Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ccd2ec1d-ac53-3374-b5b8-1837a3f97c69.roa
File:                     ccd2ec1d-ac53-3374-b5b8-1837a3f97c69.roa (raw, json)
Hash identifier:          qizKTjk9nD6P1MWCJycVpwdYXZ7WbCA2vJzAo2tPTf4=
Subject key identifier:   09:9A:B9:A4:B0:2C:24:32:69:FC:92:D6:1F:A8:C5:14:18:38:A9:EA
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF482190BBACF12B09EA280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ccd2ec1d-ac53-3374-b5b8-1837a3f97c69.roa
Signing time:             Fri 08 Nov 2024 15:04:56 +0000
ROA not before:           Fri 08 Nov 2024 15:04:56 +0000
ROA not after:            Thu 06 Feb 2025 15:04:56 +0000
asID:                     81
IP address blocks:        192.154.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:82:19:0b:ba:cf:12:b0:9e:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:56 2024 GMT
            Not After : Feb  6 15:04:56 2025 GMT
        Subject: CN=e88c839f-f47c-4e7e-a464-6bec7ec659ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:c1:de:a1:c4:ae:8a:b9:0a:dd:44:5a:50:
                    12:d6:06:39:d7:73:d5:a9:16:b5:98:fa:a2:fe:b3:
                    72:44:5f:cc:e5:a5:b3:5f:09:cb:ec:dd:93:5d:9c:
                    d7:fa:8a:87:03:a7:99:4d:7d:79:a9:b0:e1:67:a2:
                    da:c5:55:15:df:b1:68:fa:6d:7e:5b:ae:e9:9f:73:
                    62:5f:8b:ed:6c:13:07:7f:d5:53:3a:5a:c8:87:fa:
                    d1:58:96:a0:99:ae:21:66:c0:8b:e8:34:a9:7c:9f:
                    23:37:99:77:3b:06:0a:f9:c0:e2:67:21:7d:13:9d:
                    e6:29:ab:e3:04:9a:90:ea:f9:45:60:86:54:3e:bf:
                    93:a6:ac:36:9d:bf:92:80:5f:3b:f9:27:11:d0:e9:
                    2d:a5:70:0a:45:8e:fd:8f:3e:e4:1e:83:a6:e1:4d:
                    f6:42:cc:9f:95:21:0e:c1:e3:8d:9e:fc:22:f9:28:
                    a5:49:c4:f5:32:72:71:ac:79:b9:64:38:4a:c0:a8:
                    7f:04:a7:14:c6:19:5d:98:7a:37:dd:6c:be:db:8f:
                    8b:c5:7c:7e:6b:05:80:79:26:4f:b6:27:44:bf:0c:
                    b6:e8:fe:07:06:e4:6c:af:61:c8:29:90:17:bf:bc:
                    7c:11:0e:e3:6f:14:ee:cd:84:48:d0:bd:35:01:7f:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9A:B9:A4:B0:2C:24:32:69:FC:92:D6:1F:A8:C5:14:18:38:A9:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ccd2ec1d-ac53-3374-b5b8-1837a3f97c69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:98:d5:40:9b:9e:bc:ab:ca:1b:ec:23:09:74:5f:8e:4a:14:
         44:41:ee:8c:66:6a:d4:7a:99:68:c3:46:40:7d:64:14:36:f8:
         2e:b0:ed:2b:92:b4:f1:53:f4:59:ca:28:6f:70:f8:98:d1:95:
         f5:99:6d:f9:a5:72:1c:59:18:7a:47:a6:1e:29:00:a1:14:b2:
         32:6f:4e:86:2b:bb:9b:5a:ce:df:d6:e6:d9:a8:53:44:6f:56:
         e2:7a:02:d5:e1:e7:7c:fb:dc:30:67:0e:37:f1:3f:22:10:d3:
         df:54:15:bd:d5:3f:c8:6f:98:1b:8f:9c:05:d6:41:01:31:e8:
         bb:df:3b:27:11:ba:67:ab:7f:d6:b4:f8:7b:5d:ab:9a:d7:d0:
         df:ca:58:05:41:46:73:08:ef:9b:b7:20:30:bf:b4:a7:eb:5f:
         e7:10:9d:ba:ba:70:ad:f1:98:ee:e1:85:cd:71:00:68:62:69:
         ec:55:4d:00:84:a6:59:e3:1b:ce:32:fb:aa:89:38:91:7b:ab:
         28:0e:a8:8b:4f:db:f1:59:96:11:92:07:35:4b:5e:97:8a:08:
         44:1f:0a:ff:15:e7:94:3e:c4:21:b8:09:0d:19:a0:97:3e:8e:
         0f:c9:37:93:c9:b8:1c:8f:72:d4:09:dd:ae:ad:22:d5:a1:bc:
         94:8f:32:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP9IIZC7rPErCeooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1NloXDTI1MDIwNjE1MDQ1NlowLzEtMCsGA1UEAxMk
ZTg4YzgzOWYtZjQ3Yy00ZTdlLWE0NjQtNmJlYzdlYzY1OWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoDB3qHEroq5Ct1EWlAS1gY513PVqRa1mPqi
/rNyRF/M5aWzXwnL7N2TXZzX+oqHA6eZTX15qbDhZ6LaxVUV37Fo+m1+W67pn3Ni
X4vtbBMHf9VTOlrIh/rRWJagma4hZsCL6DSpfJ8jN5l3OwYK+cDiZyF9E53mKavj
BJqQ6vlFYIZUPr+Tpqw2nb+SgF87+ScR0OktpXAKRY79jz7kHoOm4U32QsyflSEO
weONnvwi+SilScT1MnJxrHm5ZDhKwKh/BKcUxhldmHo33Wy+24+LxXx+awWAeSZP
tidEvwy26P4HBuRsr2HIKZAXv7x8EQ7jbxTuzYRI0L01AX+i7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmauaSwLCQyafyS1h+oxRQYOKnqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvY2NkMmVjMWQtYWM1My0z
Mzc0LWI1YjgtMTgzN2EzZjk3YzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJo1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiY1UCbnryryhvsIwl0X45KFERB7oxmatR6mWjDRkB9ZBQ2+C6w7SuS
tPFT9FnKKG9w+JjRlfWZbfmlchxZGHpHph4pAKEUsjJvToYru5tazt/W5tmoU0Rv
VuJ6AtXh53z73DBnDjfxPyIQ099UFb3VP8hvmBuPnAXWQQEx6LvfOycRumerf9a0
+Htdq5rX0N/KWAVBRnMI75u3IDC/tKfrX+cQnbq6cK3xmO7hhc1xAGhiaexVTQCE
plnjG84y+6qJOJF7qygOqItP2/FZlhGSBzVLXpeKCEQfCv8V55Q+xCG4CQ0ZoJc+
jg/JN5PJuByPctQJ3a6tItWhvJSPMho=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:28 2024 by rpki-client on console-ams.rpki-client.org