Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa
File:                     ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa (raw, json)
Hash identifier:          Tf2wpqx9aZKLms/Kg/QbZHvLKlfuCgy40YBVrOGYPjU=
Subject key identifier:   41:5E:5D:E3:C0:E1:61:E9:2F:E3:CF:30:E0:F1:20:8B:5F:22:B8:B7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858472F307FEE93E952A1AF6FE080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     61317
IP address blocks:        173.211.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:7f:ee:93:e9:52:a1:af:6f:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=2e0a7bf7-9d6f-4979-9156-5e565c4f75ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:44:79:ad:79:13:d9:99:b1:e4:23:ea:6e:
                    bd:ac:b9:99:e8:32:1a:96:5d:5f:7b:c1:e6:87:d5:
                    9c:60:5f:bf:da:ab:c9:ed:a4:e9:52:58:f5:66:8a:
                    2c:22:bd:e5:ad:81:df:b7:a1:9d:a8:33:bf:1e:74:
                    07:7b:19:22:26:a6:61:9d:6f:16:23:30:84:e9:a7:
                    14:17:20:bf:3c:94:49:51:c1:17:31:05:e9:f2:ae:
                    d3:dd:db:43:1b:0f:e8:ee:4b:62:e7:60:8e:3f:c3:
                    0c:7f:bd:73:ad:e4:41:ce:e1:ac:06:dd:58:10:03:
                    79:07:0f:12:49:77:b4:be:fa:72:fd:1b:1b:c3:ce:
                    dd:84:e7:9e:d9:56:4e:02:55:42:7a:ca:96:a6:85:
                    fe:1e:0f:fe:59:7e:1b:14:3f:bd:0f:e5:13:20:d4:
                    53:05:cd:a0:ba:0c:99:40:ad:d6:3a:fa:f3:71:39:
                    b8:58:13:39:6c:c0:76:a0:29:b5:d1:ec:1d:36:77:
                    20:5d:f5:f4:5d:a2:80:20:67:e7:c9:53:13:68:e5:
                    9b:15:35:5d:1e:29:a9:4e:99:ba:f7:3d:b7:b2:b0:
                    77:38:ec:ba:6b:e2:13:a1:00:bd:0e:80:32:bf:7b:
                    6c:24:02:ff:ac:b6:71:68:b9:46:0c:df:e8:63:dc:
                    09:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5E:5D:E3:C0:E1:61:E9:2F:E3:CF:30:E0:F1:20:8B:5F:22:B8:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9b:4c:df:be:dd:7a:91:36:be:ab:76:fb:2f:d9:51:6f:9a:
         f3:fa:36:ff:11:b7:22:3e:0f:19:44:5f:ed:01:c7:38:f6:0b:
         e0:f8:fe:4d:e9:0c:de:36:21:7e:3b:7c:fd:fa:4e:9f:6e:67:
         8f:03:1d:2b:22:8d:80:8a:45:95:47:fa:ae:30:86:5b:0c:ff:
         5e:0e:e8:28:04:12:b3:5f:e4:8b:5f:3d:00:b0:2c:b5:6f:f4:
         0f:d0:7b:bd:3c:bd:39:83:73:68:9a:22:1d:91:3f:35:3e:ff:
         c5:24:7a:b7:51:ca:61:12:dc:85:09:16:c0:81:71:e7:cc:f7:
         0c:39:99:91:be:a3:1c:c2:e5:8e:a3:8a:8f:ab:ce:fe:09:75:
         77:25:64:b3:e0:36:d6:de:08:e6:80:f9:37:ee:97:be:06:0f:
         d6:7d:cb:38:8f:b9:72:bf:3b:8a:b6:31:1b:69:32:e1:01:8b:
         bd:43:34:22:e4:11:ed:bb:80:89:12:f2:fe:38:59:ec:ce:04:
         93:99:de:44:1c:b7:e7:e0:d7:f3:80:9f:4f:89:a5:9b:b5:0c:
         05:65:7d:a7:ec:18:3c:d0:91:7a:f8:d4:3b:4d:bf:16:3d:5f:
         2e:2b:80:f2:17:7f:33:ca:b9:32:e0:24:41:53:53:ce:5e:47:
         f3:7a:f4:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMH/uk+lSoa9v4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk
MmUwYTdiZjctOWQ2Zi00OTc5LTkxNTYtNWU1NjVjNGY3NWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dJEea15E9mZseQj6m69rLmZ6DIall1fe8Hm
h9WcYF+/2qvJ7aTpUlj1ZoosIr3lrYHft6GdqDO/HnQHexkiJqZhnW8WIzCE6acU
FyC/PJRJUcEXMQXp8q7T3dtDGw/o7kti52COP8MMf71zreRBzuGsBt1YEAN5Bw8S
SXe0vvpy/Rsbw87dhOee2VZOAlVCesqWpoX+Hg/+WX4bFD+9D+UTINRTBc2gugyZ
QK3WOvrzcTm4WBM5bMB2oCm10ewdNncgXfX0XaKAIGfnyVMTaOWbFTVdHimpTpm6
9z23srB3OOy6a+IToQC9DoAyv3tsJAL/rLZxaLlGDN/oY9wJYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFeXePA4WHpL+PPMODxIItfIri3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZWNjMzQ2OTktMmYxOS0z
OGI0LTgxZmItY2RkMjBhMTVmYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqbTN++3XqRNr6rdvsv2VFvmvP6Nv8RtyI+DxlEX+0Bxzj2C+D4/k3p
DN42IX47fP36Tp9uZ48DHSsijYCKRZVH+q4whlsM/14O6CgEErNf5ItfPQCwLLVv
9A/Qe708vTmDc2iaIh2RPzU+/8UkerdRymES3IUJFsCBcefM9ww5mZG+oxzC5Y6j
io+rzv4JdXclZLPgNtbeCOaA+Tful74GD9Z9yziPuXK/O4q2MRtpMuEBi71DNCLk
Ee27gIkS8v44WezOBJOZ3kQct+fg1/OAn0+JpZu1DAVlfafsGDzQkXr41DtNvxY9
Xy4rgPIXfzPKuTLgJEFTU85eR/N69IM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:30 2024 by rpki-client on console-fra.rpki-client.org