Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/afb1717a-4a5a-3704-84f4-f0c670b0914c.roa
File:                     afb1717a-4a5a-3704-84f4-f0c670b0914c.roa (raw, json)
Hash identifier:          c3RjoX0FtJbtVMG7WYUyIr5nc2JDFsOs+YpjSCRxrx8=
Subject key identifier:   30:32:B7:6B:AD:CF:64:D5:34:62:79:04:B4:97:6E:40:8A:70:DC:11
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584785BBA8BC1EE40721E5F1E000
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/afb1717a-4a5a-3704-84f4-f0c670b0914c.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     4922
IP address blocks:        24.149.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a8:bc:1e:e4:07:21:e5:f1:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=b214724b-ebae-46f6-92ba-c95a9879a3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:6e:87:bf:e7:ee:84:9b:4e:af:a1:0d:db:
                    0a:78:51:19:ae:56:2d:62:6c:ec:3d:b7:4c:4a:10:
                    60:a0:9b:0f:17:3a:5a:85:98:68:ac:bf:40:a7:39:
                    33:9d:82:fe:6f:af:06:ac:c5:83:d0:b9:e9:58:98:
                    73:16:92:e3:16:68:42:ed:56:2a:dc:1e:0f:0f:a3:
                    70:2d:e4:63:5c:9c:10:2a:74:10:22:d1:a9:c2:31:
                    37:ba:18:bc:58:99:36:38:11:70:95:11:12:37:6e:
                    dc:33:37:80:d0:22:d3:dd:8d:ed:ad:f4:e1:f1:ad:
                    c5:ad:5f:82:58:8f:bf:de:e5:a2:29:18:5e:af:1b:
                    22:80:28:b2:63:b4:69:dd:ab:cd:e4:36:45:6c:ec:
                    3a:4a:cb:5f:4c:c1:5f:39:74:40:42:d5:d0:84:4c:
                    27:ca:29:3e:85:1c:1e:ab:7a:c8:60:de:c9:a5:2c:
                    cc:5e:c1:8c:8e:5c:5f:e7:72:e9:19:7b:15:62:bc:
                    42:39:1d:81:48:c3:0a:e0:37:f1:2d:07:4a:b6:0f:
                    81:ad:b6:88:6f:c4:61:1a:c4:52:43:b6:bc:d0:ea:
                    a1:f0:ed:78:31:76:54:f5:ea:bc:24:ff:63:0f:af:
                    d3:8f:5b:02:ae:6b:f2:8b:72:31:e8:ff:f1:bd:97:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:B7:6B:AD:CF:64:D5:34:62:79:04:B4:97:6E:40:8A:70:DC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/afb1717a-4a5a-3704-84f4-f0c670b0914c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:fe:dd:e0:fc:97:27:fb:ee:5c:be:df:8f:7a:f6:bd:5b:a0:
         93:f6:11:4b:5a:32:dd:31:ea:3a:c5:ea:c4:bd:b2:aa:eb:8a:
         f1:21:da:2a:1c:a0:a0:70:fa:a0:5c:9a:26:37:a9:d2:5f:a0:
         07:5d:39:5e:d1:2f:1f:3c:62:de:e6:db:b6:8f:b5:13:1e:71:
         43:08:eb:78:37:28:b8:27:41:0d:e1:db:9b:75:1b:b7:de:93:
         0c:76:13:6d:53:47:f6:30:26:13:97:91:be:93:30:df:31:9f:
         17:0e:aa:44:49:90:db:74:73:af:50:49:d1:dc:a2:9b:b3:e6:
         a8:d0:21:59:24:f3:d4:c2:f8:2b:b5:18:a4:f8:32:e6:f6:0b:
         a2:68:15:fc:6c:34:b8:73:fc:d0:53:b1:05:85:18:e9:36:ce:
         68:c7:ff:4d:15:ad:99:d5:5f:3c:c3:f2:2f:dd:1b:1d:1d:ea:
         86:81:94:09:b3:0b:0b:aa:2d:dd:18:04:aa:86:f3:3f:6a:37:
         07:79:7a:06:77:1e:99:80:8d:81:9f:24:ce:5a:7c:c8:b6:01:
         f8:6d:60:ab:58:e1:40:c2:cd:c8:13:64:1d:c5:0c:a1:e4:03:
         43:40:ba:73:6b:58:14:8e:02:17:00:56:70:e6:de:82:6c:fb:
         e9:bb:bb:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeFu6i8HuQHIeXx4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI0MTAxMzAxMDAzMVoXDTI1MDExMTAyMDAzMVowLzEtMCsGA1UEAxMk
YjIxNDcyNGItZWJhZS00NmY2LTkyYmEtYzk1YTk4NzlhM2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaluh7/n7oSbTq+hDdsKeFEZrlYtYmzsPbdM
ShBgoJsPFzpahZhorL9ApzkznYL+b68GrMWD0LnpWJhzFpLjFmhC7VYq3B4PD6Nw
LeRjXJwQKnQQItGpwjE3uhi8WJk2OBFwlRESN27cMzeA0CLT3Y3trfTh8a3FrV+C
WI+/3uWiKRherxsigCiyY7Rp3avN5DZFbOw6SstfTMFfOXRAQtXQhEwnyik+hRwe
q3rIYN7JpSzMXsGMjlxf53LpGXsVYrxCOR2BSMMK4DfxLQdKtg+BrbaIb8RhGsRS
Q7a80Oqh8O14MXZU9eq8JP9jD6/Tj1sCrmvyi3Ix6P/xvZf4OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAyt2utz2TVNGJ5BLSXbkCKcNwRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYWZiMTcxN2EtNGE1YS0z
NzA0LTg0ZjQtZjBjNjcwYjA5MTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAED+3eD8lyf77ly+34969r1boJP2EUtaMt0x6jrF6sS9sqrrivEh2ioc
oKBw+qBcmiY3qdJfoAddOV7RLx88Yt7m27aPtRMecUMI63g3KLgnQQ3h25t1G7fe
kwx2E21TR/YwJhOXkb6TMN8xnxcOqkRJkNt0c69QSdHcopuz5qjQIVkk89TC+Cu1
GKT4Mub2C6JoFfxsNLhz/NBTsQWFGOk2zmjH/00VrZnVXzzD8i/dGx0d6oaBlAmz
CwuqLd0YBKqG8z9qNwd5egZ3HpmAjYGfJM5afMi2AfhtYKtY4UDCzcgTZB3FDKHk
A0NAunNrWBSOAhcAVnDm3oJs++m7u6k=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org