Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa
File:                     8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa (raw, json)
Hash identifier:          h8LRQBb66qD5RRnNDGkaenDyfee7Y/m0BYOWyM+nxUs=
Subject key identifier:   52:3E:A7:C7:1A:00:C1:2E:80:FC:8C:B1:5F:0F:BA:3D:87:1D:B5:69
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858477230DB54DE5003241EC97780
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     13213
IP address blocks:        198.105.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:db:54:de:50:03:24:1e:c9:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=7aaa8bac-cc71-4f2f-8131-794978bbf16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:2d:b9:65:a2:6f:c7:7e:f4:51:31:70:18:
                    d3:93:c1:5f:99:04:7e:a7:94:f8:a3:c9:03:46:d6:
                    19:19:51:cd:68:ef:3a:36:64:ff:ba:ce:41:de:d5:
                    dc:11:f7:b0:e0:98:5e:04:56:38:57:4f:34:bb:db:
                    48:97:38:7d:d2:5f:ae:1a:3a:65:8d:02:4b:11:37:
                    5a:96:fb:f4:a3:8b:d5:24:4f:aa:e0:b4:65:1e:43:
                    f3:cc:f5:27:0a:28:c0:f9:6c:91:ab:3e:4b:e5:db:
                    90:f3:2d:50:a4:77:cd:83:b5:5e:01:43:f5:66:c5:
                    3d:3c:bd:0d:31:56:e5:bb:43:35:08:24:f1:44:c5:
                    10:8e:e9:5a:71:f9:e9:0a:a8:1c:e7:ef:91:e9:67:
                    48:db:f4:56:0f:be:1e:66:6d:6f:a5:99:ec:a7:9f:
                    46:c1:ed:8b:64:0a:f6:c9:cb:df:02:ff:13:d8:91:
                    12:11:60:f8:d2:1d:95:ae:bc:56:b6:e4:99:2c:f7:
                    29:1b:84:98:5a:46:0e:21:e7:90:2c:15:86:16:24:
                    d6:aa:cd:e0:4c:62:fb:64:9d:38:6f:6c:b1:67:86:
                    b8:22:ec:9b:34:6d:9d:c2:f7:0b:af:0b:e2:f1:21:
                    45:dc:f5:a3:be:9d:05:1e:06:35:34:a3:0a:ea:1e:
                    42:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3E:A7:C7:1A:00:C1:2E:80:FC:8C:B1:5F:0F:BA:3D:87:1D:B5:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:56:40:08:ae:05:df:4d:5c:56:91:d9:9b:e5:d5:fd:0f:27:
         71:57:79:26:58:21:be:b1:73:ce:73:16:00:7a:c2:78:f9:3d:
         32:7a:7d:c9:38:8b:b6:c6:fc:61:ec:38:26:9f:e0:39:43:0d:
         3f:94:36:b2:0c:a4:c5:75:95:55:b8:e7:5b:e2:64:37:fa:28:
         4a:d3:38:8e:22:71:c2:8e:01:cb:b4:37:74:dc:f0:82:7b:e0:
         ec:1b:97:df:96:e1:8a:70:06:76:26:ef:4e:d4:5f:ab:66:a9:
         d7:07:de:dd:6a:29:c5:82:21:8f:73:d6:a7:d6:aa:05:1d:da:
         b1:12:0b:a5:0a:ef:2c:aa:bf:01:d4:5d:fd:48:7c:e2:31:d6:
         3e:ea:bd:09:bc:18:9e:77:b1:47:00:07:40:41:4d:1c:63:78:
         88:23:83:0b:af:ab:be:a2:20:07:9b:90:9f:7a:9e:72:b2:9c:
         e7:f5:3b:2d:b5:40:9a:11:c4:f0:e8:87:39:5a:6f:40:48:df:
         73:d0:87:f0:33:6e:58:b2:4e:55:21:15:36:ea:11:0a:5a:95:
         81:0a:ea:8e:5c:a2:ae:5c:2b:c1:e7:ee:23:9a:a2:51:61:bf:
         64:f6:72:60:75:6a:b7:32:55:ae:cb:4b:58:1d:6f:43:17:bb:
         de:b3:6f:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMNtU3lADJB7Jd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
N2FhYThiYWMtY2M3MS00ZjJmLTgxMzEtNzk0OTc4YmJmMTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3gtuWWib8d+9FExcBjTk8FfmQR+p5T4o8kD
RtYZGVHNaO86NmT/us5B3tXcEfew4JheBFY4V080u9tIlzh90l+uGjpljQJLETda
lvv0o4vVJE+q4LRlHkPzzPUnCijA+WyRqz5L5duQ8y1QpHfNg7VeAUP1ZsU9PL0N
MVblu0M1CCTxRMUQjulacfnpCqgc5++R6WdI2/RWD74eZm1vpZnsp59Gwe2LZAr2
ycvfAv8T2JESEWD40h2VrrxWtuSZLPcpG4SYWkYOIeeQLBWGFiTWqs3gTGL7ZJ04
b2yxZ4a4IuybNG2dwvcLrwvi8SFF3PWjvp0FHgY1NKMK6h5CHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFI+p8caAMEugPyMsV8Puj2HHbVpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvOGI5MGFhZTEtZDMwZi0z
ZDJhLWEwODItNmYwY2Q0NzNlNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExmnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdWQAiuBd9NXFaR2Zvl1f0PJ3FXeSZYIb6xc85zFgB6wnj5PTJ6fck4
i7bG/GHsOCaf4DlDDT+UNrIMpMV1lVW451viZDf6KErTOI4iccKOAcu0N3Tc8IJ7
4Owbl9+W4YpwBnYm707UX6tmqdcH3t1qKcWCIY9z1qfWqgUd2rESC6UK7yyqvwHU
Xf1IfOIx1j7qvQm8GJ53sUcAB0BBTRxjeIgjgwuvq76iIAebkJ96nnKynOf1Oy21
QJoRxPDohzlab0BI33PQh/AzbliyTlUhFTbqEQpalYEK6o5coq5cK8Hn7iOaolFh
v2T2cmB1arcyVa7LS1gdb0MXu96zbwA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org