Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa
File:                     20c56f58-bb51-3911-ab57-dcf21b41792f.roa (raw, json)
Hash identifier:          xGiDEeof20R0M3btE5FzULGW8EU53I7hykhLmVJH3JM=
Subject key identifier:   ED:98:80:A0:50:B9:52:1A:60:8E:58:A2:73:37:34:B5:9C:1A:CE:87
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F4328584734C885B904A941B43FE980C0
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     396982
IP address blocks:        147.124.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:85:b9:04:a9:41:b4:3f:e9:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=2f4d8c9f-d1b0-45f6-8e65-9ad40b229f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:6a:f0:45:3d:15:66:b3:90:37:26:9b:6d:
                    f1:1a:24:7f:89:19:d9:a3:f7:01:3e:7d:c5:2c:0d:
                    dd:3d:b0:47:4d:6f:22:e7:74:2e:00:a0:47:27:af:
                    51:05:f4:9b:ea:2f:8d:17:5a:d8:c9:f8:ac:c9:f1:
                    22:df:ac:5b:54:98:cf:ba:94:f0:ae:7f:09:cb:8b:
                    7b:1f:fb:b9:d1:7b:30:5a:da:00:57:f1:b7:8a:10:
                    29:08:34:94:0a:74:13:00:a1:91:66:36:d4:2b:c2:
                    ea:e2:3c:6d:1a:6c:34:b4:5f:98:06:72:c1:b7:28:
                    fb:09:42:06:80:d5:c2:50:90:94:f2:80:41:92:a4:
                    12:d0:ad:9b:20:bf:76:d8:46:0a:97:28:f6:9f:c7:
                    4a:95:3b:4c:4f:11:6d:55:e0:11:91:e2:4b:9e:cb:
                    7a:1e:ce:70:0d:39:af:ee:a2:1f:d5:96:f7:cc:c4:
                    e8:f8:a9:44:1b:c8:ac:e6:0e:43:c1:b3:4d:45:19:
                    22:06:04:f8:5d:23:26:d3:25:e3:4a:5b:73:7f:2c:
                    a1:af:82:7c:d7:c4:56:b3:83:1e:de:6e:1a:bd:dd:
                    67:b6:0c:3f:07:da:9d:a8:c0:8b:2e:6d:08:18:ad:
                    32:a4:74:fb:b3:6f:f4:d2:57:bb:a0:bf:78:33:2b:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:98:80:A0:50:B9:52:1A:60:8E:58:A2:73:37:34:B5:9C:1A:CE:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:a9:7a:83:3a:60:b6:28:3c:2d:dc:5c:77:f7:fa:4c:45:
         cd:c8:3e:b7:73:31:9a:3d:7d:d6:ea:59:44:74:47:64:a0:d6:
         b1:46:c6:99:d6:c8:99:49:98:b5:1e:a4:8a:f5:27:b6:b4:ef:
         5d:3a:9e:6d:e4:b7:c7:27:51:42:ea:1c:3e:7f:53:85:21:bb:
         bc:2d:95:e4:22:85:c6:de:b2:e2:15:dc:00:18:5a:35:14:72:
         5b:78:52:b6:27:d4:14:5d:dc:3a:60:9c:ed:d3:c0:c1:20:ee:
         a8:57:cc:56:ce:87:e1:3f:f9:0c:1c:94:1b:7e:5b:90:6a:ee:
         ad:54:c5:f4:16:d2:c0:f5:91:29:fa:09:6b:25:92:81:1b:71:
         33:3c:de:69:a0:5f:6f:f2:ac:79:0a:86:42:4a:df:2c:03:c0:
         c3:48:2a:64:e2:68:66:d9:55:b6:fb:a9:32:42:4c:ff:0c:b9:
         cc:e8:54:96:51:bf:25:44:08:c3:d9:1e:38:fe:a9:05:15:37:
         37:87:be:6d:3a:8b:d3:a3:2a:b6:08:fc:31:b6:1d:16:79:a1:
         66:9d:ae:e1:b3:36:a5:f0:13:14:3b:6b:4e:fa:00:52:c1:77:
         b0:e8:b8:f0:34:1b:24:23:03:1b:dc:08:e2:b8:ae:2c:7a:41:
         eb:44:3b:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yIW5BKlBtD/pgMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk
ZjA2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
MmY0ZDhjOWYtZDFiMC00NWY2LThlNjUtOWFkNDBiMjI5ZjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN5q8EU9FWazkDcmm23xGiR/iRnZo/cBPn3F
LA3dPbBHTW8i53QuAKBHJ69RBfSb6i+NF1rYyfisyfEi36xbVJjPupTwrn8Jy4t7
H/u50XswWtoAV/G3ihApCDSUCnQTAKGRZjbUK8Lq4jxtGmw0tF+YBnLBtyj7CUIG
gNXCUJCU8oBBkqQS0K2bIL922EYKlyj2n8dKlTtMTxFtVeARkeJLnst6Hs5wDTmv
7qIf1Zb3zMTo+KlEG8is5g5DwbNNRRkiBgT4XSMm0yXjSltzfyyhr4J818RWs4Me
3m4avd1ntgw/B9qdqMCLLm0IGK0ypHT7s2/00le7oL94MyvVmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO2YgKBQuVIaYI5YonM3NLWcGs6HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm
ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMjBjNTZmNTgtYmI1MS0z
OTExLWFiNTctZGNmMjFiNDE3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj
MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2
ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4
NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPKqXqDOmC2KDwt3Fx39/pMRc3IPrdzMZo9fdbqWUR0R2Sg1rFGxpnW
yJlJmLUepIr1J7a07106nm3kt8cnUULqHD5/U4Uhu7wtleQihcbesuIV3AAYWjUU
clt4UrYn1BRd3DpgnO3TwMEg7qhXzFbOh+E/+QwclBt+W5Bq7q1UxfQW0sD1kSn6
CWslkoEbcTM83mmgX2/yrHkKhkJK3ywDwMNIKmTiaGbZVbb7qTJCTP8MuczoVJZR
vyVECMPZHjj+qQUVNzeHvm06i9OjKrYI/DG2HRZ5oWadruGzNqXwExQ7a076AFLB
d7DouPA0GyQjAxvcCOK4rix6QetEOxw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:26 2024 by rpki-client on console-ams.rpki-client.org