Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/8f872cbb-8138-3962-909d-de6b5c61327e.roa
File:                     8f872cbb-8138-3962-909d-de6b5c61327e.roa (raw, json)
Hash identifier:          9rfL+z4PwVW22TRMADX7rz/OU9cVfF2vxhZ7V2+lhOs=
Subject key identifier:   C5:15:49:44:C3:4B:C5:57:40:C7:A9:75:71:FE:EF:40:0D:A6:47:00
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F43285847924BD9EBB99A50158261D980
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/8f872cbb-8138-3962-909d-de6b5c61327e.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     19691
IP address blocks:        198.37.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:d9:eb:b9:9a:50:15:82:61:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=ca649bdd-c8a0-4a60-9280-a4120776378c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:46:03:ef:b0:4d:05:04:a1:fa:b1:89:01:
                    ea:72:84:8b:38:04:b7:9c:73:fd:5e:70:8d:01:92:
                    a2:25:f6:94:90:a9:ff:f0:16:81:a3:06:2d:0e:56:
                    79:96:16:22:c8:3e:5d:ef:2e:d8:4b:77:d5:ee:bb:
                    5f:59:7f:ac:fd:84:bc:0c:e5:12:13:91:e4:a0:8e:
                    44:c5:1f:31:ca:90:59:24:c7:90:51:d8:1c:ce:d9:
                    22:57:d7:93:62:11:48:26:74:48:58:0c:99:67:65:
                    d9:96:75:4f:4b:67:f9:05:9e:b7:af:b4:a3:46:b2:
                    a4:07:27:50:7b:00:87:e7:03:9c:ab:f4:0f:e5:0e:
                    1e:03:2a:3c:6e:7f:a4:a7:18:3b:57:fc:0f:98:07:
                    0b:9f:ff:97:28:4b:a5:98:a4:d0:da:4e:5a:23:55:
                    ce:dd:31:34:c1:42:b8:3f:fc:9f:8b:23:b5:4e:14:
                    e8:a5:85:11:dc:91:bd:f8:15:a0:d5:cf:18:25:8d:
                    f1:85:e7:61:ac:61:87:5d:68:41:49:c4:55:ae:80:
                    8a:a3:eb:9c:90:23:ea:77:e5:39:ef:05:4d:a6:85:
                    6b:3c:16:6b:2d:30:25:00:78:a2:d5:1f:7e:e6:1d:
                    3e:07:78:16:e5:b7:a1:a6:2b:79:81:3e:6c:05:b2:
                    7d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:15:49:44:C3:4B:C5:57:40:C7:A9:75:71:FE:EF:40:0D:A6:47:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/8f872cbb-8138-3962-909d-de6b5c61327e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a5:47:b2:83:82:18:43:31:5c:e3:c1:2a:d3:3a:55:f4:50:
         a6:c9:c8:74:fb:44:c2:3d:ab:34:53:fd:b2:bc:4d:cb:78:0a:
         9c:22:63:6e:cf:b1:fe:bc:cb:3b:d2:2e:fb:8f:1f:83:c9:c8:
         cb:ff:14:f4:0c:ae:75:59:df:08:e9:f8:ab:72:da:03:ec:1a:
         ac:50:21:02:df:52:b4:cd:8d:c8:b1:04:11:b8:bd:ec:80:b7:
         82:9e:b5:d3:82:14:33:7b:ed:b6:ee:83:ec:d1:2b:f4:ae:ca:
         a6:c1:9c:06:d3:bc:45:bb:be:8f:fe:45:0f:95:88:c0:6a:e4:
         64:4b:da:bd:8c:17:31:80:de:0c:67:e0:70:2e:6d:04:01:af:
         94:07:4e:83:18:ae:17:dc:f3:21:08:1b:65:c7:ee:c6:fe:34:
         43:ca:3d:99:9f:c9:9c:ae:1e:88:a9:17:67:f5:05:b3:80:e7:
         78:52:86:da:81:30:23:ea:97:aa:2f:cf:8b:34:f8:8a:d2:7b:
         b0:31:02:23:1b:56:ca:54:6a:90:0b:6a:07:68:7c:7c:cf:30:
         40:2f:1d:c6:b9:f2:57:ca:d5:02:4b:fc:93:91:04:2c:5a:64:
         4c:51:2d:03:3d:8b:db:01:33:e7:6d:91:81:47:d5:64:44:4e:
         88:1d:d8:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS9nruZpQFYJh2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk
Y2E2NDliZGQtYzhhMC00YTYwLTkyODAtYTQxMjA3NzYzNzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioJGA++wTQUEofqxiQHqcoSLOAS3nHP9XnCN
AZKiJfaUkKn/8BaBowYtDlZ5lhYiyD5d7y7YS3fV7rtfWX+s/YS8DOUSE5HkoI5E
xR8xypBZJMeQUdgcztkiV9eTYhFIJnRIWAyZZ2XZlnVPS2f5BZ63r7SjRrKkBydQ
ewCH5wOcq/QP5Q4eAyo8bn+kpxg7V/wPmAcLn/+XKEulmKTQ2k5aI1XO3TE0wUK4
P/yfiyO1ThTopYUR3JG9+BWg1c8YJY3xhedhrGGHXWhBScRVroCKo+uckCPqd+U5
7wVNpoVrPBZrLTAlAHii1R9+5h0+B3gW5behpit5gT5sBbJ98wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUVSUTDS8VXQMepdXH+70ANpkcAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvOGY4NzJjYmItODEzOC0z
OTYyLTkwOWQtZGU2YjVjNjEzMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAalR7KDghhDMVzjwSrTOlX0UKbJyHT7RMI9qzRT/bK8Tct4CpwiY27P
sf68yzvSLvuPH4PJyMv/FPQMrnVZ3wjp+Kty2gPsGqxQIQLfUrTNjcixBBG4veyA
t4KetdOCFDN77bbug+zRK/SuyqbBnAbTvEW7vo/+RQ+ViMBq5GRL2r2MFzGA3gxn
4HAubQQBr5QHToMYrhfc8yEIG2XH7sb+NEPKPZmfyZyuHoipF2f1BbOA53hShtqB
MCPql6ovz4s0+IrSe7AxAiMbVspUapALagdofHzPMEAvHca58lfK1QJL/JORBCxa
ZExRLQM9i9sBM+dtkYFH1WRETogd2AU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:40 2024 by rpki-client on console-fra.rpki-client.org