Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa
File:                     8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa (raw, json)
Hash identifier:          zAJyZCwAjEvC5431Pcu7bLMlkUANYUOu6dbH9dwh1Gw=
Subject key identifier:   8B:AD:5D:0C:E7:81:DF:79:66:FA:31:3E:FD:C0:F4:B1:F1:70:56:07
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858477230DE9838E4CA8213D2CA00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     22362
IP address blocks:        72.20.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:de:98:38:e4:ca:82:13:d2:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=a7633389-7492-498b-989d-4e424c822389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:71:a1:58:51:f2:0c:03:03:ca:78:e3:20:
                    44:20:2d:64:e1:f8:15:14:bc:de:1a:32:71:62:9d:
                    13:63:2e:52:fa:26:f7:2f:ae:e8:d5:de:33:a1:a2:
                    6a:61:d9:d4:11:a0:dc:ac:e3:d8:c6:4a:f7:6a:84:
                    7c:65:36:b6:80:bb:c7:62:6c:54:09:71:cb:0e:ef:
                    be:04:1e:12:c3:b1:49:8b:b9:6c:dd:20:f3:d2:89:
                    3b:bd:c5:52:fe:a1:02:d2:7c:4d:7d:a4:c6:5e:27:
                    19:ad:c7:3b:d2:29:2c:d0:73:2e:1d:3c:df:45:5b:
                    65:c2:a7:7a:08:4e:b3:d4:1d:d5:5b:f7:a3:29:1e:
                    12:c2:d4:6a:27:15:1e:1e:fa:78:99:c6:e4:2f:25:
                    7d:a4:91:75:52:92:b6:2e:52:2b:16:1e:90:96:1f:
                    fd:26:91:09:72:14:46:de:c8:f2:aa:fd:ca:2c:91:
                    c8:2c:c9:b6:11:eb:ef:3a:bd:68:da:27:b0:54:db:
                    62:cc:db:ee:83:a5:11:e7:c8:5b:61:c3:8d:73:c9:
                    02:8a:99:0d:38:e8:73:49:2c:2c:63:fd:37:8f:c7:
                    c2:c7:00:03:da:a8:ad:d8:e4:1a:be:ef:1e:45:ee:
                    b5:76:f1:6a:b7:2e:03:21:83:1e:ba:5d:fa:a1:6d:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AD:5D:0C:E7:81:DF:79:66:FA:31:3E:FD:C0:F4:B1:F1:70:56:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/8466c8c4-1ea7-3bc6-b5c3-56ed6c163eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:f8:3f:87:ca:46:41:40:90:a6:91:d9:ac:cc:4d:1a:5d:
         b9:cb:ab:16:84:c7:03:3d:95:8c:74:3d:7f:94:af:59:a3:d1:
         33:82:b2:6e:39:58:36:27:a5:31:df:6b:85:ae:6c:ed:a4:b3:
         8c:d6:b9:39:5d:a9:94:55:b8:17:13:9c:61:eb:7c:76:b2:47:
         e0:2d:6a:8f:da:21:33:5d:fc:f5:3e:4d:6d:87:cf:98:b6:56:
         e8:28:45:93:93:e4:9d:6f:19:f5:de:b0:91:94:9d:4b:cc:f5:
         d8:84:99:b5:fa:ad:ef:f2:6d:ef:72:81:d5:09:5d:9a:09:c3:
         e8:be:e1:f4:38:6d:f0:43:a6:4b:13:30:c8:48:42:e5:4e:1d:
         a5:90:fe:12:39:a9:fe:0d:e7:62:17:05:ea:7d:63:ce:e3:a4:
         ab:08:f0:50:9d:8e:2b:20:2f:e1:89:06:d2:51:d5:3d:bd:8b:
         42:2d:ab:95:08:c9:8d:f8:93:d9:32:47:fb:3a:62:f1:00:24:
         67:b2:c6:1f:29:ca:b6:19:d1:a3:78:e4:cf:2f:5a:3f:bb:62:
         23:4c:7c:69:1c:ee:0f:da:56:f6:2f:48:8f:dc:08:55:58:23:
         bf:69:65:bc:bb:d7:d0:0b:5c:29:6d:0f:fc:ea:2b:9f:13:2a:
         2e:a6:e1:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMN6YOOTKghPSygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
YTc2MzMzODktNzQ5Mi00OThiLTk4OWQtNGU0MjRjODIyMzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBNxoVhR8gwDA8p44yBEIC1k4fgVFLzeGjJx
Yp0TYy5S+ib3L67o1d4zoaJqYdnUEaDcrOPYxkr3aoR8ZTa2gLvHYmxUCXHLDu++
BB4Sw7FJi7ls3SDz0ok7vcVS/qEC0nxNfaTGXicZrcc70iks0HMuHTzfRVtlwqd6
CE6z1B3VW/ejKR4SwtRqJxUeHvp4mcbkLyV9pJF1UpK2LlIrFh6Qlh/9JpEJchRG
3sjyqv3KLJHILMm2EevvOr1o2iewVNtizNvug6UR58hbYcONc8kCipkNOOhzSSws
Y/03j8fCxwAD2qit2OQavu8eRe61dvFqty4DIYMeul36oW1MxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIutXQzngd95ZvoxPv3A9LHxcFYHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvODQ2NmM4YzQtMWVhNy0z
YmM2LWI1YzMtNTZlZDZjMTYzZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/O+D+HykZBQJCmkdmszE0aXbnLqxaExwM9lYx0PX+Ur1mj0TOCsm45
WDYnpTHfa4WubO2ks4zWuTldqZRVuBcTnGHrfHayR+Atao/aITNd/PU+TW2Hz5i2
VugoRZOT5J1vGfXesJGUnUvM9diEmbX6re/ybe9ygdUJXZoJw+i+4fQ4bfBDpksT
MMhIQuVOHaWQ/hI5qf4N52IXBep9Y87jpKsI8FCdjisgL+GJBtJR1T29i0Itq5UI
yY34k9kyR/s6YvEAJGeyxh8pyrYZ0aN45M8vWj+7YiNMfGkc7g/aVvYvSI/cCFVY
I79pZby719ALXCltD/zqK58TKi6m4WU=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:44 2024 by rpki-client on console-fra.rpki-client.org