Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa
File:                     4a514b4a-2e45-3def-b73d-08af34648514.roa (raw, json)
Hash identifier:          pqbyvRCQs0mMEBcC1uvJcqf9QwKOdulBFtHK+Et89Nc=
Subject key identifier:   C8:76:32:A9:5F:AE:29:3E:F8:78:BB:C8:69:8E:CE:28:11:37:A8:A5
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F43285847BAC6A5801307244CDFEB3B60
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     11620
IP address blocks:        207.173.128.0/20 maxlen: 20
                          209.210.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:a5:80:13:07:24:4c:df:eb:3b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=9060c225-ac0e-40ee-b42b-99bd602cbd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:e0:d2:c8:a1:74:ed:ae:62:34:69:00:59:
                    9e:dd:b0:c0:75:53:74:7f:79:32:92:fc:ff:5f:a5:
                    70:44:0a:0d:21:85:b9:05:ab:48:69:34:05:cf:3e:
                    28:88:c0:78:da:8d:f9:ab:57:6f:df:06:34:45:38:
                    60:44:e7:02:d8:82:d0:1c:fe:39:86:30:e8:8d:a6:
                    4a:a7:5b:97:67:e4:ca:ca:fc:be:e0:a9:56:0e:db:
                    05:16:cc:e7:83:88:90:c7:cb:ff:5f:26:6d:70:cd:
                    a7:d9:a5:db:3a:9b:66:5c:c1:9d:54:3c:c2:35:15:
                    0f:80:14:ba:f8:90:e5:fc:91:97:99:05:19:8f:39:
                    7b:06:7a:bf:ea:bd:96:f4:bd:19:d5:63:77:02:33:
                    93:81:c9:b2:b0:3f:73:18:60:49:af:f2:81:4c:f6:
                    50:9b:87:4e:ae:38:31:eb:7c:23:82:6e:ab:3d:49:
                    c5:ba:4f:ab:c2:7d:03:82:8f:fb:45:a1:6c:b8:ef:
                    48:82:96:d7:df:f2:03:54:95:7e:84:2d:6a:c4:30:
                    49:91:ce:a4:07:34:58:88:21:c2:d6:75:b4:ed:e6:
                    d2:dc:ce:d5:13:21:5d:6e:14:b9:ac:08:95:ba:19:
                    81:bf:a2:0a:b3:bc:03:c8:29:cf:ce:d8:7e:2f:2f:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:76:32:A9:5F:AE:29:3E:F8:78:BB:C8:69:8E:CE:28:11:37:A8:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/4a514b4a-2e45-3def-b73d-08af34648514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.173.128.0/20
                  209.210.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:df:fb:7c:f6:f3:da:35:30:f9:ee:29:e7:e2:20:21:0b:
         25:00:aa:2f:8a:0f:f9:af:62:82:7f:f6:c2:b8:e2:e4:b8:65:
         41:c1:ff:1f:9a:9a:8b:43:0a:8d:1f:66:c1:ba:53:5e:52:88:
         5c:a4:5d:f7:05:15:8a:67:2a:48:f9:0c:c5:67:c7:72:93:0d:
         58:af:97:26:25:8d:bf:c2:28:cf:61:db:8b:0a:f5:1e:2b:ad:
         b1:21:99:d7:c8:07:0f:06:fe:24:c6:86:1b:e7:ad:3b:1d:b3:
         4b:d2:d7:64:94:56:69:93:3e:39:33:f4:a1:03:85:99:bd:b9:
         bf:62:b8:80:e1:3a:fc:d6:04:2b:29:b5:b9:fc:08:e0:d2:36:
         cd:a3:28:b7:5d:7e:29:20:24:b8:3c:cc:a6:da:7d:68:7f:9b:
         82:0f:1d:85:d7:7c:4d:be:ab:5a:50:f3:88:4d:a5:60:27:bf:
         61:29:59:b7:23:b9:ee:cb:a1:89:b0:d2:a0:72:9c:ab:6f:43:
         94:d0:76:4f:f7:47:0f:62:c2:a6:f9:fc:f0:e7:5e:2e:af:f1:
         cb:05:12:17:10:fb:ce:aa:1d:95:fa:30:fd:ea:4c:73:20:3f:
         cc:fb:f4:3a:78:93:23:cf:97:d5:70:12:5c:e4:dd:e4:5d:8c:
         a8:6a:cb:11
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEe6xqWAEwckTN/rO2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk
OTA2MGMyMjUtYWMwZS00MGVlLWI0MmItOTliZDYwMmNiZDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTTg0sihdO2uYjRpAFme3bDAdVN0f3kykvz/
X6VwRAoNIYW5BatIaTQFzz4oiMB42o35q1dv3wY0RThgROcC2ILQHP45hjDojaZK
p1uXZ+TKyvy+4KlWDtsFFszng4iQx8v/XyZtcM2n2aXbOptmXMGdVDzCNRUPgBS6
+JDl/JGXmQUZjzl7Bnq/6r2W9L0Z1WN3AjOTgcmysD9zGGBJr/KBTPZQm4dOrjgx
63wjgm6rPUnFuk+rwn0Dgo/7RaFsuO9IgpbX3/IDVJV+hC1qxDBJkc6kBzRYiCHC
1nW07ebS3M7VEyFdbhS5rAiVuhmBv6IKs7wDyCnPzth+Ly8gZwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMh2Mqlfrik++Hi7yGmOzigRN6ilMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvNGE1MTRiNGEtMmU0NS0z
ZGVmLWI3M2QtMDhhZjM0NjQ4NTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEz62AAwQA
0dL7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADDX3/t89vPaNTD57inn4iAhCyUAqi+KD/mvYoJ/9sK44uS4
ZUHB/x+amotDCo0fZsG6U15SiFykXfcFFYpnKkj5DMVnx3KTDVivlyYljb/CKM9h
24sK9R4rrbEhmdfIBw8G/iTGhhvnrTsds0vS12SUVmmTPjkz9KEDhZm9ub9iuIDh
OvzWBCsptbn8CODSNs2jKLddfikgJLg8zKbafWh/m4IPHYXXfE2+q1pQ84hNpWAn
v2EpWbcjue7LoYmw0qBynKtvQ5TQdk/3Rw9iwqb5/PDnXi6v8csFEhcQ+86qHZX6
MP3qTHMgP8z79Dp4kyPPl9VwElzk3eRdjKhqyxE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:33 2024 by rpki-client on console-ams.rpki-client.org