Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa
File:                     9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa (raw, json)
Hash identifier:          6juuo96yEVHfjYh5Pe2E7E490qCP/bigyGvuz7GNThA=
Subject key identifier:   7F:D1:F4:AA:E8:C4:05:50:CA:21:0B:E3:4E:D1:DA:5A:CA:6D:36:82
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F432858478F8127C7C7BB0344C9F3C100
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     394625
IP address blocks:        185.240.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:27:c7:c7:bb:03:44:c9:f3:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=948397ff-b310-4817-a186-beb778e24152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:10:8e:6d:6b:13:8c:5d:0d:0c:81:da:24:
                    22:57:dc:56:da:97:82:38:18:92:6f:42:37:98:68:
                    40:78:10:07:8f:6a:5f:4f:48:7f:e6:e5:4d:3a:fe:
                    04:8b:53:c7:03:97:7e:15:54:c4:82:2a:e9:c7:95:
                    a0:98:51:95:cf:5e:fa:8c:26:67:1d:0d:8c:ec:50:
                    98:b1:0d:86:95:f4:4f:10:10:38:6b:4b:57:04:85:
                    25:77:5a:8d:5b:c9:d4:bf:d1:08:32:d6:38:28:85:
                    0d:d0:f2:86:5a:13:52:3b:64:56:f6:bb:f8:57:0c:
                    15:eb:cb:c8:b4:96:5f:d0:10:ed:2b:6a:37:bb:43:
                    e7:77:fc:fc:53:22:1c:f5:57:01:34:09:fb:0c:db:
                    30:44:70:fe:09:48:88:09:97:00:d6:f6:60:d7:45:
                    b9:bd:8a:ff:c5:de:ba:2c:cf:e0:ee:f3:76:70:2b:
                    44:bf:47:0a:37:79:83:8a:58:6b:b9:92:2e:af:8e:
                    c8:3e:74:de:a7:c0:e3:e5:b6:27:99:3d:5a:af:48:
                    a6:61:6a:95:f7:16:b0:8f:67:64:d4:a1:cb:60:6d:
                    ce:cd:49:0e:a2:e5:3f:12:e9:12:44:0c:b6:f0:c6:
                    05:3e:17:0d:f7:70:10:e9:40:45:89:79:d2:af:37:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D1:F4:AA:E8:C4:05:50:CA:21:0B:E3:4E:D1:DA:5A:CA:6D:36:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/9f0ab8e5-b63b-37f7-bbbd-733eafb3c12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.240.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:90:80:b6:ee:20:dc:fc:24:e7:6a:6f:f4:50:cf:15:9c:a9:
         bd:51:19:f0:93:1e:96:51:3f:70:f0:50:c8:ca:9b:b8:5f:e4:
         f4:d4:bb:50:25:e1:fc:3d:3e:d6:e0:77:3b:24:aa:a0:05:c5:
         10:f0:dd:e3:2c:f4:81:d6:f9:97:b2:cc:9e:44:74:ee:5b:a1:
         a4:c7:c8:58:9e:7c:4f:c7:87:1a:46:ea:9b:73:94:96:dc:75:
         79:01:46:92:d6:80:0f:0e:45:84:52:db:85:1e:9d:e3:f1:ea:
         a2:d3:43:04:fe:0b:7d:82:61:c0:a3:fa:f8:de:b6:db:46:69:
         db:07:e9:1a:9c:8a:18:6b:b3:61:99:35:a0:f2:55:ca:40:e4:
         a2:46:2e:09:c8:77:c6:f2:ef:9d:20:c8:36:19:0e:7f:76:1d:
         9e:44:a0:58:7c:82:2c:ff:21:c7:bb:d3:a5:f3:ca:34:c1:7d:
         4e:85:53:33:3e:7b:8c:64:54:a0:1d:71:a6:d3:ef:ca:78:aa:
         f4:af:f5:39:d5:a9:a2:0e:fa:fc:c8:2d:31:07:42:9b:77:36:
         a5:09:41:19:af:6e:0c:5e:57:9d:72:f6:60:cf:8b:73:5b:59:
         2e:57:78:a0:d9:f5:76:43:c3:e4:36:13:c1:78:8a:e1:5f:fd:
         15:1a:6d:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePgSfHx7sDRMnzwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4
NmQ3MB4XDTI0MTAxNjEzMDA0M1oXDTI1MDExNDE0MDA0M1owLzEtMCsGA1UEAxMk
OTQ4Mzk3ZmYtYjMxMC00ODE3LWExODYtYmViNzc4ZTI0MTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNEQjm1rE4xdDQyB2iQiV9xW2peCOBiSb0I3
mGhAeBAHj2pfT0h/5uVNOv4Ei1PHA5d+FVTEgirpx5WgmFGVz176jCZnHQ2M7FCY
sQ2GlfRPEBA4a0tXBIUld1qNW8nUv9EIMtY4KIUN0PKGWhNSO2RW9rv4VwwV68vI
tJZf0BDtK2o3u0Pnd/z8UyIc9VcBNAn7DNswRHD+CUiICZcA1vZg10W5vYr/xd66
LM/g7vN2cCtEv0cKN3mDilhruZIur47IPnTep8Dj5bYnmT1ar0imYWqV9xawj2dk
1KHLYG3OzUkOouU/EukSRAy28MYFPhcN93AQ6UBFiXnSrzdD5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/R9KroxAVQyiEL407R2lrKbTaCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj
NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvOWYwYWI4ZTUtYjYzYi0z
N2Y3LWJiYmQtNzMzZWFmYjNjMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx
MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl
ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy
ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufAgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6QgLbuINz8JOdqb/RQzxWcqb1RGfCTHpZRP3DwUMjKm7hf5PTUu1Al
4fw9PtbgdzskqqAFxRDw3eMs9IHW+ZeyzJ5EdO5boaTHyFiefE/HhxpG6ptzlJbc
dXkBRpLWgA8ORYRS24UenePx6qLTQwT+C32CYcCj+vjetttGadsH6Rqcihhrs2GZ
NaDyVcpA5KJGLgnId8by750gyDYZDn92HZ5EoFh8giz/Ice706XzyjTBfU6FUzM+
e4xkVKAdcabT78p4qvSv9TnVqaIO+vzILTEHQpt3NqUJQRmvbgxeV51y9mDPi3Nb
WS5XeKDZ9XZDw+Q2E8F4iuFf/RUabfU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org