Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/baa177cb-d39c-3c9e-aadd-3b30cc8d2fc0.roa
File:                     baa177cb-d39c-3c9e-aadd-3b30cc8d2fc0.roa (raw, json)
Hash identifier:          zHiqzsf5hzaNVmq6OBp58IdhMeHkn0KoOWOg96Kfph0=
Subject key identifier:   90:2A:0F:58:6C:27:3C:ED:04:D0:E2:C9:67:B3:4E:E3:08:EA:2D:62
Certificate issuer:       /CN=76577e62-26cf-4652-b145-46ee5148cca5
Certificate serial:       010D0C9F43285847D834AF34D48B8AC7BA691A00
Authority key identifier: F7:77:2C:6D:C1:CD:10:63:7C:FC:AA:BA:7E:96:CE:98:E8:71:0F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/baa177cb-d39c-3c9e-aadd-3b30cc8d2fc0.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     395281
IP address blocks:        192.245.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/76577e62-26cf-4652-b145-46ee5148cca5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/76577e62-26cf-4652-b145-46ee5148cca5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:af:34:d4:8b:8a:c7:ba:69:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76577e62-26cf-4652-b145-46ee5148cca5
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=76b4c65a-787f-494e-9cdc-f1f518838f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:d7:02:af:7a:be:7e:41:2f:1c:4c:f1:21:
                    65:39:63:a1:c2:1b:2c:b2:a3:e7:3b:27:a4:8f:e3:
                    16:a0:41:e4:69:9a:f9:34:57:6a:d5:bf:46:32:7e:
                    a1:94:50:63:19:7f:a3:db:b8:60:de:90:c1:fd:9f:
                    9c:e2:af:7d:37:ae:74:e9:2c:4f:e6:d1:0c:6f:62:
                    a1:1c:15:ca:12:3f:77:a7:80:f6:54:e0:94:f8:47:
                    3f:53:c2:26:d1:ea:6a:dc:65:b7:f1:f0:f0:21:5b:
                    98:3f:f8:18:3a:97:60:b8:92:d3:53:35:56:86:3c:
                    e0:e5:0e:f4:aa:81:32:56:04:75:de:85:4a:37:c6:
                    92:4e:08:8c:57:75:bb:7b:a3:e0:1f:44:a2:39:ce:
                    e1:8c:e2:7d:ca:cf:f2:dd:62:51:2b:c4:94:1a:66:
                    66:e9:b4:1e:14:76:33:94:5f:84:fd:e1:7e:f7:dd:
                    1c:77:30:a7:44:48:29:88:da:66:5e:81:31:3e:99:
                    7a:3d:40:b8:8a:60:c4:45:c5:23:21:05:ba:45:35:
                    28:0f:5b:f5:9d:a2:45:d8:a2:6c:86:1a:91:87:7e:
                    ba:b6:96:e0:72:0a:45:89:d0:ea:70:be:e9:c1:70:
                    7e:4c:d0:9f:fd:f4:85:6f:09:66:7c:20:db:85:7f:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:0F:58:6C:27:3C:ED:04:D0:E2:C9:67:B3:4E:E3:08:EA:2D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/baa177cb-d39c-3c9e-aadd-3b30cc8d2fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/76577e62-26cf-4652-b145-46ee5148cca5.crl

            X509v3 Authority Key Identifier:
                keyid:F7:77:2C:6D:C1:CD:10:63:7C:FC:AA:BA:7E:96:CE:98:E8:71:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8f:72:c0:50:30:26:79:76:57:29:1f:dc:92:5f:e9:f3:fd:
         83:69:7c:04:39:a6:a4:d4:bd:74:d7:36:e8:41:dc:4c:e1:28:
         ef:3f:18:b9:32:40:ca:06:07:8b:1e:7c:f6:01:e1:80:ef:8b:
         5f:c0:b3:56:56:c9:94:bf:ca:d6:9c:56:7e:d1:a7:73:3c:a0:
         f0:db:89:fe:15:47:e1:7e:33:33:29:05:89:12:5a:21:28:ba:
         f8:89:df:67:82:6e:34:9f:61:99:9a:70:71:22:20:de:77:4a:
         4b:63:a8:9c:46:c1:c5:81:84:3b:d1:b0:28:78:06:92:34:63:
         e2:dc:50:0e:b6:0e:62:ea:94:9d:b3:3e:6c:c6:50:a6:d6:a8:
         a1:53:bf:61:7f:b0:1a:d0:b7:3a:35:1b:e0:88:fb:15:61:62:
         d6:c1:27:af:39:44:a8:54:4f:60:54:1d:b3:ed:e0:b1:d5:ad:
         f3:bf:2c:48:2d:db:fa:a7:8b:d4:e2:8a:bd:03:3c:b5:c8:f9:
         8c:36:18:5b:70:32:4d:6a:36:5c:ee:9b:df:fe:a8:61:76:d9:
         8a:57:0f:ef:7d:bc:27:63:45:ea:97:a9:76:f9:2a:53:4f:ac:
         65:5d:d2:ed:f5:2f:a2:93:a3:70:21:4a:65:a9:34:50:e7:a6:
         8c:79:fa:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfYNK801IuKx7ppGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY1NzdlNjItMjZjZi00NjUyLWIxNDUtNDZlZTUxNDhj
Y2E1MB4XDTI0MTExMTE0MDAzOVoXDTI1MDIwOTE0MDAzOVowLzEtMCsGA1UEAxMk
NzZiNGM2NWEtNzg3Zi00OTRlLTljZGMtZjFmNTE4ODM4ZjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9XXAq96vn5BLxxM8SFlOWOhwhsssqPnOyek
j+MWoEHkaZr5NFdq1b9GMn6hlFBjGX+j27hg3pDB/Z+c4q99N6506SxP5tEMb2Kh
HBXKEj93p4D2VOCU+Ec/U8Im0epq3GW38fDwIVuYP/gYOpdguJLTUzVWhjzg5Q70
qoEyVgR13oVKN8aSTgiMV3W7e6PgH0SiOc7hjOJ9ys/y3WJRK8SUGmZm6bQeFHYz
lF+E/eF+990cdzCnREgpiNpmXoExPpl6PUC4imDERcUjIQW6RTUoD1v1naJF2KJs
hhqRh366tpbgcgpFidDqcL7pwXB+TNCf/fSFbwlmfCDbhX9TyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJAqD1hsJzztBNDiyWezTuMI6i1iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NjU3
N2U2Mi0yNmNmLTQ2NTItYjE0NS00NmVlNTE0OGNjYTUvYmFhMTc3Y2ItZDM5Yy0z
YzllLWFhZGQtM2IzMGNjOGQyZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzY1NzdlNjItMjZjZi00NjUyLWIx
NDUtNDZlZTUxNDhjY2E1Lzc2NTc3ZTYyLTI2Y2YtNDY1Mi1iMTQ1LTQ2ZWU1MTQ4
Y2NhNS5jcmwwHwYDVR0jBBgwFoAU93csbcHNEGN8/Kq6fpbOmOhxD9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NjU3N2U2Mi0yNmNmLTQ2NTItYjE0NS00NmVl
NTE0OGNjYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPXmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+PcsBQMCZ5dlcpH9ySX+nz/YNpfAQ5pqTUvXTXNuhB3EzhKO8/GLky
QMoGB4sefPYB4YDvi1/As1ZWyZS/ytacVn7Rp3M8oPDbif4VR+F+MzMpBYkSWiEo
uviJ32eCbjSfYZmacHEiIN53SktjqJxGwcWBhDvRsCh4BpI0Y+LcUA62DmLqlJ2z
PmzGUKbWqKFTv2F/sBrQtzo1G+CI+xVhYtbBJ685RKhUT2BUHbPt4LHVrfO/LEgt
2/qni9Tiir0DPLXI+Yw2GFtwMk1qNlzum9/+qGF22YpXD+99vCdjReqXqXb5KlNP
rGVd0u31L6KTo3AhSmWpNFDnpox5+o0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org