Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06e5c3a0-d619-3c83-ad68-84f2a7c74788.roa
File:                     06e5c3a0-d619-3c83-ad68-84f2a7c74788.roa (raw, json)
Hash identifier:          jlBZIOVipGwDXj/+j99R+0ouy2OumgQ21sGDHy6F5Hk=
Subject key identifier:   3D:86:DF:E1:69:F2:4E:74:DD:C8:F3:33:8A:EE:95:B7:C8:47:21:BB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847643B7D271154BA333DED1210
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06e5c3a0-d619-3c83-ad68-84f2a7c74788.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     64267
IP address blocks:        172.252.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:7d:27:11:54:ba:33:3d:ed:12:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=d677c2fc-241a-4b5d-b29a-9d01770d6fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:16:27:f6:23:28:a9:99:b9:c7:77:80:86:
                    90:69:c7:e8:91:29:8e:d7:c7:fd:4d:f4:c3:47:f6:
                    ec:a5:16:49:32:b9:e2:5b:c5:c5:44:67:43:9a:44:
                    8b:83:3a:13:2c:84:1b:33:3c:cd:07:93:9d:56:23:
                    c9:9f:b9:b5:39:52:0b:1d:b0:2a:a7:d4:52:a9:68:
                    27:ff:0a:53:49:22:37:4b:35:19:ee:03:0f:d8:f4:
                    30:94:d3:81:58:aa:76:82:eb:f8:bf:55:28:a3:91:
                    9a:9d:b0:3e:79:6a:9f:9b:c1:8b:ae:61:61:06:b8:
                    2a:e3:9b:28:a9:f1:5b:60:5e:ea:ae:b8:09:cc:36:
                    60:1c:82:84:c6:42:5a:77:59:c0:0d:35:f2:d4:8e:
                    04:de:bd:c1:17:35:14:2a:eb:5f:6b:51:ad:b0:13:
                    9e:37:5a:67:5c:29:aa:c7:12:5f:d0:eb:79:6f:7c:
                    55:80:f8:db:f4:78:07:8f:46:b2:29:92:84:9f:19:
                    ce:2e:49:ca:d5:86:46:c3:49:8e:f1:d5:aa:4e:10:
                    b3:33:e8:7c:3f:c6:b6:34:74:f2:c7:36:25:10:07:
                    1f:92:4f:38:69:0c:06:fa:aa:a0:fa:dc:e4:3d:73:
                    ac:52:60:b9:84:03:9d:8f:76:0e:10:51:d5:30:00:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:86:DF:E1:69:F2:4E:74:DD:C8:F3:33:8A:EE:95:B7:C8:47:21:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06e5c3a0-d619-3c83-ad68-84f2a7c74788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d0:1c:cd:ca:8f:55:e7:d4:8e:ba:fb:12:e4:af:97:6d:c9:
         6a:6a:d5:1b:07:f0:3c:17:29:76:6e:8e:3e:1a:39:7e:52:33:
         8b:b6:33:4b:54:59:ac:b3:54:2f:91:ec:d5:71:75:07:bd:59:
         31:b7:da:48:86:94:34:16:2a:cf:a2:76:d7:1a:20:64:de:7b:
         46:1f:3d:f4:0a:d2:56:36:aa:10:c7:c8:e1:77:4d:6a:7e:0d:
         af:66:99:5a:a6:b6:36:59:1c:f7:f0:26:7e:68:cf:6a:4e:e4:
         59:85:45:29:b4:8c:49:af:04:81:f9:04:1c:2a:d0:4a:81:00:
         36:9b:49:5a:75:29:f3:8d:5d:cd:c8:67:53:c5:0f:b1:7f:4e:
         b9:08:8a:eb:10:09:b2:0b:09:58:9a:64:5d:99:af:f8:a9:c3:
         a2:43:61:ac:d2:b3:72:81:5d:b9:eb:6d:4f:af:27:41:2e:c7:
         25:59:a2:e2:da:e7:5a:1b:8f:57:2f:dd:c4:33:4c:9f:70:1c:
         ac:3d:c6:df:5e:7d:6a:68:12:53:de:e4:be:3b:35:e4:a8:0f:
         84:8a:d5:c3:dd:79:1b:3d:3e:59:7d:50:27:1e:17:f1:2b:76:
         25:08:ce:58:d1:92:be:4f:75:b0:bd:50:18:c6:3a:6d:a0:56:
         9f:fe:1b:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkO30nEVS6Mz3tEhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk
ZDY3N2MyZmMtMjQxYS00YjVkLWIyOWEtOWQwMTc3MGQ2ZmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTEWJ/YjKKmZucd3gIaQacfokSmO18f9TfTD
R/bspRZJMrniW8XFRGdDmkSLgzoTLIQbMzzNB5OdViPJn7m1OVILHbAqp9RSqWgn
/wpTSSI3SzUZ7gMP2PQwlNOBWKp2guv4v1Uoo5GanbA+eWqfm8GLrmFhBrgq45so
qfFbYF7qrrgJzDZgHIKExkJad1nADTXy1I4E3r3BFzUUKutfa1GtsBOeN1pnXCmq
xxJf0Ot5b3xVgPjb9HgHj0ayKZKEnxnOLknK1YZGw0mO8dWqThCzM+h8P8a2NHTy
xzYlEAcfkk84aQwG+qqg+tzkPXOsUmC5hAOdj3YOEFHVMABKzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2G3+Fp8k503cjzM4rulbfIRyG7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDZlNWMzYTAtZDYxOS0z
YzgzLWFkNjgtODRmMmE3Yzc0Nzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfQHM3Kj1Xn1I66+xLkr5dtyWpq1RsH8DwXKXZujj4aOX5SM4u2M0tU
WayzVC+R7NVxdQe9WTG32kiGlDQWKs+idtcaIGTee0YfPfQK0lY2qhDHyOF3TWp+
Da9mmVqmtjZZHPfwJn5oz2pO5FmFRSm0jEmvBIH5BBwq0EqBADabSVp1KfONXc3I
Z1PFD7F/TrkIiusQCbILCViaZF2Zr/ipw6JDYazSs3KBXbnrbU+vJ0EuxyVZouLa
51obj1cv3cQzTJ9wHKw9xt9efWpoElPe5L47NeSoD4SK1cPdeRs9Pll9UCceF/Er
diUIzljRkr5PdbC9UBjGOm2gVp/+G4o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:45 2024 by rpki-client on console-ams.rpki-client.org