Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cb46f160-1025-379f-b863-4f19842e4525.roa
File:                     cb46f160-1025-379f-b863-4f19842e4525.roa (raw, json)
Hash identifier:          vdCLkfsxUkGvKmdmNNqhaq/+CB1/k9XKNloOORWmUuw=
Subject key identifier:   19:ED:1F:2E:29:B9:1F:15:09:4B:B5:8D:D4:20:A9:D4:2F:DB:DF:3F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858479C112BB9E9BF6270FA2404C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cb46f160-1025-379f-b863-4f19842e4525.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     9009
IP address blocks:        174.140.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:2b:b9:e9:bf:62:70:fa:24:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=c6bc8c75-8149-4ce2-911e-044810c7e076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:54:d6:d0:7b:aa:2a:9d:3b:9c:48:92:dd:
                    97:72:60:be:ef:01:b4:91:d3:5c:01:42:ca:16:8f:
                    e2:c9:cc:b9:c8:05:72:5b:3f:80:cf:b7:4e:a6:45:
                    36:40:af:f2:52:fd:af:2c:e7:ef:2c:8f:ac:dd:47:
                    63:cf:f5:ef:f9:1d:cd:5e:ec:5f:8f:71:8a:43:f5:
                    0e:af:7a:0d:6e:60:fe:78:8f:9c:b5:97:1e:97:5b:
                    56:36:9b:d0:99:21:e1:04:9b:40:17:88:c6:e9:2f:
                    4c:e1:c8:34:d8:87:09:ac:c8:76:3f:c4:61:2d:4d:
                    42:33:22:8e:4a:64:92:97:6a:f9:82:aa:e2:9a:a3:
                    68:fa:04:dd:1d:74:5a:8c:f6:de:49:5c:08:1a:23:
                    cc:8c:dc:d9:81:66:2b:99:f3:4e:97:ea:f9:98:c9:
                    6a:83:e7:2f:35:b2:b6:59:6f:de:31:b9:89:cd:08:
                    60:ef:94:82:7b:df:40:bc:9f:bc:26:57:44:75:ae:
                    4e:f5:30:fe:1f:72:56:00:f1:c8:29:77:c0:16:3b:
                    5a:85:2f:7b:61:89:5b:cc:3e:e4:0d:fa:fb:73:ed:
                    d9:19:ef:35:f6:10:b4:75:d7:2f:2f:dd:ff:d8:31:
                    3e:f2:8c:b2:39:30:f2:0e:6d:48:5a:de:b7:ba:74:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:ED:1F:2E:29:B9:1F:15:09:4B:B5:8D:D4:20:A9:D4:2F:DB:DF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cb46f160-1025-379f-b863-4f19842e4525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:dd:a0:91:53:e1:c7:d2:be:76:2d:62:00:60:a7:c7:5f:
         a9:e2:7e:e2:da:10:cb:34:f1:89:9d:c2:dc:76:c9:ef:13:05:
         1a:47:29:4a:51:49:f2:b1:50:56:d0:ec:f5:27:21:2d:53:4a:
         ba:58:c6:1b:05:c1:96:e6:89:93:20:70:3e:e8:d6:c3:00:eb:
         61:ce:50:83:2c:44:6e:37:b5:5f:3a:0b:24:66:34:bd:de:63:
         bd:1a:93:62:4c:9a:2c:c4:9e:47:72:4d:fb:74:06:ec:ca:21:
         53:06:6d:03:65:e0:15:8b:4b:b7:63:91:36:99:c6:86:95:67:
         08:01:79:90:20:9a:87:e6:31:f7:9f:40:6d:89:ee:83:60:15:
         36:e9:36:99:0d:cf:07:28:2c:98:a9:c8:34:2f:59:8b:05:72:
         de:2d:22:bb:5c:e1:23:27:dd:d1:4e:2b:2b:96:28:bd:16:66:
         9d:64:08:07:6c:60:be:29:95:3e:9e:39:08:d2:c2:f3:22:7d:
         b8:ab:32:24:25:90:b3:cb:19:e9:15:cc:19:64:61:fe:3c:b4:
         4e:33:aa:2b:29:b9:04:54:fd:50:a4:1a:ce:76:c8:fe:b0:b6:
         1a:b6:ad:c0:ad:81:05:81:33:57:dc:82:9c:e9:96:08:49:e5:
         68:aa:a5:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecESu56b9icPokBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
YzZiYzhjNzUtODE0OS00Y2UyLTkxMWUtMDQ0ODEwYzdlMDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFJU1tB7qiqdO5xIkt2XcmC+7wG0kdNcAULK
Fo/iycy5yAVyWz+Az7dOpkU2QK/yUv2vLOfvLI+s3Udjz/Xv+R3NXuxfj3GKQ/UO
r3oNbmD+eI+ctZcel1tWNpvQmSHhBJtAF4jG6S9M4cg02IcJrMh2P8RhLU1CMyKO
SmSSl2r5gqrimqNo+gTdHXRajPbeSVwIGiPMjNzZgWYrmfNOl+r5mMlqg+cvNbK2
WW/eMbmJzQhg75SCe99AvJ+8JldEda5O9TD+H3JWAPHIKXfAFjtahS97YYlbzD7k
Dfr7c+3ZGe819hC0ddcvL93/2DE+8oyyOTDyDm1IWt63unSkbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBntHy4puR8VCUu1jdQgqdQv298/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvY2I0NmYxNjAtMTAyNS0z
NzlmLWI4NjMtNGYxOTg0MmU0NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArozVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMO3aCRU+HH0r52LWIAYKfHX6nifuLaEMs08Ymdwtx2ye8TBRpHKUpR
SfKxUFbQ7PUnIS1TSrpYxhsFwZbmiZMgcD7o1sMA62HOUIMsRG43tV86CyRmNL3e
Y70ak2JMmizEnkdyTft0BuzKIVMGbQNl4BWLS7djkTaZxoaVZwgBeZAgmofmMfef
QG2J7oNgFTbpNpkNzwcoLJipyDQvWYsFct4tIrtc4SMn3dFOKyuWKL0WZp1kCAds
YL4plT6eOQjSwvMifbirMiQlkLPLGekVzBlkYf48tE4zqispuQRU/VCkGs52yP6w
thq2rcCtgQWBM1fcgpzplghJ5Wiqpe0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:13 2024 by rpki-client on console-ams.rpki-client.org