Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13c1cefc-456e-36f8-b3ea-13fe406ce51e.roa
File:                     13c1cefc-456e-36f8-b3ea-13fe406ce51e.roa (raw, json)
Hash identifier:          9tyjC+396LqPogQQfKMN73gmljaoZFLL1xYO/3l0CVs=
Subject key identifier:   C0:43:AA:2E:31:8D:D4:B4:FA:6F:69:7F:0B:C5:07:32:02:BF:F1:B1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC64A2039988D9FD0F237200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13c1cefc-456e-36f8-b3ea-13fe406ce51e.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        173.181.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:a2:03:99:88:d9:fd:0f:23:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=53106b4a-e0b1-4648-9e4c-402da19d863e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:e5:46:62:ec:31:cc:cd:85:6f:7b:a9:d7:
                    72:a6:de:cf:4b:e6:ab:c8:d6:d6:86:6f:43:4e:4a:
                    cf:f2:f6:ef:db:72:4b:be:6f:9c:0b:50:b7:2f:0b:
                    be:a9:56:13:ef:d9:59:63:8c:d8:78:96:c2:a9:6d:
                    fe:45:84:a3:cd:94:b4:ed:4d:8c:10:81:e6:62:18:
                    ea:b2:13:29:7e:2b:9c:18:64:da:b1:15:c4:f5:28:
                    47:e3:46:c5:41:38:37:a1:ac:1d:80:c8:09:eb:9f:
                    a5:b0:29:8b:b4:dc:54:08:c6:45:58:fd:a7:bd:79:
                    96:cb:40:3c:04:a5:6a:03:1c:4a:fd:2c:ba:a2:16:
                    84:be:5f:91:71:c3:5e:64:c0:2a:9d:c2:df:65:c6:
                    f2:6e:ff:52:58:26:02:86:05:cb:ff:13:4a:84:ac:
                    bd:b1:c3:62:85:19:c5:57:53:53:d2:2a:d0:28:da:
                    d6:a6:ea:02:ce:cd:3a:bb:9d:e4:a9:e8:8a:5b:c9:
                    3e:fd:2d:6c:6f:f7:bc:35:20:78:6d:58:48:ae:6d:
                    19:3c:d6:d9:0b:b0:40:33:bd:9f:09:41:07:3c:b7:
                    a9:45:88:10:aa:3d:bc:50:ad:cd:fb:97:9c:96:1b:
                    16:80:d5:f6:3c:81:b2:ac:92:2c:85:32:21:bd:44:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:43:AA:2E:31:8D:D4:B4:FA:6F:69:7F:0B:C5:07:32:02:BF:F1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13c1cefc-456e-36f8-b3ea-13fe406ce51e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:99:ff:0d:6c:e1:a4:5e:73:25:ee:15:a1:a6:84:89:90:
         48:9a:45:b7:5a:43:06:84:06:b1:5c:1e:d5:a1:e3:91:75:60:
         2a:41:31:00:a1:3a:ca:b8:a3:82:e6:4c:90:c5:c5:bf:39:1e:
         28:a4:a9:20:19:13:fb:a0:f4:d7:28:aa:62:42:99:ef:be:c2:
         4a:d5:4e:3e:1a:a8:dc:5c:f7:19:40:e3:98:e6:97:8b:04:b5:
         e4:f0:7a:17:26:e8:f0:ac:10:d9:9c:c6:12:75:32:32:8a:3d:
         ec:c2:b7:20:92:00:c1:ad:b3:d3:78:b9:37:8a:4b:bb:12:c7:
         75:fe:bd:a8:75:17:48:f0:0c:5b:c0:03:6a:90:a4:e5:af:1b:
         1e:98:02:25:af:2e:b9:23:26:94:f4:fe:3a:15:5c:9a:3a:3a:
         a1:26:b1:b1:ee:a8:19:33:68:9d:e2:bd:c8:9e:c4:8f:21:95:
         50:43:dd:07:1e:dd:42:66:47:71:fa:c6:6f:64:7f:e5:a3:ca:
         4c:34:fa:db:53:ca:e3:dc:8a:b6:78:4a:d6:47:8e:c9:4d:29:
         07:65:4e:3e:68:60:30:7e:84:ed:91:a6:04:f1:c0:21:7c:7b:
         90:2c:72:c6:d0:1e:76:73:cb:13:4e:1e:14:e4:78:ed:e2:38:
         ea:19:37:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZKIDmYjZ/Q8jcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk
NTMxMDZiNGEtZTBiMS00NjQ4LTllNGMtNDAyZGExOWQ4NjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1PlRmLsMczNhW97qddypt7PS+aryNbWhm9D
TkrP8vbv23JLvm+cC1C3Lwu+qVYT79lZY4zYeJbCqW3+RYSjzZS07U2MEIHmYhjq
shMpfiucGGTasRXE9ShH40bFQTg3oawdgMgJ65+lsCmLtNxUCMZFWP2nvXmWy0A8
BKVqAxxK/Sy6ohaEvl+RccNeZMAqncLfZcbybv9SWCYChgXL/xNKhKy9scNihRnF
V1NT0irQKNrWpuoCzs06u53kqeiKW8k+/S1sb/e8NSB4bVhIrm0ZPNbZC7BAM72f
CUEHPLepRYgQqj28UK3N+5eclhsWgNX2PIGyrJIshTIhvUR2jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMBDqi4xjdS0+m9pfwvFBzICv/GxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTNjMWNlZmMtNDU2ZS0z
NmY4LWIzZWEtMTNmZTQwNmNlNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbX4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6smf8NbOGkXnMl7hWhpoSJkEiaRbdaQwaEBrFcHtWh45F1YCpBMQCh
Osq4o4LmTJDFxb85HiikqSAZE/ug9NcoqmJCme++wkrVTj4aqNxc9xlA45jml4sE
teTwehcm6PCsENmcxhJ1MjKKPezCtyCSAMGts9N4uTeKS7sSx3X+vah1F0jwDFvA
A2qQpOWvGx6YAiWvLrkjJpT0/joVXJo6OqEmsbHuqBkzaJ3ivciexI8hlVBD3Qce
3UJmR3H6xm9kf+Wjykw0+ttTyuPcirZ4StZHjslNKQdlTj5oYDB+hO2RpgTxwCF8
e5AscsbQHnZzyxNOHhTkeO3iOOoZNxc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:54 2024 by rpki-client on console-fra.rpki-client.org