Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
File:                     e51d6345-d432-370c-9bcf-1a0a6bc53063.roa (raw, json)
Hash identifier:          Bz3eF4UExx36orrl3qf5CBnTqG/GvMwnkHfomE9QJnM=
Subject key identifier:   92:B2:67:54:D1:99:71:34:DB:C0:0D:3D:DE:AC:57:B7:47:A6:3A:54
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F7225B45ABECA3C6AAC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        172.220.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f7:22:5b:45:ab:ec:a3:c6:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=80f06a5f-991a-4e5e-8e82-215769e9ab2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:32:93:2f:e6:78:b2:d0:d9:05:d5:ab:91:
                    bb:c7:b2:f2:b9:e1:1f:65:ce:c7:7f:56:f8:0f:a6:
                    20:7d:d9:fe:2c:cc:15:bf:82:19:89:73:51:97:b4:
                    ea:eb:7a:a1:a8:13:ba:0e:95:53:45:33:b9:36:fb:
                    0f:4c:25:be:34:c1:60:c8:b6:71:d4:a8:ea:a8:f6:
                    f7:8c:cd:05:ba:6d:22:39:c2:49:f9:05:80:21:8a:
                    df:61:95:6d:77:86:d7:ea:d7:16:76:46:e6:5c:c6:
                    c3:09:23:f5:23:de:0f:ba:f3:1e:00:3d:e5:22:d8:
                    56:ff:88:1c:d7:a3:09:98:30:39:d1:66:63:1e:54:
                    e5:70:4f:dc:5a:05:e2:78:fa:c6:18:7b:b0:f1:f8:
                    75:dc:48:98:0c:fc:55:72:b6:7a:ae:02:4f:7b:57:
                    ab:f3:9c:a9:77:3f:7a:74:af:1f:2d:3e:1a:52:35:
                    bd:ea:36:0a:9b:98:14:3f:fa:ee:a3:65:b6:26:67:
                    c8:99:fd:58:30:23:8c:f9:a4:16:d3:ed:78:d5:be:
                    20:21:7e:58:09:be:6a:f8:e2:ac:b5:7b:88:15:1f:
                    f2:2b:6c:d9:07:9f:ef:6d:8b:0a:66:55:fb:3e:92:
                    b9:81:0c:e7:49:78:4e:76:56:1a:ce:9f:38:20:f8:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B2:67:54:D1:99:71:34:DB:C0:0D:3D:DE:AC:57:B7:47:A6:3A:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e51d6345-d432-370c-9bcf-1a0a6bc53063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.220.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:06:4c:bb:64:25:0f:a5:46:31:01:e7:ab:99:8f:54:91:
         f2:53:2f:20:43:65:76:25:30:35:ab:68:10:82:da:36:d6:08:
         70:3c:9a:6e:5d:96:0b:30:70:ea:93:59:d7:51:c2:a5:d4:f6:
         f5:f2:78:12:72:9a:b6:32:3b:c8:6a:fc:1b:ed:17:65:78:39:
         90:b1:dd:80:61:34:ae:1b:5e:ba:a1:2c:94:fc:c3:9f:6e:b6:
         98:11:23:0f:f0:ba:98:4c:e3:7f:b3:10:03:33:b5:9b:9d:eb:
         ad:4c:1d:58:75:93:9a:cb:a2:0f:8c:ce:28:e7:e0:8e:92:a7:
         64:a2:e8:83:0d:ef:fe:6a:5f:02:84:a6:74:ee:b8:0d:1d:31:
         82:2b:6e:09:f1:12:9b:fc:48:41:60:4b:b4:db:aa:08:ab:3c:
         5e:e5:fa:74:9b:96:04:e2:36:b9:a7:17:38:6a:1e:f5:05:33:
         e5:c7:fe:a2:1c:23:cd:79:b8:35:ac:22:47:6f:7e:f0:23:f4:
         be:e4:09:7a:82:4a:d0:84:58:ba:bb:c9:7a:83:25:98:3c:cc:
         e9:ef:af:70:9d:83:a7:63:f3:34:dd:2d:00:c1:b7:81:51:e3:
         00:4d:d1:e0:43:3c:93:ec:2a:aa:9b:2c:b5:b7:e0:65:24:2a:
         c0:f7:9c:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcf1fciW0Wr7KPGqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDkwNjEzMDA0MVoXDTI0MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
ODBmMDZhNWYtOTkxYS00ZTVlLThlODItMjE1NzY5ZTlhYjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9syky/meLLQ2QXVq5G7x7LyueEfZc7Hf1b4
D6Ygfdn+LMwVv4IZiXNRl7Tq63qhqBO6DpVTRTO5NvsPTCW+NMFgyLZx1KjqqPb3
jM0Fum0iOcJJ+QWAIYrfYZVtd4bX6tcWdkbmXMbDCSP1I94PuvMeAD3lIthW/4gc
16MJmDA50WZjHlTlcE/cWgXiePrGGHuw8fh13EiYDPxVcrZ6rgJPe1er85ypdz96
dK8fLT4aUjW96jYKm5gUP/ruo2W2JmfImf1YMCOM+aQW0+141b4gIX5YCb5q+OKs
tXuIFR/yK2zZB5/vbYsKZlX7PpK5gQznSXhOdlYazp84IPjBOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKyZ1TRmXE028ANPd6sV7dHpjpUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTUxZDYzNDUtZDQzMi0z
NzBjLTliY2YtMWEwYTZiYzUzMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrNwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/mBky7ZCUPpUYxAeermY9UkfJTLyBDZXYlMDWraBCC2jbWCHA8mm5d
lgswcOqTWddRwqXU9vXyeBJymrYyO8hq/BvtF2V4OZCx3YBhNK4bXrqhLJT8w59u
tpgRIw/wuphM43+zEAMztZud661MHVh1k5rLog+Mzijn4I6Sp2Si6IMN7/5qXwKE
pnTuuA0dMYIrbgnxEpv8SEFgS7TbqgirPF7l+nSblgTiNrmnFzhqHvUFM+XH/qIc
I815uDWsIkdvfvAj9L7kCXqCStCEWLq7yXqDJZg8zOnvr3Cdg6dj8zTdLQDBt4FR
4wBN0eBDPJPsKqqbLLW34GUkKsD3nNI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:27 2024 by rpki-client on console-fra.rpki-client.org