Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f94bf11-d94c-3336-8ef6-909566174d1b.roa
File:                     5f94bf11-d94c-3336-8ef6-909566174d1b.roa (raw, json)
Hash identifier:          9u+zu0PFV+uSoSzSzh3tFRTGASPKNhNaS1pycuJNEeU=
Subject key identifier:   7E:3F:3E:EB:5C:94:00:88:B3:5E:48:16:D1:F1:4F:56:76:72:B8:A3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847EE21C214CF97D2904CE83880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f94bf11-d94c-3336-8ef6-909566174d1b.roa
Signing time:             Tue 19 Nov 2024 10:30:21 +0000
ROA not before:           Tue 19 Nov 2024 10:30:21 +0000
ROA not after:            Mon 17 Feb 2025 10:30:21 +0000
asID:                     10557
IP address blocks:        172.120.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:21:c2:14:cf:97:d2:90:4c:e8:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 19 10:30:21 2024 GMT
            Not After : Feb 17 10:30:21 2025 GMT
        Subject: CN=5f0c0dc8-d1dd-4426-ab38-60ebc16e372a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:3f:3c:42:eb:e0:1d:c8:09:50:ef:a4:3a:
                    25:64:45:95:8f:1a:e2:b1:b7:5a:54:62:a7:f6:d1:
                    7e:93:08:66:ed:8c:23:2c:34:a5:62:bb:dc:06:50:
                    af:50:35:df:7d:a4:ff:1d:1d:78:a7:e4:25:7a:77:
                    1c:84:78:07:b5:37:c4:72:a4:87:db:3e:57:95:c1:
                    9a:51:3f:99:9e:15:9a:97:e9:a1:65:b1:2f:37:d4:
                    2d:8d:1c:b7:7f:d2:64:98:4f:44:6e:6a:c8:78:e9:
                    48:d3:86:d8:66:06:9d:8a:fb:d5:26:53:3a:be:4c:
                    39:b2:f2:fc:a0:65:7f:95:3c:4f:b5:40:b8:f1:63:
                    ef:45:0d:f4:c6:65:da:06:1c:27:42:97:f3:fb:69:
                    e8:ec:3b:61:52:17:d3:ed:f0:0c:fb:25:11:bc:68:
                    64:aa:bf:b5:13:4e:2b:45:85:0a:65:7b:19:13:da:
                    83:52:8b:74:b2:f2:07:3e:3a:66:e2:08:08:b8:84:
                    c5:f0:6e:ba:24:5e:09:18:6d:f0:61:43:e3:79:6c:
                    3c:85:0b:8d:e5:f6:cb:df:2e:63:46:78:ca:b2:be:
                    8c:d5:f1:77:1e:a4:c3:3d:65:4f:5f:a2:cd:00:04:
                    78:fd:da:12:34:97:d5:7f:46:ff:90:d9:dc:b9:bd:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3F:3E:EB:5C:94:00:88:B3:5E:48:16:D1:F1:4F:56:76:72:B8:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f94bf11-d94c-3336-8ef6-909566174d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:e6:27:1b:6a:ef:7e:2c:4c:87:d7:5d:ba:33:4f:1f:c4:
         d5:c0:3c:59:9f:1e:10:c7:fb:cf:d2:90:ab:17:a6:93:58:c0:
         e0:fc:ce:97:43:74:ef:63:02:94:ec:4f:e2:d8:39:3d:58:a8:
         ff:2d:b4:82:77:d2:5d:ec:58:79:37:fc:a0:41:05:04:5c:60:
         e7:cd:64:fa:cb:30:73:5a:65:11:3e:1c:9f:07:47:6a:7d:eb:
         b3:c4:c9:f9:db:42:a9:05:92:e6:e8:d8:5c:06:51:4e:f0:5f:
         5b:55:c5:88:b5:dc:2e:ae:52:85:c9:30:31:d2:e5:5f:67:53:
         2d:4f:20:76:8b:d3:77:77:ca:da:67:46:e4:74:c2:37:26:43:
         2b:04:d8:66:32:ac:ee:9e:90:38:55:b5:89:4d:8b:d0:e6:e4:
         20:72:51:24:48:f3:8e:80:69:e8:0c:47:a5:76:0f:6d:78:d0:
         ab:47:3b:f6:2a:b6:17:6c:3d:ce:c7:aa:2b:70:1d:13:87:51:
         5b:d9:ae:0c:e0:a3:4e:06:c3:d9:6a:64:b1:e3:65:78:e6:b3:
         69:b7:f3:b6:b8:9c:51:b3:7f:f4:45:45:7f:f7:34:f3:2d:98:
         32:93:dd:d5:f4:32:6d:3a:9d:3b:41:f9:9d:b8:99:6a:51:22:
         1d:23:21:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuIcIUz5fSkEzoOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTExOTEwMzAyMVoXDTI1MDIxNzEwMzAyMVowLzEtMCsGA1UEAxMk
NWYwYzBkYzgtZDFkZC00NDI2LWFiMzgtNjBlYmMxNmUzNzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTk/PELr4B3ICVDvpDolZEWVjxrisbdaVGKn
9tF+kwhm7YwjLDSlYrvcBlCvUDXffaT/HR14p+QlencchHgHtTfEcqSH2z5XlcGa
UT+ZnhWal+mhZbEvN9QtjRy3f9JkmE9EbmrIeOlI04bYZgadivvVJlM6vkw5svL8
oGV/lTxPtUC48WPvRQ30xmXaBhwnQpfz+2no7DthUhfT7fAM+yURvGhkqr+1E04r
RYUKZXsZE9qDUot0svIHPjpm4ggIuITF8G66JF4JGG3wYUPjeWw8hQuN5fbL3y5j
RnjKsr6M1fF3HqTDPWVPX6LNAAR4/doSNJfVf0b/kNncub1gdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4/PutclACIs15IFtHxT1Z2crijMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWY5NGJmMTEtZDk0Yy0z
MzM2LThlZjYtOTA5NTY2MTc0ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGE75icbau9+LEyH1126M08fxNXAPFmfHhDH+8/SkKsXppNYwOD8zpdD
dO9jApTsT+LYOT1YqP8ttIJ30l3sWHk3/KBBBQRcYOfNZPrLMHNaZRE+HJ8HR2p9
67PEyfnbQqkFkubo2FwGUU7wX1tVxYi13C6uUoXJMDHS5V9nUy1PIHaL03d3ytpn
RuR0wjcmQysE2GYyrO6ekDhVtYlNi9Dm5CByUSRI846AaegMR6V2D2140KtHO/Yq
thdsPc7HqitwHROHUVvZrgzgo04Gw9lqZLHjZXjms2m387a4nFGzf/RFRX/3NPMt
mDKT3dX0Mm06nTtB+Z24mWpRIh0jIZ0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:49 2024 by rpki-client on console-ams.rpki-client.org