Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/649e883f-445a-3a11-bd4d-1acad627c507.roa
File:                     649e883f-445a-3a11-bd4d-1acad627c507.roa (raw, json)
Hash identifier:          p94Uy6cfcTx2FEiY6QPMf1wdOrdnH6gRc4ZNiKhBWeo=
Subject key identifier:   CF:2E:4B:4D:78:25:AC:86:91:50:F8:B5:3F:4F:0B:02:75:05:49:38
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F43285847B7FBF47F3E34B35A2F5A3A00
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/649e883f-445a-3a11-bd4d-1acad627c507.roa
Signing time:             Thu 31 Oct 2024 01:00:31 +0000
ROA not before:           Thu 31 Oct 2024 01:00:31 +0000
ROA not after:            Wed 29 Jan 2025 02:00:31 +0000
asID:                     11377
IP address blocks:        159.183.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:fb:f4:7f:3e:34:b3:5a:2f:5a:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Oct 31 01:00:31 2024 GMT
            Not After : Jan 29 02:00:31 2025 GMT
        Subject: CN=5b7a5ec5-9300-457e-ad31-e5690f326949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8d:68:aa:db:9a:ba:1e:52:43:09:e3:fe:a6:
                    4d:e3:36:60:3a:8d:18:50:f6:5c:93:11:87:dd:a2:
                    62:f3:33:ef:9a:b6:f3:d7:0f:2f:d1:67:89:a2:7e:
                    ea:8a:16:c3:01:b2:4b:ae:76:9a:d0:90:b7:af:53:
                    b7:02:33:88:95:18:ff:70:6b:15:6a:79:d3:eb:61:
                    3b:70:7e:55:bf:ce:0d:cb:89:04:c6:a4:7a:d2:e6:
                    cb:ef:7c:44:a1:dc:00:fb:24:ce:b3:3f:7f:f6:63:
                    66:53:11:64:07:15:47:99:9a:0a:46:b3:30:ae:b6:
                    34:97:ea:8a:8d:9d:5f:48:a6:d8:31:e9:39:2f:d5:
                    65:94:51:2d:eb:18:d1:7c:f2:4b:c6:b5:04:25:cf:
                    69:30:07:ec:79:bc:10:ce:74:43:27:1c:ef:c8:ee:
                    d5:bb:0c:fb:17:ef:b4:b9:2e:9c:bd:10:d2:a2:52:
                    e6:30:97:18:49:02:bd:51:b6:cd:dd:79:78:6a:69:
                    5c:7b:9c:2c:7c:6c:af:20:1f:97:48:26:53:e6:15:
                    6e:ef:d8:aa:92:12:0c:2d:1a:b3:54:29:3b:d6:60:
                    c1:ac:df:11:bc:78:d0:12:7b:ba:7e:6c:ee:b4:06:
                    07:83:5a:ef:be:dc:68:d1:52:12:e0:2e:51:ba:4c:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2E:4B:4D:78:25:AC:86:91:50:F8:B5:3F:4F:0B:02:75:05:49:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/649e883f-445a-3a11-bd4d-1acad627c507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ae:e5:fe:91:9f:11:8e:c6:83:70:82:b9:d8:90:e5:b0:b9:
         60:d4:75:26:6b:6f:70:35:18:98:f0:2c:33:a8:e0:07:3c:ca:
         81:8d:55:a3:c1:c3:85:27:85:9b:97:1d:99:f3:0d:10:76:4a:
         90:5c:75:ae:54:cc:1a:2a:fb:1b:81:e0:80:ae:35:47:52:45:
         55:32:48:13:3c:2e:b0:9a:c7:4f:e7:f3:54:fe:e8:91:60:8e:
         ed:0a:72:6b:0c:68:fd:21:81:4e:c5:b5:9d:f3:8f:f7:70:b9:
         8b:40:18:a2:75:8d:25:9c:20:48:35:d7:6e:f4:d5:38:9c:e8:
         ca:4b:90:52:71:e5:e0:36:9c:9b:72:f2:60:a7:0e:b4:42:c2:
         6d:64:08:f7:bc:cd:45:9b:48:be:57:1d:de:85:ed:32:c4:be:
         de:b5:32:b5:c6:17:71:ae:68:85:ca:2d:c1:3e:12:3e:27:d2:
         dc:c9:00:21:30:db:31:36:dc:95:9c:7c:bd:47:f4:9f:1b:57:
         86:72:c3:bb:4f:d8:b2:3a:9a:41:90:58:13:41:e0:9f:a7:f5:
         da:69:23:5b:25:36:fd:3b:2b:6c:99:22:25:56:68:5a:ce:e3:
         21:b6:7e:b7:ed:bd:96:79:2f:dd:55:b5:9b:70:b5:18:14:f9:
         dd:c6:d7:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe3+/R/PjSzWi9aOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1
MGI4MB4XDTI0MTAzMTAxMDAzMVoXDTI1MDEyOTAyMDAzMVowLzEtMCsGA1UEAxMk
NWI3YTVlYzUtOTMwMC00NTdlLWFkMzEtZTU2OTBmMzI2OTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI1oqtuauh5SQwnj/qZN4zZgOo0YUPZckxGH
3aJi8zPvmrbz1w8v0WeJon7qihbDAbJLrnaa0JC3r1O3AjOIlRj/cGsVannT62E7
cH5Vv84Ny4kExqR60ubL73xEodwA+yTOsz9/9mNmUxFkBxVHmZoKRrMwrrY0l+qK
jZ1fSKbYMek5L9VllFEt6xjRfPJLxrUEJc9pMAfsebwQznRDJxzvyO7Vuwz7F++0
uS6cvRDSolLmMJcYSQK9UbbN3Xl4amlce5wsfGyvIB+XSCZT5hVu79iqkhIMLRqz
VCk71mDBrN8RvHjQEnu6fmzutAYHg1rvvtxo0VIS4C5RukyejQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8uS014JayGkVD4tT9PCwJ1BUk4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0
ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvNjQ5ZTg4M2YtNDQ1YS0z
YTExLWJkNGQtMWFjYWQ2MjdjNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx
MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw
NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl
ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7cnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqu5f6RnxGOxoNwgrnYkOWwuWDUdSZrb3A1GJjwLDOo4Ac8yoGNVaPB
w4UnhZuXHZnzDRB2SpBcda5UzBoq+xuB4ICuNUdSRVUySBM8LrCax0/n81T+6JFg
ju0KcmsMaP0hgU7FtZ3zj/dwuYtAGKJ1jSWcIEg112701Tic6MpLkFJx5eA2nJty
8mCnDrRCwm1kCPe8zUWbSL5XHd6F7TLEvt61MrXGF3GuaIXKLcE+Ej4n0tzJACEw
2zE23JWcfL1H9J8bV4Zyw7tP2LI6mkGQWBNB4J+n9dppI1slNv07K2yZIiVWaFrO
4yG2frftvZZ5L91VtZtwtRgU+d3G198=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:29 2024 by rpki-client on console-ams.rpki-client.org