Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa
File:                     0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa (raw, json)
Hash identifier:          ycmlLeQiSTSjrbWMAKxhzdcL8q28Bylaz2ATzBBiBZY=
Subject key identifier:   A8:08:B9:BE:73:3F:B7:B0:FD:FF:14:81:D8:4A:5F:05:AF:4F:FB:09
Certificate issuer:       /CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
Certificate serial:       010D0C9F43285847A04151127D5A78E80F7BA600
Authority key identifier: 63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     400562
IP address blocks:        204.152.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:51:12:7d:5a:78:e8:0f:7b:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=fe06a580-2d7a-4480-ba83-fa64c299c0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7a:61:92:04:b9:8e:9c:48:10:27:a6:b4:46:
                    06:58:06:33:7e:ec:16:5f:93:e9:e1:09:5c:5a:27:
                    79:60:bb:d4:4c:a7:82:cb:aa:13:84:0a:c3:aa:cb:
                    98:e3:03:c0:f2:75:17:a3:f8:85:df:93:83:d0:82:
                    f8:47:cd:fa:58:f6:26:05:3b:4c:a8:6d:97:d8:f1:
                    fa:d8:88:6b:5b:ef:7d:18:bf:0b:35:e4:10:2d:4a:
                    5d:a9:2b:a1:eb:94:fa:93:25:49:5a:5b:77:98:f8:
                    c6:13:40:2b:e5:ad:85:d7:88:0d:e7:14:9d:16:82:
                    df:1e:cd:f9:e1:e3:43:08:8d:17:e7:cb:60:a5:92:
                    a4:2c:5d:c6:3b:54:2e:3f:d6:2e:19:32:8b:96:c3:
                    10:cf:5b:2b:cd:3f:71:55:ff:60:be:1c:86:c6:ef:
                    46:2f:f6:71:27:21:7f:95:62:c5:e3:ba:e5:52:b3:
                    67:f5:ee:e8:ba:d4:04:7a:8a:9e:f3:42:a2:37:e6:
                    68:cf:fc:fe:a4:f7:f0:9b:b1:8e:82:54:c2:0e:a7:
                    1b:1c:51:16:3d:4a:fb:da:8e:b5:b2:67:79:e3:6e:
                    3e:c0:ea:c7:da:98:7a:69:1d:03:7e:a8:17:cb:23:
                    2a:11:57:3d:47:42:64:fd:09:84:74:15:6a:6f:7c:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:08:B9:BE:73:3F:B7:B0:FD:FF:14:81:D8:4A:5F:05:AF:4F:FB:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl

            X509v3 Authority Key Identifier:
                keyid:63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:be:9d:ff:f8:20:f3:52:94:ff:54:02:11:85:21:90:55:37:
         3f:a4:66:e2:9f:89:21:a2:4a:ce:1b:a8:be:f5:60:c7:aa:48:
         30:3c:fa:71:0b:c4:89:1e:7a:b9:9f:47:c4:a9:98:2d:e3:7c:
         5c:58:4f:ce:08:9f:3e:1f:34:49:09:71:27:1e:a1:41:f6:4b:
         50:88:74:89:c8:c9:e3:d4:30:64:95:fe:ed:a3:d9:db:c1:9f:
         f7:9c:62:32:a7:52:7d:29:f0:1f:81:ed:8a:cf:33:f9:8e:de:
         ee:35:12:4c:7e:49:56:2e:6f:67:7d:08:65:e7:b4:1f:98:e4:
         75:a5:87:ba:fa:f5:e0:b5:80:38:47:17:9d:8c:3f:64:a4:35:
         75:c7:34:b9:f0:83:2f:36:53:6a:0d:03:3e:a3:5e:56:3d:67:
         1b:e8:33:53:ca:d1:84:a7:04:44:ee:3f:32:c4:b1:3b:97:8b:
         6a:86:b8:2d:12:da:2d:32:cb:d4:72:32:8f:f2:38:f9:6d:63:
         0d:f0:d3:d1:0e:6e:71:5a:ed:96:da:1c:04:81:ef:81:1c:90:
         70:c2:28:c0:81:f3:b0:05:83:3e:91:08:3d:be:32:02:6d:20:
         a0:09:0d:91:d8:ca:cd:71:dc:fa:67:13:b0:0b:a5:0e:a1:6c:
         2e:fe:b3:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQVESfVp46A97pgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRjZTNiOWMtYmU5NC00NmVjLTg1YWEtZDkzZGRmZGQw
OGUyMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
ZmUwNmE1ODAtMmQ3YS00NDgwLWJhODMtZmE2NGMyOTljMGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3phkgS5jpxIECemtEYGWAYzfuwWX5Pp4Qlc
Wid5YLvUTKeCy6oThArDqsuY4wPA8nUXo/iF35OD0IL4R836WPYmBTtMqG2X2PH6
2IhrW+99GL8LNeQQLUpdqSuh65T6kyVJWlt3mPjGE0Ar5a2F14gN5xSdFoLfHs35
4eNDCI0X58tgpZKkLF3GO1QuP9YuGTKLlsMQz1srzT9xVf9gvhyGxu9GL/ZxJyF/
lWLF47rlUrNn9e7outQEeoqe80KiN+Zoz/z+pPfwm7GOglTCDqcbHFEWPUr72o61
smd5424+wOrH2ph6aR0DfqgXyyMqEVc9R0Jk/QmEdBVqb3x+jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgIub5zP7ew/f8UgdhKXwWvT/sJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZGNl
M2I5Yy1iZTk0LTQ2ZWMtODVhYS1kOTNkZGZkZDA4ZTIvMGVhMzk1YTUtNjM4ZS0z
NmYwLThlNmEtYjJkZjk1NzdjZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmRjZTNiOWMtYmU5NC00NmVjLTg1
YWEtZDkzZGRmZGQwOGUyLzZkY2UzYjljLWJlOTQtNDZlYy04NWFhLWQ5M2RkZmRk
MDhlMi5jcmwwHwYDVR0jBBgwFoAUY150DCN3JojLsMP64gE8rXy65xQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82ZGNlM2I5Yy1iZTk0LTQ2ZWMtODVhYS1kOTNk
ZGZkZDA4ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJgWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABy+nf/4IPNSlP9UAhGFIZBVNz+kZuKfiSGiSs4bqL71YMeqSDA8+nEL
xIkeermfR8SpmC3jfFxYT84Inz4fNEkJcSceoUH2S1CIdInIyePUMGSV/u2j2dvB
n/ecYjKnUn0p8B+B7YrPM/mO3u41Ekx+SVYub2d9CGXntB+Y5HWlh7r69eC1gDhH
F52MP2SkNXXHNLnwgy82U2oNAz6jXlY9ZxvoM1PK0YSnBETuPzLEsTuXi2qGuC0S
2i0yy9RyMo/yOPltYw3w09EObnFa7ZbaHASB74EckHDCKMCB87AFgz6RCD2+MgJt
IKAJDZHYys1x3PpnE7ALpQ6hbC7+s88=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:41 2024 by rpki-client on console-fra.rpki-client.org