Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/3d0945a8-c988-333e-aa31-0b225912658d.roa
File:                     3d0945a8-c988-333e-aa31-0b225912658d.roa (raw, json)
Hash identifier:          WPPjtbXnNXvdHLwpa1nOi9pKksOkbWyNJ83yy/+aQfo=
Subject key identifier:   52:46:2C:23:A2:59:1E:45:A5:34:CA:CD:35:A6:AE:F4:FB:5C:40:87
Certificate issuer:       /CN=60200506-e0ba-4a7d-b096-a86957fd76ee
Certificate serial:       010D0C9F4328584797E1490B39D75FAA3A9EAA00
Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/3d0945a8-c988-333e-aa31-0b225912658d.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     32157
IP address blocks:        199.212.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:49:0b:39:d7:5f:aa:3a:9e:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=feaf500c-6a60-4171-aef8-3634e6de89fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:29:ad:c8:7c:ed:37:b4:31:e8:4a:14:1d:
                    09:7c:b2:cd:ef:6a:a9:b1:74:5e:7e:42:1a:de:4c:
                    15:c6:b9:25:5b:83:a1:01:f4:23:9f:a0:23:a1:16:
                    b4:58:b1:47:0a:8b:6c:8c:d8:ed:e6:4d:66:c4:aa:
                    af:f5:dd:6f:7e:b7:24:47:11:ee:72:ac:53:73:56:
                    f3:f0:93:ae:61:2b:bb:95:f3:83:61:36:46:ec:be:
                    2d:8c:24:45:08:5b:50:35:db:67:50:aa:59:e1:d8:
                    84:c6:a7:b4:ef:72:5a:52:b8:01:ee:44:ef:5b:ac:
                    2e:8a:bf:47:31:75:00:5e:15:5f:bb:70:3a:52:f1:
                    2e:38:34:09:75:d5:aa:d8:78:6b:c3:45:78:bf:bc:
                    ac:14:02:b4:ee:71:f1:1c:31:9a:b1:b2:9a:c6:0c:
                    cb:aa:c4:7c:38:f0:23:82:65:98:85:80:15:ee:26:
                    0c:f6:e8:c0:f8:db:8d:87:99:3e:b9:5a:d8:2f:da:
                    3e:ae:26:de:6b:20:03:6d:e0:45:a8:5a:30:75:5a:
                    fd:ad:a9:60:b0:2b:d3:b0:c2:a3:d4:20:f7:7b:d6:
                    08:d6:c8:38:a8:03:b0:90:94:72:63:f5:f2:43:a7:
                    ae:33:ee:93:24:e9:3f:7f:1a:a9:09:87:0d:46:ec:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:2C:23:A2:59:1E:45:A5:34:CA:CD:35:A6:AE:F4:FB:5C:40:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/3d0945a8-c988-333e-aa31-0b225912658d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl

            X509v3 Authority Key Identifier:
                keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:09:ed:7e:11:78:45:63:5b:06:f9:a6:c4:7b:b7:29:53:10:
         91:d5:e7:96:78:a4:41:ff:49:ec:ef:4a:bd:7a:cb:65:71:fc:
         2e:29:83:2e:5d:1f:94:ca:7a:df:bd:3e:cf:77:f8:a4:13:f1:
         b1:14:f9:d7:f6:80:75:72:f9:c1:7a:f2:90:fa:bc:94:27:d8:
         69:e7:80:83:f7:cf:0d:99:ca:33:07:57:c7:4c:b7:1c:77:83:
         93:29:02:75:1f:d9:2f:5e:48:05:6d:4b:42:99:18:44:eb:43:
         8e:f3:f6:71:69:f4:c5:75:42:13:a8:a0:42:10:bf:fa:d4:b8:
         86:fd:11:16:11:04:5a:21:5f:66:40:77:70:7b:c1:0e:6d:f5:
         54:62:e1:f1:3d:82:ea:f0:a5:ed:48:3f:b9:df:f2:97:fa:56:
         26:ca:13:ac:e9:0f:0e:37:ad:99:d8:00:a2:b3:52:0b:9a:60:
         de:9b:ff:e0:e3:fd:83:ad:3d:47:48:96:db:dd:b0:e6:e3:1b:
         65:57:ca:43:ef:fb:e0:0a:55:aa:09:73:7c:93:89:92:fa:0a:
         f0:c5:ce:8c:b3:ee:51:75:57:c0:65:e3:8f:a5:12:32:c1:ab:
         49:09:1b:68:8a:41:98:6c:47:7e:eb:72:d8:0d:1a:c3:fd:d5:
         ed:b4:87:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4UkLOddfqjqeqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAyMDA1MDYtZTBiYS00YTdkLWIwOTYtYTg2OTU3ZmQ3
NmVlMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk
ZmVhZjUwMGMtNmE2MC00MTcxLWFlZjgtMzYzNGU2ZGU4OWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgkprch87Te0MehKFB0JfLLN72qpsXRefkIa
3kwVxrklW4OhAfQjn6AjoRa0WLFHCotsjNjt5k1mxKqv9d1vfrckRxHucqxTc1bz
8JOuYSu7lfODYTZG7L4tjCRFCFtQNdtnUKpZ4diExqe073JaUrgB7kTvW6wuir9H
MXUAXhVfu3A6UvEuODQJddWq2Hhrw0V4v7ysFAK07nHxHDGasbKaxgzLqsR8OPAj
gmWYhYAV7iYM9ujA+NuNh5k+uVrYL9o+ribeayADbeBFqFowdVr9ralgsCvTsMKj
1CD3e9YI1sg4qAOwkJRyY/XyQ6euM+6TJOk/fxqpCYcNRuyD+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJGLCOiWR5FpTTKzTWmrvT7XECHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MDIw
MDUwNi1lMGJhLTRhN2QtYjA5Ni1hODY5NTdmZDc2ZWUvM2QwOTQ1YTgtYzk4OC0z
MzNlLWFhMzEtMGIyMjU5MTI2NThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjAyMDA1MDYtZTBiYS00YTdkLWIw
OTYtYTg2OTU3ZmQ3NmVlLzYwMjAwNTA2LWUwYmEtNGE3ZC1iMDk2LWE4Njk1N2Zk
NzZlZS5jcmwwHwYDVR0jBBgwFoAUzkPt/aKXrQBq5Zwm4d+sl4zfpTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82MDIwMDUwNi1lMGJhLTRhN2QtYjA5Ni1hODY5
NTdmZDc2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9QgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEJ7X4ReEVjWwb5psR7tylTEJHV55Z4pEH/SezvSr16y2Vx/C4pgy5d
H5TKet+9Ps93+KQT8bEU+df2gHVy+cF68pD6vJQn2GnngIP3zw2ZyjMHV8dMtxx3
g5MpAnUf2S9eSAVtS0KZGETrQ47z9nFp9MV1QhOooEIQv/rUuIb9ERYRBFohX2ZA
d3B7wQ5t9VRi4fE9gurwpe1IP7nf8pf6VibKE6zpDw43rZnYAKKzUguaYN6b/+Dj
/YOtPUdIltvdsObjG2VXykPv++AKVaoJc3yTiZL6CvDFzoyz7lF1V8Bl44+lEjLB
q0kJG2iKQZhsR37rctgNGsP91e20h6w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org