Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa
File:                     4280c96f-e83c-3483-a3d8-84f727a16bb3.roa (raw, json)
Hash identifier:          KinPfZhavhgLDoPRGv4ATWY0dzUpCWgoHmogCHGizFU=
Subject key identifier:   9A:DD:82:4D:31:C7:A3:2F:75:AF:F9:1D:1F:1D:31:1F:8C:61:85:2F
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858471DAEA8205F194948284A4C00
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa
Signing time:             Thu 05 Sep 2024 18:30:18 +0000
ROA not before:           Thu 05 Sep 2024 18:30:18 +0000
ROA not after:            Wed 04 Dec 2024 19:30:18 +0000
asID:                     2559
IP address blocks:        198.241.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:ae:a8:20:5f:19:49:48:28:4a:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep  5 18:30:18 2024 GMT
            Not After : Dec  4 19:30:18 2024 GMT
        Subject: CN=6e286bb7-76a5-4001-9590-776b99f6bb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:f2:9a:29:80:f0:f3:25:35:42:3c:4f:da:
                    84:ba:bf:cf:90:fb:c8:89:6b:3e:f8:a4:f7:0b:27:
                    d4:e6:3b:f8:c5:c0:0c:69:d0:8a:a0:33:d7:d8:98:
                    0f:3f:bb:0a:20:80:85:c0:9f:bf:ab:bc:37:7f:11:
                    ae:a3:fe:a2:f4:d1:ac:fe:f2:d9:44:b8:c9:fc:2c:
                    3e:2f:73:04:ed:34:6f:bb:de:2a:22:9c:25:d9:37:
                    bb:eb:c3:6b:36:c4:f9:9e:7a:1a:7e:bb:fc:11:c5:
                    dd:de:a6:2c:20:01:5e:c4:1a:b1:de:94:54:93:63:
                    7b:f4:68:e5:79:18:dd:db:60:60:b1:f6:1e:46:9a:
                    ca:c8:89:53:d4:bb:92:d6:18:b7:2b:85:1c:0d:02:
                    ad:e8:4f:83:b4:69:32:61:25:39:1e:c2:3b:4b:bd:
                    e7:71:d4:b3:be:53:72:16:e3:78:e9:a8:ad:0c:d5:
                    95:72:1b:bb:2f:79:ae:8d:56:87:1e:cb:d3:ac:39:
                    c9:21:4b:33:10:98:94:3e:0a:5d:79:24:37:06:16:
                    fb:8a:77:c2:94:47:a8:67:62:00:61:c2:58:11:28:
                    f8:6d:70:4d:58:26:4e:99:0b:91:48:9c:14:a0:67:
                    db:7b:7e:2c:85:5a:0e:67:a4:bf:ee:2b:57:a1:20:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DD:82:4D:31:C7:A3:2F:75:AF:F9:1D:1F:1D:31:1F:8C:61:85:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e3:1d:1d:92:b2:d5:f7:0c:4a:eb:3c:a8:e5:e7:c6:bd:e6:
         f9:91:ca:35:c5:74:92:5a:e5:dd:7a:ce:f1:d4:ab:d9:5f:10:
         3d:a4:2f:e3:19:f5:70:b6:d4:3a:81:5d:a5:90:10:b8:43:b2:
         a4:fb:03:5e:72:d4:0b:ce:3e:22:00:28:a9:35:68:e6:91:45:
         15:78:bb:07:01:6b:6c:5e:98:c2:68:43:13:a5:95:fa:f8:be:
         39:20:b5:12:98:5c:01:3f:c5:71:96:3d:9d:8b:7c:ae:2b:7a:
         ca:8f:19:d5:82:7b:14:dd:0d:d1:78:f1:18:5e:ca:8b:15:66:
         5a:7b:05:40:9d:bb:d4:ac:c5:62:a7:b6:61:ec:83:d3:71:84:
         53:fa:a3:67:8c:f9:d4:a5:4d:3c:0f:18:c2:5d:14:9c:65:10:
         09:ed:11:75:c0:0b:3c:80:10:97:16:5b:a0:f1:f2:9a:06:6b:
         a5:cf:59:91:42:7f:f3:e9:6f:a8:a2:d7:3d:a0:74:79:3b:0d:
         ac:0e:9f:d1:45:07:3f:c0:a7:12:63:e1:45:f8:f1:b0:50:99:
         8f:a3:bc:20:c8:66:d0:af:5a:50:b5:c3:77:20:75:48:7d:8c:
         5d:44:4c:81:b1:0c:af:90:e8:69:93:e5:95:9c:4f:39:1f:0a:
         8c:27:5d:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcdrqggXxlJSChKTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI0MDkwNTE4MzAxOFoXDTI0MTIwNDE5MzAxOFowLzEtMCsGA1UEAxMk
NmUyODZiYjctNzZhNS00MDAxLTk1OTAtNzc2Yjk5ZjZiYjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5XymimA8PMlNUI8T9qEur/PkPvIiWs++KT3
CyfU5jv4xcAMadCKoDPX2JgPP7sKIICFwJ+/q7w3fxGuo/6i9NGs/vLZRLjJ/Cw+
L3ME7TRvu94qIpwl2Te768NrNsT5nnoafrv8EcXd3qYsIAFexBqx3pRUk2N79Gjl
eRjd22BgsfYeRprKyIlT1LuS1hi3K4UcDQKt6E+DtGkyYSU5HsI7S73ncdSzvlNy
FuN46aitDNWVchu7L3mujVaHHsvTrDnJIUszEJiUPgpdeSQ3Bhb7infClEeoZ2IA
YcJYESj4bXBNWCZOmQuRSJwUoGfbe34shVoOZ6S/7itXoSCIzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrdgk0xx6Mvda/5HR8dMR+MYYUvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvNDI4MGM5NmYtZTgzYy0z
NDgzLWEzZDgtODRmNzI3YTE2YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfjHR2SstX3DErrPKjl58a95vmRyjXFdJJa5d16zvHUq9lfED2kL+MZ
9XC21DqBXaWQELhDsqT7A15y1AvOPiIAKKk1aOaRRRV4uwcBa2xemMJoQxOllfr4
vjkgtRKYXAE/xXGWPZ2LfK4resqPGdWCexTdDdF48RheyosVZlp7BUCdu9SsxWKn
tmHsg9NxhFP6o2eM+dSlTTwPGMJdFJxlEAntEXXACzyAEJcWW6Dx8poGa6XPWZFC
f/Ppb6ii1z2gdHk7DawOn9FFBz/ApxJj4UX48bBQmY+jvCDIZtCvWlC1w3cgdUh9
jF1ETIGxDK+Q6GmT5ZWcTzkfCownXXY=
-----END CERTIFICATE-----
Generated at Thu Sep 19 21:29:16 2024 by rpki-client on console-fra.rpki-client.org