Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/022748d7-5389-327d-b06c-5c0aa2a2134a.roa
File:                     022748d7-5389-327d-b06c-5c0aa2a2134a.roa (raw, json)
Hash identifier:          1TRkIG6nQAXUHpED4HI5M808JqwzCg2O00+17441eAA=
Subject key identifier:   29:5A:27:63:A9:0F:AC:F5:69:49:EE:96:DE:8C:4C:B2:F0:7F:45:88
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F43285847EBBF8368C6A8CE1C9B806BC0
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/022748d7-5389-327d-b06c-5c0aa2a2134a.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     19605
IP address blocks:        192.230.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:83:68:c6:a8:ce:1c:9b:80:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=79e89725-7ccb-48d4-a40e-e89bca3bce1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:30:0e:8d:0d:91:b0:ae:3b:5f:78:58:a3:
                    d6:27:fa:aa:e3:ae:3b:ec:ea:8c:bf:16:a7:15:1b:
                    71:e8:a7:ab:68:8c:c8:b6:2d:2d:5a:1f:fb:de:2b:
                    2d:f8:fb:cd:8b:cf:98:66:70:43:8a:67:9a:86:41:
                    01:a7:13:b5:86:9b:fb:97:1d:ce:4b:e5:97:4d:75:
                    59:6b:92:f9:46:e1:5a:01:bd:34:5a:a8:c6:11:82:
                    00:ed:0b:e1:60:1b:44:74:c3:35:9b:2f:3d:95:a5:
                    16:46:8b:8f:7a:68:f2:c8:c4:d7:a7:d8:30:31:00:
                    81:75:f5:15:b2:03:5f:6e:6e:de:27:59:ca:f4:0c:
                    af:b2:eb:dc:38:f2:e5:c0:12:1d:7b:6e:f3:af:ad:
                    bb:b2:97:6c:c4:02:e5:fc:95:06:38:3c:e1:f9:5c:
                    be:5a:48:69:74:ae:6b:87:81:04:f3:f1:c7:91:1c:
                    d5:e0:d2:3c:e0:1f:d9:a7:fa:d9:3c:52:72:6c:2e:
                    f5:14:24:5d:bd:af:15:e3:db:a7:80:de:0c:53:ed:
                    e7:af:34:23:7c:5d:7a:b0:32:35:0e:27:b1:70:17:
                    18:1d:99:26:41:3a:0a:a0:68:60:4c:4a:0e:d7:93:
                    24:a9:4e:67:ee:2e:08:bd:3e:e8:8f:c2:28:49:0a:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5A:27:63:A9:0F:AC:F5:69:49:EE:96:DE:8C:4C:B2:F0:7F:45:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/022748d7-5389-327d-b06c-5c0aa2a2134a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f7:6d:35:f8:bb:fd:c4:03:d2:70:dc:b8:24:5d:43:bb:bf:
         2a:36:8a:0e:2f:47:40:e7:81:98:fe:ad:01:f9:97:03:58:e5:
         b8:6e:61:43:a7:02:44:b4:ed:b2:4b:7c:04:9d:dc:0f:89:b3:
         a8:c5:05:e2:bf:db:8d:97:a1:a0:72:8f:57:f7:b9:05:14:a2:
         09:01:70:bc:82:f5:7b:e5:a2:3b:d2:c0:6c:81:4d:42:26:a9:
         6c:02:12:6b:96:36:e5:38:43:cf:96:f6:ef:a8:af:3b:85:50:
         52:c1:ba:0c:3a:b3:a5:c7:5a:eb:09:45:35:fc:2e:d9:7f:f8:
         c4:b8:6d:11:c8:82:8d:c5:16:fb:94:85:7d:af:39:4f:de:23:
         50:d3:57:69:09:39:f0:8e:a2:a7:54:61:ba:67:74:91:f4:9f:
         96:b2:11:4a:37:18:36:21:04:e8:53:92:73:72:b5:3e:1c:84:
         43:21:b9:e2:7b:68:28:30:12:81:89:1a:be:ba:dd:ca:19:dc:
         dd:52:30:65:9c:e0:0d:4d:87:f6:7c:46:c1:04:26:ad:8a:f0:
         c2:a6:8b:ad:b3:37:a4:13:4a:3b:cf:b9:32:64:bc:d1:c3:82:
         c4:56:65:53:94:a6:d1:b4:c0:1e:60:b2:7e:49:f3:44:75:1c:
         ad:97:8d:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv4NoxqjOHJuAa8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1ZmMtY2QzMjE3MDQ5
ZjI3MB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
NzllODk3MjUtN2NjYi00OGQ0LWE0MGUtZTg5YmNhM2JjZTFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMwwDo0NkbCuO194WKPWJ/qq46477OqMvxan
FRtx6KeraIzIti0tWh/73ist+PvNi8+YZnBDimeahkEBpxO1hpv7lx3OS+WXTXVZ
a5L5RuFaAb00WqjGEYIA7QvhYBtEdMM1my89laUWRouPemjyyMTXp9gwMQCBdfUV
sgNfbm7eJ1nK9AyvsuvcOPLlwBIde27zr627spdsxALl/JUGODzh+Vy+WkhpdK5r
h4EE8/HHkRzV4NI84B/Zp/rZPFJybC71FCRdva8V49ungN4MU+3nrzQjfF16sDI1
DiexcBcYHZkmQToKoGhgTEoO15MkqU5n7i4IvT7oj8IoSQqDwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClaJ2OpD6z1aUnult6MTLLwf0WIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0
NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMyMTcwNDlmMjcvMDIyNzQ4ZDctNTM4OS0z
MjdkLWIwNmMtNWMwYWEyYTIxMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1
ZmMtY2QzMjE3MDQ5ZjI3L2E5ZDQ0OWZhLWYwOGUtNDE3MC05NWZjLWNkMzIxNzA0
OWYyNy5jcmwwHwYDVR0jBBgwFoAUEvt9fLdBASMWWGp5WhOQ7yMZNI0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMy
MTcwNDlmMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwOagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABf3bTX4u/3EA9Jw3LgkXUO7vyo2ig4vR0DngZj+rQH5lwNY5bhuYUOn
AkS07bJLfASd3A+Js6jFBeK/242XoaByj1f3uQUUogkBcLyC9XvlojvSwGyBTUIm
qWwCEmuWNuU4Q8+W9u+orzuFUFLBugw6s6XHWusJRTX8Ltl/+MS4bRHIgo3FFvuU
hX2vOU/eI1DTV2kJOfCOoqdUYbpndJH0n5ayEUo3GDYhBOhTknNytT4chEMhueJ7
aCgwEoGJGr663coZ3N1SMGWc4A1Nh/Z8RsEEJq2K8MKmi62zN6QTSjvPuTJkvNHD
gsRWZVOUptG0wB5gsn5J80R1HK2XjaQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org