Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa
File:                     04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa (raw, json)
Hash identifier:          hgVvHecx1TofpEkyq7+iLlMbxH8STVWURlaW/7DUBQU=
Subject key identifier:   8B:F7:2B:BC:13:AB:66:C6:DB:19:19:60:1F:89:F7:86:C9:D7:13:8B
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F4328584795168F095A048FFC7E936900
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     395657
IP address blocks:        198.60.113.0/24 maxlen: 24
                          198.60.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:8f:09:5a:04:8f:fc:7e:93:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=c66542f2-491b-4dda-9c12-afc56b30cea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bb:83:70:58:aa:43:3e:72:8f:25:1f:bc:8d:
                    09:9d:34:8b:0a:77:73:b4:60:6c:eb:3e:aa:6f:7c:
                    f6:aa:b7:a0:a7:86:8c:95:c2:ae:c5:63:d3:77:10:
                    1b:05:76:97:9c:c3:5a:b9:63:d0:88:87:3a:7b:3c:
                    c4:e7:c0:51:48:bb:1b:4f:55:5f:e6:e1:66:bc:7b:
                    e0:d1:cf:5d:f2:70:62:68:6e:b4:2f:38:a3:e4:31:
                    19:3e:62:34:31:6c:b8:3e:e9:31:8e:75:6c:79:fe:
                    cf:b1:f2:e8:05:78:eb:8d:21:c2:20:c9:ad:08:6b:
                    a1:03:97:b2:51:d1:90:35:42:51:2e:b3:74:c5:a4:
                    25:e0:8a:ca:0c:d9:39:1e:a3:4f:00:47:e4:53:74:
                    f9:1a:4a:58:78:81:bc:8c:48:03:99:3d:e7:5e:02:
                    65:a2:11:c0:5c:3b:28:a3:05:09:bb:39:39:53:cd:
                    8a:c8:df:e1:86:dd:df:6e:ff:7a:2d:ee:5c:32:a1:
                    c4:a4:0f:16:5f:17:d7:dc:37:ba:55:39:90:76:17:
                    a2:c1:99:64:ba:e0:7a:63:f6:cc:19:ef:05:42:5a:
                    57:f3:2e:03:ee:83:93:2c:fa:3e:9d:a3:eb:b7:e0:
                    7c:29:1f:b7:c7:88:e0:62:d8:8a:c8:e9:26:13:db:
                    2a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F7:2B:BC:13:AB:66:C6:DB:19:19:60:1F:89:F7:86:C9:D7:13:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.113.0-198.60.114.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:76:e9:fd:b4:ab:b2:33:d3:fa:fd:b4:7f:af:78:37:24:
         08:4f:fd:6f:be:cb:49:b3:00:62:0a:e2:d9:df:c9:9f:2f:c8:
         29:dc:73:b8:af:7a:a2:33:d6:a2:2f:d7:44:b6:f4:8b:cf:b2:
         6d:07:b5:5e:5a:65:c4:d7:02:9f:98:24:c9:c4:51:1a:21:bb:
         94:4a:36:50:57:af:b4:9b:b9:30:28:77:cd:a6:90:da:c0:21:
         29:e3:bb:54:3c:62:fd:d2:2b:c6:4a:95:0d:92:ae:a4:82:06:
         2d:d1:9f:4b:23:f3:3c:e4:04:62:49:b9:30:11:fa:9b:fa:7e:
         40:29:15:63:90:83:05:ec:71:dd:4c:a6:c4:92:1b:c5:4d:2b:
         26:32:de:e5:9e:3f:c4:a8:b1:20:7d:65:73:d1:8e:7b:21:34:
         b3:2a:3c:2a:62:7e:0b:ca:9d:2a:2c:99:31:e3:56:e0:9d:e2:
         c6:22:c5:06:9c:97:b5:40:3a:a1:ae:85:99:8d:91:91:1b:17:
         03:96:bd:be:6d:e5:ab:a3:6a:41:e9:24:74:e7:2f:58:54:22:
         21:c4:53:cf:ce:95:39:65:0d:c4:6d:ec:eb:67:0f:e0:08:98:
         38:70:5c:ac:a8:b0:1b:b4:e0:f8:ab:02:84:23:96:82:70:a6:
         f5:7d:e2:eb
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEeVFo8JWgSP/H6TaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll
NWU3MB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk
YzY2NTQyZjItNDkxYi00ZGRhLTljMTItYWZjNTZiMzBjZWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LuDcFiqQz5yjyUfvI0JnTSLCndztGBs6z6q
b3z2qregp4aMlcKuxWPTdxAbBXaXnMNauWPQiIc6ezzE58BRSLsbT1Vf5uFmvHvg
0c9d8nBiaG60Lzij5DEZPmI0MWy4PukxjnVsef7PsfLoBXjrjSHCIMmtCGuhA5ey
UdGQNUJRLrN0xaQl4IrKDNk5HqNPAEfkU3T5GkpYeIG8jEgDmT3nXgJlohHAXDso
owUJuzk5U82KyN/hht3fbv96Le5cMqHEpA8WXxfX3De6VTmQdheiwZlkuuB6Y/bM
Ge8FQlpX8y4D7oOTLPo+naPrt+B8KR+3x4jgYtiKyOkmE9sq3wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFIv3K7wTq2bG2xkZYB+J94bJ1xOLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3
ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvMDRlNWVjODItYjY4YS0z
NzFiLTlmOWUtYjZlNzY0ZTc4MjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5
NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5
ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk
NTA5OWU1ZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGPHED
BADGPHIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAlb926f20q7Iz0/r9tH+veDckCE/9b77LSbMAYgri2d/J
ny/IKdxzuK96ojPWoi/XRLb0i8+ybQe1XlplxNcCn5gkycRRGiG7lEo2UFevtJu5
MCh3zaaQ2sAhKeO7VDxi/dIrxkqVDZKupIIGLdGfSyPzPOQEYkm5MBH6m/p+QCkV
Y5CDBexx3UymxJIbxU0rJjLe5Z4/xKixIH1lc9GOeyE0syo8KmJ+C8qdKiyZMeNW
4J3ixiLFBpyXtUA6oa6FmY2RkRsXA5a9vm3lq6NqQekkdOcvWFQiIcRTz86VOWUN
xG3s62cP4AiYOHBcrKiwG7Tg+KsChCOWgnCm9X3i6w==
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:20:09 2024 by rpki-client on console-ams.rpki-client.org