Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/69ca97ab-3c91-3275-8ade-932e76a09cd9.roa
File:                     69ca97ab-3c91-3275-8ade-932e76a09cd9.roa (raw, json)
Hash identifier:          Lmlaw3GKPGX4oF9AE7RQSuEByrnib+2agnl61w4JD0A=
Subject key identifier:   19:E5:D9:6D:78:6E:E3:1E:12:B3:52:25:11:21:AC:82:C3:23:C6:1F
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285847ACD13F428C3AE17380FD3C00
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/69ca97ab-3c91-3275-8ade-932e76a09cd9.roa
Signing time:             Sun 27 Oct 2024 01:00:31 +0000
ROA not before:           Sun 27 Oct 2024 01:00:31 +0000
ROA not after:            Sat 25 Jan 2025 02:00:31 +0000
asID:                     21530
IP address blocks:        170.186.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:d1:3f:42:8c:3a:e1:73:80:fd:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Oct 27 01:00:31 2024 GMT
            Not After : Jan 25 02:00:31 2025 GMT
        Subject: CN=21303378-5241-4056-93d0-d0c4c3d72ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c5:53:43:f2:36:a7:2b:18:4a:54:a3:4e:83:
                    bd:99:a3:db:54:5f:51:4d:b4:8d:eb:02:25:50:c7:
                    be:14:54:bf:87:e9:3b:ac:4c:9c:88:5e:78:c1:08:
                    53:d7:fc:29:fa:3b:51:99:81:36:f0:9a:c1:56:21:
                    87:c5:ad:4a:f4:57:39:fe:09:18:eb:e2:e5:da:8b:
                    5a:d1:d1:2a:2c:9e:50:de:4f:b2:d6:15:bf:b1:2b:
                    25:0a:60:d5:c7:3d:3e:78:10:1a:bb:ab:31:72:b4:
                    2d:fb:9e:6e:b3:24:d5:2d:8e:90:64:93:98:cf:df:
                    82:40:cb:e5:65:b6:4e:88:81:24:df:a1:8b:bd:97:
                    17:c7:ab:ca:6f:ed:f3:61:e8:12:15:15:10:50:fa:
                    1e:65:16:bb:3c:bf:a2:85:83:f2:6a:e8:77:7b:9a:
                    d3:b6:cd:8d:df:84:99:78:f8:ba:80:61:3b:ce:e3:
                    1e:a1:af:9b:9e:17:09:53:2f:ae:74:70:d4:32:02:
                    d9:fa:bc:6c:e1:8b:56:57:8f:41:c3:72:c7:f4:14:
                    17:20:7a:85:76:90:82:a3:cf:a6:fc:5f:30:62:fe:
                    9f:5a:4c:63:ad:f3:41:57:8c:56:e1:2d:4e:eb:50:
                    6f:1a:51:97:c2:07:ad:60:dc:b9:32:25:0c:17:3c:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E5:D9:6D:78:6E:E3:1E:12:B3:52:25:11:21:AC:82:C3:23:C6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/69ca97ab-3c91-3275-8ade-932e76a09cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:6b:f6:37:af:2c:f4:75:aa:58:a2:26:4e:32:08:a5:fa:48:
         61:8b:85:5c:a9:51:d2:c6:d8:5b:5f:23:58:27:64:ea:6e:72:
         34:83:2d:49:e3:20:8e:51:62:0e:63:b8:a5:5b:39:9a:50:78:
         9a:14:42:cf:46:0d:f6:61:9c:35:e6:84:5e:02:c9:e1:e3:f9:
         81:15:8a:70:b2:67:8d:27:95:57:50:53:e4:89:82:64:b3:3d:
         a1:bd:ef:5e:d5:01:23:e4:fa:e1:c1:1a:4e:f0:9e:2e:3b:7f:
         28:0e:43:a7:16:39:da:f0:aa:31:19:ef:54:1a:14:36:6e:1a:
         e0:39:42:35:38:21:41:73:4d:d1:8d:42:4c:a0:22:a2:d8:a8:
         27:46:29:ac:b0:16:7c:12:2e:1d:6f:2b:bb:c7:9f:57:e7:c9:
         c5:b3:49:94:cf:95:51:79:84:ff:ee:97:e6:7d:f3:42:e1:b6:
         81:cc:f1:41:8f:77:ae:64:5f:9c:4d:48:7a:f3:fb:e5:d2:9f:
         25:92:ac:76:8f:1d:27:ea:7f:db:0e:b5:62:ca:7c:d8:56:cd:
         64:64:a8:a9:b1:08:40:69:66:dd:c4:ce:cb:4e:dd:1b:9b:33:
         07:07:1c:e6:c9:f5:a2:0f:95:0c:0b:e7:89:8d:3d:c9:31:e6:
         b3:92:0e:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEes0T9CjDrhc4D9PAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0
ZDUyMB4XDTI0MTAyNzAxMDAzMVoXDTI1MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
MjEzMDMzNzgtNTI0MS00MDU2LTkzZDAtZDBjNGMzZDcyY2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMVTQ/I2pysYSlSjToO9maPbVF9RTbSN6wIl
UMe+FFS/h+k7rEyciF54wQhT1/wp+jtRmYE28JrBViGHxa1K9Fc5/gkY6+Ll2ota
0dEqLJ5Q3k+y1hW/sSslCmDVxz0+eBAau6sxcrQt+55usyTVLY6QZJOYz9+CQMvl
ZbZOiIEk36GLvZcXx6vKb+3zYegSFRUQUPoeZRa7PL+ihYPyauh3e5rTts2N34SZ
ePi6gGE7zuMeoa+bnhcJUy+udHDUMgLZ+rxs4YtWV49Bw3LH9BQXIHqFdpCCo8+m
/F8wYv6fWkxjrfNBV4xW4S1O61BvGlGXwgetYNy5MiUMFzzoiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnl2W14buMeErNSJREhrILDI8YfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl
ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNjljYTk3YWItM2M5MS0z
Mjc1LThhZGUtOTMyZTc2YTA5Y2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5
ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4
NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4
MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVr9jevLPR1qliiJk4yCKX6SGGLhVypUdLG2FtfI1gnZOpucjSDLUnj
II5RYg5juKVbOZpQeJoUQs9GDfZhnDXmhF4CyeHj+YEVinCyZ40nlVdQU+SJgmSz
PaG9717VASPk+uHBGk7wni47fygOQ6cWOdrwqjEZ71QaFDZuGuA5QjU4IUFzTdGN
QkygIqLYqCdGKaywFnwSLh1vK7vHn1fnycWzSZTPlVF5hP/ul+Z980LhtoHM8UGP
d65kX5xNSHrz++XSnyWSrHaPHSfqf9sOtWLKfNhWzWRkqKmxCEBpZt3EzstO3Rub
MwcHHObJ9aIPlQwL54mNPckx5rOSDhE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:26:07 2024 by rpki-client on console-fra.rpki-client.org