Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1e47767c-5031-3e27-95be-f1d2cc198456.roa
File:                     1e47767c-5031-3e27-95be-f1d2cc198456.roa (raw, json)
Hash identifier:          C8HxjH1gybI5BdeQUxDpnw2qIvgJRSUzy+ryfQQYFoE=
Subject key identifier:   AD:13:2A:6A:8E:0C:02:44:29:7E:5D:0D:AD:74:14:8A:06:5B:CD:77
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285847AB6C1D0395212D90B70B5600
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1e47767c-5031-3e27-95be-f1d2cc198456.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     62610
IP address blocks:        172.81.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:1d:03:95:21:2d:90:b7:0b:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=6ef547c6-f6ac-4777-b536-9f4b59540d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:a3:4d:4f:65:52:66:3a:90:49:52:08:8d:
                    6a:b5:6e:e4:22:e1:7c:b1:da:4c:0d:df:ca:f9:fb:
                    6c:6d:c4:f9:3f:6b:86:79:ab:95:b3:a1:27:a9:58:
                    e4:11:0c:dc:8b:d8:6f:15:8a:d6:a4:96:18:a1:8a:
                    05:0a:77:a9:19:0e:91:fe:1c:37:35:2c:7d:3d:5e:
                    33:0e:fb:a3:72:d5:88:56:22:d9:15:6a:0c:9e:19:
                    80:83:45:93:35:51:e9:d7:50:ab:3f:d7:73:ba:e0:
                    a0:a1:61:3b:25:00:5e:8a:ea:7a:f8:88:49:bc:6a:
                    c7:31:7c:f9:a2:f2:41:95:ff:16:50:31:ab:09:77:
                    f4:97:90:c0:72:22:0e:e7:9d:32:99:86:59:76:ca:
                    29:18:dc:13:7e:a3:a3:50:98:90:3b:06:2f:98:b4:
                    86:a6:36:23:46:39:f7:8d:0b:c1:39:92:cd:a5:b5:
                    b0:be:62:27:c8:0b:a4:d0:88:0a:e2:a9:b8:73:8a:
                    11:9e:07:c1:d1:b7:f6:f9:68:9e:9b:64:23:76:b7:
                    e5:1b:81:d5:f0:20:6a:50:cf:8d:24:4a:6b:9f:09:
                    d5:6d:33:5f:1c:eb:e9:ba:74:7e:af:6c:0c:26:52:
                    70:05:a0:8c:45:70:85:a7:d2:1a:5f:de:ed:0a:d7:
                    7b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:13:2A:6A:8E:0C:02:44:29:7E:5D:0D:AD:74:14:8A:06:5B:CD:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1e47767c-5031-3e27-95be-f1d2cc198456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5a:9d:4b:69:5e:f9:26:f5:4e:61:07:e5:e6:25:c9:5d:ea:
         4e:92:68:43:15:d7:5f:ae:ac:2f:00:a6:d5:62:ea:50:22:26:
         46:89:ed:e2:82:e5:68:a6:c9:1f:44:23:b8:36:d2:6d:7b:b9:
         4b:7d:54:a0:57:75:c1:84:99:a0:61:a8:a0:4d:c7:3b:04:46:
         1b:55:0d:e5:62:1b:ab:12:6e:ab:f6:a9:01:b5:ae:bb:7e:66:
         73:53:ed:20:58:d0:55:11:ff:42:c5:6f:9d:16:a1:38:41:93:
         c7:e3:2d:78:2f:57:86:9c:08:0e:d0:ff:0e:57:c4:5b:70:57:
         74:72:29:09:06:ba:78:f5:78:47:d8:08:5d:1b:7a:a4:9b:55:
         13:03:39:c6:b7:5d:70:ca:ad:da:9c:71:88:e2:28:1d:74:7a:
         34:ad:1e:7d:8a:04:8a:7b:7e:bb:67:9a:6b:e6:4a:70:92:e7:
         ac:b4:d1:d6:f1:2e:25:9e:e4:82:3b:70:8d:60:46:08:ab:66:
         fc:8e:32:37:8e:d7:8d:7f:05:5d:20:5e:e0:7a:ec:2d:fa:7e:
         47:d1:f9:b2:4b:b4:47:c8:8c:6f:30:d2:c6:53:31:c1:ed:0c:
         38:96:2e:bc:c5:5c:6f:b4:ff:72:e6:79:12:88:af:7f:be:83:
         1a:66:ea:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbB0DlSEtkLcLVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk
NmVmNTQ3YzYtZjZhYy00Nzc3LWI1MzYtOWY0YjU5NTQwZDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14yjTU9lUmY6kElSCI1qtW7kIuF8sdpMDd/K
+ftsbcT5P2uGeauVs6EnqVjkEQzci9hvFYrWpJYYoYoFCnepGQ6R/hw3NSx9PV4z
DvujctWIViLZFWoMnhmAg0WTNVHp11CrP9dzuuCgoWE7JQBeiup6+IhJvGrHMXz5
ovJBlf8WUDGrCXf0l5DAciIO550ymYZZdsopGNwTfqOjUJiQOwYvmLSGpjYjRjn3
jQvBOZLNpbWwvmInyAuk0IgK4qm4c4oRngfB0bf2+Wiem2QjdrflG4HV8CBqUM+N
JEprnwnVbTNfHOvpunR+r2wMJlJwBaCMRXCFp9IaX97tCtd7YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0TKmqODAJEKX5dDa10FIoGW813MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMWU0Nzc2N2MtNTAzMS0z
ZTI3LTk1YmUtZjFkMmNjMTk4NDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFF/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9anUtpXvkm9U5hB+XmJcld6k6SaEMV11+urC8AptVi6lAiJkaJ7eKC
5WimyR9EI7g20m17uUt9VKBXdcGEmaBhqKBNxzsERhtVDeViG6sSbqv2qQG1rrt+
ZnNT7SBY0FUR/0LFb50WoThBk8fjLXgvV4acCA7Q/w5XxFtwV3RyKQkGunj1eEfY
CF0beqSbVRMDOca3XXDKrdqccYjiKB10ejStHn2KBIp7frtnmmvmSnCS56y00dbx
LiWe5II7cI1gRgirZvyOMjeO141/BV0gXuB67C36fkfR+bJLtEfIjG8w0sZTMcHt
DDiWLrzFXG+0/3LmeRKIr3++gxpm6ns=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:45 2024 by rpki-client on console-ams.rpki-client.org