Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa
File:                     70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa (raw, json)
Hash identifier:          mEhv0Eb0qUZzrsdAksG3s+G5U/9nz5+TD3becD5QWE8=
Subject key identifier:   16:33:D8:6A:9B:54:2C:8D:44:7B:9B:44:58:BB:E1:C9:E3:83:58:28
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584785BBABE696814497AA65E880
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     396375
IP address blocks:        216.30.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:ab:e6:96:81:44:97:aa:65:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=e721ffd7-ea7d-454d-b49f-74cc30be4129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:c4:63:3a:c7:3b:d2:43:a6:50:d8:7f:99:
                    e2:f1:c8:78:6d:21:a3:86:7b:6a:d1:32:49:ce:ae:
                    28:54:9e:0b:b5:a1:8f:36:f8:58:6c:1f:70:c9:48:
                    65:66:17:77:1d:5f:0a:c5:2d:26:9b:e3:f8:c6:85:
                    73:c2:f2:ac:f9:e2:02:bd:3f:9e:4e:7a:a3:19:5a:
                    e3:31:6d:32:71:88:73:e5:cb:f0:c4:db:7a:03:49:
                    58:12:7b:f0:54:fd:5d:53:0e:34:49:2a:22:94:cc:
                    19:c3:45:93:0f:d6:51:a2:51:d2:b9:04:ff:2d:a4:
                    e9:68:68:e0:7f:e1:6d:54:bf:70:52:33:85:6d:fd:
                    35:c8:44:de:94:7d:6e:b5:8b:48:4c:00:64:ad:8e:
                    cb:d0:18:35:f2:6c:9a:dc:4f:46:91:84:8f:36:ba:
                    ac:b1:11:f8:31:43:29:d2:af:0e:d8:02:c7:66:45:
                    81:c7:75:e0:3f:a9:37:65:c3:93:eb:65:6d:4b:e8:
                    e8:6e:83:35:07:87:d7:f8:c9:4f:29:ec:ad:b7:07:
                    39:7d:a5:df:17:fb:3a:44:b3:dc:75:6a:88:fc:b8:
                    d4:3a:fe:71:b2:ee:1f:29:c0:ee:c5:88:e0:8b:3e:
                    75:aa:4c:cb:9d:7d:a1:87:4d:66:84:21:1e:ff:3a:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:D8:6A:9B:54:2C:8D:44:7B:9B:44:58:BB:E1:C9:E3:83:58:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.30.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:84:3b:51:dc:73:61:c5:41:4e:00:e5:50:f3:f2:c3:a7:
         27:36:be:93:3f:c5:b4:08:a9:0e:ec:33:7c:e4:a5:28:9e:74:
         37:36:2a:44:cf:9b:47:4c:5b:22:41:bc:12:13:84:61:ca:8e:
         31:5c:cd:92:46:06:1a:9d:14:75:7b:9d:b3:ce:f7:8d:80:53:
         17:f3:06:17:d2:79:34:23:46:f8:2f:ba:82:67:29:88:0c:0f:
         2a:6c:7e:eb:0d:2e:6f:e9:32:53:98:9d:a6:31:96:18:a6:e9:
         7e:61:c3:6f:bd:e4:a6:8d:c3:d4:0b:ef:7f:bd:c8:c5:24:78:
         48:53:e0:66:3b:8f:ba:c5:05:34:1c:87:b5:a6:32:3d:35:4b:
         84:d7:68:09:09:80:45:a9:8a:4a:24:3c:36:de:3b:80:32:c5:
         8e:8f:93:3a:ac:e6:1d:69:92:0a:82:ca:03:fa:c5:16:f9:9a:
         fa:49:c0:4e:08:91:71:47:fa:b6:d0:54:03:ec:85:b0:83:ed:
         be:a6:91:86:b8:f0:42:c2:23:74:46:81:f3:3c:3c:ea:49:ec:
         02:ff:76:43:c2:e9:20:c3:7d:05:de:09:77:1c:77:6e:90:94:
         dd:60:1e:ab:29:6f:38:a3:08:a3:c9:aa:3e:50:9d:5e:80:1c:
         b1:aa:45:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeFu6vmloFEl6pl6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI0MTAxMzAxMDAzMVoXDTI1MDExMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZTcyMWZmZDctZWE3ZC00NTRkLWI0OWYtNzRjYzMwYmU0MTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArprEYzrHO9JDplDYf5ni8ch4bSGjhntq0TJJ
zq4oVJ4LtaGPNvhYbB9wyUhlZhd3HV8KxS0mm+P4xoVzwvKs+eICvT+eTnqjGVrj
MW0ycYhz5cvwxNt6A0lYEnvwVP1dUw40SSoilMwZw0WTD9ZRolHSuQT/LaTpaGjg
f+FtVL9wUjOFbf01yETelH1utYtITABkrY7L0Bg18mya3E9GkYSPNrqssRH4MUMp
0q8O2ALHZkWBx3XgP6k3ZcOT62VtS+joboM1B4fX+MlPKeyttwc5faXfF/s6RLPc
dWqI/LjUOv5xsu4fKcDuxYjgiz51qkzLnX2hh01mhCEe/zq59wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYz2GqbVCyNRHubRFi74cnjg1goMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvNzBjMTM2ZWEtMGNiOS0z
ZWQzLWE5MjMtZDYxN2Q5Yzg5NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2B6bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvqhDtR3HNhxUFOAOVQ8/LDpyc2vpM/xbQIqQ7sM3zkpSiedDc2KkTP
m0dMWyJBvBIThGHKjjFczZJGBhqdFHV7nbPO942AUxfzBhfSeTQjRvgvuoJnKYgM
DypsfusNLm/pMlOYnaYxlhim6X5hw2+95KaNw9QL73+9yMUkeEhT4GY7j7rFBTQc
h7WmMj01S4TXaAkJgEWpikokPDbeO4AyxY6Pkzqs5h1pkgqCygP6xRb5mvpJwE4I
kXFH+rbQVAPshbCD7b6mkYa48ELCI3RGgfM8POpJ7AL/dkPC6SDDfQXeCXccd26Q
lN1gHqspbzijCKPJqj5QnV6AHLGqRf0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:40 2024 by rpki-client on console-fra.rpki-client.org