Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
File:                     b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa (raw, json)
Hash identifier:          QhF9d1uMJdZz6pwWb1a3krRAL46h6G1rrrm640LsJr8=
Subject key identifier:   23:F6:FF:14:81:97:74:8C:22:AE:36:2E:A2:92:BA:65:DF:58:57:BB
Certificate issuer:       /CN=11f590b6-eb6e-4969-824b-0df247220283
Certificate serial:       010D0C9F4328584792C754B635EE234D18D6EFA0
Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa
Signing time:             Thu 17 Oct 2024 17:09:36 +0000
ROA not before:           Thu 17 Oct 2024 17:09:36 +0000
ROA not after:            Wed 15 Jan 2025 18:09:36 +0000
asID:                     395301
IP address blocks:        209.172.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:c7:54:b6:35:ee:23:4d:18:d6:ef:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283
        Validity
            Not Before: Oct 17 17:09:36 2024 GMT
            Not After : Jan 15 18:09:36 2025 GMT
        Subject: CN=f1bc7758-d3d5-4f52-bc68-55ccb0b9c242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:62:2c:fa:7f:f7:0d:57:c3:7d:c4:fd:dd:c8:
                    34:ad:7e:0f:e7:9a:99:52:2b:6b:fb:9f:7c:e6:b3:
                    70:45:88:e1:74:6f:72:be:70:36:03:f2:1c:9e:ee:
                    78:95:8e:d4:c7:ad:df:42:53:9b:86:de:47:15:5a:
                    1b:ca:56:d3:2d:da:e6:fb:6d:5f:85:f8:49:ce:34:
                    c3:8b:5b:ee:5b:ae:2d:00:c1:ff:20:25:d4:6b:c9:
                    9d:fd:8b:d0:ec:fe:65:5f:19:36:e5:7c:8b:d6:b0:
                    29:38:56:a6:12:b4:a9:06:f4:f1:cd:d2:1d:80:83:
                    d0:b4:47:1f:d0:e6:d7:e8:38:66:23:58:47:c8:3b:
                    41:96:6b:54:21:18:ae:61:a7:2c:4e:3f:5c:36:b5:
                    de:0a:6f:b0:47:cd:15:d6:f5:bd:68:97:40:67:ad:
                    20:91:0c:5f:37:2a:2b:7e:39:00:51:12:4c:38:77:
                    bd:17:34:cd:8d:de:e5:b5:94:9d:43:78:2c:a8:5f:
                    54:64:41:81:47:9c:aa:f5:25:86:a6:00:9d:55:e8:
                    20:a6:76:bc:50:1b:4c:47:26:8f:9f:4b:04:8e:76:
                    93:19:04:4c:d8:1c:57:9a:81:db:c0:23:b6:06:98:
                    9c:bd:1b:61:20:8b:15:bc:22:3d:9a:10:66:39:79:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F6:FF:14:81:97:74:8C:22:AE:36:2E:A2:92:BA:65:DF:58:57:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/b6de8884-c5cc-3db5-9228-52ccfa87ab93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl

            X509v3 Authority Key Identifier:
                keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.172.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:3c:98:a3:92:9a:27:9e:da:56:9f:e2:43:4a:b5:fa:23:
         69:48:8f:ef:64:27:f4:41:17:73:cf:16:86:e7:bc:2a:58:32:
         f5:55:2f:a4:e4:62:0b:df:0a:d2:0c:88:80:db:ec:c1:59:7f:
         97:87:3c:43:43:70:d7:c0:5a:b6:f8:54:43:2d:b9:77:3c:34:
         43:44:fc:7c:7c:8c:be:b5:13:8f:ee:ad:89:b9:62:00:84:d0:
         ff:fe:1f:47:60:9c:08:b2:74:f2:cf:6f:68:10:8f:6a:57:2a:
         68:92:04:be:3c:31:56:8c:30:6d:11:e0:7d:53:53:4b:59:8a:
         91:ef:da:5a:40:f8:b6:0e:39:28:7b:82:2c:eb:03:03:ff:a9:
         da:a9:3e:05:d7:20:5b:8e:bb:f9:43:bc:25:82:cd:5c:27:3c:
         eb:21:60:ed:ed:93:d0:2f:1d:9a:2b:cb:d2:e6:b4:06:cf:6c:
         1e:d2:f2:e3:55:14:c8:7a:0c:f8:62:f0:d8:92:19:27:57:cd:
         c8:74:5b:0d:4a:75:c0:87:2d:ce:20:00:ce:90:f9:35:82:8e:
         eb:00:f3:b0:b0:42:7f:f1:63:21:e7:6e:d3:04:4a:5e:7c:d5:
         34:ca:39:98:92:8a:dd:b8:14:40:0b:ad:2c:18:d1:58:35:9f:
         4c:60:2c:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSx1S2Ne4jTRjW76AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw
MjgzMB4XDTI0MTAxNzE3MDkzNloXDTI1MDExNTE4MDkzNlowLzEtMCsGA1UEAxMk
ZjFiYzc3NTgtZDNkNS00ZjUyLWJjNjgtNTVjY2IwYjljMjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WIs+n/3DVfDfcT93cg0rX4P55qZUitr+598
5rNwRYjhdG9yvnA2A/Icnu54lY7Ux63fQlObht5HFVobylbTLdrm+21fhfhJzjTD
i1vuW64tAMH/ICXUa8md/YvQ7P5lXxk25XyL1rApOFamErSpBvTxzdIdgIPQtEcf
0ObX6DhmI1hHyDtBlmtUIRiuYacsTj9cNrXeCm+wR80V1vW9aJdAZ60gkQxfNyor
fjkAURJMOHe9FzTNjd7ltZSdQ3gsqF9UZEGBR5yq9SWGpgCdVeggpna8UBtMRyaP
n0sEjnaTGQRM2BxXmoHbwCO2BpicvRthIIsVvCI9mhBmOXlvGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCP2/xSBl3SMIq42LqKSumXfWFe7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1
OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvYjZkZTg4ODQtYzVjYy0z
ZGI1LTkyMjgtNTJjY2ZhODdhYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy
NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy
MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy
NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0awEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsQPJijkponntpWn+JDSrX6I2lIj+9kJ/RBF3PPFobnvCpYMvVVL6Tk
YgvfCtIMiIDb7MFZf5eHPENDcNfAWrb4VEMtuXc8NENE/Hx8jL61E4/urYm5YgCE
0P/+H0dgnAiydPLPb2gQj2pXKmiSBL48MVaMMG0R4H1TU0tZipHv2lpA+LYOOSh7
gizrAwP/qdqpPgXXIFuOu/lDvCWCzVwnPOshYO3tk9AvHZory9LmtAbPbB7S8uNV
FMh6DPhi8NiSGSdXzch0Ww1KdcCHLc4gAM6Q+TWCjusA87CwQn/xYyHnbtMESl58
1TTKOZiSit24FEALrSwY0Vg1n0xgLCc=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:09 2024 by rpki-client on console-ams.rpki-client.org