Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
File:                     59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa (raw, json)
Hash identifier:          lxF8c2+Zuejtm9MBMpV4f4OqvL8zHqIENjaaFWCOb6g=
Subject key identifier:   E5:EF:2D:C3:4F:7E:19:59:45:9F:E9:24:E7:51:F1:B8:91:45:4F:92
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285847ACD13F898F89E75459E3AEC0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa
Signing time:             Sun 27 Oct 2024 01:00:31 +0000
ROA not before:           Sun 27 Oct 2024 01:00:31 +0000
ROA not after:            Sat 25 Jan 2025 02:00:31 +0000
asID:                     22142
IP address blocks:        170.186.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:d1:3f:89:8f:89:e7:54:59:e3:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Oct 27 01:00:31 2024 GMT
            Not After : Jan 25 02:00:31 2025 GMT
        Subject: CN=d0fe7486-f807-42f5-8acc-74f896523817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:8e:fd:52:54:a3:fa:ed:42:3e:f3:f2:ff:
                    a5:37:08:38:61:bf:39:50:cc:87:2c:93:38:1c:a8:
                    ad:20:54:06:78:65:97:f0:fb:b9:23:47:c0:ca:7a:
                    de:42:d8:bc:7a:30:e4:1b:08:ba:9c:6f:6f:c9:b1:
                    67:ea:cd:a7:e7:91:30:73:84:8d:12:e3:60:ba:4f:
                    7a:c9:ab:68:1d:7f:4d:a3:75:e0:21:be:8b:84:ae:
                    44:1a:59:f5:a4:6e:3d:4e:de:1c:a9:f9:29:a5:ac:
                    5f:9a:15:2d:80:dd:92:37:b9:d7:5d:17:62:ce:8e:
                    5a:6c:b5:70:57:32:ae:e9:41:a5:32:f6:68:56:9e:
                    eb:d6:e9:ed:e8:98:60:16:30:dc:94:47:5b:2d:88:
                    ac:d5:79:1f:f5:39:ff:fa:59:10:5f:9c:16:71:e1:
                    27:34:b9:c2:2c:1e:58:be:44:35:50:8a:71:51:7f:
                    fa:7e:43:0f:b0:76:a5:db:42:ec:a4:df:d8:86:92:
                    17:0b:50:f3:5c:d6:7c:a1:65:f3:b9:96:cf:f3:af:
                    96:3c:35:89:f5:48:d1:c8:75:fd:00:d9:d5:ef:ec:
                    b6:3b:84:75:e4:7d:2d:92:85:fd:8b:54:15:0b:63:
                    c1:c9:14:5b:f7:46:2f:c6:dd:a9:bd:52:18:cc:77:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EF:2D:C3:4F:7E:19:59:45:9F:E9:24:E7:51:F1:B8:91:45:4F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/59c564f1-4ba5-32b0-9f5c-0604725cdce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:14:fd:e4:6a:5a:17:4d:e9:a3:8c:93:8f:90:c5:df:12:d4:
         f2:2b:4a:ed:3b:ab:29:e8:3f:fb:5a:39:ae:0f:48:ee:96:24:
         8c:a2:24:de:5c:81:80:6b:2b:26:4f:ad:25:1d:77:12:88:46:
         f0:fe:f2:1f:3f:1e:bf:21:f6:e2:9b:d9:20:8d:51:2b:91:cb:
         45:68:1f:a7:94:69:42:5e:17:97:7e:00:c9:4b:bd:fc:34:63:
         b7:8d:8b:e3:87:38:92:56:a7:d5:8a:0e:c0:12:88:7e:4a:42:
         19:fa:fe:19:e4:ff:a4:63:11:f5:93:e5:3c:e3:8d:6a:41:3b:
         4a:6d:fb:51:1f:57:aa:f5:09:d3:6b:93:97:0f:29:88:e5:6d:
         05:89:0f:88:c2:07:43:f2:1a:a1:ad:09:75:76:1a:ed:06:3b:
         49:00:88:77:4e:21:83:5e:58:ec:91:21:c6:85:ac:9a:33:09:
         00:2f:de:83:3f:82:40:96:de:09:1b:81:86:c2:02:bb:71:a5:
         8a:14:e0:2c:43:3f:6b:c2:4f:e2:e2:d0:1c:f1:f4:7f:4c:7a:
         9d:6c:17:74:6b:46:e1:59:dd:17:f2:78:36:67:37:b7:08:0a:
         b5:00:50:d1:ff:4c:44:08:b2:42:25:1d:a0:e4:fc:2c:be:00:
         b4:e6:e9:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEes0T+Jj4nnVFnjrsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0
ZDUyMB4XDTI0MTAyNzAxMDAzMVoXDTI1MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDBmZTc0ODYtZjgwNy00MmY1LThhY2MtNzRmODk2NTIzODE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPiO/VJUo/rtQj7z8v+lNwg4Yb85UMyHLJM4
HKitIFQGeGWX8Pu5I0fAynreQti8ejDkGwi6nG9vybFn6s2n55Ewc4SNEuNguk96
yatoHX9No3XgIb6LhK5EGln1pG49Tt4cqfkppaxfmhUtgN2SN7nXXRdizo5abLVw
VzKu6UGlMvZoVp7r1unt6JhgFjDclEdbLYis1Xkf9Tn/+lkQX5wWceEnNLnCLB5Y
vkQ1UIpxUX/6fkMPsHal20LspN/YhpIXC1DzXNZ8oWXzuZbP86+WPDWJ9UjRyHX9
ANnV7+y2O4R15H0tkoX9i1QVC2PByRRb90Yvxt2pvVIYzHedJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOXvLcNPfhlZRZ/pJOdR8biRRU+SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl
ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNTljNTY0ZjEtNGJhNS0z
MmIwLTlmNWMtMDYwNDcyNWNkY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5
ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4
NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4
MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcU/eRqWhdN6aOMk4+Qxd8S1PIrSu07qynoP/taOa4PSO6WJIyiJN5c
gYBrKyZPrSUddxKIRvD+8h8/Hr8h9uKb2SCNUSuRy0VoH6eUaUJeF5d+AMlLvfw0
Y7eNi+OHOJJWp9WKDsASiH5KQhn6/hnk/6RjEfWT5TzjjWpBO0pt+1EfV6r1CdNr
k5cPKYjlbQWJD4jCB0PyGqGtCXV2Gu0GO0kAiHdOIYNeWOyRIcaFrJozCQAv3oM/
gkCW3gkbgYbCArtxpYoU4CxDP2vCT+Li0Bzx9H9Mep1sF3RrRuFZ3RfyeDZnN7cI
CrUAUNH/TEQIskIlHaDk/Cy+ALTm6SM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:07 2024 by rpki-client on console-fra.rpki-client.org