Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
File:                     ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa (raw, json)
Hash identifier:          4sTJcpAH9KNZ7xgBEfwbzV6o97aExoiuZytdmAgFecg=
Subject key identifier:   81:19:3A:27:B3:70:55:16:30:5C:20:21:36:D9:7E:84:6B:5A:3C:5B
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F4328584812D53B5CD4D47E00CCB88900
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     399628
IP address blocks:        209.188.108.0/24 maxlen: 24
                          2620:96:a001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Dec 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:3b:5c:d4:d4:7e:00:cc:b8:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=212ea82b-e928-4ffa-bb58-73046ae3491f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:80:7b:f9:9a:a1:96:2b:32:3e:d7:d9:94:
                    60:46:6e:7b:98:53:a5:a3:07:cf:c6:7c:00:18:e2:
                    77:53:73:25:27:14:05:55:56:2d:8f:ec:df:61:7f:
                    2e:a6:81:ec:74:71:17:3e:b2:2b:f6:2d:69:ea:6d:
                    7c:b7:77:dd:b1:0a:7a:d5:52:b0:8e:ee:04:c4:a9:
                    45:7b:a7:23:85:86:bb:43:e1:9e:11:d8:38:9b:35:
                    7b:06:2d:7d:84:d7:b4:e3:d8:9b:9c:61:92:8c:cc:
                    6b:27:3b:bc:f1:f3:96:6f:be:97:71:2f:95:2c:eb:
                    62:4e:b8:69:bc:d0:ea:cd:68:09:14:cb:9a:3b:5e:
                    2e:a6:c8:9a:38:56:73:03:20:ca:f4:78:c7:22:1f:
                    66:2c:da:4b:be:46:e9:bd:c5:b6:5d:1c:ae:10:cb:
                    f8:c4:dc:0e:85:84:28:f9:24:ba:c1:08:27:8d:e9:
                    0d:9f:0d:7d:f5:9f:e4:74:8d:51:4d:40:e9:e9:49:
                    c9:db:f7:bc:c2:72:6d:5a:91:51:ea:fd:c0:cd:ee:
                    8f:33:e5:72:01:f8:91:2a:03:56:88:b5:8e:17:b8:
                    cf:e2:0f:a2:ab:99:ba:af:09:1d:29:30:44:92:69:
                    e3:54:f4:9c:b2:e8:9a:69:d9:6b:b1:21:d3:fd:b1:
                    2d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:3A:27:B3:70:55:16:30:5C:20:21:36:D9:7E:84:6B:5A:3C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.108.0/24
                IPv6:
                  2620:96:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:81:2c:f3:11:d8:f1:c7:04:12:a5:83:9e:5f:3d:ef:cc:e1:
         8a:6a:13:b9:cd:04:08:8e:07:26:2a:01:c5:2d:52:e7:d2:dd:
         73:99:c0:4d:a9:78:8d:57:34:5b:79:83:55:47:31:59:fe:57:
         77:ef:e9:d0:fb:04:aa:73:a0:72:99:d6:17:42:df:a6:a3:33:
         2c:b7:4e:b9:1c:2c:84:0f:39:6e:31:31:42:b6:2f:4a:c1:21:
         64:39:b8:d3:b5:82:27:bf:6b:49:50:dd:96:98:5a:0b:e4:b7:
         ae:6e:47:79:c3:8c:8c:b4:0a:46:1b:c5:92:fb:8a:6c:f0:23:
         3a:d0:81:32:54:8b:07:70:fb:23:28:41:12:71:27:76:33:94:
         96:27:a6:84:23:f4:d9:35:45:56:94:f0:f3:c2:7d:d3:7c:92:
         dc:ef:ad:64:ca:e1:75:82:37:5b:db:71:84:7a:9e:cd:c3:74:
         85:23:6c:bd:11:33:de:64:db:f4:56:1c:86:bf:d2:60:9a:e0:
         8b:cc:82:f4:9e:c0:28:a5:ad:c9:c9:cc:14:0a:65:f4:93:48:
         db:fa:a4:15:c7:4a:c6:73:69:d8:73:0d:18:85:71:93:26:76:
         c7:06:78:f4:c8:a5:b5:8f:c2:77:17:09:07:fb:ce:b9:96:e4:
         0d:5e:47:a8
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgS1Ttc1NR+AMy4iQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjMxM2E1ZWMtZWRiNS00OWEzLWIzYjMtOTgwZDgwZDhl
NzY2MB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
MjEyZWE4MmItZTkyOC00ZmZhLWJiNTgtNzMwNDZhZTM0OTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi+Ae/maoZYrMj7X2ZRgRm57mFOlowfPxnwA
GOJ3U3MlJxQFVVYtj+zfYX8upoHsdHEXPrIr9i1p6m18t3fdsQp61VKwju4ExKlF
e6cjhYa7Q+GeEdg4mzV7Bi19hNe049ibnGGSjMxrJzu88fOWb76XcS+VLOtiTrhp
vNDqzWgJFMuaO14upsiaOFZzAyDK9HjHIh9mLNpLvkbpvcW2XRyuEMv4xNwOhYQo
+SS6wQgnjekNnw199Z/kdI1RTUDp6UnJ2/e8wnJtWpFR6v3Aze6PM+VyAfiRKgNW
iLWOF7jP4g+iq5m6rwkdKTBEkmnjVPScsuiaadlrsSHT/bEtlQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFIEZOiezcFUWMFwgITbZfoRrWjxbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEz
YTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBkODBkOGU3NjYvZWQ5ZTU0YTktZWM3NS0z
YzFjLTk1YmItMWI2YzkyZTAxNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjMxM2E1ZWMtZWRiNS00OWEzLWIz
YjMtOTgwZDgwZDhlNzY2LzIzMTNhNWVjLWVkYjUtNDlhMy1iM2IzLTk4MGQ4MGQ4
ZTc2Ni5jcmwwHwYDVR0jBBgwFoAUjxrzeGIjGzrpD8kDBhRRObCYM+4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEzYTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBk
ODBkOGU3NjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0bxsMA8E
AgACMAkDBwAmIACWoAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACIEs8xHY8ccEEqWDnl8978zhimoTuc0E
CI4HJioBxS1S59Ldc5nATal4jVc0W3mDVUcxWf5Xd+/p0PsEqnOgcpnWF0LfpqMz
LLdOuRwshA85bjExQrYvSsEhZDm407WCJ79rSVDdlphaC+S3rm5HecOMjLQKRhvF
kvuKbPAjOtCBMlSLB3D7IyhBEnEndjOUliemhCP02TVFVpTw88J903yS3O+tZMrh
dYI3W9txhHqezcN0hSNsvREz3mTb9FYchr/SYJrgi8yC9J7AKKWtycnMFApl9JNI
2/qkFcdKxnNp2HMNGIVxkyZ2xwZ49MiltY/CdxcJB/vOuZbkDV5HqA==
-----END CERTIFICATE-----
Generated at Fri Dec 13 04:57:27 2024 by rpki-client on console-ams.rpki-client.org