Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa
File:                     8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa (raw, json)
Hash identifier:          ULCxSxpwKYXNFo5FW5jMmYYKl77tMvOjCRmnchYKua4=
Subject key identifier:   6C:19:47:30:94:BC:87:19:62:5F:68:80:4C:45:57:26:6D:5C:0E:50
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F432858473A5B8126E675CEEB8ED67740
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     31898
IP address blocks:        162.253.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:81:26:e6:75:ce:eb:8e:d6:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=fe8ed20c-7955-464d-bde1-68f369990066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:1b:e3:b2:d7:d1:0c:54:88:99:93:f5:db:
                    39:bb:4c:c0:21:8d:73:b0:ee:66:7b:26:0a:4b:c9:
                    69:84:46:0a:b9:90:4b:8e:9f:15:4e:c4:32:59:02:
                    77:b3:5d:9b:db:9d:c1:c1:7e:7c:80:a2:01:7c:37:
                    3a:d6:70:24:ee:f3:6a:ab:b7:27:41:82:88:10:a8:
                    78:61:7c:8f:b1:aa:81:e2:e0:11:4b:22:a8:e4:bb:
                    21:4e:5b:cf:4c:6f:45:f6:c9:89:c5:f8:30:fb:ed:
                    05:b0:e9:5a:00:d2:c6:84:7d:b7:38:fd:5b:c2:be:
                    75:12:2a:6f:88:dc:46:26:6e:7f:6f:e6:bd:2d:0f:
                    c3:25:42:e5:c5:70:bd:85:e4:08:ba:46:ae:4c:b7:
                    5a:bc:76:b4:84:9c:03:e8:e5:28:22:a8:98:73:3a:
                    d8:4e:7d:20:65:dd:c0:1c:00:de:7e:18:c2:c0:e1:
                    5c:ed:62:8c:26:3f:e5:55:bd:b9:12:3b:ce:57:81:
                    d9:36:4a:f9:63:65:f0:29:c0:e3:22:e5:fa:3a:6e:
                    16:26:9a:bb:2c:09:54:08:4d:57:5a:5c:dd:b6:b9:
                    d7:b5:6a:ac:2a:88:b7:d9:ed:69:1e:e8:5b:4a:b4:
                    7a:2d:7b:32:65:a8:8a:30:83:2d:29:43:13:ca:d4:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:19:47:30:94:BC:87:19:62:5F:68:80:4C:45:57:26:6D:5C:0E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:7a:11:8e:df:8e:ea:ed:09:5d:f2:49:9b:56:a6:cb:16:
         a0:d1:45:51:55:c6:53:8a:a1:e9:bc:69:6f:38:1d:b7:37:94:
         23:5c:c2:72:60:86:a3:3f:cb:25:d0:4f:ba:24:28:e4:99:21:
         e6:9f:c1:75:d5:53:18:18:90:39:7e:91:61:b8:aa:2d:9c:aa:
         b1:33:b1:94:1e:73:d3:ee:3b:ea:ef:f7:fd:1f:fc:ff:30:d0:
         3b:f1:45:f9:5d:8b:29:ad:0a:6d:1a:59:72:10:0f:02:41:54:
         4d:da:06:44:af:16:d4:02:99:ed:31:2d:9c:ce:41:58:b9:87:
         b1:95:4c:cf:3a:99:02:71:66:f3:df:a7:0a:51:3d:03:0f:2a:
         8e:46:5b:18:60:0a:6c:3b:bd:ba:96:6e:c8:47:e8:01:0e:1a:
         9b:3f:20:c2:d7:52:b0:93:5a:0b:e3:1f:bd:5b:8e:9f:af:ef:
         e8:fe:88:6b:79:00:ea:a2:2d:c9:f7:51:b8:3e:ea:39:da:ae:
         4a:22:0a:4b:38:61:d4:88:1c:68:9d:46:7d:b5:09:f8:e4:fe:
         41:d7:50:a1:b7:3b:c4:86:c3:ca:1f:b0:56:69:90:cd:60:b4:
         f9:ee:fa:1d:9f:1d:6b:bf:ce:82:76:15:00:f8:7e:be:87:75:
         cf:66:5e:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W4Em5nXO647Wd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgy
ZDVhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZmU4ZWQyMGMtNzk1NS00NjRkLWJkZTEtNjhmMzY5OTkwMDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHEb47LX0QxUiJmT9ds5u0zAIY1zsO5meyYK
S8lphEYKuZBLjp8VTsQyWQJ3s12b253BwX58gKIBfDc61nAk7vNqq7cnQYKIEKh4
YXyPsaqB4uARSyKo5LshTlvPTG9F9smJxfgw++0FsOlaANLGhH23OP1bwr51Eipv
iNxGJm5/b+a9LQ/DJULlxXC9heQIukauTLdavHa0hJwD6OUoIqiYczrYTn0gZd3A
HADefhjCwOFc7WKMJj/lVb25EjvOV4HZNkr5Y2XwKcDjIuX6Om4WJpq7LAlUCE1X
WlzdtrnXtWqsKoi32e1pHuhbSrR6LXsyZaiKMIMtKUMTytTQYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwZRzCUvIcZYl9ogExFVyZtXA5QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMz
MDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvODc5NGI3YTQtMGE2ZC0z
MThmLWFjOWUtNDQxMDgxYzZmMDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzhjMzAxYWItN2QyMi00NmMzLTgy
MTEtZjYzNzNlYzgyZDVhL2M4YzMwMWFiLTdkMjItNDZjMy04MjExLWY2MzczZWM4
MmQ1YS5jcmwwHwYDVR0jBBgwFoAUGxP8yGiVO1Oo/Oi5S4sEI5dKUtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3
M2VjODJkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov1UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfqehGO347q7Qld8kmbVqbLFqDRRVFVxlOKoem8aW84Hbc3lCNcwnJg
hqM/yyXQT7okKOSZIeafwXXVUxgYkDl+kWG4qi2cqrEzsZQec9PuO+rv9/0f/P8w
0DvxRfldiymtCm0aWXIQDwJBVE3aBkSvFtQCme0xLZzOQVi5h7GVTM86mQJxZvPf
pwpRPQMPKo5GWxhgCmw7vbqWbshH6AEOGps/IMLXUrCTWgvjH71bjp+v7+j+iGt5
AOqiLcn3Ubg+6jnarkoiCks4YdSIHGidRn21Cfjk/kHXUKG3O8SGw8ofsFZpkM1g
tPnu+h2fHWu/zoJ2FQD4fr6Hdc9mXrA=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:45 2024 by rpki-client on console-ams.rpki-client.org