Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/6ba5b91f-7dba-39db-9e11-a012fdbe6722.roa
File:                     6ba5b91f-7dba-39db-9e11-a012fdbe6722.roa (raw, json)
Hash identifier:          Q+vmt19T0ELIUtGJ0CyjjpEonIeIzgOQPn+yPSTRa18=
Subject key identifier:   26:30:D6:4A:7F:92:59:ED:FD:24:9A:A9:2F:F7:70:43:D1:78:5C:0F
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F432858475910C7D5CB84DEE865F63200
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/6ba5b91f-7dba-39db-9e11-a012fdbe6722.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     23470
IP address blocks:        128.254.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c7:d5:cb:84:de:e8:65:f6:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=819c9275-e5ab-4ce1-8b3e-065642709c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:31:a4:9c:dc:b0:2d:89:f0:2c:11:79:80:
                    68:67:6b:1f:34:54:4f:ec:a0:09:50:8c:1d:ab:57:
                    b9:83:6b:e1:7e:b6:6b:f1:3f:a3:dc:32:26:7a:3c:
                    b9:21:91:07:e7:54:57:00:40:cf:df:f6:24:d3:93:
                    77:17:6e:7a:19:f1:38:c7:29:18:e5:eb:94:ce:72:
                    1c:0a:8d:02:99:f9:20:64:76:8e:1e:e6:76:3b:ec:
                    b2:bc:03:5e:b2:1a:a3:c5:8d:2e:7a:50:cc:3a:29:
                    92:cf:2c:37:4d:ca:e4:de:37:40:93:fa:0a:12:5a:
                    fd:2f:28:51:54:42:6d:5f:9e:d8:7f:35:3b:6b:60:
                    60:e6:2a:f7:fd:ff:be:dc:12:54:32:d2:05:53:2a:
                    a6:28:f7:36:72:12:64:81:c8:57:fb:d9:ec:16:6b:
                    3c:fe:6c:90:02:2c:80:a8:68:8d:88:72:7d:cd:af:
                    a8:b4:bd:3e:91:61:2a:7c:90:b8:a6:4d:7e:1b:aa:
                    d8:e2:89:16:52:a1:68:45:72:7b:25:ef:58:3e:b4:
                    ee:ad:f6:7d:07:a0:79:2a:d2:a8:cd:58:67:70:a3:
                    27:22:82:e9:0a:2e:fa:a3:ac:a0:c5:ad:1f:06:09:
                    3f:24:9d:92:4d:ce:24:75:97:c3:50:f5:74:15:dd:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:D6:4A:7F:92:59:ED:FD:24:9A:A9:2F:F7:70:43:D1:78:5C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/6ba5b91f-7dba-39db-9e11-a012fdbe6722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:99:c3:d9:8d:41:da:b2:fb:aa:8d:37:28:00:72:08:dd:98:
         20:a1:47:3b:1e:44:89:7a:07:9c:51:7f:3d:d3:1a:5f:22:91:
         b3:2e:f0:72:e6:87:58:c5:62:ef:03:86:28:16:0b:48:55:6d:
         b6:39:65:86:f2:a8:46:b5:4b:cd:d1:77:6d:50:08:d4:2a:50:
         21:bc:ca:a5:36:a2:9d:8b:83:6e:58:60:b3:3d:22:ea:9c:fb:
         b3:3f:66:ff:8a:b7:da:c4:85:0d:01:5e:3a:9f:51:a9:24:7a:
         ad:db:29:26:29:df:43:c4:36:c2:4d:4a:e3:07:ee:3a:ed:ef:
         5e:09:1b:45:ba:6a:92:0b:7a:7b:e6:ca:97:86:32:c9:6f:aa:
         bb:a3:bb:2e:ed:aa:57:40:73:53:a1:5b:33:2c:f5:6a:e2:24:
         ce:57:87:b2:c6:41:b1:24:50:ae:72:67:93:01:cd:52:fd:ed:
         a9:82:1e:62:dd:60:70:7e:a0:44:25:6d:70:72:56:e6:4a:4c:
         c9:c8:f0:76:b6:5c:91:f7:89:ea:09:87:c0:09:02:7f:88:30:
         9f:55:ae:e9:0f:bc:93:1a:e4:c0:61:b6:05:6f:5d:c5:c5:37:
         03:2a:97:79:4e:c3:05:a2:4d:a6:84:1e:5a:e5:8b:f6:ab:3b:
         e8:df:d1:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEMfVy4Te6GX2MgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjY5ZDI0ODEtOWI1Zi00MWYyLWEwOWMtOTI5OTRhM2Fl
MzM1MB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
ODE5YzkyNzUtZTVhYi00Y2UxLThiM2UtMDY1NjQyNzA5Yzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VMxpJzcsC2J8CwReYBoZ2sfNFRP7KAJUIwd
q1e5g2vhfrZr8T+j3DImejy5IZEH51RXAEDP3/Yk05N3F256GfE4xykY5euUznIc
Co0CmfkgZHaOHuZ2O+yyvANeshqjxY0uelDMOimSzyw3Tcrk3jdAk/oKElr9LyhR
VEJtX57YfzU7a2Bg5ir3/f++3BJUMtIFUyqmKPc2chJkgchX+9nsFms8/myQAiyA
qGiNiHJ9za+otL0+kWEqfJC4pk1+G6rY4okWUqFoRXJ7Je9YPrTurfZ9B6B5KtKo
zVhncKMnIoLpCi76o6ygxa0fBgk/JJ2STc4kdZfDUPV0Fd0TiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCYw1kp/klnt/SSaqS/3cEPReFwPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlk
MjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5NGEzYWUzMzUvNmJhNWI5MWYtN2RiYS0z
OWRiLTllMTEtYTAxMmZkYmU2NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjY5ZDI0ODEtOWI1Zi00MWYyLWEw
OWMtOTI5OTRhM2FlMzM1LzI2OWQyNDgxLTliNWYtNDFmMi1hMDljLTkyOTk0YTNh
ZTMzNS5jcmwwHwYDVR0jBBgwFoAUb9iBPHMZnPatpduCmqBTFv8j7VQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlkMjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5
NGEzYWUzMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFeZw9mNQdqy+6qNNygAcgjdmCChRzseRIl6B5xRfz3TGl8ikbMu8HLm
h1jFYu8DhigWC0hVbbY5ZYbyqEa1S83Rd21QCNQqUCG8yqU2op2Lg25YYLM9Iuqc
+7M/Zv+Kt9rEhQ0BXjqfUakkeq3bKSYp30PENsJNSuMH7jrt714JG0W6apILenvm
ypeGMslvqrujuy7tqldAc1OhWzMs9WriJM5Xh7LGQbEkUK5yZ5MBzVL97amCHmLd
YHB+oEQlbXByVuZKTMnI8Ha2XJH3ieoJh8AJAn+IMJ9VrukPvJMa5MBhtgVvXcXF
NwMql3lOwwWiTaaEHlrli/arO+jf0Ws=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:40 2024 by rpki-client on console-fra.rpki-client.org