Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bc18ec41-26f4-3697-a028-19739aa3b01a.roa
File:                     bc18ec41-26f4-3697-a028-19739aa3b01a.roa (raw, json)
Hash identifier:          4mHiSRwtzP6DmGiC0JuYJpQlIhd2MtdgmraODAzZfL0=
Subject key identifier:   F5:C7:B6:0C:6D:52:52:09:5D:75:F2:CA:6E:21:45:62:8E:DF:9C:38
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285847A5D6A953D0DB6F95A0DB70A0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bc18ec41-26f4-3697-a028-19739aa3b01a.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     61317
IP address blocks:        216.24.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a9:53:d0:db:6f:95:a0:db:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=4297349f-fff1-4631-b601-f8d5442a0c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:8a:1f:f5:ba:bf:fa:a5:21:00:c6:a8:a0:
                    9d:57:b9:07:c1:b7:3e:3b:35:4f:18:07:04:93:93:
                    3a:e3:92:63:21:d8:00:15:a5:92:8a:b7:7a:54:ad:
                    c6:1a:7b:66:4e:e2:47:3a:ec:af:13:9e:5d:a9:28:
                    84:01:12:05:44:4f:86:7b:dc:86:a4:1c:c7:26:d4:
                    68:9c:fa:59:25:c8:f6:fe:19:12:02:dd:47:54:d2:
                    dc:17:71:cf:39:19:94:7e:57:04:2f:14:f1:96:66:
                    75:79:b8:3c:6a:b0:34:22:3a:d9:5e:01:f6:2c:5e:
                    5e:54:bc:32:fb:f1:08:40:30:90:87:19:94:ca:14:
                    79:8d:8f:df:ec:c6:0f:29:6d:e7:c3:24:d9:b1:d5:
                    6a:20:a3:96:50:d8:23:3a:c4:73:91:b9:fe:d0:25:
                    4d:0c:61:bd:3e:4a:17:e3:ad:24:05:a4:61:69:3a:
                    5a:fb:5e:33:9f:f0:0e:63:5a:86:ec:91:c9:08:67:
                    83:7d:13:49:8b:80:dd:03:e9:0a:fb:be:6d:29:58:
                    89:0d:df:fb:20:e6:73:79:3b:73:00:f1:18:bb:10:
                    cb:b3:1b:34:ed:ef:84:b4:94:df:d8:7c:5b:27:6a:
                    27:b9:db:21:73:ab:df:10:bf:49:a9:eb:26:df:b3:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:B6:0C:6D:52:52:09:5D:75:F2:CA:6E:21:45:62:8E:DF:9C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bc18ec41-26f4-3697-a028-19739aa3b01a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a5:09:70:c0:35:20:89:bf:58:bf:9c:86:43:90:99:69:8c:
         26:12:5a:9a:1c:0c:a7:94:35:ca:50:98:76:b3:91:b6:46:fa:
         c6:01:57:44:d6:71:c2:83:50:8e:54:c1:07:92:52:a9:c6:38:
         8f:81:01:f9:f2:64:8d:83:64:1b:41:48:cc:1e:c0:9f:fa:86:
         1a:fe:be:59:c5:a5:b6:ff:c7:cb:d1:10:d6:9d:d8:5d:5c:84:
         c0:4c:14:bd:58:df:5f:e6:c6:30:c1:f0:e0:d9:0f:d4:30:47:
         3b:02:e1:df:e6:f7:e2:f5:9a:b2:06:fb:ce:0d:96:03:ee:77:
         2f:7d:71:14:27:d8:77:aa:2b:60:5b:61:b0:c5:aa:e6:ab:a4:
         85:e1:9b:4c:73:82:ac:ff:de:e8:74:e2:54:c4:51:ec:ee:cd:
         85:07:5c:db:8b:d2:9a:ea:2f:75:1a:c3:c2:d4:ba:00:c7:07:
         ae:75:9f:42:54:b0:db:a7:5b:01:2c:a6:9a:8f:95:5f:5a:5d:
         f8:86:23:02:ea:a4:ef:f0:47:75:77:33:60:71:d5:6a:e6:5e:
         48:b5:bf:37:ce:98:7a:c7:aa:95:7e:50:90:0b:88:5e:6d:7f:
         2b:f6:10:ca:25:65:4d:74:fc:7e:d6:4d:f9:c2:ac:1e:64:5a:
         8f:df:4d:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qlT0NtvlaDbcKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
NDI5NzM0OWYtZmZmMS00NjMxLWI2MDEtZjhkNTQ0MmEwYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArACKH/W6v/qlIQDGqKCdV7kHwbc+OzVPGAcE
k5M645JjIdgAFaWSird6VK3GGntmTuJHOuyvE55dqSiEARIFRE+Ge9yGpBzHJtRo
nPpZJcj2/hkSAt1HVNLcF3HPORmUflcELxTxlmZ1ebg8arA0IjrZXgH2LF5eVLwy
+/EIQDCQhxmUyhR5jY/f7MYPKW3nwyTZsdVqIKOWUNgjOsRzkbn+0CVNDGG9PkoX
460kBaRhaTpa+14zn/AOY1qG7JHJCGeDfRNJi4DdA+kK+75tKViJDd/7IOZzeTtz
APEYuxDLsxs07e+EtJTf2HxbJ2onudshc6vfEL9Jqesm37PYRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPXHtgxtUlIJXXXyym4hRWKO35w4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYmMxOGVjNDEtMjZmNC0z
Njk3LWEwMjgtMTk3MzlhYTNiMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6lCXDANSCJv1i/nIZDkJlpjCYSWpocDKeUNcpQmHazkbZG+sYBV0TW
ccKDUI5UwQeSUqnGOI+BAfnyZI2DZBtBSMwewJ/6hhr+vlnFpbb/x8vRENad2F1c
hMBMFL1Y31/mxjDB8ODZD9QwRzsC4d/m9+L1mrIG+84NlgPudy99cRQn2HeqK2Bb
YbDFquarpIXhm0xzgqz/3uh04lTEUezuzYUHXNuL0prqL3Uaw8LUugDHB651n0JU
sNunWwEsppqPlV9aXfiGIwLqpO/wR3V3M2Bx1WrmXki1vzfOmHrHqpV+UJALiF5t
fyv2EMolZU10/H7WTfnCrB5kWo/fTcQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:22 2024 by rpki-client on console-ams.rpki-client.org