Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa
File:                     a810c427-52bf-3069-889e-49d7c3d307dd.roa (raw, json)
Hash identifier:          LZaWdwX9o/ea6iq4RfG4MLw4MFx8cL2fX0DDL0724uo=
Subject key identifier:   DD:9B:BF:DA:C9:33:CB:93:25:36:C5:CF:97:C1:19:79:0A:11:5B:D3
Certificate issuer:       /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial:       010D0C9F43285847CE966462A6AD99C14366FF00
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa
Signing time:             Fri 08 Nov 2024 03:19:29 +0000
ROA not before:           Fri 08 Nov 2024 03:19:29 +0000
ROA not after:            Thu 06 Feb 2025 03:19:29 +0000
asID:                     8075
IP address blocks:        204.209.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:96:64:62:a6:ad:99:c1:43:66:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
        Validity
            Not Before: Nov  8 03:19:29 2024 GMT
            Not After : Feb  6 03:19:29 2025 GMT
        Subject: CN=c0d65e2f-3e6a-4659-8b04-ba166114a9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:71:ae:68:43:14:38:e7:48:d1:21:a9:74:
                    62:8f:16:3c:76:4f:69:4f:c1:ca:34:0f:db:f3:ed:
                    0f:3d:4e:76:06:17:bf:fd:a8:5b:fa:50:06:e0:35:
                    16:00:9b:e4:e1:e7:86:42:94:ab:9d:ae:b9:c7:8e:
                    5f:cb:80:a6:9d:3c:94:c8:13:5c:44:f8:4d:dc:a5:
                    0d:1f:4c:b8:be:07:c9:94:2a:51:27:f8:51:0a:d4:
                    2a:51:1a:c1:1c:f3:09:3e:51:c1:81:bf:49:af:29:
                    c1:30:e3:70:e2:82:33:96:7f:51:ed:3e:c8:88:54:
                    f1:6f:64:30:24:b0:51:37:6a:d2:4d:80:1b:da:5b:
                    7f:48:52:9a:d3:b9:0e:ae:7a:3b:4a:db:ff:be:44:
                    ef:42:e1:41:96:84:60:b4:eb:1a:0a:3f:df:ae:f5:
                    f4:16:27:23:0c:eb:83:91:ae:d8:2f:86:cf:f7:53:
                    1b:bd:1c:82:91:30:49:8c:52:85:d4:24:02:10:5f:
                    76:2f:ce:ee:97:d3:dd:f9:82:96:5d:35:dd:4d:ad:
                    60:7f:8d:61:c1:4a:15:75:63:fc:f2:2d:99:fb:41:
                    80:f9:95:d0:71:cc:72:d9:4f:0c:60:21:18:e6:3d:
                    7f:1c:ce:5c:e5:72:c1:f9:9a:f3:a1:d9:2a:93:80:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9B:BF:DA:C9:33:CB:93:25:36:C5:CF:97:C1:19:79:0A:11:5B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl

            X509v3 Authority Key Identifier:
                keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ed:69:56:11:f0:47:f2:fa:ca:2f:5a:9c:d3:42:de:1c:bb:
         fc:65:be:85:40:f8:0b:43:a1:41:65:7a:0e:6d:74:bf:c7:ee:
         73:08:65:20:84:44:d5:5b:0a:8c:51:71:2d:18:48:52:89:4b:
         e0:4e:cf:fb:2e:08:48:5d:16:62:32:9c:c0:cb:35:08:09:3a:
         61:e5:73:1c:dd:f2:ac:6e:ef:8a:7a:f9:fd:21:f1:b8:26:2b:
         fe:57:22:8c:34:0b:4b:92:2b:ef:eb:58:99:ef:a8:14:66:83:
         42:e0:cf:04:6a:b2:5b:f9:69:2e:dd:76:41:97:99:8c:ca:c2:
         aa:9c:61:b8:41:59:b3:35:d0:08:b6:2d:b2:24:19:24:dc:0f:
         14:56:18:47:80:5b:b7:99:6e:ac:bb:9f:72:65:e2:0d:91:14:
         17:14:26:f7:e8:52:cd:a0:00:d0:b3:5b:46:51:83:d2:51:f3:
         8f:91:ed:1f:25:40:8e:02:6e:3d:05:a2:46:95:ed:ea:d9:d7:
         a3:41:e6:72:49:94:d9:3b:13:d5:b8:5d:05:22:6b:c5:4e:5d:
         af:50:f6:7f:db:4c:a0:d9:23:bb:f6:7e:3b:69:89:a6:64:61:
         f6:f0:de:92:05:0d:71:90:f0:d7:e7:b9:73:b8:0b:11:45:f6:
         b1:55:56:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfOlmRipq2ZwUNm/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBi
NjczMB4XDTI0MTEwODAzMTkyOVoXDTI1MDIwNjAzMTkyOVowLzEtMCsGA1UEAxMk
YzBkNjVlMmYtM2U2YS00NjU5LThiMDQtYmExNjYxMTRhOWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9RxrmhDFDjnSNEhqXRijxY8dk9pT8HKNA/b
8+0PPU52Bhe//ahb+lAG4DUWAJvk4eeGQpSrna65x45fy4CmnTyUyBNcRPhN3KUN
H0y4vgfJlCpRJ/hRCtQqURrBHPMJPlHBgb9JrynBMONw4oIzln9R7T7IiFTxb2Qw
JLBRN2rSTYAb2lt/SFKa07kOrno7Stv/vkTvQuFBloRgtOsaCj/frvX0FicjDOuD
ka7YL4bP91MbvRyCkTBJjFKF1CQCEF92L87ul9Pd+YKWXTXdTa1gf41hwUoVdWP8
8i2Z+0GA+ZXQccxy2U8MYCEY5j1/HM5c5XLB+Zrzodkqk4DEAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2bv9rJM8uTJTbFz5fBGXkKEVvTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDFk
OGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvYTgxMGM0MjctNTJiZi0z
MDY5LTg4OWUtNDlkN2MzZDMwN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAxZDhjZjgtNGNjYS00Mjk1LThm
M2ItOTE2ZGNkNTBiNjczLzYwMWQ4Y2Y4LTRjY2EtNDI5NS04ZjNiLTkxNmRjZDUw
YjY3My5jcmwwHwYDVR0jBBgwFoAUtfu5dULYLw99YW7jd6Gh7U33ILswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZk
Y2Q1MGI2NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNESMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjtaVYR8Efy+sovWpzTQt4cu/xlvoVA+AtDoUFleg5tdL/H7nMIZSCE
RNVbCoxRcS0YSFKJS+BOz/suCEhdFmIynMDLNQgJOmHlcxzd8qxu74p6+f0h8bgm
K/5XIow0C0uSK+/rWJnvqBRmg0LgzwRqslv5aS7ddkGXmYzKwqqcYbhBWbM10Ai2
LbIkGSTcDxRWGEeAW7eZbqy7n3Jl4g2RFBcUJvfoUs2gANCzW0ZRg9JR84+R7R8l
QI4Cbj0FokaV7erZ16NB5nJJlNk7E9W4XQUia8VOXa9Q9n/bTKDZI7v2fjtpiaZk
Yfbw3pIFDXGQ8NfnuXO4CxFF9rFVVlw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:19 2024 by rpki-client on console-fra.rpki-client.org