Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa
File:                     cd337d2d-26cc-35ed-b565-266953cef062.roa (raw, json)
Hash identifier:          3Pmq6SVMjIxwcr1uQEjU9E6N6tz/MNakE0nYEs2sKC0=
Subject key identifier:   EC:AE:EB:CD:E2:DB:85:CC:35:25:C4:73:F0:1E:D5:5A:AF:7C:F4:8C
Certificate issuer:       /CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
Certificate serial:       010D0C9F432858473095E2784C9BD92315A6F080
Authority key identifier: F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     54825
IP address blocks:        192.80.8.0/24 maxlen: 24
                          198.16.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e2:78:4c:9b:d9:23:15:a6:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=469a6e05-844b-45cc-aae7-2ca08250f475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:38:e7:02:99:6c:62:ff:a8:2f:26:e6:95:
                    a7:88:1c:2b:be:b3:1f:d1:cc:f7:9a:e5:99:8a:d8:
                    23:87:44:05:4d:90:db:ac:cd:a0:17:0c:63:08:e9:
                    16:a8:87:ec:55:c8:85:0f:8a:25:af:90:e5:be:96:
                    0f:0e:d6:41:18:a2:fb:09:95:90:4a:1a:a6:11:44:
                    0b:62:f0:ae:eb:12:82:d2:7a:7e:5b:c2:68:cf:9c:
                    c6:d7:ac:29:ae:91:f6:eb:35:8d:7f:df:df:75:0e:
                    34:64:c2:6a:94:c8:bf:b6:a3:c9:f3:38:80:52:cd:
                    25:ca:18:f3:b5:71:d6:93:cf:9a:55:c0:49:35:9b:
                    1e:eb:1b:2c:c7:bc:47:cf:69:95:d1:a4:53:65:48:
                    d3:91:a4:48:79:83:06:d0:ae:56:2e:1e:32:40:6d:
                    b2:12:22:3b:cd:a1:0d:97:e6:44:f7:bd:14:b1:61:
                    0e:6d:eb:6c:ed:46:44:5b:78:38:32:53:d1:ba:2f:
                    7e:df:17:8f:bf:8e:72:9b:08:46:25:bf:74:7c:61:
                    06:37:7b:ee:bc:40:f6:a7:be:a1:45:0c:4b:88:ee:
                    21:8f:3e:a9:86:39:5c:d0:20:9a:70:16:8d:ac:32:
                    7e:f9:9f:7f:a1:e8:9a:8f:5d:d6:b7:43:13:5d:e3:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:EB:CD:E2:DB:85:CC:35:25:C4:73:F0:1E:D5:5A:AF:7C:F4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl

            X509v3 Authority Key Identifier:
                keyid:F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.8.0/24
                  198.16.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b3:20:9c:6c:b8:0b:22:bb:e7:36:f7:db:46:5f:c2:a5:e6:
         ab:01:ff:5f:3f:7a:7b:51:d3:fc:19:a4:59:d7:47:f0:88:89:
         3a:1e:1a:df:7c:83:97:2b:7d:12:27:51:8d:43:f7:61:18:a0:
         a1:38:bf:f0:ce:71:d7:6d:28:ad:dc:45:ab:57:34:f7:68:a1:
         4a:d3:72:44:91:a6:a7:09:a2:d0:97:c8:a6:e9:0d:b3:60:7c:
         ba:09:93:47:44:47:f2:5c:cc:12:77:6a:fa:e0:8f:16:1b:89:
         4c:0b:23:5e:17:2e:12:9e:1d:c0:7a:8b:12:85:92:34:19:64:
         02:4f:12:db:9c:e4:7c:ed:53:7a:45:2f:14:eb:0a:d6:f3:91:
         55:8e:de:69:52:8a:2a:45:f3:16:24:14:53:ca:95:e7:53:ad:
         a9:5e:59:14:36:d8:d2:e1:2d:54:53:23:d7:95:60:08:3c:76:
         09:5d:35:16:7c:f4:58:8e:85:c2:2e:5e:85:37:6f:d2:64:07:
         21:22:ce:9f:67:5e:0c:4d:8d:13:ff:b2:1f:08:8c:12:bf:b7:
         be:2d:4f:b6:cb:5c:1b:8b:f0:33:c8:48:0b:61:b0:31:31:ff:
         e8:05:b0:b6:55:f2:18:8b:ac:90:3e:3c:c9:4d:9a:7e:de:71:
         dc:a0:6e:6c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEcwleJ4TJvZIxWm8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdlMmQ3ZWUtZDIzOS00OTI4LTkxMDctY2ViOTVjYWNk
MGI4MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
NDY5YTZlMDUtODQ0Yi00NWNjLWFhZTctMmNhMDgyNTBmNDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67o45wKZbGL/qC8m5pWniBwrvrMf0cz3muWZ
itgjh0QFTZDbrM2gFwxjCOkWqIfsVciFD4olr5DlvpYPDtZBGKL7CZWQShqmEUQL
YvCu6xKC0np+W8Joz5zG16wprpH26zWNf9/fdQ40ZMJqlMi/tqPJ8ziAUs0lyhjz
tXHWk8+aVcBJNZse6xssx7xHz2mV0aRTZUjTkaRIeYMG0K5WLh4yQG2yEiI7zaEN
l+ZE970UsWEObets7UZEW3g4MlPRui9+3xePv45ymwhGJb90fGEGN3vuvED2p76h
RQxLiO4hjz6phjlc0CCacBaNrDJ++Z9/oeiaj13Wt0MTXeNkXQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOyu683i24XMNSXEc/Ae1VqvfPSMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yN2Uy
ZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5NWNhY2QwYjgvY2QzMzdkMmQtMjZjYy0z
NWVkLWI1NjUtMjY2OTUzY2VmMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjdlMmQ3ZWUtZDIzOS00OTI4LTkx
MDctY2ViOTVjYWNkMGI4LzI3ZTJkN2VlLWQyMzktNDkyOC05MTA3LWNlYjk1Y2Fj
ZDBiOC5jcmwwHwYDVR0jBBgwFoAU9s0l3xU5dEMQe7nLP0NxHNA6r8cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yN2UyZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5
NWNhY2QwYjguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwFAIAwQC
xhAEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHOzIJxsuAsiu+c299tGX8Kl5qsB/18/entR0/wZpFnXR/CI
iToeGt98g5crfRInUY1D92EYoKE4v/DOcddtKK3cRatXNPdooUrTckSRpqcJotCX
yKbpDbNgfLoJk0dER/JczBJ3avrgjxYbiUwLI14XLhKeHcB6ixKFkjQZZAJPEtuc
5HztU3pFLxTrCtbzkVWO3mlSiipF8xYkFFPKledTraleWRQ22NLhLVRTI9eVYAg8
dgldNRZ89FiOhcIuXoU3b9JkByEizp9nXgxNjRP/sh8IjBK/t74tT7bLXBuL8DPI
SAthsDEx/+gFsLZV8hiLrJA+PMlNmn7ecdygbmw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:40 2024 by rpki-client on console-fra.rpki-client.org