Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa
File:                     7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa (raw, json)
Hash identifier:          dEWKid6YBiFz0nN0ie0pEtUffQPbxVGGZgvFvqsccJ4=
Subject key identifier:   44:3F:25:71:EF:32:7A:55:E8:B5:A9:01:03:FD:A3:DB:92:2A:F6:4B
Certificate issuer:       /CN=3228caa5-d014-404b-9e3d-61cdea1ff493
Certificate serial:       010D0C9F43285847A6263E3BE01ED738418BB880
Authority key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa
Signing time:             Thu 24 Oct 2024 15:41:11 +0000
ROA not before:           Thu 24 Oct 2024 15:41:11 +0000
ROA not after:            Wed 22 Jan 2025 16:41:11 +0000
asID:                     401438
IP address blocks:        198.200.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:26:3e:3b:e0:1e:d7:38:41:8b:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3228caa5-d014-404b-9e3d-61cdea1ff493
        Validity
            Not Before: Oct 24 15:41:11 2024 GMT
            Not After : Jan 22 16:41:11 2025 GMT
        Subject: CN=c2a0b02c-51b9-45c2-8ae2-608846fd3160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:fc:75:3d:eb:65:10:92:42:00:22:8e:c0:
                    06:0b:04:2c:09:3b:ea:f4:7a:87:8e:ae:48:df:4a:
                    7a:3a:e1:25:7c:8a:21:ff:8a:9f:8a:b0:fd:90:01:
                    c5:ac:7a:2a:14:16:ed:08:54:4e:36:04:52:7c:d1:
                    07:da:81:f8:19:11:09:57:63:40:f7:7f:f3:34:b1:
                    37:2d:1c:86:d4:46:2b:1b:e1:15:0a:49:7a:c2:5c:
                    be:7e:31:95:78:af:67:31:7b:a5:2b:4d:b9:07:0e:
                    ce:a0:ba:d8:8f:41:0a:6e:22:d1:b4:ff:1a:a5:a1:
                    7a:d7:cf:4e:fd:13:69:d5:49:cd:f4:86:73:09:bb:
                    10:98:2f:f8:9e:01:0d:f6:91:94:a8:fd:d8:2c:23:
                    db:2f:5b:3e:3f:d4:1b:3e:05:07:74:e0:0d:e9:91:
                    ae:2f:6b:0f:4e:12:0e:19:86:c5:17:df:93:1d:eb:
                    3a:77:f9:b6:a0:92:fb:fc:cd:21:13:6c:c8:bd:a7:
                    54:fb:7a:96:84:d5:60:47:d4:6d:4e:0a:87:e0:b2:
                    60:91:a5:25:fb:ea:0f:9f:b3:03:56:ba:df:b8:a5:
                    8c:80:af:14:76:3a:8b:ab:7b:f3:19:74:ed:ca:fd:
                    55:75:bd:c0:b9:e9:c0:b2:b1:41:8b:c9:fa:32:37:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3F:25:71:EF:32:7A:55:E8:B5:A9:01:03:FD:A3:DB:92:2A:F6:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl

            X509v3 Authority Key Identifier:
                keyid:61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:2f:10:f0:36:d3:11:14:25:db:82:ac:71:80:76:8d:e8:
         d7:3c:6f:32:0c:93:01:db:aa:2a:18:8f:a5:6d:93:98:f3:0e:
         42:3b:28:41:3a:4c:36:ba:54:ee:32:9c:75:0e:16:34:de:2c:
         8e:c1:01:05:eb:bc:e1:01:ed:79:79:9e:e7:c3:12:58:b8:26:
         32:0e:ab:08:49:d1:62:9c:bf:0c:9a:67:2c:a1:91:d1:9c:8d:
         9c:0c:b0:1c:84:16:85:56:40:9f:f2:ec:10:87:d1:7a:25:a4:
         a8:ee:3e:2c:6a:79:05:fe:d7:f4:28:aa:ee:c6:a3:38:a4:ac:
         ff:49:1c:d2:55:43:e0:35:0f:6f:8f:5e:11:4a:e7:18:3a:5c:
         08:fc:f7:ea:64:c6:2d:da:5c:ed:e7:d7:ff:c7:8b:f3:52:a2:
         62:3b:b5:67:e0:7c:0e:f5:b3:16:5f:cf:0a:e5:b6:a6:2b:48:
         25:03:c1:19:45:98:da:56:9e:77:e1:3d:35:73:f0:5a:fe:24:
         b1:1b:f0:d3:27:34:06:38:27:d2:0f:a1:da:88:b3:99:8c:5d:
         07:41:f7:c2:6e:01:b6:d5:7c:c1:7d:81:cc:06:87:26:23:72:
         70:ca:e6:60:d2:3e:f7:6f:fe:65:0c:ee:1c:7c:15:98:8f:10:
         f9:1e:b6:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEemJj474B7XOEGLuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyOGNhYTUtZDAxNC00MDRiLTllM2QtNjFjZGVhMWZm
NDkzMB4XDTI0MTAyNDE1NDExMVoXDTI1MDEyMjE2NDExMVowLzEtMCsGA1UEAxMk
YzJhMGIwMmMtNTFiOS00NWMyLThhZTItNjA4ODQ2ZmQzMTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/z8dT3rZRCSQgAijsAGCwQsCTvq9HqHjq5I
30p6OuElfIoh/4qfirD9kAHFrHoqFBbtCFRONgRSfNEH2oH4GREJV2NA93/zNLE3
LRyG1EYrG+EVCkl6wly+fjGVeK9nMXulK025Bw7OoLrYj0EKbiLRtP8apaF6189O
/RNp1UnN9IZzCbsQmC/4ngEN9pGUqP3YLCPbL1s+P9QbPgUHdOAN6ZGuL2sPThIO
GYbFF9+THes6d/m2oJL7/M0hE2zIvadU+3qWhNVgR9RtTgqH4LJgkaUl++oPn7MD
VrrfuKWMgK8UdjqLq3vzGXTtyv1Vdb3AuenAsrFBi8n6MjdTRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEQ/JXHvMnpV6LWpAQP9o9uSKvZLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4
Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWExZmY0OTMvNzQ3MmI0NDMtZDI2Zi0z
ZDhmLThkODktYzJiOGRjMWRkNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzIyOGNhYTUtZDAxNC00MDRiLTll
M2QtNjFjZGVhMWZmNDkzLzMyMjhjYWE1LWQwMTQtNDA0Yi05ZTNkLTYxY2RlYTFm
ZjQ5My5jcmwwHwYDVR0jBBgwFoAUYXuo2hdAn1AEK9DeedP/eynSfV4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNk
ZWExZmY0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsjyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpcLxDwNtMRFCXbgqxxgHaN6Nc8bzIMkwHbqioYj6Vtk5jzDkI7KEE6
TDa6VO4ynHUOFjTeLI7BAQXrvOEB7Xl5nufDEli4JjIOqwhJ0WKcvwyaZyyhkdGc
jZwMsByEFoVWQJ/y7BCH0XolpKjuPixqeQX+1/Qoqu7GozikrP9JHNJVQ+A1D2+P
XhFK5xg6XAj89+pkxi3aXO3n1//Hi/NSomI7tWfgfA71sxZfzwrltqYrSCUDwRlF
mNpWnnfhPTVz8Fr+JLEb8NMnNAY4J9IPodqIs5mMXQdB98JuAbbVfMF9gcwGhyYj
cnDK5mDSPvdv/mUM7hx8FZiPEPkethI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org