Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa
File:                     c385f14f-caf2-3315-957b-4d9e053824be.roa (raw, json)
Hash identifier:          duqdXWRCVk7BV5w3FuxuwnL4gH1HuKo8Wn1AtbUWGQI=
Subject key identifier:   06:D1:00:06:D0:94:64:35:41:0B:FF:83:5A:FB:9A:9D:BD:BB:86:53
Certificate issuer:       /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial:       010D0C9F432858470A8B19A0407198725C637D00
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa
Signing time:             Thu 29 Aug 2024 21:58:18 +0000
ROA not before:           Thu 29 Aug 2024 21:58:18 +0000
ROA not after:            Wed 27 Nov 2024 22:58:18 +0000
asID:                     40495
IP address blocks:        174.137.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0a:8b:19:a0:40:71:98:72:5c:63:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
        Validity
            Not Before: Aug 29 21:58:18 2024 GMT
            Not After : Nov 27 22:58:18 2024 GMT
        Subject: CN=3778849b-6bf9-4ed9-8e27-2413004040f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:c2:71:90:79:35:43:77:c4:92:c5:bf:ab:
                    94:61:97:76:6b:72:3d:65:8c:86:91:28:4b:37:76:
                    87:90:10:8d:15:b0:e3:de:32:9d:bb:c6:5f:4a:9b:
                    ba:6a:a9:ac:1b:ce:e0:13:8b:8d:f7:3e:e1:a1:f5:
                    1c:4e:f3:00:ab:eb:65:32:61:ad:25:0b:ca:05:06:
                    c7:79:47:e8:5f:8b:93:37:c2:ad:13:00:7c:09:78:
                    2c:17:34:ed:8f:a8:ab:3e:b8:28:f3:79:c9:23:87:
                    a2:f8:37:e8:f8:0b:f5:58:35:50:81:fb:3d:3e:18:
                    c5:56:1e:00:63:70:ed:14:df:2f:e1:d0:63:8c:d3:
                    eb:79:a3:83:08:78:38:f7:26:f4:ef:ca:33:4d:f2:
                    8c:36:57:6c:33:96:f4:b8:1d:64:2e:42:64:3b:ad:
                    ad:44:d2:6d:4d:2f:ec:c0:6f:e3:b8:46:8a:cf:58:
                    f8:28:67:78:ae:2e:96:bd:31:5d:da:4e:22:44:4d:
                    3a:bc:30:52:05:90:cf:86:b5:b7:a4:fc:86:4a:cd:
                    40:2b:f7:43:e2:99:a1:51:27:cd:73:01:16:d2:fd:
                    61:2f:2f:3a:1e:58:12:da:61:62:b6:35:76:ea:f6:
                    a4:87:84:bb:7b:01:82:2b:ee:a0:9c:6c:41:4f:0d:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D1:00:06:D0:94:64:35:41:0B:FF:83:5A:FB:9A:9D:BD:BB:86:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/c385f14f-caf2-3315-957b-4d9e053824be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:78:be:af:32:9b:ab:bb:d2:2b:f4:b2:ba:03:a8:bd:15:
         79:f3:ff:1b:0e:fe:2f:8f:c9:41:05:52:68:30:7e:a3:93:c4:
         8a:93:10:b4:e8:6e:00:f9:7a:7f:a2:af:64:cb:80:42:40:0a:
         ba:cf:35:14:37:83:26:65:8f:24:d3:ab:fe:ad:db:e7:15:5b:
         73:a3:49:fd:99:dc:3e:dd:d8:30:7a:28:99:6e:96:4f:8a:c0:
         1e:7c:fb:65:f6:a2:47:08:8e:24:a7:81:e1:a6:06:8a:34:98:
         22:c2:f2:e0:98:b8:82:ab:cc:5d:39:94:f7:5a:44:ef:ef:6a:
         c0:34:62:e6:aa:89:7e:0c:6a:42:ac:89:9c:1b:24:8c:19:40:
         d6:03:7e:40:8c:7c:53:41:43:40:2c:df:c5:df:1e:61:16:a5:
         46:f4:61:13:4e:00:1f:cb:f6:7d:d7:b1:4b:47:2a:db:cc:4e:
         a7:2d:7d:1e:6e:48:42:0a:42:11:24:c7:b9:bd:f6:f6:b3:f2:
         1a:bd:a0:1c:11:33:5f:3e:7e:ee:8f:8f:1a:4e:d7:7e:f4:86:
         1e:a9:a2:4f:78:1f:95:ab:5d:7e:df:a3:28:03:fa:38:3f:bf:
         63:16:07:c1:de:c1:30:f2:cc:c5:97:3a:52:82:eb:95:81:1f:
         0c:91:9b:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcKixmgQHGYclxjfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx
ODhmMB4XDTI0MDgyOTIxNTgxOFoXDTI0MTEyNzIyNTgxOFowLzEtMCsGA1UEAxMk
Mzc3ODg0OWItNmJmOS00ZWQ5LThlMjctMjQxMzAwNDA0MGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncTCcZB5NUN3xJLFv6uUYZd2a3I9ZYyGkShL
N3aHkBCNFbDj3jKdu8ZfSpu6aqmsG87gE4uN9z7hofUcTvMAq+tlMmGtJQvKBQbH
eUfoX4uTN8KtEwB8CXgsFzTtj6irPrgo83nJI4ei+Dfo+Av1WDVQgfs9PhjFVh4A
Y3DtFN8v4dBjjNPreaODCHg49yb078ozTfKMNldsM5b0uB1kLkJkO62tRNJtTS/s
wG/juEaKz1j4KGd4ri6WvTFd2k4iRE06vDBSBZDPhrW3pPyGSs1AK/dD4pmhUSfN
cwEW0v1hLy86HlgS2mFitjV26vakh4S7ewGCK+6gnGxBTw1w+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbRAAbQlGQ1QQv/g1r7mp29u4ZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw
ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYzM4NWYxNGYtY2FmMi0z
MzE1LTk1N2ItNGQ5ZTA1MzgyNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj
NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk
MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0
NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErolwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2JeL6vMpuru9Ir9LK6A6i9FXnz/xsO/i+PyUEFUmgwfqOTxIqTELTo
bgD5en+ir2TLgEJACrrPNRQ3gyZljyTTq/6t2+cVW3OjSf2Z3D7d2DB6KJlulk+K
wB58+2X2okcIjiSngeGmBoo0mCLC8uCYuIKrzF05lPdaRO/vasA0YuaqiX4MakKs
iZwbJIwZQNYDfkCMfFNBQ0As38XfHmEWpUb0YRNOAB/L9n3XsUtHKtvMTqctfR5u
SEIKQhEkx7m99vaz8hq9oBwRM18+fu6PjxpO1370hh6pok94H5WrXX7foygD+jg/
v2MWB8HewTDyzMWXOlKC65WBHwyRm6c=
-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:27 2024 by rpki-client on console-ams.rpki-client.org