Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/19f28e60-05bc-3dcb-92ac-4014e4c29f70.roa
File:                     19f28e60-05bc-3dcb-92ac-4014e4c29f70.roa (raw, json)
Hash identifier:          gMxTgQyjdXiWu7YD6zWXEbRtsj86SUX7EF9TAfOQ6YQ=
Subject key identifier:   0C:B4:3D:DC:34:9D:3E:59:F4:CC:2A:C6:DD:73:D9:83:1F:6D:02:4D
Certificate issuer:       /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial:       010D0C9F43285847DE2BEB944D7ECA5B0059C2C0
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/19f28e60-05bc-3dcb-92ac-4014e4c29f70.roa
Signing time:             Wed 13 Nov 2024 17:17:54 +0000
ROA not before:           Wed 13 Nov 2024 17:17:54 +0000
ROA not after:            Tue 11 Feb 2025 17:17:54 +0000
asID:                     14537
IP address blocks:        184.171.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:de:2b:eb:94:4d:7e:ca:5b:00:59:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
        Validity
            Not Before: Nov 13 17:17:54 2024 GMT
            Not After : Feb 11 17:17:54 2025 GMT
        Subject: CN=ff81c8ad-2863-4335-826c-5c7f43a50138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:99:ca:e5:c0:4b:af:56:65:67:e0:e4:0c:45:
                    1e:34:8f:23:c1:7c:3a:6b:75:33:3c:eb:de:6d:08:
                    fb:d1:b9:30:f5:01:05:3a:3b:d0:4a:a1:b3:90:3f:
                    62:f0:87:32:82:44:a7:66:e8:3e:e9:ea:51:ce:97:
                    3a:70:d6:3b:55:7a:f3:02:9c:dc:f8:9e:f1:e0:40:
                    65:53:7d:3d:7f:32:a5:ab:c2:5d:28:8b:93:65:2e:
                    f6:d3:bb:6e:ec:2d:a6:e9:70:d4:cb:a0:bd:ec:9b:
                    7b:a5:80:06:be:3a:3e:8e:15:d3:1d:2e:26:58:20:
                    f1:29:f4:8f:21:47:d6:73:9a:f8:83:c6:02:42:56:
                    20:5c:33:f5:7e:a8:72:c1:91:3d:58:eb:fa:52:2f:
                    63:46:b8:9b:15:6f:ab:d1:3c:c9:9c:94:10:1f:f1:
                    64:1e:d9:3f:1b:29:c7:cb:9f:d5:4c:58:aa:1b:8d:
                    6e:58:0e:50:a8:0a:b6:a2:3e:50:b6:02:22:37:21:
                    15:02:a3:84:9b:4b:6e:01:6b:63:2b:1d:24:09:04:
                    d4:18:d9:0a:05:81:ab:92:3e:81:06:64:b6:10:83:
                    e2:7a:a0:ef:c4:46:7f:42:e8:08:84:48:55:94:05:
                    82:1a:6a:5c:b1:32:53:5c:74:02:97:7f:33:bd:1e:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B4:3D:DC:34:9D:3E:59:F4:CC:2A:C6:DD:73:D9:83:1F:6D:02:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/19f28e60-05bc-3dcb-92ac-4014e4c29f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl

            X509v3 Authority Key Identifier:
                keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.171.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:a0:13:90:d9:f1:ab:b2:15:6b:ff:d6:4a:f8:f2:9b:39:
         79:73:2d:c0:92:1f:b6:fe:1b:79:2f:96:2c:8f:7f:78:d6:75:
         63:00:cc:36:8d:01:83:6d:1a:e3:eb:cb:e9:b4:3f:4e:ff:96:
         c6:a3:9c:cf:94:44:c0:44:4f:04:48:14:78:00:68:cd:ff:04:
         f6:d9:52:c9:41:72:6f:e8:5e:02:d8:bb:f8:30:16:48:a1:62:
         e8:3e:24:02:f4:e1:24:01:4a:db:8e:b9:13:bb:3b:80:26:82:
         83:93:93:32:35:06:b4:d1:4c:da:af:9d:c5:1a:f4:77:fe:0b:
         3e:f6:ad:83:bb:01:28:8e:34:74:8c:f5:a3:52:3f:89:8a:fb:
         c1:cd:98:ec:bf:e1:fb:ba:8a:81:11:df:e0:23:7a:b1:d0:23:
         11:73:2b:ec:7d:62:8f:d8:cb:8d:4e:6d:3f:2d:37:15:c1:50:
         01:5b:be:ac:50:2a:59:fb:d5:5d:67:6e:44:ea:3c:4e:a3:2f:
         7b:27:3b:1c:ab:bf:9d:54:e1:ce:38:98:7a:9c:e8:46:60:e9:
         c2:75:43:94:c9:3d:0e:29:96:1e:0b:53:18:65:78:0f:96:67:
         8b:36:0c:d9:86:ef:ef:3c:87:76:73:6d:66:92:0b:aa:7f:83:
         7e:75:f4:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfeK+uUTX7KWwBZwsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl
NTVhMB4XDTI0MTExMzE3MTc1NFoXDTI1MDIxMTE3MTc1NFowLzEtMCsGA1UEAxMk
ZmY4MWM4YWQtMjg2My00MzM1LTgyNmMtNWM3ZjQzYTUwMTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJnK5cBLr1ZlZ+DkDEUeNI8jwXw6a3UzPOve
bQj70bkw9QEFOjvQSqGzkD9i8IcygkSnZug+6epRzpc6cNY7VXrzApzc+J7x4EBl
U309fzKlq8JdKIuTZS7207tu7C2m6XDUy6C97Jt7pYAGvjo+jhXTHS4mWCDxKfSP
IUfWc5r4g8YCQlYgXDP1fqhywZE9WOv6Ui9jRribFW+r0TzJnJQQH/FkHtk/GynH
y5/VTFiqG41uWA5QqAq2oj5QtgIiNyEVAqOEm0tuAWtjKx0kCQTUGNkKBYGrkj6B
BmS2EIPieqDvxEZ/QugIhEhVlAWCGmpcsTJTXHQCl38zvR5s1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAy0Pdw0nT5Z9Mwqxt1z2YMfbQJNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy
MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvMTlmMjhlNjAtMDViYy0z
ZGNiLTkyYWMtNDAxNGU0YzI5ZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2
ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz
ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5
OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuKuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALBZoBOQ2fGrshVr/9ZK+PKbOXlzLcCSH7b+G3kvliyPf3jWdWMAzDaN
AYNtGuPry+m0P07/lsajnM+URMBETwRIFHgAaM3/BPbZUslBcm/oXgLYu/gwFkih
Yug+JAL04SQBStuOuRO7O4AmgoOTkzI1BrTRTNqvncUa9Hf+Cz72rYO7ASiONHSM
9aNSP4mK+8HNmOy/4fu6ioER3+AjerHQIxFzK+x9Yo/Yy41ObT8tNxXBUAFbvqxQ
Kln71V1nbkTqPE6jL3snOxyrv51U4c44mHqc6EZg6cJ1Q5TJPQ4plh4LUxhleA+W
Z4s2DNmG7+88h3ZzbWaSC6p/g3519HA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:30 2024 by rpki-client on console-fra.rpki-client.org