Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/11a2aeca-dee5-3f06-bca7-e5b02e6e9b55.roa
File:                     11a2aeca-dee5-3f06-bca7-e5b02e6e9b55.roa (raw, json)
Hash identifier:          7Qxfs0h1/UFwDr7uqUR8hbhHyB7lsLjvSUQ1zKSu7n8=
Subject key identifier:   9B:D2:2E:3D:93:86:60:0C:98:B5:C3:B8:5B:38:22:DA:30:0C:42:5E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847E35F67508FF41553616F5AC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/11a2aeca-dee5-3f06-bca7-e5b02e6e9b55.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     396356
IP address blocks:        198.102.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:67:50:8f:f4:15:53:61:6f:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=8c09c6b6-f70c-4eca-b32f-945bd830e2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:d9:31:1d:9f:e8:58:7b:d4:b3:ec:f1:6c:
                    ac:a6:23:29:16:8b:ab:9c:53:e8:99:b7:b1:a5:9d:
                    e5:d1:71:20:77:75:7e:19:ef:5d:f0:b3:61:f1:e3:
                    91:76:22:c4:8d:85:42:7f:11:d1:b5:09:be:33:d3:
                    4d:14:a0:96:4d:e0:80:90:57:02:c5:51:2b:92:46:
                    50:93:e7:3e:c3:47:a1:48:ca:a2:c7:0a:bd:57:2b:
                    e2:00:54:9a:3a:4d:e4:02:60:cd:c8:67:20:5b:8b:
                    59:11:27:28:ac:e9:34:34:c3:38:10:1c:09:99:54:
                    c7:18:1f:ed:ad:c0:cc:e0:14:ca:b9:b0:70:9f:44:
                    3d:80:e0:25:3f:ed:b1:dd:ac:dc:8a:d5:c9:10:e6:
                    ac:3f:0a:ee:ee:fd:d0:b5:5a:2b:fb:69:a9:d4:a3:
                    d0:0b:79:67:e7:34:8e:bf:3a:dd:cd:30:e1:30:19:
                    39:db:ab:78:77:36:66:82:35:99:63:6a:1b:7c:ae:
                    67:7d:4c:c7:0b:48:52:6b:00:3e:13:6e:fa:4f:82:
                    4c:77:86:ab:f8:62:57:f8:5b:16:02:3c:4d:7c:63:
                    d5:6e:db:80:83:fe:8f:27:af:23:b0:5f:75:1a:8f:
                    8c:2a:bb:30:ec:2a:d8:89:de:2f:e5:9d:07:5c:55:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D2:2E:3D:93:86:60:0C:98:B5:C3:B8:5B:38:22:DA:30:0C:42:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/11a2aeca-dee5-3f06-bca7-e5b02e6e9b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:bf:95:23:99:f0:d5:17:62:9d:de:1b:f1:2f:33:e1:69:e0:
         6c:23:4d:71:9f:e6:be:16:cf:a7:8b:41:71:15:dd:f3:0a:ca:
         3c:62:7b:ea:e2:c8:a2:b5:c1:30:e3:ed:04:d7:38:3c:40:de:
         fe:c6:92:65:e2:ec:e2:8d:ba:4f:b9:3d:52:10:3b:70:c9:b6:
         bb:fd:16:80:52:62:c7:7f:ab:89:27:53:a2:ff:a6:0e:4a:3c:
         bf:c2:fc:a1:6e:f7:4b:8d:4f:6d:a1:f0:67:0c:2d:b4:63:a3:
         c8:41:7c:8c:5b:b7:7c:7e:30:52:34:d3:2d:14:51:b6:f3:53:
         5e:b9:37:0d:60:2f:47:04:e8:7b:b7:3c:51:b4:f4:ad:42:cf:
         76:99:2e:d1:68:46:bb:6b:35:fc:0d:39:ca:51:2d:74:81:40:
         44:1b:bb:12:4c:80:0d:83:f7:25:31:44:9e:89:e4:08:6b:ec:
         a2:a6:3a:66:d2:72:ee:99:c2:d7:9c:65:18:fc:81:63:b8:04:
         8f:07:f6:cb:c8:82:9d:74:88:9f:f9:47:2f:00:75:65:e3:5e:
         a4:45:c8:ae:72:0c:e9:51:8a:b7:ab:b0:60:4f:30:00:06:94:
         d0:e3:8a:e5:e9:c1:bd:9c:5e:d1:04:7d:68:e4:71:bc:11:f2:
         7a:2b:26:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX2dQj/QVU2FvWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
OGMwOWM2YjYtZjcwYy00ZWNhLWIzMmYtOTQ1YmQ4MzBlMmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt3ZMR2f6Fh71LPs8WyspiMpFournFPombex
pZ3l0XEgd3V+Ge9d8LNh8eORdiLEjYVCfxHRtQm+M9NNFKCWTeCAkFcCxVErkkZQ
k+c+w0ehSMqixwq9VyviAFSaOk3kAmDNyGcgW4tZEScorOk0NMM4EBwJmVTHGB/t
rcDM4BTKubBwn0Q9gOAlP+2x3azcitXJEOasPwru7v3QtVor+2mp1KPQC3ln5zSO
vzrdzTDhMBk526t4dzZmgjWZY2obfK5nfUzHC0hSawA+E276T4JMd4ar+GJX+FsW
AjxNfGPVbtuAg/6PJ68jsF91Go+MKrsw7CrYid4v5Z0HXFXeRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvSLj2ThmAMmLXDuFs4ItowDEJeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMTFhMmFlY2EtZGVlNS0z
ZjA2LWJjYTctZTViMDJlNmU5YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmYKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANa/lSOZ8NUXYp3eG/EvM+Fp4GwjTXGf5r4Wz6eLQXEV3fMKyjxie+ri
yKK1wTDj7QTXODxA3v7GkmXi7OKNuk+5PVIQO3DJtrv9FoBSYsd/q4knU6L/pg5K
PL/C/KFu90uNT22h8GcMLbRjo8hBfIxbt3x+MFI00y0UUbbzU165Nw1gL0cE6Hu3
PFG09K1Cz3aZLtFoRrtrNfwNOcpRLXSBQEQbuxJMgA2D9yUxRJ6J5Ahr7KKmOmbS
cu6ZwtecZRj8gWO4BI8H9svIgp10iJ/5Ry8AdWXjXqRFyK5yDOlRirersGBPMAAG
lNDjiuXpwb2cXtEEfWjkcbwR8norJoU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:11 2024 by rpki-client on console-ams.rpki-client.org