Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa
File:                     3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa (raw, json)
Hash identifier:          UaKClxNrGp9xaWGQ/nymF7KeFoyvGA7jwquERGOng6A=
Subject key identifier:   E2:67:01:E0:49:E5:5D:45:97:B1:83:E5:C0:41:90:99:31:21:6E:5E
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E62AADC54A63C8E869F686C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36040
IP address blocks:        208.117.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ad:c5:4a:63:c8:e8:69:f6:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=2b2fc6b0-4b8e-4f52-b006-95696a507157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e1:d3:0b:28:b8:b9:f4:e9:27:39:ee:18:2b:
                    68:9b:e9:7b:04:4d:e7:f9:98:42:10:b1:ec:3b:d9:
                    40:50:d5:5f:3d:6c:c4:be:5c:e6:3b:7d:66:21:0e:
                    fb:db:0f:33:3d:96:64:b1:d1:d0:b8:a0:88:a9:55:
                    80:9a:14:4a:4c:e1:99:c3:54:86:cb:a6:3c:b2:5b:
                    0e:7f:ca:b2:f7:c0:0c:da:89:6b:fd:db:0e:43:58:
                    cf:de:9f:24:15:fc:40:14:be:9e:eb:a5:61:af:32:
                    f3:ee:17:82:cb:64:6c:28:79:ed:8a:79:d8:3d:66:
                    3a:21:e3:74:4d:e1:f1:6a:cc:d8:c1:2c:6d:b1:8b:
                    ec:23:71:7c:c9:67:9c:ec:f5:a5:90:92:c8:1d:e9:
                    cd:48:c6:79:4e:6d:47:20:98:10:21:bc:f3:a8:ad:
                    d7:97:a3:12:e5:38:06:cd:9d:a5:b4:5a:04:bb:36:
                    98:7f:45:cc:95:ce:cd:b1:e5:0d:67:14:fc:73:4e:
                    6f:a9:a4:43:1b:4a:2c:06:f0:c4:6c:8c:5b:e7:4f:
                    18:3d:05:9f:57:b9:d0:b5:8b:4a:d5:de:ec:e9:05:
                    c6:0e:ef:f3:46:3f:5c:32:6f:84:1d:66:9b:0e:28:
                    b5:f1:19:19:bb:80:88:8b:eb:2d:e9:4c:f8:68:c0:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:67:01:E0:49:E5:5D:45:97:B1:83:E5:C0:41:90:99:31:21:6E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:5f:d5:28:7c:9d:ea:a3:2d:04:0f:e2:1e:3e:a6:7b:fc:
         fc:0d:5d:6d:6a:b4:75:c1:e6:85:09:21:b2:97:0d:75:7f:dd:
         9c:58:65:7b:f4:a5:e5:81:0a:fe:4b:57:97:67:95:e4:5a:09:
         ab:3a:f9:28:ac:c1:12:44:11:c2:d5:97:a9:4a:08:b1:e0:fb:
         a3:0f:ac:09:af:14:05:70:90:b8:ec:b1:12:f7:d5:24:8e:a5:
         bd:0f:1d:38:0d:b8:c7:a6:3b:7d:c3:6e:41:83:04:bd:7f:3a:
         1b:bc:c8:01:21:19:04:cb:c3:65:5d:a1:19:93:3f:87:46:64:
         8c:a1:01:bd:d8:ab:7f:22:c2:68:19:da:9f:44:e2:3a:72:62:
         53:ad:d1:2c:47:d2:19:a0:c4:a4:fa:f0:6d:61:3d:75:e1:20:
         9e:40:aa:6b:ec:c3:b6:66:67:c4:24:7e:98:56:a3:91:3e:58:
         29:7e:ba:09:0f:f9:c5:91:03:1f:33:58:36:1e:79:03:b6:64:
         93:cf:40:e6:57:52:e4:9d:33:7d:02:32:43:02:5c:7b:4e:7b:
         d0:26:5c:4c:e0:aa:67:25:31:3e:66:94:aa:9c:38:33:e0:af:
         be:f6:fb:e8:fa:04:d3:01:a5:63:72:71:c9:63:f7:94:5f:68:
         e4:b7:0c:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKq3FSmPI6Gn2hsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MmIyZmM2YjAtNGI4ZS00ZjUyLWIwMDYtOTU2OTZhNTA3MTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OHTCyi4ufTpJznuGCtom+l7BE3n+ZhCELHs
O9lAUNVfPWzEvlzmO31mIQ772w8zPZZksdHQuKCIqVWAmhRKTOGZw1SGy6Y8slsO
f8qy98AM2olr/dsOQ1jP3p8kFfxAFL6e66VhrzLz7heCy2RsKHntinnYPWY6IeN0
TeHxaszYwSxtsYvsI3F8yWec7PWlkJLIHenNSMZ5Tm1HIJgQIbzzqK3Xl6MS5TgG
zZ2ltFoEuzaYf0XMlc7NseUNZxT8c05vqaRDG0osBvDEbIxb508YPQWfV7nQtYtK
1d7s6QXGDu/zRj9cMm+EHWabDii18RkZu4CIi+st6Uz4aMCSMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJnAeBJ5V1Fl7GD5cBBkJkxIW5eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMzI5OGYxMjItNWU5My0z
ZmQyLWE1ZWUtNGIyNWZiYWYxMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HX/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKMOX9UofJ3qoy0ED+IePqZ7/PwNXW1qtHXB5oUJIbKXDXV/3ZxYZXv0
peWBCv5LV5dnleRaCas6+SiswRJEEcLVl6lKCLHg+6MPrAmvFAVwkLjssRL31SSO
pb0PHTgNuMemO33DbkGDBL1/Ohu8yAEhGQTLw2VdoRmTP4dGZIyhAb3Yq38iwmgZ
2p9E4jpyYlOt0SxH0hmgxKT68G1hPXXhIJ5Aqmvsw7ZmZ8QkfphWo5E+WCl+ugkP
+cWRAx8zWDYeeQO2ZJPPQOZXUuSdM30CMkMCXHtOe9AmXEzgqmclMT5mlKqcODPg
r772++j6BNMBpWNycclj95RfaOS3DJ4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:51 2024 by rpki-client on console-fra.rpki-client.org