Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8bce7e7d-dd2c-3ff4-8e48-f3523ba2f9d3.roa
File:                     8bce7e7d-dd2c-3ff4-8e48-f3523ba2f9d3.roa (raw, json)
Hash identifier:          H6Px9W459qxO0RqsllO6AfLiljakHS8/ffO4coOrfRY=
Subject key identifier:   74:51:DE:52:52:25:BF:D4:E3:18:D9:39:20:6F:44:B0:4E:C3:A8:18
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC649AC373B7F382EE1EFA00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8bce7e7d-dd2c-3ff4-8e48-f3523ba2f9d3.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        207.102.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:9a:c3:73:b7:f3:82:ee:1e:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=a00b23d3-e27e-4312-b02b-307cc4604f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:68:77:66:25:ea:7a:80:30:c6:f3:6c:3c:70:
                    b1:89:59:de:93:27:6d:e4:ea:24:d8:8a:5b:75:cc:
                    58:a6:14:f0:d7:b2:05:5f:d9:8d:4e:51:91:52:32:
                    d6:b3:18:0d:8d:24:0d:95:2b:c4:28:be:9e:d0:1b:
                    8b:4b:f9:41:cd:a1:f8:fe:cb:69:67:40:a4:c8:2a:
                    b2:f3:4c:4e:35:95:11:0d:1f:6b:74:6b:5f:9e:2f:
                    da:70:54:90:2a:39:db:9f:03:db:66:24:59:3e:36:
                    9a:e1:47:da:f4:b2:b5:3e:3f:65:65:72:94:25:4b:
                    bf:63:a4:12:bf:1b:a4:15:33:2e:69:e1:d5:0f:89:
                    fe:04:86:62:35:3e:60:36:55:eb:ca:39:31:1f:ae:
                    ee:8b:d1:d4:1f:53:e9:c2:15:90:53:ed:bf:a7:b9:
                    69:fc:e0:fb:1f:a5:8d:2e:79:39:5d:bc:54:b5:36:
                    8a:92:e9:73:3a:ee:6f:51:09:91:7c:2b:a8:21:1a:
                    90:e4:42:53:ac:09:54:b3:00:a1:ef:e3:47:78:ee:
                    22:06:59:2e:7c:1f:4c:1a:88:42:ef:7b:4f:b4:f7:
                    ed:02:97:01:57:d8:e6:26:03:1f:6d:c4:d1:af:06:
                    63:ef:78:c4:3d:90:2d:e4:6c:db:82:aa:c4:33:5b:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:51:DE:52:52:25:BF:D4:E3:18:D9:39:20:6F:44:B0:4E:C3:A8:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8bce7e7d-dd2c-3ff4-8e48-f3523ba2f9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:69:e4:bb:56:44:18:e7:16:39:86:22:c1:a9:50:cc:2d:
         02:08:27:2a:dd:cd:df:e9:5c:f4:90:ab:16:a5:35:95:d7:40:
         e6:0d:ec:ce:64:92:5c:8b:68:9c:2d:e0:47:cf:92:35:e9:de:
         d3:bb:1a:05:a0:76:99:74:80:60:7c:30:ae:1f:5d:9f:e2:55:
         2e:64:41:ba:69:45:c0:75:3c:73:7a:05:d4:b8:28:65:7b:18:
         8b:c8:f0:59:ea:03:22:41:0b:b4:37:83:9c:c8:91:01:32:10:
         40:9e:3b:e5:ef:fa:56:db:b3:d9:40:07:c0:6e:b3:f3:60:d7:
         78:67:00:98:03:b3:1a:c5:0b:c9:22:5a:ff:18:82:62:72:fd:
         d7:86:02:81:d0:4c:0d:45:26:b3:69:36:cd:ee:2f:fa:c8:c5:
         a0:80:6b:f7:49:dc:6d:3b:24:33:6a:a6:9e:68:7f:f5:79:91:
         8f:50:e8:46:fb:b0:96:2d:03:1c:6e:8c:3a:55:1f:96:c6:3d:
         bf:6a:59:67:fd:b8:3d:5b:94:0c:63:a6:e6:be:37:c3:2f:b0:
         30:b1:6c:91:f4:08:10:47:a9:70:89:12:5d:fe:b6:f9:88:10:
         53:36:b4:af:db:a9:c6:f5:d5:43:68:b7:a7:c7:70:ed:1b:6e:
         c6:b1:5e:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZJrDc7fzgu4e+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk
YTAwYjIzZDMtZTI3ZS00MzEyLWIwMmItMzA3Y2M0NjA0ZjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGh3ZiXqeoAwxvNsPHCxiVnekydt5Ook2Ipb
dcxYphTw17IFX9mNTlGRUjLWsxgNjSQNlSvEKL6e0BuLS/lBzaH4/stpZ0CkyCqy
80xONZURDR9rdGtfni/acFSQKjnbnwPbZiRZPjaa4Ufa9LK1Pj9lZXKUJUu/Y6QS
vxukFTMuaeHVD4n+BIZiNT5gNlXryjkxH67ui9HUH1PpwhWQU+2/p7lp/OD7H6WN
Lnk5XbxUtTaKkulzOu5vUQmRfCuoIRqQ5EJTrAlUswCh7+NHeO4iBlkufB9MGohC
73tPtPftApcBV9jmJgMfbcTRrwZj73jEPZAt5GzbgqrEM1sQQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRR3lJSJb/U4xjZOSBvRLBOw6gYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGJjZTdlN2QtZGQyYy0z
ZmY0LThlNDgtZjM1MjNiYTJmOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz2ZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABi/aeS7VkQY5xY5hiLBqVDMLQIIJyrdzd/pXPSQqxalNZXXQOYN7M5k
klyLaJwt4EfPkjXp3tO7GgWgdpl0gGB8MK4fXZ/iVS5kQbppRcB1PHN6BdS4KGV7
GIvI8FnqAyJBC7Q3g5zIkQEyEECeO+Xv+lbbs9lAB8Bus/Ng13hnAJgDsxrFC8ki
Wv8YgmJy/deGAoHQTA1FJrNpNs3uL/rIxaCAa/dJ3G07JDNqpp5of/V5kY9Q6Eb7
sJYtAxxujDpVH5bGPb9qWWf9uD1blAxjpua+N8MvsDCxbJH0CBBHqXCJEl3+tvmI
EFM2tK/bqcb11UNot6fHcO0bbsaxXlw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:49 2024 by rpki-client on console-fra.rpki-client.org