Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa
File:                     4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa (raw, json)
Hash identifier:          nIIjgBhJBHpflJXYLGuU6xyZlQVf6TqQ8DHypa0RmbM=
Subject key identifier:   9D:FC:03:F9:33:4D:A9:DB:F3:DA:37:72:07:3C:29:8F:9D:09:AE:F4
Certificate issuer:       /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
Certificate serial:       010D0C9F43285847C8D9E841F4CE2612151A2580
Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     8075
IP address blocks:        209.143.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e8:41:f4:ce:26:12:15:1a:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=cec35e95-13c9-458e-ae10-23372f502bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:66:a5:d3:9f:81:ad:04:9f:41:b2:27:5d:
                    de:64:94:82:30:0b:c2:cb:65:b5:be:0c:e4:a8:5a:
                    34:b6:66:af:2c:3c:0e:92:7b:a3:f4:6a:03:39:bd:
                    e4:71:25:ae:69:e6:76:3b:d5:cf:db:05:8a:a3:5f:
                    6e:e1:5d:fd:af:f5:7c:2a:91:72:c0:d2:d2:a7:f5:
                    b1:5d:07:77:63:0e:06:76:fe:27:d4:27:34:40:31:
                    c2:e2:a6:0d:1b:eb:45:7c:9d:3e:44:ff:6f:25:54:
                    32:6e:7f:f4:07:fc:3d:5c:76:82:6e:87:8d:39:e5:
                    84:d8:ef:b0:15:ed:d5:74:d9:bd:e2:0b:65:2b:a3:
                    e8:b0:59:ce:24:65:9a:71:4b:4c:7a:5c:5c:a3:43:
                    0b:9f:a4:9f:5b:ae:e0:e4:db:b6:0a:70:61:1d:0d:
                    e0:d7:03:66:30:69:c6:9e:1d:d4:85:89:bf:ce:eb:
                    12:90:a9:e7:09:49:25:80:d0:06:e2:88:b1:a8:b8:
                    82:2a:42:74:6e:f4:7d:98:4a:c2:52:62:8d:ff:69:
                    e9:0d:e4:4c:33:57:25:27:6e:56:ea:3a:88:72:c7:
                    6e:df:83:e1:eb:be:f6:d8:c9:d8:07:11:b8:07:7b:
                    2f:7f:90:a7:08:bf:ba:ae:5a:45:88:6a:45:58:1b:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FC:03:F9:33:4D:A9:DB:F3:DA:37:72:07:3C:29:8F:9D:09:AE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl

            X509v3 Authority Key Identifier:
                keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:b2:18:d5:9b:48:2d:2a:60:cd:b3:73:2a:6b:f3:16:d1:
         55:b1:58:22:fe:c9:be:c8:6e:4f:4a:c8:96:49:13:ad:8c:00:
         d2:df:42:1d:3b:c9:e5:20:9f:2b:55:5d:f4:22:02:9d:3a:e1:
         bd:a0:01:e3:a1:f0:e1:48:ec:f5:02:e5:60:08:25:88:c3:e3:
         ed:ca:06:6b:70:21:67:11:ae:2d:82:e3:03:ca:c5:14:b4:c0:
         8f:b9:8c:af:e6:42:d1:43:f9:f7:5e:cc:3f:d9:97:8e:f4:69:
         83:c8:e4:38:2c:8c:fc:e5:ce:8c:be:0e:df:18:91:72:47:a6:
         88:c2:7a:1a:f7:f9:4b:03:88:6e:59:37:ea:ac:38:6b:cd:51:
         81:c4:ae:0e:7a:c3:2a:d7:94:1d:60:c0:cb:17:d2:af:0f:f3:
         11:32:7d:30:7d:73:98:62:ea:ec:0f:26:e5:3a:da:89:d1:40:
         87:4c:50:56:d6:42:51:4a:0b:9d:db:30:73:98:e3:6e:31:dd:
         31:49:8a:57:47:36:d8:d6:ce:b5:2c:96:ab:16:2b:43:33:e4:
         cd:23:73:14:2c:4d:ee:78:09:c9:83:b4:6d:58:cc:0b:94:aa:
         4c:75:4a:ed:bd:c0:a1:fb:6e:03:cf:02:ef:d3:ef:ad:08:fd:
         69:fa:2b:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2ehB9M4mEhUaJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl
NjYzMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
Y2VjMzVlOTUtMTNjOS00NThlLWFlMTAtMjMzNzJmNTAyYmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVRmpdOfga0En0GyJ13eZJSCMAvCy2W1vgzk
qFo0tmavLDwOknuj9GoDOb3kcSWuaeZ2O9XP2wWKo19u4V39r/V8KpFywNLSp/Wx
XQd3Yw4Gdv4n1Cc0QDHC4qYNG+tFfJ0+RP9vJVQybn/0B/w9XHaCboeNOeWE2O+w
Fe3VdNm94gtlK6PosFnOJGWacUtMelxco0MLn6SfW67g5Nu2CnBhHQ3g1wNmMGnG
nh3UhYm/zusSkKnnCUklgNAG4oixqLiCKkJ0bvR9mErCUmKN/2npDeRMM1clJ25W
6jqIcsdu34Ph67722MnYBxG4B3svf5CnCL+6rlpFiGpFWBuZKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ38A/kzTanb89o3cgc8KY+dCa70MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm
NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvNDUyNWQwYWEtMWIzZi0z
YjZkLWJkNjEtMDVlMzY4MWY3NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1
MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0
ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi
MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8lshjVm0gtKmDNs3Mqa/MW0VWxWCL+yb7Ibk9KyJZJE62MANLfQh07
yeUgnytVXfQiAp064b2gAeOh8OFI7PUC5WAIJYjD4+3KBmtwIWcRri2C4wPKxRS0
wI+5jK/mQtFD+fdezD/Zl470aYPI5DgsjPzlzoy+Dt8YkXJHpojCehr3+UsDiG5Z
N+qsOGvNUYHErg56wyrXlB1gwMsX0q8P8xEyfTB9c5hi6uwPJuU62onRQIdMUFbW
QlFKC53bMHOY424x3TFJildHNtjWzrUslqsWK0Mz5M0jcxQsTe54CcmDtG1YzAuU
qkx1Su29wKH7bgPPAu/T760I/Wn6K94=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:41 2024 by rpki-client on console-ams.rpki-client.org