Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/addb3c8a-9d14-35da-96af-ab093d3ddfa0.roa
File:                     addb3c8a-9d14-35da-96af-ab093d3ddfa0.roa (raw, json)
Hash identifier:          hgxM1LsP7AE1EdVUqiH1aDfTAuOUiPhFzEWTNa32v9c=
Subject key identifier:   C8:14:EA:8A:14:33:B8:0E:83:ED:DE:CF:22:F8:A3:7A:77:3D:74:2B
Certificate issuer:       /CN=2551cb31-e55c-4d6e-a523-619ecb2ac29b
Certificate serial:       010D0C9F43285847E094C2E799B969456A893100
Authority key identifier: 36:A6:FD:3F:31:37:25:A4:D8:F5:5F:9C:CC:9C:29:1F:2F:20:FD:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/addb3c8a-9d14-35da-96af-ab093d3ddfa0.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        205.236.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/2551cb31-e55c-4d6e-a523-619ecb2ac29b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/2551cb31-e55c-4d6e-a523-619ecb2ac29b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c2:e7:99:b9:69:45:6a:89:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2551cb31-e55c-4d6e-a523-619ecb2ac29b
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=8826e230-6078-4f01-a6b2-e0e12077df4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:b7:cb:d8:b3:58:32:5a:f1:61:97:6a:d2:
                    be:09:7b:3e:02:fe:f9:f2:68:9c:a5:64:0d:f3:fa:
                    c9:ce:f8:b6:60:94:d3:3f:0f:f6:34:97:fc:52:b6:
                    90:c3:b2:7a:b7:7c:ea:f2:4c:6e:cd:85:52:f1:ee:
                    7f:2a:5a:3c:ab:13:56:df:02:66:6e:01:0b:6d:06:
                    1a:ef:94:df:56:43:99:81:ab:39:ea:65:70:3e:f9:
                    aa:4b:09:e2:77:c7:a4:57:26:49:b3:c9:b5:c5:29:
                    8c:2c:99:8f:4f:0c:e0:7d:8d:2f:84:41:08:ee:bd:
                    3b:bf:d9:40:77:b3:e9:bc:08:d2:da:cc:c1:46:81:
                    0e:46:90:44:31:cd:cf:39:97:0b:bb:77:3d:21:01:
                    a9:a2:17:06:7b:03:bf:e6:6d:9e:25:ef:ad:2a:26:
                    d9:b6:13:92:33:95:0c:5a:a5:7d:2b:bf:5b:d6:20:
                    10:0e:5e:c7:48:89:c6:cd:e7:72:d6:b7:2c:65:b6:
                    db:ae:1a:0a:78:6b:99:eb:5f:01:53:06:32:e8:c0:
                    9e:3e:f4:f7:9e:e5:af:d7:72:2f:ce:3c:25:c8:09:
                    5f:01:05:81:24:bc:4f:79:cc:5c:5c:18:1d:ba:1b:
                    55:03:6c:e5:00:dc:ae:a2:11:02:e6:34:e5:4a:b0:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:14:EA:8A:14:33:B8:0E:83:ED:DE:CF:22:F8:A3:7A:77:3D:74:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/addb3c8a-9d14-35da-96af-ab093d3ddfa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b/2551cb31-e55c-4d6e-a523-619ecb2ac29b.crl

            X509v3 Authority Key Identifier:
                keyid:36:A6:FD:3F:31:37:25:A4:D8:F5:5F:9C:CC:9C:29:1F:2F:20:FD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2551cb31-e55c-4d6e-a523-619ecb2ac29b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e4:df:89:99:1d:cb:be:e2:6c:40:52:6d:9e:dc:b9:5a:32:
         5f:69:66:0b:f8:4c:8d:c7:7f:1a:fb:6c:e4:a2:45:52:cb:4b:
         df:4e:b7:32:d0:31:42:c9:7c:03:3d:cd:20:79:e0:d4:2b:ed:
         d9:17:46:87:24:6c:83:ef:08:fe:7c:ba:94:31:54:43:bb:ca:
         d4:d1:d2:86:6d:18:f2:9b:cd:11:45:b6:05:c6:73:7c:f3:53:
         fe:2d:12:da:43:58:f2:8f:0b:2e:22:74:85:24:5f:a1:5b:4f:
         7c:ee:94:d7:60:8a:52:7e:6e:51:07:66:be:39:77:06:8e:c5:
         12:88:9a:25:c9:e6:5a:bf:48:d6:e3:e4:14:24:47:64:3d:b7:
         c6:07:27:9f:9a:b0:45:07:c3:41:c6:d9:91:93:56:68:45:36:
         80:1f:93:94:8e:b0:84:11:e5:25:59:35:4f:c6:da:5f:31:14:
         16:7e:7b:7a:34:34:e6:35:98:47:be:e9:fb:e6:83:69:60:c8:
         99:0b:de:3c:96:cf:48:06:e2:10:d5:55:f5:77:07:c8:a4:ad:
         3e:7c:68:e5:c1:85:49:54:9f:23:02:47:13:77:93:cc:4b:8b:
         4a:63:c9:8b:80:d0:ac:19:ba:fd:db:5b:8a:8e:91:85:bc:a9:
         9e:d5:52:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMLnmblpRWqJMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU1MWNiMzEtZTU1Yy00ZDZlLWE1MjMtNjE5ZWNiMmFj
MjliMB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
ODgyNmUyMzAtNjA3OC00ZjAxLWE2YjItZTBlMTIwNzdkZjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwu3y9izWDJa8WGXatK+CXs+Av758micpWQN
8/rJzvi2YJTTPw/2NJf8UraQw7J6t3zq8kxuzYVS8e5/Klo8qxNW3wJmbgELbQYa
75TfVkOZgas56mVwPvmqSwnid8ekVyZJs8m1xSmMLJmPTwzgfY0vhEEI7r07v9lA
d7PpvAjS2szBRoEORpBEMc3POZcLu3c9IQGpohcGewO/5m2eJe+tKibZthOSM5UM
WqV9K79b1iAQDl7HSInGzedy1rcsZbbbrhoKeGuZ618BUwYy6MCePvT3nuWv13Iv
zjwlyAlfAQWBJLxPecxcXBgduhtVA2zlANyuohEC5jTlSrAkuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMgU6ooUM7gOg+3ezyL4o3p3PXQrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNTUx
Y2IzMS1lNTVjLTRkNmUtYTUyMy02MTllY2IyYWMyOWIvYWRkYjNjOGEtOWQxNC0z
NWRhLTk2YWYtYWIwOTNkM2RkZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjU1MWNiMzEtZTU1Yy00ZDZlLWE1
MjMtNjE5ZWNiMmFjMjliLzI1NTFjYjMxLWU1NWMtNGQ2ZS1hNTIzLTYxOWVjYjJh
YzI5Yi5jcmwwHwYDVR0jBBgwFoAUNqb9PzE3JaTY9V+czJwpHy8g/V8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNTUxY2IzMS1lNTVjLTRkNmUtYTUyMy02MTll
Y2IyYWMyOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeyPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/k34mZHcu+4mxAUm2e3LlaMl9pZgv4TI3Hfxr7bOSiRVLLS99OtzLQ
MULJfAM9zSB54NQr7dkXRockbIPvCP58upQxVEO7ytTR0oZtGPKbzRFFtgXGc3zz
U/4tEtpDWPKPCy4idIUkX6FbT3zulNdgilJ+blEHZr45dwaOxRKImiXJ5lq/SNbj
5BQkR2Q9t8YHJ5+asEUHw0HG2ZGTVmhFNoAfk5SOsIQR5SVZNU/G2l8xFBZ+e3o0
NOY1mEe+6fvmg2lgyJkL3jyWz0gG4hDVVfV3B8ikrT58aOXBhUlUnyMCRxN3k8xL
i0pjyYuA0KwZuv3bW4qOkYW8qZ7VUsE=
-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:29 2024 by rpki-client on console-fra.rpki-client.org