8:76:7b:ea:7b:
         3f:25:c1:b9:ee:58:f9:74:bc:63:53:31:ab:46:3d:d4:d9:9a:
         d2:94:72:66:66:e8:3f:06:bc:36:38:32:c1:b8:ab:8d:5d:3b:
         01:df:2b:73:ed:93:fc:ab:fa:8a:fc:45:da:d5:f1:ce:ff:df:
         59:95:b0:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSykj7HEZysASTDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw
MjgzMB4XDTI0MTAxNzE3MTUzM1oXDTI1MDExNTE4MTUzM1owLzEtMCsGA1UEAxMk
OWE3YWZiYmEtMzI0Ni00MjExLWEwYzktMjI5NjE2YTkxY2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiX6E2kX47tVNB36y9wCZsqFXvpLQMQ7LV9i
FLCR339aWOCNBraM1fI39gLwkOgYgf6B0/c1LZhsuG47+XhevqTpHo63fajYdCoc
uni3fuUDXPTqGdYnuzUdvLgfBmJ1GVBiUwsVCrtMnYJnTiAhWFc/sjOGOx+Pz1BL
Kr2YHu1vmACgx9f4A9ANhziaFG0xn85jZ4MYNjPsakG2nTykrblsMKHw4VJ/T9DN
tzRqQCDspfETmxSx0ZeoOchV7JbeDlVzOhUtAZ0jy5wPz9VqIpnmw/iR280wBuAq
nw8EzGOmcp9w3XMN5+KMjCPfAfUvIfXr1ok7lnK2/68CShRDdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDg2PZiztNFin3AqnjrcFfDBw6/DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1
OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvNzI1ZTQ1ZmUtZjAwYi0z
OWIyLWE5ZGYtMmEzNGU5YjBhMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy
NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy
MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy
NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDuPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBbfr2SY31w93QSrm20HaNT2uDmt0oqRgCVtBCZkI+Cbdzl0x8sFPtY
yheppyoBkrxpAXOoYQX6d4K4LSHINBE3PN9Nd3Q/1f+rqWVx/SJzPhKVKQnuQlx+
xrhes4DcRwWT+5te0P4tGSn1uKbfrlqhArCeq7zETWcksOgGktJsqJi9/7+UZuUS
TAhoJ1OHVkY0lC1VVyw06SWMpdsfPa99V03H0iNu9ZBnE4zbZv9Di7JmZW1wDblK
onaqhk/zVwTIdnvqez8lwbnuWPl0vGNTMatGPdTZmtKUcmZm6D8GvDY4MsG4q41d
OwHfK3Ptk/yr+or8RdrV8c7/31mVsOk=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:09 2024 by rpki-client on console-ams.rpki-client.org