Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/c0c5117f-cc03-33be-8166-92d8efd6151b.roa
File:                     c0c5117f-cc03-33be-8166-92d8efd6151b.roa (raw, json)
Hash identifier:          hUrpj/x2oGF/X4L/d6qUkqlUB/QUYWMtbR3XMd3XJDc=
Subject key identifier:   05:B5:58:B4:3B:04:36:33:6F:6A:50:62:D0:F1:3A:7E:5E:BA:CE:7D
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F432858478CB6931BA9548B2D88588680
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/c0c5117f-cc03-33be-8166-92d8efd6151b.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     20148
IP address blocks:        205.143.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:93:1b:a9:54:8b:2d:88:58:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=868270a7-ad83-437b-92d5-d4418c3ed7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:b3:12:7d:66:9e:68:1f:87:61:b6:41:7c:
                    d2:5e:38:fe:0e:ca:68:4d:de:bd:2c:e9:6b:65:5c:
                    52:6b:6c:ea:60:ed:44:a2:87:1e:f8:f9:cd:11:bb:
                    83:0d:8d:1a:d0:05:1c:61:7a:48:0a:1d:a9:c5:6a:
                    f3:85:c6:5c:ed:a6:10:3c:97:fb:64:71:0b:52:96:
                    76:fd:b3:e3:71:b8:9e:4a:27:f5:ea:ff:76:55:61:
                    6f:fb:fc:bd:b0:24:f9:f9:99:ff:09:70:87:b9:3b:
                    3c:89:73:7b:fd:91:1a:d7:7c:fe:d8:b2:b4:0f:3b:
                    3e:b5:aa:64:3d:51:eb:5c:92:87:1d:6d:5d:38:b5:
                    d3:7d:d9:93:01:54:26:df:fd:3b:15:08:be:79:f3:
                    45:8d:c7:a7:eb:fc:9d:a1:47:c1:92:f4:ee:fd:b5:
                    c1:f2:7d:c4:bd:82:fd:f6:90:d6:fe:83:fb:a3:1b:
                    87:2b:e2:f9:dd:36:91:9c:38:d1:e2:3d:08:2e:7c:
                    32:61:29:b1:36:7b:f6:37:f4:b3:bf:55:44:e1:3a:
                    e5:fd:14:bb:db:49:66:ed:b4:4d:71:f8:0e:bc:30:
                    05:4d:d0:a7:26:f7:01:d5:0b:73:09:dd:87:77:3f:
                    14:50:a7:ae:af:02:52:b2:2e:80:8f:d0:ef:af:0f:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B5:58:B4:3B:04:36:33:6F:6A:50:62:D0:F1:3A:7E:5E:BA:CE:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/c0c5117f-cc03-33be-8166-92d8efd6151b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:09:f4:3e:2e:ba:68:45:50:4e:2c:5b:47:6d:ce:1c:9f:38:
         59:b7:77:a5:7c:e0:8c:03:62:2a:e2:32:b8:92:0d:26:f8:ee:
         e9:8c:09:e6:9b:fa:ac:9b:32:18:c7:97:b6:9b:21:36:a3:8d:
         85:a7:f7:e5:5e:67:2c:67:4a:76:0c:00:d8:85:e7:f5:d9:1e:
         d0:e5:a5:5e:bf:55:40:68:6f:28:58:be:8c:27:84:5a:10:ec:
         6e:a2:63:16:8d:ac:45:7c:15:e9:33:cc:27:bb:d9:e0:d7:30:
         17:bf:fc:88:4f:e8:ef:c7:a2:a1:ac:20:f9:dd:d2:2c:43:a7:
         f5:a0:e3:30:47:7c:33:c6:54:e9:0c:4c:b7:29:e3:75:e6:bc:
         8a:0e:05:9b:bf:37:35:3b:ef:a0:b8:be:f5:2e:1a:80:79:fd:
         8e:a7:cc:03:39:57:95:58:3a:1a:82:43:5e:b8:df:3a:6d:5c:
         3d:d9:e2:cb:df:db:bb:a9:6d:13:d6:d2:3b:c6:5c:1f:ac:26:
         a8:ef:f2:c2:42:52:3a:48:f8:3a:d5:97:23:63:41:8b:23:87:
         2e:70:cd:1c:73:58:46:39:c4:42:60:d6:79:26:86:97:98:96:
         fe:fd:2f:fc:69:3f:15:be:db:50:49:8e:2e:21:66:0a:9b:f9:
         aa:5f:04:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtpMbqVSLLYhYhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxYmZiOWQtM2NlNS00ZmEwLTg3YTItNzM1M2VlOGNj
MjljMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
ODY4MjcwYTctYWQ4My00MzdiLTkyZDUtZDQ0MThjM2VkN2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaWzEn1mnmgfh2G2QXzSXjj+DspoTd69LOlr
ZVxSa2zqYO1Eooce+PnNEbuDDY0a0AUcYXpICh2pxWrzhcZc7aYQPJf7ZHELUpZ2
/bPjcbieSif16v92VWFv+/y9sCT5+Zn/CXCHuTs8iXN7/ZEa13z+2LK0Dzs+tapk
PVHrXJKHHW1dOLXTfdmTAVQm3/07FQi+efNFjcen6/ydoUfBkvTu/bXB8n3EvYL9
9pDW/oP7oxuHK+L53TaRnDjR4j0ILnwyYSmxNnv2N/Szv1VE4Trl/RS720lm7bRN
cfgOvDAFTdCnJvcB1QtzCd2Hdz8UUKeurwJSsi6Aj9Dvrw+ZQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAW1WLQ7BDYzb2pQYtDxOn5eus59MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFi
ZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4Y2MyOWMvYzBjNTExN2YtY2MwMy0z
M2JlLTgxNjYtOTJkOGVmZDYxNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmIxYmZiOWQtM2NlNS00ZmEwLTg3
YTItNzM1M2VlOGNjMjljLzZiMWJmYjlkLTNjZTUtNGZhMC04N2EyLTczNTNlZThj
YzI5Yy5jcmwwHwYDVR0jBBgwFoAUiZ7PjIFhGc30CeRkoLh5rVZXgTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUz
ZWU4Y2MyOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzY/EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsJ9D4uumhFUE4sW0dtzhyfOFm3d6V84IwDYiriMriSDSb47umMCeab
+qybMhjHl7abITajjYWn9+VeZyxnSnYMANiF5/XZHtDlpV6/VUBobyhYvownhFoQ
7G6iYxaNrEV8FekzzCe72eDXMBe//IhP6O/HoqGsIPnd0ixDp/Wg4zBHfDPGVOkM
TLcp43XmvIoOBZu/NzU776C4vvUuGoB5/Y6nzAM5V5VYOhqCQ1643zptXD3Z4svf
27upbRPW0jvGXB+sJqjv8sJCUjpI+DrVlyNjQYsjhy5wzRxzWEY5xEJg1nkmhpeY
lv79L/xpPxW+21BJji4hZgqb+apfBHA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org