Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/0f5ca919-1048-3ed3-8151-9219cc8fed20.roa
File:                     0f5ca919-1048-3ed3-8151-9219cc8fed20.roa (raw, json)
Hash identifier:          s/Mjkgm8QzFupQysBdFcBW37aY1XcRkD8txdAulTxi4=
Subject key identifier:   22:C5:9D:E8:1A:2F:30:B3:61:4D:EA:2D:62:B3:E2:9E:DE:BE:55:8E
Certificate issuer:       /CN=17499469-12e7-4915-9db8-02bba626b87d
Certificate serial:       010D0C9F4328584795168CFFD954E7F19D01FFC0
Authority key identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/0f5ca919-1048-3ed3-8151-9219cc8fed20.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     396432
IP address blocks:        147.185.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:8c:ff:d9:54:e7:f1:9d:01:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17499469-12e7-4915-9db8-02bba626b87d
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=e0f74476-4126-4b88-9cda-81064375ae55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:36:85:d6:a9:32:7d:ec:af:f4:00:de:e3:
                    0a:01:b5:ad:c3:ed:29:3d:46:3b:f5:93:ae:60:1e:
                    d4:cf:79:13:19:4f:f8:f3:57:52:f3:0a:0f:2a:38:
                    1b:16:b5:8b:f3:6c:ba:7b:82:c0:38:66:66:4e:ad:
                    43:70:15:93:25:ee:be:0b:5b:22:e6:18:8a:2f:63:
                    6e:6c:5f:0f:c6:03:09:9a:63:59:c6:3f:9e:d7:20:
                    33:7d:4a:9a:1b:c1:c3:8e:b3:f5:b4:54:06:36:86:
                    cf:a3:09:ce:bd:26:66:91:ff:63:02:63:82:a5:3c:
                    9a:87:c4:5a:29:7e:b4:fa:8d:14:a0:22:be:6f:81:
                    13:cf:33:c2:31:6f:20:00:8d:bd:5e:83:97:3f:5d:
                    2c:7d:0d:c3:17:25:68:a2:38:5f:d9:f3:80:fe:b6:
                    13:2d:d3:28:64:37:9c:3b:92:22:67:e5:ab:86:e1:
                    6c:aa:24:55:68:b3:1f:04:73:b4:85:3a:0d:9a:2a:
                    a6:25:36:b6:0c:bd:3c:0a:53:36:d2:e4:cf:b6:ca:
                    ba:f5:a3:3a:2a:3c:bf:9b:60:86:eb:86:40:a5:9b:
                    2f:bf:6f:29:ff:c4:bd:c2:4d:05:09:82:8d:73:73:
                    95:6f:b1:00:09:79:90:76:3d:f2:cc:8b:57:14:ce:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C5:9D:E8:1A:2F:30:B3:61:4D:EA:2D:62:B3:E2:9E:DE:BE:55:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/0f5ca919-1048-3ed3-8151-9219cc8fed20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8e:24:bb:98:32:24:2f:91:d3:04:ac:58:e7:c2:41:75:74:
         87:53:eb:c1:12:e6:93:5d:56:77:eb:7a:8c:b1:4f:48:8d:d7:
         e1:09:1d:84:bc:10:c1:56:8f:f6:18:bc:05:58:d8:98:24:f4:
         e9:18:eb:14:2a:d3:91:bc:8c:29:b6:15:7d:2f:0a:7e:19:b6:
         50:52:ce:07:f2:f9:2a:74:46:2d:07:82:9d:46:43:5a:59:bc:
         17:ed:f9:1a:d4:82:c1:44:d8:97:4d:bd:8f:83:6f:2a:b9:89:
         c8:3b:8d:78:1f:d5:5c:e1:58:b6:fd:a3:2d:10:51:cc:e0:43:
         59:e9:bf:bc:be:63:2b:7f:f1:71:64:7e:4c:78:55:e2:91:03:
         71:c2:41:39:ee:92:b3:12:ae:0b:4e:a5:88:83:ba:0e:95:cb:
         b4:16:18:8c:1e:96:cb:26:f6:32:08:f4:27:d2:6a:f3:ee:f9:
         f0:7b:2a:a0:6f:9f:16:14:00:83:20:30:25:bf:14:3c:b6:0c:
         2d:c6:5e:f0:5b:d4:e4:1f:70:d0:1f:33:86:c5:c2:dd:ea:23:
         95:be:7e:c2:f4:03:8b:77:1b:35:90:e9:d3:e3:10:97:9e:f5:
         bd:46:0b:d5:e7:31:da:19:2d:b5:a9:c8:55:ed:5a:64:38:a6:
         b3:66:54:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeVFoz/2VTn8Z0B/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0OTk0NjktMTJlNy00OTE1LTlkYjgtMDJiYmE2MjZi
ODdkMB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZTBmNzQ0NzYtNDEyNi00Yjg4LTljZGEtODEwNjQzNzVhZTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6g2hdapMn3sr/QA3uMKAbWtw+0pPUY79ZOu
YB7Uz3kTGU/481dS8woPKjgbFrWL82y6e4LAOGZmTq1DcBWTJe6+C1si5hiKL2Nu
bF8PxgMJmmNZxj+e1yAzfUqaG8HDjrP1tFQGNobPownOvSZmkf9jAmOCpTyah8Ra
KX60+o0UoCK+b4ETzzPCMW8gAI29XoOXP10sfQ3DFyVoojhf2fOA/rYTLdMoZDec
O5IiZ+WrhuFsqiRVaLMfBHO0hToNmiqmJTa2DL08ClM20uTPtsq69aM6Kjy/m2CG
64ZApZsvv28p/8S9wk0FCYKNc3OVb7EACXmQdj3yzItXFM42CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLFnegaLzCzYU3qLWKz4p7evlWOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNzQ5
OTQ2OS0xMmU3LTQ5MTUtOWRiOC0wMmJiYTYyNmI4N2QvMGY1Y2E5MTktMTA0OC0z
ZWQzLTgxNTEtOTIxOWNjOGZlZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTc0OTk0NjktMTJlNy00OTE1LTlk
YjgtMDJiYmE2MjZiODdkLzE3NDk5NDY5LTEyZTctNDkxNS05ZGI4LTAyYmJhNjI2
Yjg3ZC5jcmwwHwYDVR0jBBgwFoAUbokI5EM4lk1KedHt/GyCcWM8JhkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xNzQ5OTQ2OS0xMmU3LTQ5MTUtOWRiOC0wMmJi
YTYyNmI4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7mUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyOJLuYMiQvkdMErFjnwkF1dIdT68ES5pNdVnfreoyxT0iN1+EJHYS8
EMFWj/YYvAVY2Jgk9OkY6xQq05G8jCm2FX0vCn4ZtlBSzgfy+Sp0Ri0Hgp1GQ1pZ
vBft+RrUgsFE2JdNvY+Dbyq5icg7jXgf1VzhWLb9oy0QUczgQ1npv7y+Yyt/8XFk
fkx4VeKRA3HCQTnukrMSrgtOpYiDug6Vy7QWGIwelssm9jII9CfSavPu+fB7KqBv
nxYUAIMgMCW/FDy2DC3GXvBb1OQfcNAfM4bFwt3qI5W+fsL0A4t3GzWQ6dPjEJee
9b1GC9XnMdoZLbWpyFXtWmQ4prNmVNU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:26 2024 by rpki-client on console-ams.rpki-client.org