Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa
File:                     d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa (raw, json)
Hash identifier:          gsFKrozFceXjtfCZPfiYKFgHUoTMDfuTxnXyXZeDOrw=
Subject key identifier:   38:2B:F4:6A:CD:D1:79:A5:07:C7:F6:C9:59:81:B0:23:D1:69:59:D6
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584742BB4908DDE71E3613A01E00
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     1273
IP address blocks:        204.188.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:49:08:dd:e7:1e:36:13:a0:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=b82e05dc-31f8-490a-8f7a-54215d5f39fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:41:29:38:5b:e4:0b:8c:72:04:29:6a:61:
                    59:55:50:1f:42:46:bb:8a:35:4b:d8:40:fa:6c:cf:
                    8c:9e:66:ae:b2:e8:ae:32:58:34:54:82:1d:1e:41:
                    1c:18:e5:b8:43:a7:60:34:f8:e0:fb:0e:f1:45:b4:
                    6c:2b:8b:44:a2:65:95:00:75:7f:c4:30:b6:de:27:
                    f5:6b:ae:a1:a6:df:ef:90:c6:21:39:bd:a0:cf:24:
                    88:e5:ce:44:67:a5:89:ba:2c:64:e2:4d:c2:98:2d:
                    6d:3d:91:5d:d6:c0:c3:12:da:90:07:35:a8:54:ca:
                    98:73:c1:d0:c2:ec:41:e9:84:2f:8e:c9:b7:19:b5:
                    92:7b:c4:70:85:52:85:4a:d9:3a:41:f2:05:fb:a4:
                    fa:e7:7f:d4:9c:23:f5:57:26:72:c8:60:02:0a:58:
                    83:4f:9e:37:fb:54:82:2d:67:ec:a4:d1:28:4d:c4:
                    9d:4c:b6:dd:cb:4f:d1:8b:d5:c1:9d:ad:df:04:77:
                    d8:2a:93:5d:1a:19:37:9c:5e:61:fb:9c:4f:36:ac:
                    64:b1:4e:f9:73:97:38:16:48:f9:cf:12:99:d3:ea:
                    5f:4b:ee:d5:77:21:e4:bf:62:e6:fd:90:13:58:63:
                    66:4a:df:03:48:8d:79:34:63:8a:d8:bb:59:75:8a:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2B:F4:6A:CD:D1:79:A5:07:C7:F6:C9:59:81:B0:23:D1:69:59:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/d4c1ab5e-022b-3fd0-a92b-89b25e5f072c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.188.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:5a:f2:a9:a1:cb:bc:fc:a9:34:19:88:b9:94:04:95:18:
         fb:fd:ce:e5:80:59:1f:6a:f5:09:a7:1e:6e:ba:a7:ef:62:b9:
         b9:e4:73:1d:c1:78:20:66:11:85:ac:09:89:97:f8:f4:f4:08:
         27:09:d1:0d:47:8d:5d:d1:66:25:2f:ab:0c:60:9c:a7:6b:c4:
         7e:1a:63:a1:82:23:83:f9:02:77:9c:e3:c7:43:7c:95:bc:b5:
         11:10:d4:8f:9e:44:00:b8:4b:83:12:cb:ec:27:f7:f2:fa:a5:
         12:ce:2c:f8:6d:34:b0:7c:33:e1:1e:a7:af:fb:94:a5:21:50:
         b4:2a:e6:aa:89:d2:19:8c:9e:ee:6f:59:35:8a:45:47:67:ac:
         11:3c:b5:41:d3:4e:36:44:b0:f9:4c:06:31:b5:47:25:25:c4:
         f7:45:cf:83:db:83:93:41:46:1b:42:2e:57:a3:fb:05:6d:b8:
         31:af:23:2f:ed:44:54:be:0f:6b:d0:e2:fc:db:43:5f:9d:b6:
         49:a4:e9:cf:30:44:bd:54:1e:18:41:ed:c9:6c:b9:f7:14:d0:
         a8:bf:d4:0a:47:45:35:01:ec:cf:ee:48:ec:9e:e7:f2:be:28:
         82:e0:cc:89:e2:92:8d:01:ab:b0:e4:15:93:cb:31:bd:7f:d3:
         fe:74:cb:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu0kI3eceNhOgHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4
NTgyMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
YjgyZTA1ZGMtMzFmOC00OTBhLThmN2EtNTQyMTVkNWYzOWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JtBKThb5AuMcgQpamFZVVAfQka7ijVL2ED6
bM+MnmausuiuMlg0VIIdHkEcGOW4Q6dgNPjg+w7xRbRsK4tEomWVAHV/xDC23if1
a66hpt/vkMYhOb2gzySI5c5EZ6WJuixk4k3CmC1tPZFd1sDDEtqQBzWoVMqYc8HQ
wuxB6YQvjsm3GbWSe8RwhVKFStk6QfIF+6T653/UnCP1VyZyyGACCliDT543+1SC
LWfspNEoTcSdTLbdy0/Ri9XBna3fBHfYKpNdGhk3nF5h+5xPNqxksU75c5c4Fkj5
zxKZ0+pfS+7VdyHkv2Lm/ZATWGNmSt8DSI15NGOK2LtZdYrSiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDgr9GrN0XmlB8f2yVmBsCPRaVnWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk
Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvZDRjMWFiNWUtMDIyYi0z
ZmQwLWE5MmItODliMjVlNWYwNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3
NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh
ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji
NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzLyIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8jWvKpocu8/Kk0GYi5lASVGPv9zuWAWR9q9QmnHm66p+9iubnkcx3B
eCBmEYWsCYmX+PT0CCcJ0Q1HjV3RZiUvqwxgnKdrxH4aY6GCI4P5Anec48dDfJW8
tREQ1I+eRAC4S4MSy+wn9/L6pRLOLPhtNLB8M+Eep6/7lKUhULQq5qqJ0hmMnu5v
WTWKRUdnrBE8tUHTTjZEsPlMBjG1RyUlxPdFz4Pbg5NBRhtCLlej+wVtuDGvIy/t
RFS+D2vQ4vzbQ1+dtkmk6c8wRL1UHhhB7clsufcU0Ki/1ApHRTUB7M/uSOye5/K+
KILgzIniko0Bq7DkFZPLMb1/0/50ywg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:28:09 2024 by rpki-client on console-fra.rpki-client.org