Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/15cbeea1-441a-3e43-aaac-8a33f07a4058.roa
File:                     15cbeea1-441a-3e43-aaac-8a33f07a4058.roa (raw, json)
Hash identifier:          9XPqOzEVSJ+USqA7KazdmO1+y6pZ30gahoKSPanjtkU=
Subject key identifier:   28:FF:29:B8:3F:5D:AB:FC:D1:23:FD:6B:15:39:11:FE:41:1B:2A:C3
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F43285847F4F42A708BF94E80F4023298
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/15cbeea1-441a-3e43-aaac-8a33f07a4058.roa
Signing time:             Thu 21 Nov 2024 21:09:09 +0000
ROA not before:           Thu 21 Nov 2024 21:09:09 +0000
ROA not after:            Wed 19 Feb 2025 21:09:09 +0000
asID:                     11620
IP address blocks:        147.124.32.0/21 maxlen: 24
                          147.124.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:f4:2a:70:8b:f9:4e:80:f4:02:32:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Nov 21 21:09:09 2024 GMT
            Not After : Feb 19 21:09:09 2025 GMT
        Subject: CN=759b255d-9b43-41e6-b6cf-14b2a793ed96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:c0:9c:37:7c:ed:3d:cc:d1:a4:6f:47:90:
                    b9:57:49:96:86:e8:95:a7:3c:06:87:3f:32:da:a5:
                    83:4c:57:84:b7:d5:e6:79:ca:69:54:bd:77:fd:e0:
                    5e:d4:98:1b:eb:84:19:b8:cb:b8:6f:a5:ea:2c:45:
                    99:56:28:05:cc:8a:27:ab:1c:f3:f5:db:9b:7b:91:
                    94:48:09:11:3c:a2:64:29:11:05:76:99:0c:33:f8:
                    b9:87:38:66:a2:2f:c8:84:ec:f6:14:20:97:4b:4e:
                    ec:0f:17:80:be:8c:6c:5c:42:4b:50:ae:11:4e:7e:
                    b8:48:6d:52:ec:2f:20:0c:8c:dc:3a:df:b6:44:1e:
                    ba:61:48:4d:d4:81:98:c5:e8:b8:fb:da:a7:62:9b:
                    24:f3:02:c1:db:52:c3:c2:09:c4:85:d7:fe:83:f1:
                    e1:63:95:d2:ba:30:3e:a3:2c:12:95:4f:62:f4:d2:
                    27:c5:8e:99:87:2a:99:bf:17:9c:42:4b:50:35:9f:
                    f1:e4:a2:0b:21:d1:c2:66:0c:5b:23:6e:5a:09:38:
                    4d:b7:55:55:f2:71:c6:b0:ae:48:00:e4:53:99:fa:
                    5a:e1:af:78:9e:60:2a:c3:c9:67:52:8f:29:b5:fb:
                    62:84:1b:3f:cc:c0:4d:bf:48:58:e3:70:fe:af:ff:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FF:29:B8:3F:5D:AB:FC:D1:23:FD:6B:15:39:11:FE:41:1B:2A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/15cbeea1-441a-3e43-aaac-8a33f07a4058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:48:aa:ac:ed:2c:da:02:75:15:64:d1:02:4c:4b:45:01:
         80:3d:9e:e3:fe:a2:2c:6f:54:03:c1:93:ea:c6:e6:ff:df:f8:
         ef:75:cc:19:8c:79:02:15:eb:1e:20:3f:31:99:e9:1a:7f:e5:
         08:0c:5d:ad:86:cc:9d:dc:65:e7:b5:c9:ff:82:65:30:2f:5d:
         fe:05:d1:54:96:04:30:6f:26:ed:70:8d:7a:4d:e2:4c:e4:51:
         3d:ce:a0:e3:b0:f4:9a:7c:0f:f3:01:cd:f5:c5:54:ff:cb:8c:
         43:f5:6e:d7:b8:e6:f9:64:9d:6c:a9:88:48:22:09:ed:b2:26:
         57:98:7a:21:2f:b1:00:64:0c:e2:4c:78:39:88:5c:bf:67:ea:
         bc:19:27:43:b9:aa:5e:fd:7d:40:58:e9:76:4a:81:9a:93:cf:
         12:4d:67:6f:68:3e:86:d7:03:f6:98:c9:87:1d:71:ba:c8:11:
         10:b7:14:b6:23:f5:ae:ba:25:a0:2b:72:a8:a5:4c:5a:4b:65:
         76:7d:ed:2f:b0:d9:1a:95:80:57:af:53:f9:95:65:56:7a:1b:
         1f:98:3f:b8:04:6a:55:32:2e:4b:d3:a6:05:36:9a:18:38:bd:
         34:39:e9:9c:f0:bc:67:c8:62:3f:30:b5:a6:2c:e2:e2:6b:ee:
         eb:62:4c:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf09Cpwi/lOgPQCMpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzJjMmIyMDUtY2JmNy00NTZmLWIxODUtMGFmZDI2M2M1
Mjc2MB4XDTI0MTEyMTIxMDkwOVoXDTI1MDIxOTIxMDkwOVowLzEtMCsGA1UEAxMk
NzU5YjI1NWQtOWI0My00MWU2LWI2Y2YtMTRiMmE3OTNlZDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uDAnDd87T3M0aRvR5C5V0mWhuiVpzwGhz8y
2qWDTFeEt9XmecppVL13/eBe1Jgb64QZuMu4b6XqLEWZVigFzIonqxzz9dube5GU
SAkRPKJkKREFdpkMM/i5hzhmoi/IhOz2FCCXS07sDxeAvoxsXEJLUK4RTn64SG1S
7C8gDIzcOt+2RB66YUhN1IGYxei4+9qnYpsk8wLB21LDwgnEhdf+g/HhY5XSujA+
oywSlU9i9NInxY6ZhyqZvxecQktQNZ/x5KILIdHCZgxbI25aCThNt1VV8nHGsK5I
AORTmfpa4a94nmAqw8lnUo8ptftihBs/zMBNv0hY43D+r/9ZGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCj/Kbg/Xav80SP9axU5Ef5BGyrDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jMmMy
YjIwNS1jYmY3LTQ1NmYtYjE4NS0wYWZkMjYzYzUyNzYvMTVjYmVlYTEtNDQxYS0z
ZTQzLWFhYWMtOGEzM2YwN2E0MDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzJjMmIyMDUtY2JmNy00NTZmLWIx
ODUtMGFmZDI2M2M1Mjc2L2MyYzJiMjA1LWNiZjctNDU2Zi1iMTg1LTBhZmQyNjNj
NTI3Ni5jcmwwHwYDVR0jBBgwFoAU1RmuFMvsJGpbukvkt9Q2FDNBUh0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jMmMyYjIwNS1jYmY3LTQ1NmYtYjE4NS0wYWZk
MjYzYzUyNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk3wgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYqSKqs7SzaAnUVZNECTEtFAYA9nuP+oixvVAPBk+rG5v/f+O91zBmM
eQIV6x4gPzGZ6Rp/5QgMXa2GzJ3cZee1yf+CZTAvXf4F0VSWBDBvJu1wjXpN4kzk
UT3OoOOw9Jp8D/MBzfXFVP/LjEP1bte45vlknWypiEgiCe2yJleYeiEvsQBkDOJM
eDmIXL9n6rwZJ0O5ql79fUBY6XZKgZqTzxJNZ29oPobXA/aYyYcdcbrIERC3FLYj
9a66JaArcqilTFpLZXZ97S+w2RqVgFevU/mVZVZ6Gx+YP7gEalUyLkvTpgU2mhg4
vTQ56ZzwvGfIYj8wtaYs4uJr7utiTDQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:42 2024 by rpki-client on console-fra.rpki-client.org