Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa
File:                     9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa (raw, json)
Hash identifier:          Z880kJimt8tBNbxiVJf+S9zNmpV7MmI6qvTBJFik7Z0=
Subject key identifier:   E4:54:75:78:8E:14:8B:5F:34:E5:66:17:B4:FD:DC:95:BE:9C:A3:14
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F43285847E35F767D4869716666E0F280
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        147.124.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:76:7d:48:69:71:66:66:e0:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=dad50214-465b-4c61-ab77-b0bf787687a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:99:74:ba:c7:96:0b:c9:dd:f7:55:c9:82:
                    fa:be:a4:49:b2:3d:19:61:ba:62:ed:be:47:e0:77:
                    3d:c5:a9:43:33:54:f6:9b:88:29:c6:fd:6a:c2:50:
                    cb:25:9f:41:60:77:45:a5:fa:8e:da:cf:ac:64:da:
                    e3:72:94:e6:db:17:2d:d1:c5:68:85:35:c3:18:7c:
                    11:b7:18:c2:f0:41:c5:23:be:6e:42:67:2d:a6:89:
                    5d:4d:81:c1:7e:18:27:ac:4c:ed:de:16:f3:25:8d:
                    3a:eb:36:c2:70:28:13:37:e3:ce:63:86:0d:5b:84:
                    40:64:b9:9e:15:54:00:b5:75:90:96:e0:dc:fc:5e:
                    1a:61:7c:23:46:52:11:e5:c6:5f:a0:f4:52:74:c5:
                    ff:57:24:37:09:6d:70:cf:84:73:f0:a4:1f:c4:de:
                    c7:be:1f:60:7a:12:1c:d8:dd:55:9c:66:f5:0e:02:
                    d3:84:2a:a7:39:21:ac:12:55:da:60:cf:95:5d:e0:
                    29:e1:3c:a1:30:87:ce:c1:b3:19:0d:4b:d5:36:13:
                    7f:11:93:5a:23:00:ba:bc:f8:ed:73:79:22:2d:2b:
                    c2:6b:b4:a6:c6:40:54:27:6f:5c:72:58:29:be:27:
                    5b:3b:a3:c7:f1:05:f4:bb:d0:51:13:2e:99:e4:97:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:54:75:78:8E:14:8B:5F:34:E5:66:17:B4:FD:DC:95:BE:9C:A3:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:02:64:ca:aa:25:bc:4b:41:a0:2d:8a:4d:5a:de:4e:8e:
         e1:22:46:35:64:6e:bb:c7:eb:b0:f6:b1:8f:5d:0f:81:c8:66:
         eb:6e:a1:5a:53:9e:e1:fe:75:29:63:b7:b0:aa:52:f9:1a:f5:
         51:b5:a2:75:ce:60:ec:94:ca:f6:c2:b8:af:ea:0d:d6:8b:ea:
         fb:22:a6:47:10:af:19:4b:7c:7a:93:ab:ac:d4:34:d1:4a:e6:
         85:da:83:12:49:76:74:b9:44:23:b3:94:3d:36:30:a8:2d:7f:
         27:14:26:b8:04:33:74:33:ab:3f:80:3c:c1:fc:7e:a7:f6:dd:
         6c:01:87:c9:12:6a:a7:b7:95:87:8d:34:a5:46:8a:55:73:c7:
         21:bc:05:87:04:40:52:7e:6a:9c:79:e5:d0:96:3a:69:3b:01:
         a2:29:c0:d6:dd:27:ec:fc:7c:55:45:61:62:4d:47:5e:fb:ed:
         d6:41:71:73:56:8e:d9:32:d5:12:a6:5c:d0:ae:1f:bd:9d:b3:
         ce:8f:88:6c:a1:e4:c6:3f:2c:02:60:2e:17:41:9b:a6:d4:66:
         d5:58:e7:c9:13:73:e2:ea:07:8e:88:38:48:e8:84:06:5d:fd:
         2d:86:93:c9:95:26:51:54:c9:d8:e3:c5:7e:35:d7:1f:80:02:
         67:79:f8:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX3Z9SGlxZmbg8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk
ZjA2MB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
ZGFkNTAyMTQtNDY1Yi00YzYxLWFiNzctYjBiZjc4NzY4N2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEmZdLrHlgvJ3fdVyYL6vqRJsj0ZYbpi7b5H
4Hc9xalDM1T2m4gpxv1qwlDLJZ9BYHdFpfqO2s+sZNrjcpTm2xct0cVohTXDGHwR
txjC8EHFI75uQmctpoldTYHBfhgnrEzt3hbzJY066zbCcCgTN+POY4YNW4RAZLme
FVQAtXWQluDc/F4aYXwjRlIR5cZfoPRSdMX/VyQ3CW1wz4Rz8KQfxN7Hvh9gehIc
2N1VnGb1DgLThCqnOSGsElXaYM+VXeAp4TyhMIfOwbMZDUvVNhN/EZNaIwC6vPjt
c3kiLSvCa7SmxkBUJ29cclgpvidbO6PH8QX0u9BREy6Z5JcBawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFORUdXiOFItfNOVmF7T93JW+nKMUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm
ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOWMwOWMxYTgtYzNlMi0z
OTgwLWFjNGYtNjYyYTNiM2NiY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj
MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2
ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4
NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ymMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmtAmTKqiW8S0GgLYpNWt5OjuEiRjVkbrvH67D2sY9dD4HIZutuoVpT
nuH+dSljt7CqUvka9VG1onXOYOyUyvbCuK/qDdaL6vsipkcQrxlLfHqTq6zUNNFK
5oXagxJJdnS5RCOzlD02MKgtfycUJrgEM3Qzqz+APMH8fqf23WwBh8kSaqe3lYeN
NKVGilVzxyG8BYcEQFJ+apx55dCWOmk7AaIpwNbdJ+z8fFVFYWJNR1777dZBcXNW
jtky1RKmXNCuH72ds86PiGyh5MY/LAJgLhdBm6bUZtVY58kTc+LqB46IOEjohAZd
/S2Gk8mVJlFUydjjxX411x+AAmd5+CQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:23 2024 by rpki-client on console-ams.rpki-client.org