Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b0ee5c2b-2619-36f9-bd3d-0d1c9257f8b2.roa
File:                     b0ee5c2b-2619-36f9-bd3d-0d1c9257f8b2.roa (raw, json)
Hash identifier:          aN9LwqIXYP3A07wU/F/LND3TX8dHTjzQsFPTVYhW54A=
Subject key identifier:   04:EA:DE:00:42:DF:C7:98:4A:EC:A0:59:F8:57:F2:6E:9B:6F:FD:28
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285847F2BA357E32964BFB11AA6C80
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b0ee5c2b-2619-36f9-bd3d-0d1c9257f8b2.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     2559
IP address blocks:        198.241.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:35:7e:32:96:4b:fb:11:aa:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=df4aa670-837d-4518-9fec-1f99aeb456b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:c6:cf:ef:9b:56:06:53:e4:61:fb:7e:7a:
                    87:b4:a5:5a:aa:80:7f:af:e1:14:69:84:2f:b1:fc:
                    1f:f8:81:13:78:a2:c0:f2:cd:15:12:e0:5b:2d:ec:
                    06:3d:97:89:80:6b:8b:bc:e0:4f:f3:76:e3:15:62:
                    f0:44:6e:e4:a0:ca:48:0c:30:6a:ef:46:42:68:16:
                    6e:fd:7d:96:4b:2a:ff:2e:e8:6a:8c:ba:e0:02:ad:
                    74:6f:9b:00:2c:66:fe:e7:a6:0b:23:7e:44:da:69:
                    10:03:75:69:31:da:65:b0:00:f7:3c:25:0e:4a:4f:
                    2d:fb:ad:16:2a:b4:d7:df:34:c2:5a:56:d1:5e:8f:
                    19:30:aa:00:89:51:0c:cd:71:2e:2f:c0:e8:bd:6c:
                    7d:e9:02:65:26:0e:77:4f:97:e8:cb:34:d9:62:b2:
                    90:2a:e5:ad:d8:93:0b:33:73:1b:53:5d:21:d7:5b:
                    7c:aa:96:8e:49:0c:14:1b:19:d5:0c:b1:5f:22:98:
                    ee:37:72:9d:52:04:7f:3b:d0:f6:74:1e:97:98:6f:
                    af:59:0b:af:64:a5:6f:ab:cc:08:2d:02:7f:57:c3:
                    3a:32:65:3e:f5:7d:cd:1c:ad:29:9a:a5:43:74:fb:
                    d0:60:96:2f:49:0d:5f:70:56:37:21:de:dd:86:42:
                    93:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EA:DE:00:42:DF:C7:98:4A:EC:A0:59:F8:57:F2:6E:9B:6F:FD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b0ee5c2b-2619-36f9-bd3d-0d1c9257f8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:10:22:09:0b:2e:d4:ad:80:f9:23:0a:68:12:c2:24:01:7d:
         ee:e2:84:07:ad:4a:77:ed:ae:a9:df:69:b1:5c:d5:65:04:81:
         10:71:12:47:89:53:1f:59:a6:82:85:21:4f:1b:11:c7:7d:0d:
         b2:9f:bc:68:8a:a4:b8:e7:fa:ad:81:b1:20:db:2e:e6:04:03:
         f2:52:d7:04:5f:f5:7d:e8:59:f5:5b:90:d7:1a:fe:ca:fa:c0:
         a7:87:0a:b6:12:3e:bb:c0:25:11:8c:f1:b1:f0:ca:72:25:9b:
         67:c0:6d:01:5a:62:59:ea:32:4a:8d:27:cf:1d:13:e7:53:37:
         28:bf:c4:7f:d7:d8:fb:48:d6:0d:24:91:78:80:72:c4:ce:b8:
         ad:39:a9:56:26:1c:b6:3a:ae:5c:c5:21:a2:c2:af:48:f5:13:
         e6:49:47:6b:45:76:b3:bd:83:93:40:e5:1e:ca:7f:a3:78:b2:
         28:0e:5d:a1:c4:dd:39:73:f4:f6:a8:02:2c:20:c4:18:69:2c:
         bd:75:89:70:9d:87:f2:e5:21:43:39:f4:7f:4f:43:84:f5:cf:
         5d:bc:44:e3:c9:ff:34:1f:7a:28:94:ea:0f:8b:7f:80:b0:10:
         c1:96:d5:3b:d1:1d:84:5b:2b:2f:1b:7a:a1:ab:e9:be:3b:cd:
         48:9f:4e:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyujV+MpZL+xGqbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk
ZGY0YWE2NzAtODM3ZC00NTE4LTlmZWMtMWY5OWFlYjQ1NmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4XGz++bVgZT5GH7fnqHtKVaqoB/r+EUaYQv
sfwf+IETeKLA8s0VEuBbLewGPZeJgGuLvOBP83bjFWLwRG7koMpIDDBq70ZCaBZu
/X2WSyr/LuhqjLrgAq10b5sALGb+56YLI35E2mkQA3VpMdplsAD3PCUOSk8t+60W
KrTX3zTCWlbRXo8ZMKoAiVEMzXEuL8DovWx96QJlJg53T5foyzTZYrKQKuWt2JML
M3MbU10h11t8qpaOSQwUGxnVDLFfIpjuN3KdUgR/O9D2dB6XmG+vWQuvZKVvq8wI
LQJ/V8M6MmU+9X3NHK0pmqVDdPvQYJYvSQ1fcFY3Id7dhkKTdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATq3gBC38eYSuygWfhX8m6bb/0oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvYjBlZTVjMmItMjYxOS0z
NmY5LWJkM2QtMGQxYzkyNTdmOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoQIgkLLtStgPkjCmgSwiQBfe7ihAetSnftrqnfabFc1WUEgRBxEkeJ
Ux9ZpoKFIU8bEcd9DbKfvGiKpLjn+q2BsSDbLuYEA/JS1wRf9X3oWfVbkNca/sr6
wKeHCrYSPrvAJRGM8bHwynIlm2fAbQFaYlnqMkqNJ88dE+dTNyi/xH/X2PtI1g0k
kXiAcsTOuK05qVYmHLY6rlzFIaLCr0j1E+ZJR2tFdrO9g5NA5R7Kf6N4sigOXaHE
3Tlz9PaoAiwgxBhpLL11iXCdh/LlIUM59H9PQ4T1z128ROPJ/zQfeiiU6g+Lf4Cw
EMGW1TvRHYRbKy8beqGr6b47zUifTpk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org