Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/8ba577fa-5e4f-32a7-9ac9-814014b1deb6.roa
File:                     8ba577fa-5e4f-32a7-9ac9-814014b1deb6.roa (raw, json)
Hash identifier:          d2Dncpxp4un1Dsd6jOzFm9sZZ56CxxZE7bK97OAiZzE=
Subject key identifier:   2C:CC:6E:5A:81:35:00:DA:27:4F:7D:21:19:92:84:3B:4E:D8:65:8F
Certificate issuer:       /CN=69074f8b-bb58-4f2e-b2c3-2f7de91f9243
Certificate serial:       010D0C9F43285847B5314F531093861EE67795C0
Authority key identifier: 48:BF:36:FF:4E:11:29:7B:66:1B:71:7E:BA:DE:00:D8:15:78:27:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/8ba577fa-5e4f-32a7-9ac9-814014b1deb6.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     397735
IP address blocks:        216.176.40.0/24 maxlen: 24
                          216.176.41.0/24 maxlen: 24
                          216.176.42.0/24 maxlen: 24
                          216.176.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:4f:53:10:93:86:1e:e6:77:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69074f8b-bb58-4f2e-b2c3-2f7de91f9243
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=d1de04a5-0561-4e41-aee5-160657ae562e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:ae:69:be:65:68:1d:f0:bc:f7:a5:87:99:
                    f0:ec:dc:d6:c3:f0:1c:b4:46:dd:e9:f2:39:99:d8:
                    b7:1a:c1:4b:c8:72:44:20:8c:2e:cf:b4:79:a9:c2:
                    39:07:ae:9d:21:91:68:c0:f0:76:dd:6f:ab:87:40:
                    d1:a3:ed:56:63:7d:71:a8:57:5d:6f:a4:3a:1a:10:
                    ae:1e:71:8a:90:a0:98:f5:50:8c:3c:0b:8f:10:2e:
                    31:ff:da:00:3b:0d:f0:c5:9d:7f:d1:83:6d:5b:60:
                    c1:f5:8b:b9:ed:5a:55:4c:60:39:df:64:90:a9:80:
                    c0:3d:c6:14:e1:f2:e5:8c:4f:29:8d:5f:e7:1d:15:
                    54:14:99:ee:fe:83:70:c5:25:b3:2c:57:c5:f9:3d:
                    48:f6:c7:8a:f1:12:a0:9e:a3:64:3a:e9:00:23:5f:
                    a7:e9:3f:26:fb:a2:61:7e:cf:6d:fa:6b:b9:50:84:
                    3e:31:b0:98:dd:88:a1:d7:2b:3c:a6:f5:ed:e3:b1:
                    2c:55:fd:f6:54:43:32:31:3e:a3:01:12:43:33:06:
                    5f:18:fc:d6:b7:ac:2d:3b:05:f9:b0:70:f5:8b:b0:
                    d2:79:18:0d:be:b4:df:fa:d5:f1:50:28:91:90:84:
                    69:a1:83:22:30:80:9f:89:2c:30:58:42:67:83:13:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:6E:5A:81:35:00:DA:27:4F:7D:21:19:92:84:3B:4E:D8:65:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/8ba577fa-5e4f-32a7-9ac9-814014b1deb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.crl

            X509v3 Authority Key Identifier:
                keyid:48:BF:36:FF:4E:11:29:7B:66:1B:71:7E:BA:DE:00:D8:15:78:27:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/69074f8b-bb58-4f2e-b2c3-2f7de91f9243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.176.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a2:5c:2e:6c:bd:f2:59:22:03:5a:b0:3c:8b:dc:7a:4d:57:
         70:41:b0:6e:ae:17:aa:78:31:61:97:fa:3a:a5:da:3c:a3:cf:
         62:1f:7a:5b:98:9b:27:ad:c8:cf:5d:ea:a2:df:0a:e3:97:31:
         b5:4d:28:32:0e:8a:92:87:d6:05:34:64:26:15:2e:98:96:0d:
         f9:02:24:51:85:fa:4d:62:72:a1:0d:b4:e7:4c:c8:40:3b:67:
         fd:e3:90:d3:ea:7a:7d:f8:40:79:ca:1e:ca:5a:ac:71:ec:86:
         02:bf:89:38:ab:83:8d:c8:ff:7d:1e:bc:6e:2d:b4:82:64:9f:
         47:56:93:15:5d:19:47:ee:5e:e8:9c:28:61:09:82:b0:e1:b8:
         85:c6:66:84:2d:b8:08:d8:71:e7:11:5a:39:85:75:6c:60:f2:
         f8:4b:92:e4:23:90:35:16:aa:e9:9e:7e:af:a6:84:c2:ba:84:
         e5:23:17:a0:3c:2c:53:91:4f:3a:98:da:9a:c3:94:b7:ea:db:
         db:c7:fd:7b:ae:d9:62:dd:01:ac:78:a5:a4:58:fd:29:c9:1f:
         4c:9e:37:49:29:b7:e1:ac:64:73:8d:05:78:53:9e:a1:6e:d3:
         33:89:80:af:58:d3:db:0a:1e:51:87:76:86:d9:26:3e:64:6e:
         5e:3e:b1:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe1MU9TEJOGHuZ3lcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjkwNzRmOGItYmI1OC00ZjJlLWIyYzMtMmY3ZGU5MWY5
MjQzMB4XDTI0MTAzMDAxMDAzMloXDTI1MDEyODAyMDAzMlowLzEtMCsGA1UEAxMk
ZDFkZTA0YTUtMDU2MS00ZTQxLWFlZTUtMTYwNjU3YWU1NjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpOuab5laB3wvPelh5nw7NzWw/ActEbd6fI5
mdi3GsFLyHJEIIwuz7R5qcI5B66dIZFowPB23W+rh0DRo+1WY31xqFddb6Q6GhCu
HnGKkKCY9VCMPAuPEC4x/9oAOw3wxZ1/0YNtW2DB9Yu57VpVTGA532SQqYDAPcYU
4fLljE8pjV/nHRVUFJnu/oNwxSWzLFfF+T1I9seK8RKgnqNkOukAI1+n6T8m+6Jh
fs9t+mu5UIQ+MbCY3Yih1ys8pvXt47EsVf32VEMyMT6jARJDMwZfGPzWt6wtOwX5
sHD1i7DSeRgNvrTf+tXxUCiRkIRpoYMiMICfiSwwWEJngxOEdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzMblqBNQDaJ099IRmShDtO2GWPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OTA3
NGY4Yi1iYjU4LTRmMmUtYjJjMy0yZjdkZTkxZjkyNDMvOGJhNTc3ZmEtNWU0Zi0z
MmE3LTlhYzktODE0MDE0YjFkZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjkwNzRmOGItYmI1OC00ZjJlLWIy
YzMtMmY3ZGU5MWY5MjQzLzY5MDc0ZjhiLWJiNTgtNGYyZS1iMmMzLTJmN2RlOTFm
OTI0My5jcmwwHwYDVR0jBBgwFoAUSL82/04RKXtmG3F+ut4A2BV4J8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82OTA3NGY4Yi1iYjU4LTRmMmUtYjJjMy0yZjdk
ZTkxZjkyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2LAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACiiXC5svfJZIgNasDyL3HpNV3BBsG6uF6p4MWGX+jql2jyjz2IfeluY
myetyM9d6qLfCuOXMbVNKDIOipKH1gU0ZCYVLpiWDfkCJFGF+k1icqENtOdMyEA7
Z/3jkNPqen34QHnKHsparHHshgK/iTirg43I/30evG4ttIJkn0dWkxVdGUfuXuic
KGEJgrDhuIXGZoQtuAjYcecRWjmFdWxg8vhLkuQjkDUWqumefq+mhMK6hOUjF6A8
LFORTzqY2prDlLfq29vH/Xuu2WLdAax4paRY/SnJH0yeN0kpt+GsZHONBXhTnqFu
0zOJgK9Y09sKHlGHdobZJj5kbl4+sao=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org