Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/141a57fe-0487-356b-aa6e-eea7131cbb72.roa
File:                     141a57fe-0487-356b-aa6e-eea7131cbb72.roa (raw, json)
Hash identifier:          TkEni5SauqfQa0JvJFp0m1nwap2dIAmWd5l3E4tL/CI=
Subject key identifier:   A6:F1:18:E5:E2:15:23:19:CC:25:5E:AC:75:03:A6:ED:B4:30:BB:F5
Certificate issuer:       /CN=0db2f5ee-ec6e-4a75-95c8-cf2da57bc020
Certificate serial:       010D0C9F4328584734C885072F9A937A6AE614B0
Authority key identifier: 76:A1:F9:A2:16:A7:A8:0D:A3:1A:DC:A9:A6:27:4B:AE:30:82:9C:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/141a57fe-0487-356b-aa6e-eea7131cbb72.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     396982
IP address blocks:        192.200.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:85:07:2f:9a:93:7a:6a:e6:14:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db2f5ee-ec6e-4a75-95c8-cf2da57bc020
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=d25273a3-c412-43e7-8bd9-f4fa028bc6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:fd:fb:63:4f:65:20:f9:a8:3f:58:9a:6b:
                    c8:4a:21:58:5b:f1:24:45:88:41:25:7e:e6:55:75:
                    2c:03:37:57:03:2f:33:5e:94:50:a4:ee:fc:4e:b7:
                    00:b6:dc:62:44:40:9f:3b:20:6f:ee:31:5c:27:2f:
                    18:b5:94:5c:cf:01:8e:41:c5:9a:92:b8:d1:7e:22:
                    b7:16:31:11:a3:c7:94:4a:57:c0:c8:73:44:7b:c9:
                    f4:98:ff:58:48:d7:68:7f:13:7f:7c:a0:38:0d:a9:
                    c0:b6:59:14:ab:f3:12:b9:27:e8:36:80:16:a7:ab:
                    fe:fa:7f:de:41:0c:83:81:11:4d:a2:26:91:e6:98:
                    01:fe:cb:6a:ca:12:6f:3d:f4:8a:3a:ad:7b:b3:02:
                    76:ac:23:f4:4c:70:ca:99:6a:88:8f:8a:4a:30:28:
                    96:b3:6b:af:ce:1e:4b:8c:4e:f0:9c:b0:79:72:49:
                    84:08:71:97:4f:46:92:2f:5c:7b:12:34:76:8d:93:
                    5e:7f:24:63:6e:8e:39:77:a9:1c:80:e0:63:65:f2:
                    d9:83:bc:07:af:69:18:77:bb:49:8f:98:86:74:e4:
                    50:5f:4f:9c:19:3e:b4:b1:37:38:43:20:85:31:e3:
                    23:ed:6f:e7:08:c0:60:c6:01:eb:e5:bd:25:7b:90:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F1:18:E5:E2:15:23:19:CC:25:5E:AC:75:03:A6:ED:B4:30:BB:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/141a57fe-0487-356b-aa6e-eea7131cbb72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.crl

            X509v3 Authority Key Identifier:
                keyid:76:A1:F9:A2:16:A7:A8:0D:A3:1A:DC:A9:A6:27:4B:AE:30:82:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:d7:26:10:a4:6c:52:82:88:33:89:98:c8:fa:80:05:da:
         61:c9:2b:85:c5:4d:6b:33:67:81:f0:98:6d:bc:28:b1:37:85:
         86:49:f4:a9:f3:68:72:b7:cb:bf:ce:5d:72:86:fb:3c:90:17:
         d2:0c:d2:3e:5d:47:4e:f5:f1:6e:0c:05:81:4a:60:40:65:bd:
         70:83:ed:3b:11:ae:64:4f:56:fc:7d:85:f6:c1:2c:93:3b:5d:
         3f:d5:3d:16:f2:cd:72:b9:49:4b:7b:df:20:bc:34:8e:5f:5e:
         47:e0:dd:d7:ce:66:bb:bf:73:d7:88:55:24:c1:12:9a:a6:9d:
         e7:46:34:ee:24:b7:c9:34:3b:ec:28:1d:1a:b2:18:a6:22:db:
         4c:de:39:bb:da:7c:7d:3e:cd:0b:c0:22:88:80:e6:26:a4:62:
         a0:ad:91:ca:1c:fa:ed:9e:a3:75:07:4c:35:c2:97:29:9c:99:
         46:c6:ac:ba:e1:54:dd:b3:fe:dc:f3:2e:50:09:98:98:5e:46:
         d4:6b:a1:d0:94:c0:51:7c:83:39:b9:ac:10:eb:cf:39:51:0d:
         85:60:9a:2a:06:5f:16:cf:09:10:c6:a6:ad:d0:2b:4c:1f:ab:
         bf:89:fc:08:8a:67:7e:90:ab:5d:35:5b:ca:a4:ca:56:eb:ef:
         01:85:bf:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yIUHL5qTemrmFLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRiMmY1ZWUtZWM2ZS00YTc1LTk1YzgtY2YyZGE1N2Jj
MDIwMB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZDI1MjczYTMtYzQxMi00M2U3LThiZDktZjRmYTAyOGJjNmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx79+2NPZSD5qD9YmmvISiFYW/EkRYhBJX7m
VXUsAzdXAy8zXpRQpO78TrcAttxiRECfOyBv7jFcJy8YtZRczwGOQcWakrjRfiK3
FjERo8eUSlfAyHNEe8n0mP9YSNdofxN/fKA4DanAtlkUq/MSuSfoNoAWp6v++n/e
QQyDgRFNoiaR5pgB/stqyhJvPfSKOq17swJ2rCP0THDKmWqIj4pKMCiWs2uvzh5L
jE7wnLB5ckmECHGXT0aSL1x7EjR2jZNefyRjbo45d6kcgOBjZfLZg7wHr2kYd7tJ
j5iGdORQX0+cGT60sTc4QyCFMeMj7W/nCMBgxgHr5b0le5CCKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKbxGOXiFSMZzCVerHUDpu20MLv1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZGIy
ZjVlZS1lYzZlLTRhNzUtOTVjOC1jZjJkYTU3YmMwMjAvMTQxYTU3ZmUtMDQ4Ny0z
NTZiLWFhNmUtZWVhNzEzMWNiYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGRiMmY1ZWUtZWM2ZS00YTc1LTk1
YzgtY2YyZGE1N2JjMDIwLzBkYjJmNWVlLWVjNmUtNGE3NS05NWM4LWNmMmRhNTdi
YzAyMC5jcmwwHwYDVR0jBBgwFoAUdqH5ohanqA2jGtyppidLrjCCnNAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZGIyZjVlZS1lYzZlLTRhNzUtOTVjOC1jZjJk
YTU3YmMwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMi/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBv1yYQpGxSgogziZjI+oAF2mHJK4XFTWszZ4HwmG28KLE3hYZJ9Knz
aHK3y7/OXXKG+zyQF9IM0j5dR0718W4MBYFKYEBlvXCD7TsRrmRPVvx9hfbBLJM7
XT/VPRbyzXK5SUt73yC8NI5fXkfg3dfOZru/c9eIVSTBEpqmnedGNO4kt8k0O+wo
HRqyGKYi20zeObvafH0+zQvAIoiA5iakYqCtkcoc+u2eo3UHTDXClymcmUbGrLrh
VN2z/tzzLlAJmJheRtRrodCUwFF8gzm5rBDrzzlRDYVgmioGXxbPCRDGpq3QK0wf
q7+J/AiKZ36Qq101W8qkylbr7wGFv2w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:27 2024 by rpki-client on console-ams.rpki-client.org