Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa
File:                     fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa (raw, json)
Hash identifier:          4Glr0pES9WVRQ0RRhhQUNfFr8u2fUE/EhA2VKf5PSqQ=
Subject key identifier:   7F:01:81:CE:93:B5:A9:A7:7D:ED:5D:01:95:84:DE:B7:F2:8A:5C:FD
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584742BB49BD5FF01C3F41F9B800
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     398006
IP address blocks:        24.222.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:49:bd:5f:f0:1c:3f:41:f9:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=783e956e-015d-472c-b623-b93004e4ec5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:4d:3c:c0:83:b5:f5:f9:6a:77:61:0d:ef:
                    39:52:4f:12:01:98:d8:7c:ed:f9:06:ee:d1:9a:5e:
                    94:36:bf:f2:23:d2:e2:f0:1e:d8:38:c1:6e:fd:49:
                    19:f6:f9:14:f1:e5:5b:42:de:9c:21:0e:d1:e1:ec:
                    31:ac:49:cc:1f:ed:fa:23:87:55:9f:30:a6:e9:43:
                    27:61:20:96:f9:20:51:a7:10:e0:a5:2a:a2:f6:91:
                    f7:e7:57:ec:9f:a2:ce:8b:e3:e1:03:e3:be:b5:7e:
                    0f:b2:4e:33:63:b6:57:32:40:f9:25:f8:40:a8:ef:
                    20:83:d9:02:7d:15:6c:d1:8a:49:6c:40:d8:76:39:
                    b4:16:f6:49:be:02:d2:26:f1:1b:a2:78:3c:67:7e:
                    20:ba:f8:91:0b:3f:b2:ca:5f:18:1e:2f:0a:21:65:
                    b2:38:2a:4a:26:5a:c9:ca:62:de:cc:6b:81:5f:3b:
                    33:2f:3e:d8:c8:c7:1e:57:34:14:ef:70:be:48:66:
                    3b:4d:4c:ef:a6:45:6e:f3:c6:b7:a2:cb:0f:4a:9e:
                    72:51:da:29:78:e7:fc:7e:e9:8c:40:d1:7c:c9:9a:
                    e2:c5:c4:1d:6a:eb:44:f2:6d:9d:c5:67:03:d7:36:
                    19:1f:2b:4f:22:82:1f:16:2d:ee:9d:b5:cf:c6:2b:
                    d7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:01:81:CE:93:B5:A9:A7:7D:ED:5D:01:95:84:DE:B7:F2:8A:5C:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/fe5b8a8a-dd17-3ba1-a4e3-33f9c74a134b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.222.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:2f:88:49:84:ee:22:d6:90:50:b4:19:b0:3c:12:1b:13:12:
         05:a0:31:1c:6c:08:b8:ff:b0:c4:e0:69:06:3b:d0:fb:98:b7:
         17:28:79:48:b2:5d:57:4e:b5:f6:13:c7:df:a4:eb:20:81:8e:
         b1:b0:bb:12:b6:37:06:f5:ac:22:85:94:9e:4a:f0:10:09:16:
         88:da:5d:4b:b0:c8:32:3f:30:71:24:11:7d:33:16:eb:29:cb:
         74:3e:89:cd:7d:c5:ca:75:3a:05:83:b5:f7:d7:2d:5d:21:29:
         ef:54:fa:38:73:3e:59:a6:1b:c4:e8:35:64:69:89:fa:4d:d1:
         35:1e:9f:7c:2d:0b:76:1b:80:87:c5:af:f6:d1:4a:4e:20:87:
         a3:bb:f9:00:f8:e5:c1:9c:82:2e:eb:1c:20:5d:f3:ec:8c:41:
         e4:86:0d:5c:c1:e0:b0:df:e8:bc:cd:15:c9:39:42:d5:0c:27:
         f9:92:52:17:ec:8e:ed:71:c9:68:77:8c:12:88:58:21:41:21:
         c8:8f:9d:15:29:48:16:c9:f8:05:d1:bd:cf:83:93:28:37:ac:
         08:f0:be:53:c6:c6:c3:45:77:f6:60:15:80:2f:8f:f3:66:55:
         5e:71:38:51:80:6f:22:47:67:88:b1:8f:ce:ef:2b:81:f3:59:
         da:9d:03:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu0m9X/AcP0H5uAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4
OTViMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
NzgzZTk1NmUtMDE1ZC00NzJjLWI2MjMtYjkzMDA0ZTRlYzVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwJNPMCDtfX5andhDe85Uk8SAZjYfO35Bu7R
ml6UNr/yI9Li8B7YOMFu/UkZ9vkU8eVbQt6cIQ7R4ewxrEnMH+36I4dVnzCm6UMn
YSCW+SBRpxDgpSqi9pH351fsn6LOi+PhA+O+tX4Psk4zY7ZXMkD5JfhAqO8gg9kC
fRVs0YpJbEDYdjm0FvZJvgLSJvEbong8Z34guviRCz+yyl8YHi8KIWWyOCpKJlrJ
ymLezGuBXzszLz7YyMceVzQU73C+SGY7TUzvpkVu88a3ossPSp5yUdopeOf8fumM
QNF8yZrixcQdautE8m2dxWcD1zYZHytPIoIfFi3unbXPxivXKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8Bgc6Ttamnfe1dAZWE3rfyilz9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4
MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvZmU1YjhhOGEtZGQxNy0z
YmExLWE0ZTMtMzNmOWM3NGExMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi
NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh
ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy
M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGN5lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEviEmE7iLWkFC0GbA8EhsTEgWgMRxsCLj/sMTgaQY70PuYtxcoeUiy
XVdOtfYTx9+k6yCBjrGwuxK2Nwb1rCKFlJ5K8BAJFojaXUuwyDI/MHEkEX0zFusp
y3Q+ic19xcp1OgWDtffXLV0hKe9U+jhzPlmmG8ToNWRpifpN0TUen3wtC3YbgIfF
r/bRSk4gh6O7+QD45cGcgi7rHCBd8+yMQeSGDVzB4LDf6LzNFck5QtUMJ/mSUhfs
ju1xyWh3jBKIWCFBIciPnRUpSBbJ+AXRvc+Dkyg3rAjwvlPGxsNFd/ZgFYAvj/Nm
VV5xOFGAbyJHZ4ixj87vK4HzWdqdAxk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org