Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de90a0fd-3fe6-315a-bfa9-cd74e4c16a8c.roa
File:                     de90a0fd-3fe6-315a-bfa9-cd74e4c16a8c.roa (raw, json)
Hash identifier:          1OT+OZ4mFWDmpj9rFq7dE7Ab9nvnNddk9MmM5kokObM=
Subject key identifier:   7F:D4:08:E7:3C:B7:A2:C1:C1:F3:DA:6B:BA:62:C8:51:B6:18:25:32
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847EE7FD41219CA97E6B2092C40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de90a0fd-3fe6-315a-bfa9-cd74e4c16a8c.roa
Signing time:             Tue 19 Nov 2024 13:39:54 +0000
ROA not before:           Tue 19 Nov 2024 13:39:54 +0000
ROA not after:            Mon 17 Feb 2025 13:39:54 +0000
asID:                     15083
IP address blocks:        172.120.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:7f:d4:12:19:ca:97:e6:b2:09:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 19 13:39:54 2024 GMT
            Not After : Feb 17 13:39:54 2025 GMT
        Subject: CN=5101e851-6cd6-4a91-a4ad-d9f04b1d491b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1b:52:bb:dc:7b:d5:a1:d2:a0:20:37:ef:e9:
                    8b:c4:4d:0a:3c:ab:97:56:5e:66:9a:37:7b:6a:ce:
                    b8:43:34:c6:66:08:1e:70:19:b7:d7:94:eb:8c:00:
                    4d:d9:be:7a:9c:bb:7c:25:41:58:07:27:83:c3:77:
                    68:5c:85:d6:5e:8e:a2:6d:ee:c4:76:40:b0:cf:c0:
                    d0:96:27:7f:d5:96:52:90:4b:3b:91:b7:7e:6f:a3:
                    3f:db:25:34:14:46:47:44:c9:b0:98:a7:d3:e0:68:
                    ca:fc:72:69:99:00:b6:4d:b6:1c:35:ab:1a:5d:9f:
                    71:bd:87:cb:08:d9:ee:59:3d:09:e7:47:16:57:92:
                    d8:c1:14:9c:fc:a6:fb:d4:91:6c:9a:d8:6a:c5:82:
                    f5:c1:5d:63:51:71:c7:0a:d7:f1:80:53:2c:cb:e5:
                    ea:a1:a1:69:80:d4:fd:44:af:4c:74:eb:af:6a:0e:
                    a4:5a:a2:e2:fb:93:4e:e0:0a:0c:a0:c7:b4:a0:d3:
                    87:fd:de:c8:49:d1:6c:ec:85:4f:b8:21:f8:1a:ee:
                    d8:f7:7c:a0:81:cd:28:58:88:2d:81:a5:cf:01:02:
                    a3:44:61:7c:c2:30:df:9a:e0:59:10:f1:1a:0f:cd:
                    ba:40:7f:40:92:0f:b1:20:66:61:6d:64:36:fa:7e:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D4:08:E7:3C:B7:A2:C1:C1:F3:DA:6B:BA:62:C8:51:B6:18:25:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/de90a0fd-3fe6-315a-bfa9-cd74e4c16a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.120.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:dd:84:86:f7:c0:5c:e7:52:0f:70:fd:05:33:3d:a9:21:
         e1:2a:5a:a8:61:62:dd:7f:5f:37:8b:f3:9e:43:35:fd:f7:fc:
         05:8c:a1:97:60:b4:05:e6:95:ef:20:96:61:a1:eb:57:db:5a:
         0a:a6:51:f7:6e:1b:4c:d4:82:a8:49:d3:47:0c:49:fe:f5:4f:
         a4:5f:90:3d:ff:2a:93:d8:3b:2a:f6:90:54:4d:9c:be:3d:b8:
         34:b9:49:3b:53:53:3d:10:59:e5:23:3f:ad:97:12:46:2c:be:
         a5:36:11:2e:a7:09:cc:ea:f2:fc:dd:c9:c7:16:b4:e3:6e:15:
         e3:93:1e:f7:2b:ef:5e:96:aa:b4:26:40:b1:66:57:1b:b5:dc:
         e2:38:22:92:9e:f1:18:e5:a2:4b:ff:11:d3:12:3a:f5:7a:41:
         78:99:6b:32:8e:d8:a1:a5:95:dd:0d:e2:4b:6e:46:fa:0f:e2:
         ab:ec:82:23:17:4b:e8:4c:de:30:3e:47:86:17:d6:eb:4e:24:
         bc:07:78:7c:dc:2e:da:da:f1:df:7e:25:b2:e3:45:56:ef:58:
         26:d7:cc:7b:b3:08:66:95:95:90:29:41:2b:46:da:20:26:a9:
         e8:29:3e:8c:05:52:47:6e:81:aa:09:34:66:09:9c:5e:5e:24:
         6d:f2:5c:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuf9QSGcqX5rIJLEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTExOTEzMzk1NFoXDTI1MDIxNzEzMzk1NFowLzEtMCsGA1UEAxMk
NTEwMWU4NTEtNmNkNi00YTkxLWE0YWQtZDlmMDRiMWQ0OTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBtSu9x71aHSoCA37+mLxE0KPKuXVl5mmjd7
as64QzTGZggecBm315TrjABN2b56nLt8JUFYByeDw3doXIXWXo6ibe7EdkCwz8DQ
lid/1ZZSkEs7kbd+b6M/2yU0FEZHRMmwmKfT4GjK/HJpmQC2TbYcNasaXZ9xvYfL
CNnuWT0J50cWV5LYwRSc/Kb71JFsmthqxYL1wV1jUXHHCtfxgFMsy+XqoaFpgNT9
RK9MdOuvag6kWqLi+5NO4AoMoMe0oNOH/d7ISdFs7IVPuCH4Gu7Y93yggc0oWIgt
gaXPAQKjRGF8wjDfmuBZEPEaD826QH9Akg+xIGZhbWQ2+n7puQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/UCOc8t6LBwfPaa7piyFG2GCUyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGU5MGEwZmQtM2ZlNi0z
MTVhLWJmYTktY2Q3NGU0YzE2YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHg4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaa3YSG98Bc51IPcP0FMz2pIeEqWqhhYt1/XzeL855DNf33/AWMoZdg
tAXmle8glmGh61fbWgqmUfduG0zUgqhJ00cMSf71T6RfkD3/KpPYOyr2kFRNnL49
uDS5STtTUz0QWeUjP62XEkYsvqU2ES6nCczq8vzdyccWtONuFeOTHvcr716WqrQm
QLFmVxu13OI4IpKe8Rjlokv/EdMSOvV6QXiZazKO2KGlld0N4ktuRvoP4qvsgiMX
S+hM3jA+R4YX1utOJLwHeHzcLtra8d9+JbLjRVbvWCbXzHuzCGaVlZApQStG2iAm
qegpPowFUkdugaoJNGYJnF5eJG3yXOc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:55 2024 by rpki-client on console-ams.rpki-client.org