Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa
File:                     fd7f83c1-f827-3297-a189-95647b2df8c5.roa (raw, json)
Hash identifier:          WuxZM+hPZVGYUR2luDdFYT6xO33oD2HmlcXioODAXb0=
Subject key identifier:   B0:C9:3D:BF:A8:4F:3E:E0:7D:98:68:65:C7:86:CA:B4:6A:16:AE:50
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858476F663D167939F9ACD9FB4800
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     213035
IP address blocks:        209.182.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:3d:16:79:39:f9:ac:d9:fb:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=2e16934c-42ca-44a2-9021-4f954008f36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:30:9b:65:5a:1f:e8:15:1f:6d:d1:03:88:
                    d6:b4:e9:33:f9:fc:f9:c8:d5:9b:8a:d9:04:0d:01:
                    0f:4d:6a:bb:d2:f3:87:60:af:a1:77:da:0a:89:b6:
                    fb:cc:39:77:86:3f:d9:00:14:06:24:47:1e:8b:14:
                    2c:eb:25:ad:3e:49:d4:0a:c6:34:86:29:27:9f:da:
                    23:72:8d:8e:d1:f9:d5:7c:2a:89:68:bf:65:9f:93:
                    59:4f:be:e5:c0:b5:2b:7c:c6:44:6e:42:fd:55:a3:
                    0a:ae:ae:98:62:c7:f1:0d:3e:2a:f6:ce:80:30:94:
                    29:4e:ca:56:d5:9b:e6:1d:d9:b8:2b:39:f6:02:8d:
                    e3:c6:67:6b:aa:2e:2d:3b:8c:16:c7:b2:3b:58:90:
                    e2:01:af:63:cd:e1:1b:6f:21:9d:c5:85:b4:83:7d:
                    2b:8e:c4:e2:44:92:3b:25:9f:1d:ac:0c:0e:84:27:
                    f4:32:70:19:36:75:61:30:21:f3:5f:5f:1f:5a:f6:
                    2d:62:fc:55:67:25:7a:41:68:33:a6:47:78:01:5d:
                    f8:de:aa:bf:f4:d6:cd:2d:6a:df:cc:ff:87:32:82:
                    96:39:7e:23:a1:64:2d:28:6c:53:4d:66:5e:d1:b9:
                    15:68:63:ce:57:9f:af:2d:63:17:3a:7f:f6:0c:d1:
                    9c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C9:3D:BF:A8:4F:3E:E0:7D:98:68:65:C7:86:CA:B4:6A:16:AE:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:fe:60:76:22:51:46:83:57:e8:2a:7e:17:d0:d0:ed:1b:
         95:fb:f1:73:91:33:41:29:10:cf:11:38:93:d1:e7:74:cc:07:
         26:a9:62:1e:e1:60:e2:75:61:4d:96:f1:99:aa:db:43:1c:2c:
         d3:e9:05:a2:a7:bb:df:e1:b3:95:d2:8d:c7:72:fa:e9:4f:70:
         25:a9:5f:e8:2a:eb:35:5e:bf:29:1b:01:a4:ed:9a:dd:c3:42:
         08:c0:25:3c:c0:ad:5c:6d:29:38:7b:96:f6:8d:de:72:c6:86:
         bc:29:c4:55:50:d8:57:ea:c4:9e:ad:c9:1d:e8:82:4c:f4:da:
         c3:e9:91:16:af:77:ec:d7:8b:50:a1:97:6d:30:c5:5d:3a:70:
         06:0a:67:0f:f1:f4:b4:73:34:f6:16:39:5e:70:bd:38:d4:b1:
         89:0c:fa:99:91:3c:8f:29:9f:c0:c7:ee:27:5f:6c:86:52:ce:
         9c:d5:f0:3b:a1:f6:80:7e:6c:19:c4:51:b8:87:56:8c:c5:53:
         48:ad:56:27:fc:80:e1:db:28:96:16:bc:de:a4:75:13:c0:ed:
         a9:a5:8e:35:10:b4:64:93:d1:8f:70:5d:6d:8d:88:12:d0:1a:
         f1:fc:46:d1:12:af:92:7b:50:2f:ad:ff:c5:52:ce:46:84:17:
         de:98:5a:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdvZj0WeTn5rNn7SAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1YTk3YWUtZGY0ZS00OWJjLTlmNzYtZmYwMjVhNWMy
NWU4MB4XDTI0MTAwNTAxMDAzMVoXDTI1MDEwMzAyMDAzMVowLzEtMCsGA1UEAxMk
MmUxNjkzNGMtNDJjYS00NGEyLTkwMjEtNGY5NTQwMDhmMzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWowm2VaH+gVH23RA4jWtOkz+fz5yNWbitkE
DQEPTWq70vOHYK+hd9oKibb7zDl3hj/ZABQGJEceixQs6yWtPknUCsY0hiknn9oj
co2O0fnVfCqJaL9ln5NZT77lwLUrfMZEbkL9VaMKrq6YYsfxDT4q9s6AMJQpTspW
1ZvmHdm4Kzn2Ao3jxmdrqi4tO4wWx7I7WJDiAa9jzeEbbyGdxYW0g30rjsTiRJI7
JZ8drAwOhCf0MnAZNnVhMCHzX18fWvYtYvxVZyV6QWgzpkd4AV343qq/9NbNLWrf
zP+HMoKWOX4joWQtKGxTTWZe0bkVaGPOV5+vLWMXOn/2DNGcnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDJPb+oTz7gfZhoZceGyrRqFq5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NTVh
OTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAyNWE1YzI1ZTgvZmQ3ZjgzYzEtZjgyNy0z
Mjk3LWExODktOTU2NDdiMmRmOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU1YTk3YWUtZGY0ZS00OWJjLTlm
NzYtZmYwMjVhNWMyNWU4LzQ1NWE5N2FlLWRmNGUtNDliYy05Zjc2LWZmMDI1YTVj
MjVlOC5jcmwwHwYDVR0jBBgwFoAU1q6NbrjOWHH/k5GUTpU1xCeTuU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NTVhOTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAy
NWE1YzI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bZlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEr/mB2IlFGg1foKn4X0NDtG5X78XORM0EpEM8ROJPR53TMByapYh7h
YOJ1YU2W8Zmq20McLNPpBaKnu9/hs5XSjcdy+ulPcCWpX+gq6zVevykbAaTtmt3D
QgjAJTzArVxtKTh7lvaN3nLGhrwpxFVQ2FfqxJ6tyR3ogkz02sPpkRavd+zXi1Ch
l20wxV06cAYKZw/x9LRzNPYWOV5wvTjUsYkM+pmRPI8pn8DH7idfbIZSzpzV8Duh
9oB+bBnEUbiHVozFU0itVif8gOHbKJYWvN6kdRPA7amljjUQtGST0Y9wXW2NiBLQ
GvH8RtESr5J7UC+t/8VSzkaEF96YWgE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:11 2024 by rpki-client on console-ams.rpki-client.org