Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/4da1eb34-b7d2-3d0a-8bc5-59f5a8ff7e96.roa
File:                     4da1eb34-b7d2-3d0a-8bc5-59f5a8ff7e96.roa (raw, json)
Hash identifier:          OAIdilVqYCmyy+t8k7vl1MKfOv7WHB8Y4GU9JR06QlA=
Subject key identifier:   BA:82:DF:5D:11:6C:B2:9C:2C:B0:3E:FA:60:B6:3F:04:E8:41:97:71
Certificate issuer:       /CN=53ee2d2b-5a77-4db4-8fbd-85e75401cae6
Certificate serial:       010D0C9F43285847A041437ABA37EDE32C83BC80
Authority key identifier: 31:57:93:9D:40:13:B3:6B:9F:E6:FB:23:B2:E3:4A:75:C5:F3:7C:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/4da1eb34-b7d2-3d0a-8bc5-59f5a8ff7e96.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     395662
IP address blocks:        207.183.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:43:7a:ba:37:ed:e3:2c:83:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ee2d2b-5a77-4db4-8fbd-85e75401cae6
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=4d08a838-44dc-48b1-aece-19a4289598aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:f0:45:bf:26:c4:d1:91:81:90:5b:c9:fd:
                    cc:c6:c3:c7:1f:5a:52:9a:1f:44:e8:30:2c:b2:d0:
                    e6:0e:35:77:78:8f:99:d3:90:a7:ec:ca:5a:0f:51:
                    31:68:ef:16:1c:f3:55:15:c2:43:d1:34:3f:c4:a9:
                    c5:03:f5:8a:3c:95:a3:c6:6a:64:a7:d2:80:43:4c:
                    11:0b:6e:f8:2a:a6:93:52:5c:7b:b3:db:30:fe:27:
                    89:0b:03:98:02:04:ce:55:e9:bd:09:2d:d6:38:77:
                    ef:b7:9d:7f:5e:e3:07:1f:00:69:96:69:5a:34:7e:
                    be:e1:92:54:c0:04:32:4d:8a:02:d4:d8:1f:41:6d:
                    2a:bd:d3:c4:7b:03:75:47:fd:21:8f:39:4d:13:35:
                    f3:bf:97:b6:8c:da:b9:b5:d1:15:f8:7b:98:7f:f1:
                    ce:05:33:a7:92:59:08:27:1b:59:af:24:57:f2:db:
                    ab:21:01:25:7c:5f:06:3d:5e:4f:14:11:2a:f8:7f:
                    06:44:c3:95:9a:c0:06:1b:f4:15:44:48:42:c2:72:
                    9b:61:77:9d:03:bf:bd:0a:13:96:09:24:20:e0:f8:
                    29:33:ba:3d:38:99:74:3a:5b:01:41:7b:50:66:86:
                    7e:ca:36:98:98:d4:5b:ca:c3:a9:cf:35:c3:18:7d:
                    b1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:82:DF:5D:11:6C:B2:9C:2C:B0:3E:FA:60:B6:3F:04:E8:41:97:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/4da1eb34-b7d2-3d0a-8bc5-59f5a8ff7e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.crl

            X509v3 Authority Key Identifier:
                keyid:31:57:93:9D:40:13:B3:6B:9F:E6:FB:23:B2:E3:4A:75:C5:F3:7C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53ee2d2b-5a77-4db4-8fbd-85e75401cae6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.183.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:73:42:e1:f3:e8:50:5f:3a:fb:0e:ee:5d:29:f6:cb:05:56:
         95:83:89:02:8f:30:8f:8b:d3:1e:2e:dc:d2:4f:34:90:8f:92:
         dc:7c:ee:82:cd:a4:f7:6f:56:51:53:e1:f1:ab:f0:88:0e:7f:
         28:e3:81:0f:d4:66:65:49:73:ef:70:65:c0:1b:48:9e:d6:18:
         73:a9:60:03:5f:72:47:90:27:f5:a6:10:bc:e3:9b:4d:e1:87:
         61:9b:2d:a7:5d:ec:55:4c:58:a2:25:30:81:8f:4e:2d:6a:1e:
         67:95:31:7d:58:9f:25:e5:ef:2e:8b:5c:42:fe:b7:7f:a8:8c:
         6e:1c:38:c8:ab:b7:e8:5f:98:c7:fa:15:29:06:9e:86:d0:0d:
         c6:f0:07:1e:06:9e:c9:e6:62:e2:f3:c5:72:e1:2e:8c:64:4c:
         73:37:03:a7:b7:83:5f:fb:ee:9e:2f:da:59:94:bd:9d:78:5b:
         9b:a2:ea:34:28:bc:8c:44:1e:b7:cc:f1:71:95:f2:21:de:27:
         e8:89:49:c7:3c:8a:1b:69:36:ea:97:c4:31:fb:51:7f:3a:21:
         02:18:c6:1e:b7:72:bf:e4:37:e3:62:51:58:57:4b:ae:48:f3:
         59:38:37:88:8e:8c:92:7c:16:9d:00:48:73:83:c8:b0:13:1b:
         60:17:4d:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQUN6ujft4yyDvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlZTJkMmItNWE3Ny00ZGI0LThmYmQtODVlNzU0MDFj
YWU2MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
NGQwOGE4MzgtNDRkYy00OGIxLWFlY2UtMTlhNDI4OTU5OGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW/wRb8mxNGRgZBbyf3MxsPHH1pSmh9E6DAs
stDmDjV3eI+Z05Cn7MpaD1ExaO8WHPNVFcJD0TQ/xKnFA/WKPJWjxmpkp9KAQ0wR
C274KqaTUlx7s9sw/ieJCwOYAgTOVem9CS3WOHfvt51/XuMHHwBplmlaNH6+4ZJU
wAQyTYoC1NgfQW0qvdPEewN1R/0hjzlNEzXzv5e2jNq5tdEV+HuYf/HOBTOnklkI
JxtZryRX8turIQElfF8GPV5PFBEq+H8GRMOVmsAGG/QVREhCwnKbYXedA7+9ChOW
CSQg4PgpM7o9OJl0OlsBQXtQZoZ+yjaYmNRbysOpzzXDGH2xEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqC310RbLKcLLA++mC2PwToQZdxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81M2Vl
MmQyYi01YTc3LTRkYjQtOGZiZC04NWU3NTQwMWNhZTYvNGRhMWViMzQtYjdkMi0z
ZDBhLThiYzUtNTlmNWE4ZmY3ZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTNlZTJkMmItNWE3Ny00ZGI0LThm
YmQtODVlNzU0MDFjYWU2LzUzZWUyZDJiLTVhNzctNGRiNC04ZmJkLTg1ZTc1NDAx
Y2FlNi5jcmwwHwYDVR0jBBgwFoAUMVeTnUATs2uf5vsjsuNKdcXzfG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81M2VlMmQyYi01YTc3LTRkYjQtOGZiZC04NWU3
NTQwMWNhZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz7eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKhzQuHz6FBfOvsO7l0p9ssFVpWDiQKPMI+L0x4u3NJPNJCPktx87oLN
pPdvVlFT4fGr8IgOfyjjgQ/UZmVJc+9wZcAbSJ7WGHOpYANfckeQJ/WmELzjm03h
h2GbLadd7FVMWKIlMIGPTi1qHmeVMX1YnyXl7y6LXEL+t3+ojG4cOMirt+hfmMf6
FSkGnobQDcbwBx4GnsnmYuLzxXLhLoxkTHM3A6e3g1/77p4v2lmUvZ14W5ui6jQo
vIxEHrfM8XGV8iHeJ+iJScc8ihtpNuqXxDH7UX86IQIYxh63cr/kN+NiUVhXS65I
81k4N4iOjJJ8Fp0ASHODyLATG2AXTTs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:14 2024 by rpki-client on console-ams.rpki-client.org