Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa
File:                     abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa (raw, json)
Hash identifier:          mKDmscq7YFMpM+Dfa3CVBj/pbM1z+wY4MIcJBA266Do=
Subject key identifier:   C9:47:DC:09:37:0E:20:D2:F7:A1:7A:5D:B8:90:A3:D6:23:64:E0:5C
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F4328584777C63E437B7AA75075C71F00
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     14618
IP address blocks:        199.96.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:3e:43:7b:7a:a7:50:75:c7:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=df3c03c8-5a92-438b-ad02-64fdf43abf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:32:75:22:12:78:67:dc:21:55:a2:fb:97:
                    28:dd:20:fb:25:31:cc:51:de:bb:82:43:5a:4d:ac:
                    d1:b1:5c:98:4b:b2:0f:bf:4b:4f:7e:58:37:b2:b4:
                    03:fe:2a:b5:5a:dd:bf:34:7a:44:8c:ae:16:de:e9:
                    17:a3:9d:18:2d:27:c5:10:82:32:f7:d8:1d:89:c3:
                    d0:80:c4:97:03:af:97:ff:97:a5:ee:03:cc:6f:5e:
                    a5:6a:b8:f0:2f:36:65:c0:b4:63:c7:a4:0e:ed:64:
                    d0:6a:ce:44:6d:98:98:02:dd:0d:06:42:27:58:8e:
                    1b:5a:29:a6:98:30:75:6b:64:fe:db:74:56:f2:ca:
                    aa:23:32:80:03:dd:bd:de:81:d9:dc:0c:22:3c:46:
                    94:5c:4a:f3:ea:47:24:4a:46:e4:2a:a1:a1:d2:92:
                    fd:eb:9c:2f:ac:ce:51:64:64:6a:93:9d:37:c1:e1:
                    23:f5:95:4c:ec:2e:f2:4b:87:a3:fc:d0:f6:08:54:
                    72:1c:ea:1e:8f:2e:36:a6:48:dc:96:49:d5:73:aa:
                    64:db:b2:9f:da:98:1f:09:ba:d1:48:c4:54:7e:c2:
                    cf:ee:a4:b8:7e:51:0d:26:f7:3a:69:c2:56:37:1c:
                    70:ba:20:0c:d3:ef:3b:66:04:5b:07:09:97:a7:a0:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:47:DC:09:37:0E:20:D2:F7:A1:7A:5D:B8:90:A3:D6:23:64:E0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/abe5c1e9-8e9f-3df1-8a3e-edd541c1f114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:86:c2:a9:05:cc:61:0c:a4:65:4c:ea:01:89:6d:e2:ca:34:
         73:ab:8b:f9:9d:d1:06:e6:7e:ea:7c:cd:a6:5f:93:df:47:ad:
         73:0b:58:66:2e:b4:d7:77:da:e9:7b:c5:7a:08:f3:7f:4c:38:
         44:50:3f:eb:ff:c8:0e:42:66:7d:95:95:c6:c9:20:1d:7c:6d:
         58:53:39:bd:99:35:b4:c0:58:86:9e:4f:0e:81:f6:5e:08:f0:
         b1:d5:d8:6c:2f:f3:8b:fd:d5:6f:e7:44:bb:62:f6:14:8a:f0:
         b2:30:ec:e2:ae:05:8f:02:a3:86:46:b3:f0:23:bc:ac:8d:e8:
         01:a7:48:c6:ae:20:df:0f:70:c9:6c:a3:42:02:60:dd:b8:5f:
         1c:ee:27:4c:6f:b6:eb:0d:e6:c0:b6:da:ad:3f:00:e0:ec:e5:
         9a:cd:c6:80:4c:f7:45:44:25:9a:cd:a1:51:8d:b6:90:06:13:
         2c:45:5a:68:8c:2d:c5:1f:c4:e7:b7:6d:1a:b8:76:87:3d:82:
         ea:ea:96:51:40:87:a1:25:b5:2e:17:d5:6e:75:85:a3:ae:39:
         97:8c:15:d9:12:81:fc:01:8a:13:ae:86:f3:49:65:9d:94:e0:
         7d:f1:8a:5b:f3:03:70:b2:ca:d9:20:da:ec:69:6d:90:bd:cf:
         1d:71:2b:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3xj5De3qnUHXHHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdkNmEwYmEtYzEyNC00NTQwLWI1ZWYtNmFiMjA5NDNh
ZjI0MB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk
ZGYzYzAzYzgtNWE5Mi00MzhiLWFkMDItNjRmZGY0M2FiZjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmagydSISeGfcIVWi+5co3SD7JTHMUd67gkNa
TazRsVyYS7IPv0tPflg3srQD/iq1Wt2/NHpEjK4W3ukXo50YLSfFEIIy99gdicPQ
gMSXA6+X/5el7gPMb16larjwLzZlwLRjx6QO7WTQas5EbZiYAt0NBkInWI4bWimm
mDB1a2T+23RW8sqqIzKAA9293oHZ3AwiPEaUXErz6kckSkbkKqGh0pL965wvrM5R
ZGRqk503weEj9ZVM7C7yS4ej/ND2CFRyHOoejy42pkjclknVc6pk27Kf2pgfCbrR
SMRUfsLP7qS4flENJvc6acJWNxxwuiAM0+87ZgRbBwmXp6AKDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlH3Ak3DiDS96F6XbiQo9YjZOBcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zN2Q2
YTBiYS1jMTI0LTQ1NDAtYjVlZi02YWIyMDk0M2FmMjQvYWJlNWMxZTktOGU5Zi0z
ZGYxLThhM2UtZWRkNTQxYzFmMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzdkNmEwYmEtYzEyNC00NTQwLWI1
ZWYtNmFiMjA5NDNhZjI0LzM3ZDZhMGJhLWMxMjQtNDU0MC1iNWVmLTZhYjIwOTQz
YWYyNC5jcmwwHwYDVR0jBBgwFoAUP8ZotPsCGtxVeLXUXxHyBKz91CEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zN2Q2YTBiYS1jMTI0LTQ1NDAtYjVlZi02YWIy
MDk0M2FmMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2CgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOGwqkFzGEMpGVM6gGJbeLKNHOri/md0Qbmfup8zaZfk99HrXMLWGYu
tNd32ul7xXoI839MOERQP+v/yA5CZn2VlcbJIB18bVhTOb2ZNbTAWIaeTw6B9l4I
8LHV2Gwv84v91W/nRLti9hSK8LIw7OKuBY8Co4ZGs/AjvKyN6AGnSMauIN8PcMls
o0ICYN24XxzuJ0xvtusN5sC22q0/AODs5ZrNxoBM90VEJZrNoVGNtpAGEyxFWmiM
LcUfxOe3bRq4doc9gurqllFAh6EltS4X1W51haOuOZeMFdkSgfwBihOuhvNJZZ2U
4H3xilvzA3Cyytkg2uxpbZC9zx1xKwY=
-----END CERTIFICATE-----
Generated at Tue Oct 22 18:48:49 2024 by rpki-client on console-ams.rpki-client.org