Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa
File:                     3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa (raw, json)
Hash identifier:          /apralw9DVUQ5ZwlqX3A2pTKcOFpjS7cMdqvhcx/Lck=
Subject key identifier:   41:62:FF:9D:2F:45:89:69:D0:67:87:AE:73:31:0A:9E:B5:79:4F:A9
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858471C8CBF481D1DEB938BC96000
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa
Signing time:             Thu 05 Sep 2024 08:46:10 +0000
ROA not before:           Thu 05 Sep 2024 08:46:10 +0000
ROA not after:            Wed 04 Dec 2024 09:46:10 +0000
asID:                     62610
IP address blocks:        128.1.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1c:8c:bf:48:1d:1d:eb:93:8b:c9:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  5 08:46:10 2024 GMT
            Not After : Dec  4 09:46:10 2024 GMT
        Subject: CN=951fff37-6f0f-4d8f-9863-1f3c4a602c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:ad:37:a8:c5:df:f5:da:11:14:c0:67:fe:
                    8e:47:cc:55:85:1d:42:80:bf:cc:a0:47:f9:09:9f:
                    95:5f:bf:ed:2e:1d:f2:72:cf:31:c8:5b:02:6b:b7:
                    88:8d:14:45:a9:6a:9c:8f:5b:c6:75:00:8d:73:b7:
                    c1:dc:ce:80:01:45:38:69:f1:3d:d7:c8:af:a3:81:
                    61:84:bc:20:74:7f:e5:a6:39:f4:f2:ae:a7:d1:35:
                    41:32:4e:56:24:61:6b:7c:dc:31:a6:e4:e5:e1:b5:
                    6e:55:f4:45:27:65:57:35:79:1b:37:4d:94:5e:76:
                    e6:00:77:8a:f1:6c:93:4c:0f:7b:4c:da:36:fc:73:
                    ae:39:81:a2:ab:58:6c:85:48:b7:b1:0c:22:c9:ec:
                    5c:03:6b:01:f8:48:9e:94:9d:15:4d:88:b3:3a:7d:
                    96:7e:ce:3f:6e:5f:59:f8:ce:ba:a3:82:36:a0:5d:
                    04:78:d4:0a:02:ab:30:e3:48:cf:c9:0d:15:66:8d:
                    2e:04:39:aa:93:cc:11:79:60:bd:ec:c6:59:63:58:
                    18:a1:1a:b8:a7:24:88:b2:49:73:d9:b7:49:11:ba:
                    f4:50:3c:3f:e8:41:df:1b:12:a1:16:af:ab:f2:d9:
                    9a:e3:23:1e:55:76:1c:e4:94:ca:d1:ee:fe:05:91:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:62:FF:9D:2F:45:89:69:D0:67:87:AE:73:31:0A:9E:B5:79:4F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3241b04c-52fd-3ff0-aeb8-b89ce9257fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e5:82:ca:d9:71:34:a4:49:54:1f:ed:83:5b:02:f3:d6:23:
         3f:c1:9d:34:9f:90:11:a5:1d:92:a6:9f:10:ef:60:b8:f6:88:
         bb:6f:07:91:cf:b5:19:ff:5f:fc:fa:b8:1e:eb:eb:bb:92:d5:
         3b:7c:f5:c7:a6:26:59:24:84:f8:4f:7a:40:d3:46:da:36:32:
         de:df:a9:95:17:ba:58:bc:bd:9d:da:4f:00:66:f2:09:dd:7a:
         31:fd:8d:92:3b:c8:91:ab:30:26:93:27:ae:31:ee:fe:42:75:
         93:e5:bd:c1:f9:f9:37:fa:1e:ee:6d:d8:31:ae:91:66:62:77:
         c5:91:37:41:86:16:a6:c5:3f:ff:a4:f6:66:a4:2f:d5:86:37:
         60:1a:36:9e:5c:0e:76:7b:7b:27:e5:5f:12:a5:aa:b5:2d:a8:
         c2:67:5c:fa:78:8d:48:9e:73:cb:c6:9a:50:b6:0e:1d:9b:e7:
         50:f9:b7:d1:eb:54:96:1c:55:c4:04:86:2d:b1:ca:e8:8b:34:
         86:9b:f1:9f:36:6e:f5:c0:c2:d7:b4:15:03:8d:b6:12:18:90:
         86:8c:52:6b:ea:9c:db:ba:ac:ed:f0:fb:85:d9:42:a7:52:9c:
         dc:0f:99:71:24:d7:30:fd:01:73:a0:34:1d:0b:96:39:ff:ed:
         fe:48:65:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEccjL9IHR3rk4vJYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MDkwNTA4NDYxMFoXDTI0MTIwNDA5NDYxMFowLzEtMCsGA1UEAxMk
OTUxZmZmMzctNmYwZi00ZDhmLTk4NjMtMWYzYzRhNjAyYzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmetN6jF3/XaERTAZ/6OR8xVhR1CgL/MoEf5
CZ+VX7/tLh3ycs8xyFsCa7eIjRRFqWqcj1vGdQCNc7fB3M6AAUU4afE918ivo4Fh
hLwgdH/lpjn08q6n0TVBMk5WJGFrfNwxpuTl4bVuVfRFJ2VXNXkbN02UXnbmAHeK
8WyTTA97TNo2/HOuOYGiq1hshUi3sQwiyexcA2sB+EielJ0VTYizOn2Wfs4/bl9Z
+M66o4I2oF0EeNQKAqsw40jPyQ0VZo0uBDmqk8wReWC97MZZY1gYoRq4pySIsklz
2bdJEbr0UDw/6EHfGxKhFq+r8tma4yMeVXYc5JTK0e7+BZEqRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFi/50vRYlp0GeHrnMxCp61eU+pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzI0MWIwNGMtNTJmZC0z
ZmYwLWFlYjgtYjg5Y2U5MjU3ZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3lgsrZcTSkSVQf7YNbAvPWIz/BnTSfkBGlHZKmnxDvYLj2iLtvB5HP
tRn/X/z6uB7r67uS1Tt89cemJlkkhPhPekDTRto2Mt7fqZUXuli8vZ3aTwBm8gnd
ejH9jZI7yJGrMCaTJ64x7v5CdZPlvcH5+Tf6Hu5t2DGukWZid8WRN0GGFqbFP/+k
9makL9WGN2AaNp5cDnZ7eyflXxKlqrUtqMJnXPp4jUiec8vGmlC2Dh2b51D5t9Hr
VJYcVcQEhi2xyuiLNIab8Z82bvXAwte0FQONthIYkIaMUmvqnNu6rO3w+4XZQqdS
nNwPmXEk1zD9AXOgNB0Lljn/7f5IZXc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:45 2024 by rpki-client on console-ams.rpki-client.org