Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/8bc94d77-81f1-31f2-9793-8b8c39aec503.roa
File:                     8bc94d77-81f1-31f2-9793-8b8c39aec503.roa (raw, json)
Hash identifier:          /sQPHTKnAn/PHbiX4BHB+U+hcZ03hI6MCEGm9spMWZI=
Subject key identifier:   66:92:B0:15:E1:89:3A:53:2B:9C:71:BE:57:3C:AA:A0:D0:AE:63:A1
Certificate issuer:       /CN=5c6c3a7f-86b7-4f9a-b2ab-04c827927389
Certificate serial:       010D0C9F43285847E094C2634ACEDF46D9B33260
Authority key identifier: 93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/8bc94d77-81f1-31f2-9793-8b8c39aec503.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        67.202.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c2:63:4a:ce:df:46:d9:b3:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c6c3a7f-86b7-4f9a-b2ab-04c827927389
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=ea725049-ca2d-4b97-a3d6-6dccfffe64c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:88:6e:6d:76:9f:20:c6:84:b3:c2:83:e6:
                    70:29:7a:ef:be:96:4e:6a:5b:98:68:a4:9d:92:df:
                    10:1b:66:bf:9a:56:0e:0d:2a:1b:68:d1:da:66:96:
                    9d:fb:b0:9d:da:23:2f:8c:07:59:b8:45:d8:37:45:
                    98:8f:b3:90:4f:60:64:cb:18:72:d7:0c:2a:a6:5e:
                    2f:04:32:61:94:c4:cb:ec:e3:ae:df:d0:99:22:01:
                    c8:ec:58:46:fe:e9:71:e3:a0:7a:6b:ea:5c:6c:18:
                    fd:a0:ec:ea:44:72:c5:0d:56:c8:86:7d:2d:6e:59:
                    ae:4e:d6:6c:e1:4a:a3:d8:64:d9:9b:0a:85:aa:7a:
                    64:5f:c5:4f:7d:65:f8:7c:41:20:ac:bc:de:f5:b4:
                    77:5c:e7:50:cb:00:ec:e6:d8:e6:f7:f5:c2:a9:cd:
                    11:0e:a3:26:d8:3e:3f:6b:c9:4c:9c:93:8b:d9:dc:
                    a3:29:92:ea:7b:22:2f:45:06:89:b4:b1:76:43:aa:
                    d4:eb:6c:d9:6e:cf:82:15:3a:b8:c9:58:95:cb:0a:
                    c0:1e:65:47:9e:60:d8:ee:2b:58:30:d3:41:a2:70:
                    d8:ce:55:c6:29:22:c4:32:3b:9f:41:e4:c0:83:7e:
                    46:90:47:7d:6a:29:37:8f:d7:dd:26:36:14:75:5a:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:92:B0:15:E1:89:3A:53:2B:9C:71:BE:57:3C:AA:A0:D0:AE:63:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/8bc94d77-81f1-31f2-9793-8b8c39aec503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.crl

            X509v3 Authority Key Identifier:
                keyid:93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.202.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:25:59:7d:c8:10:46:ab:38:88:d5:5c:a7:92:44:c7:eb:f5:
         da:04:47:c3:c5:65:1c:10:16:d8:c6:18:f9:78:4d:64:f9:1a:
         30:e3:c3:18:59:97:4a:52:b1:c3:8b:11:74:77:4e:5e:09:56:
         06:8a:8f:1b:e5:36:4a:64:7c:31:62:6c:96:12:e4:cb:ca:24:
         cf:12:68:34:15:5d:77:a8:c3:b8:1d:ed:77:43:de:28:44:7a:
         11:82:52:ae:76:1a:28:29:b6:08:ae:da:ea:f6:10:77:3f:1c:
         15:a7:2f:26:aa:9e:cc:f2:12:2f:03:43:7f:38:27:b6:28:73:
         9c:32:a4:3f:7f:5d:37:6b:00:9d:04:6d:08:9e:01:17:52:a9:
         2d:a8:03:2d:a1:e7:4a:51:e6:47:fa:20:ce:2d:9c:c0:24:a4:
         4a:47:96:c7:4b:50:0f:9b:d6:64:d9:40:15:e5:dc:fc:a6:9a:
         b9:4f:93:5e:c0:83:20:0f:67:f6:4d:cc:3b:6c:93:53:4a:7c:
         e4:54:67:9d:e6:ae:ef:c8:ac:aa:d1:df:c2:f1:21:85:1b:0c:
         68:32:4c:96:fa:a6:96:47:49:3a:ce:4b:64:b7:ef:27:5f:6f:
         50:4e:12:1d:97:07:3b:b8:b7:21:17:8e:ff:5b:9a:79:ce:bb:
         22:96:ec:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfglMJjSs7fRtmzMmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM2YzNhN2YtODZiNy00ZjlhLWIyYWItMDRjODI3OTI3
Mzg5MB4XDTI0MTExNDE0MDA0MFoXDTI1MDIxMjE0MDA0MFowLzEtMCsGA1UEAxMk
ZWE3MjUwNDktY2EyZC00Yjk3LWEzZDYtNmRjY2ZmZmU2NGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOeIbm12nyDGhLPCg+ZwKXrvvpZOaluYaKSd
kt8QG2a/mlYODSobaNHaZpad+7Cd2iMvjAdZuEXYN0WYj7OQT2Bkyxhy1wwqpl4v
BDJhlMTL7OOu39CZIgHI7FhG/ulx46B6a+pcbBj9oOzqRHLFDVbIhn0tblmuTtZs
4Uqj2GTZmwqFqnpkX8VPfWX4fEEgrLze9bR3XOdQywDs5tjm9/XCqc0RDqMm2D4/
a8lMnJOL2dyjKZLqeyIvRQaJtLF2Q6rU62zZbs+CFTq4yViVywrAHmVHnmDY7itY
MNNBonDYzlXGKSLEMjufQeTAg35GkEd9aik3j9fdJjYUdVo3lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGaSsBXhiTpTK5xxvlc8qqDQrmOhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YzZj
M2E3Zi04NmI3LTRmOWEtYjJhYi0wNGM4Mjc5MjczODkvOGJjOTRkNzctODFmMS0z
MWYyLTk3OTMtOGI4YzM5YWVjNTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWM2YzNhN2YtODZiNy00ZjlhLWIy
YWItMDRjODI3OTI3Mzg5LzVjNmMzYTdmLTg2YjctNGY5YS1iMmFiLTA0YzgyNzky
NzM4OS5jcmwwHwYDVR0jBBgwFoAUk0/AaA+2c0QL0CXrY8fnzwrdAFEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81YzZjM2E3Zi04NmI3LTRmOWEtYjJhYi0wNGM4
Mjc5MjczODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8rVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQlWX3IEEarOIjVXKeSRMfr9doER8PFZRwQFtjGGPl4TWT5GjDjwxhZ
l0pSscOLEXR3Tl4JVgaKjxvlNkpkfDFibJYS5MvKJM8SaDQVXXeow7gd7XdD3ihE
ehGCUq52Gigptgiu2ur2EHc/HBWnLyaqnszyEi8DQ384J7Yoc5wypD9/XTdrAJ0E
bQieARdSqS2oAy2h50pR5kf6IM4tnMAkpEpHlsdLUA+b1mTZQBXl3PymmrlPk17A
gyAPZ/ZNzDtsk1NKfORUZ53mru/IrKrR38LxIYUbDGgyTJb6ppZHSTrOS2S37ydf
b1BOEh2XBzu4tyEXjv9bmnnOuyKW7CY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org