Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa
File:                     a976272e-66d4-3404-810a-1db9636b39a3.roa (raw, json)
Hash identifier:          dg65lHUAA3R6vJGQkB+04T5zXLy98MqZS/elOb6WTAY=
Subject key identifier:   CB:F5:5A:1F:B6:37:43:49:DD:55:66:22:F7:46:A5:1C:E9:9F:B1:D9
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F4328584734C8865156AC05B76EE17A80
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     399628
IP address blocks:        209.237.154.0/24 maxlen: 24
                          2620:96:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:86:51:56:ac:05:b7:6e:e1:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=ce0c6947-f199-4220-b69b-312412e7b8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:62:74:6d:be:c6:ad:57:03:d2:28:22:de:5b:
                    a2:a9:b8:3d:fe:5d:ce:d3:0d:e0:a7:96:ec:39:75:
                    17:56:1e:da:e2:a5:1e:5b:fd:d3:2a:3f:45:ef:3b:
                    05:92:d8:e8:a0:8a:0c:3b:77:80:9e:78:35:70:7d:
                    be:bc:38:ee:48:5a:bb:0a:aa:5d:ed:25:7d:f9:c5:
                    cc:64:c5:9c:d9:e7:82:89:20:f1:f1:bb:9b:e7:4c:
                    0a:93:5a:3e:1f:8d:3d:c4:39:3b:f6:1b:cc:c3:82:
                    73:5a:e3:b6:ff:73:f2:49:37:59:a5:53:45:89:35:
                    dc:09:d4:a5:2e:56:98:fe:78:62:9f:06:30:b4:87:
                    0e:f3:2e:7d:df:54:5d:4f:af:55:63:e1:b7:4b:a2:
                    08:94:3f:e4:df:36:fc:90:2d:3d:40:e2:47:89:8d:
                    23:d5:4b:ce:4d:27:b7:f1:cd:ce:a4:8c:bc:b7:40:
                    dd:42:93:d0:08:b9:ae:43:1e:82:17:f9:dd:34:ae:
                    e4:59:07:d1:eb:1f:ca:61:0e:1c:01:ab:32:a9:05:
                    83:43:39:e3:ba:45:02:0d:bb:6b:ae:d0:04:1e:5a:
                    62:bb:78:c5:af:05:73:98:95:1e:bf:a6:44:9d:83:
                    79:08:9a:6e:78:b1:e0:3d:e0:65:53:bb:18:bf:48:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F5:5A:1F:B6:37:43:49:DD:55:66:22:F7:46:A5:1C:E9:9F:B1:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.154.0/24
                IPv6:
                  2620:96:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f5:d8:58:13:90:a4:a0:5b:6f:80:c2:9a:d9:7c:d0:b4:40:
         58:fd:5b:be:78:62:0c:16:88:b3:f0:d9:0c:15:fc:76:40:2a:
         1b:95:0d:2a:5b:41:9d:15:a8:b1:b5:78:a3:2b:c1:02:22:1d:
         85:2f:82:bb:8c:00:56:78:5a:46:be:8b:6f:c9:81:6a:8f:38:
         fd:39:1e:c2:40:14:6b:ff:12:31:e3:6a:40:22:20:26:f4:d3:
         92:79:71:8b:82:71:ac:1c:0c:08:d1:64:20:e0:59:b1:68:b3:
         59:83:34:01:21:05:bf:99:ac:a5:2d:79:30:3d:12:24:92:94:
         45:fd:5f:ea:f8:53:2d:69:12:88:35:50:17:a7:d4:25:eb:90:
         17:c1:9f:5f:2e:4d:b6:f2:1f:85:8d:05:c7:f3:75:00:56:9c:
         58:5a:e0:ff:d3:8f:5e:83:5b:ac:a2:b6:ff:e7:42:bd:8d:56:
         2c:4f:c0:c4:4c:9c:63:8a:2f:23:ad:28:3a:13:15:16:d8:da:
         48:a8:ac:60:35:fa:4d:bd:99:c3:36:2a:66:b6:36:f1:5b:6e:
         fd:15:f8:9c:cf:a7:4a:82:b0:6b:63:e5:6b:37:dc:db:49:de:
         6d:1b:cf:41:7a:f4:ba:74:65:00:b8:57:6b:4e:8c:dc:7a:62:
         33:6f:cf:52
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEc0yIZRVqwFt27heoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjMxM2E1ZWMtZWRiNS00OWEzLWIzYjMtOTgwZDgwZDhl
NzY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
Y2UwYzY5NDctZjE5OS00MjIwLWI2OWItMzEyNDEyZTdiOGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2J0bb7GrVcD0igi3luiqbg9/l3O0w3gp5bs
OXUXVh7a4qUeW/3TKj9F7zsFktjooIoMO3eAnng1cH2+vDjuSFq7Cqpd7SV9+cXM
ZMWc2eeCiSDx8bub50wKk1o+H409xDk79hvMw4JzWuO2/3PySTdZpVNFiTXcCdSl
LlaY/nhinwYwtIcO8y5931RdT69VY+G3S6IIlD/k3zb8kC09QOJHiY0j1UvOTSe3
8c3OpIy8t0DdQpPQCLmuQx6CF/ndNK7kWQfR6x/KYQ4cAasyqQWDQznjukUCDbtr
rtAEHlpiu3jFrwVzmJUev6ZEnYN5CJpueLHgPeBlU7sYv0jkmwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFMv1Wh+2N0NJ3VVmIvdGpRzpn7HZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEz
YTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBkODBkOGU3NjYvYTk3NjI3MmUtNjZkNC0z
NDA0LTgxMGEtMWRiOTYzNmIzOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjMxM2E1ZWMtZWRiNS00OWEzLWIz
YjMtOTgwZDgwZDhlNzY2LzIzMTNhNWVjLWVkYjUtNDlhMy1iM2IzLTk4MGQ4MGQ4
ZTc2Ni5jcmwwHwYDVR0jBBgwFoAUjxrzeGIjGzrpD8kDBhRRObCYM+4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEzYTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBk
ODBkOGU3NjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0e2aMA8E
AgACMAkDBwAmIACWoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKPXYWBOQpKBbb4DCmtl80LRAWP1bvnhi
DBaIs/DZDBX8dkAqG5UNKltBnRWosbV4oyvBAiIdhS+Cu4wAVnhaRr6Lb8mBao84
/TkewkAUa/8SMeNqQCIgJvTTknlxi4JxrBwMCNFkIOBZsWizWYM0ASEFv5mspS15
MD0SJJKURf1f6vhTLWkSiDVQF6fUJeuQF8GfXy5NtvIfhY0Fx/N1AFacWFrg/9OP
XoNbrKK2/+dCvY1WLE/AxEycY4ovI60oOhMVFtjaSKisYDX6Tb2ZwzYqZrY28Vtu
/RX4nM+nSoKwa2Plazfc20nebRvPQXr0unRlALhXa06M3HpiM2/PUg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:27 2024 by rpki-client on console-ams.rpki-client.org