Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/49a672a2-e55d-3113-845a-f5457f4023f3.roa
File:                     49a672a2-e55d-3113-845a-f5457f4023f3.roa (raw, json)
Hash identifier:          N79a1/npPYDK1vjj2vJKLUxSK5IXlkbBuepO1QwLG04=
Subject key identifier:   60:B1:C3:45:68:86:DA:59:D8:AD:71:78:69:0E:91:7A:15:76:78:F1
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F432858475910B33397D180E9DAFE6380
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/49a672a2-e55d-3113-845a-f5457f4023f3.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     36184
IP address blocks:        45.40.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b3:33:97:d1:80:e9:da:fe:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=94aea700-45ad-48c9-87aa-a5ced7f6ebaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:12:4c:09:bd:13:73:e1:09:65:c4:cb:36:
                    f4:e9:bf:0f:43:8d:17:60:bf:13:12:ed:37:94:78:
                    e7:aa:49:01:e8:c9:17:0a:f0:28:04:a4:3e:f0:b3:
                    41:d3:9b:0a:d4:61:a4:23:08:d0:ff:36:db:95:6c:
                    c8:3d:23:74:80:62:15:15:b7:10:11:2d:f0:ce:d7:
                    7d:ed:e4:47:f3:5d:22:2e:b9:f0:7b:f2:78:a1:5d:
                    96:d5:cb:21:13:c5:3f:5a:94:ce:10:3f:f9:0a:a1:
                    62:92:c9:17:66:21:22:0f:2c:f6:65:c8:b4:59:79:
                    2d:da:d6:32:9a:83:60:91:02:36:c7:9c:45:0b:67:
                    3d:bb:6f:16:fe:b7:4b:c7:02:be:d1:6e:7a:73:86:
                    df:23:24:8e:02:9d:ce:7b:19:99:e9:2c:a5:b9:0e:
                    b8:2a:1a:2e:bf:f2:6b:e2:e9:5a:73:51:de:97:1c:
                    05:23:6a:bf:cb:aa:43:69:20:5d:90:96:3a:41:f0:
                    31:40:e6:7c:62:dd:b6:53:82:ce:a7:ca:2d:66:8b:
                    ea:ea:e3:8b:01:ba:65:c6:ca:85:29:d0:6a:bb:a7:
                    b3:73:89:0d:80:03:11:c3:38:95:9c:ac:58:d0:93:
                    0f:ea:13:63:e1:d0:6a:a2:be:dc:93:07:99:25:90:
                    a4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B1:C3:45:68:86:DA:59:D8:AD:71:78:69:0E:91:7A:15:76:78:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/49a672a2-e55d-3113-845a-f5457f4023f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7f:f2:03:1c:04:c5:fe:4f:6b:77:55:af:a9:5a:01:6a:51:
         79:b7:e1:47:1f:f4:eb:12:de:11:af:4d:80:fa:ed:42:96:66:
         63:90:7f:8b:80:0f:7e:5d:a0:ce:94:6f:ca:36:6c:fc:c2:39:
         ef:70:7d:05:7a:79:ca:1b:bd:ea:36:92:74:d7:58:3c:c5:1d:
         14:38:ff:d4:5e:cb:e4:b0:2a:43:4f:7e:c4:e7:48:49:84:65:
         a4:59:7f:8e:65:f4:38:ab:9c:7b:d4:fb:c1:8a:53:4e:de:83:
         18:d3:2d:d9:ae:6a:0c:8d:8b:4f:e3:64:c7:8d:8a:79:bb:c6:
         4e:27:27:7c:98:a0:de:9f:54:37:10:24:4a:bd:41:f4:cc:17:
         c8:11:f0:8a:4b:6d:b5:1a:2e:30:8b:2e:bc:1f:81:39:86:a4:
         48:f2:d4:0c:08:b7:2c:cc:69:63:12:0a:0b:71:ad:8c:b1:85:
         60:4f:21:52:81:db:f1:09:d6:88:37:6c:2a:dc:46:19:0f:83:
         fa:b9:b8:de:0d:3b:23:7b:a5:29:9b:e5:51:77:44:8f:e3:9e:
         b6:61:74:9b:db:1a:26:d3:51:d9:23:88:64:5d:e7:98:97:54:
         f9:c0:1f:30:51:37:dc:83:9d:fb:fa:86:10:29:18:51:a5:77:
         ba:2f:e1:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZELMzl9GA6dr+Y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwODg0ZjQtZmExNC00YTEzLWFjM2ItZWZiN2M5NDEy
MDgyMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
OTRhZWE3MDAtNDVhZC00OGM5LTg3YWEtYTVjZWQ3ZjZlYmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ESTAm9E3PhCWXEyzb06b8PQ40XYL8TEu03
lHjnqkkB6MkXCvAoBKQ+8LNB05sK1GGkIwjQ/zbblWzIPSN0gGIVFbcQES3wztd9
7eRH810iLrnwe/J4oV2W1cshE8U/WpTOED/5CqFikskXZiEiDyz2Zci0WXkt2tYy
moNgkQI2x5xFC2c9u28W/rdLxwK+0W56c4bfIySOAp3OexmZ6SyluQ64Khouv/Jr
4ulac1HelxwFI2q/y6pDaSBdkJY6QfAxQOZ8Yt22U4LOp8otZovq6uOLAbplxsqF
KdBqu6ezc4kNgAMRwziVnKxY0JMP6hNj4dBqor7ckweZJZCk6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCxw0VohtpZ2K1xeGkOkXoVdnjxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNjA4
ODRmNC1mYTE0LTRhMTMtYWMzYi1lZmI3Yzk0MTIwODIvNDlhNjcyYTItZTU1ZC0z
MTEzLTg0NWEtZjU0NTdmNDAyM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTYwODg0ZjQtZmExNC00YTEzLWFj
M2ItZWZiN2M5NDEyMDgyL2U2MDg4NGY0LWZhMTQtNGExMy1hYzNiLWVmYjdjOTQx
MjA4Mi5jcmwwHwYDVR0jBBgwFoAUDJp86W2MOEia8zvKQWbziUd9SQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lNjA4ODRmNC1mYTE0LTRhMTMtYWMzYi1lZmI3
Yzk0MTIwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELSgQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJ/8gMcBMX+T2t3Va+pWgFqUXm34Ucf9OsS3hGvTYD67UKWZmOQf4uA
D35doM6Ub8o2bPzCOe9wfQV6ecobveo2knTXWDzFHRQ4/9Rey+SwKkNPfsTnSEmE
ZaRZf45l9DirnHvU+8GKU07egxjTLdmuagyNi0/jZMeNinm7xk4nJ3yYoN6fVDcQ
JEq9QfTMF8gR8IpLbbUaLjCLLrwfgTmGpEjy1AwItyzMaWMSCgtxrYyxhWBPIVKB
2/EJ1og3bCrcRhkPg/q5uN4NOyN7pSmb5VF3RI/jnrZhdJvbGibTUdkjiGRd55iX
VPnAHzBRN9yDnfv6hhApGFGld7ov4ak=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:19 2024 by rpki-client on console-ams.rpki-client.org