Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa
File:                     9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa (raw, json)
Hash identifier:          iPcGNrnkNSk8HAAZK3CKJiv/32P2Df6ybb7vzpcQGNA=
Subject key identifier:   58:93:69:C9:D0:1F:8F:CE:4C:EE:75:A7:68:4B:C5:2F:62:A4:42:1C
Certificate issuer:       /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial:       010D0C9F432858471D0B171B9CBEEA3FC1291480
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     395807
IP address blocks:        199.60.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:17:1b:9c:be:ea:3f:c1:29:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=7069815f-14b4-48e5-a0b8-d68e458548ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:32:cc:4f:a4:e2:a7:18:81:4e:85:d3:31:
                    86:67:b2:14:ae:73:dc:3c:d6:45:18:0c:8b:28:5c:
                    84:5e:01:9e:7c:80:9e:85:63:a6:66:73:65:f1:09:
                    eb:2e:fa:24:75:06:f3:c5:06:ca:20:c7:8d:6e:9c:
                    0e:75:21:f0:10:7a:3c:be:66:1f:b4:95:f2:3b:09:
                    68:c3:ce:94:f9:67:43:d4:1e:65:02:ef:ad:06:fe:
                    87:b2:01:33:c3:1a:6a:1f:bc:ec:71:29:b7:97:20:
                    e6:3c:1d:fa:33:39:56:ef:8e:31:1d:79:c3:3d:4a:
                    14:2a:2f:25:42:74:70:c2:1c:20:a5:06:e1:3a:e9:
                    c0:5a:3c:16:ec:aa:51:eb:18:04:ce:84:07:db:f5:
                    3d:87:16:ca:e7:c6:66:b5:44:19:83:0c:f7:76:ce:
                    26:a4:c9:e5:d0:d5:c9:37:b1:33:06:50:fb:85:24:
                    8b:0d:f2:fe:02:0c:14:a1:80:6f:b1:61:7e:4a:71:
                    f3:91:a7:28:14:52:45:fb:33:6c:bb:44:3f:9b:7c:
                    26:36:c7:e2:e5:76:a3:1f:31:b0:9a:7d:4c:17:68:
                    40:6c:2d:89:19:81:e7:7e:ae:1f:66:f1:73:d5:a5:
                    01:e6:65:53:48:a2:96:a1:77:ca:c7:05:2a:19:37:
                    28:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:93:69:C9:D0:1F:8F:CE:4C:EE:75:A7:68:4B:C5:2F:62:A4:42:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl

            X509v3 Authority Key Identifier:
                keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ad:29:22:69:77:af:9e:29:61:61:a7:cd:ad:a7:87:d0:05:
         71:4d:5b:04:12:81:f2:d6:b4:fc:69:c6:65:5c:39:ba:5b:cb:
         e7:e4:e0:9d:dd:08:0c:91:58:ee:63:41:96:29:94:01:ec:b5:
         4b:6f:98:94:2a:f1:f8:d9:ed:42:e3:90:10:5b:bf:06:75:73:
         de:6e:f1:47:96:5c:d5:84:d9:5a:5c:33:54:94:36:67:d6:7d:
         3b:f3:f4:d9:51:4a:c9:3c:1a:40:17:26:50:5e:e0:d9:fe:2e:
         3a:ca:16:af:d2:60:5d:f8:c5:d2:fd:ce:2b:53:1b:47:4a:5e:
         00:91:a7:e8:69:c7:81:67:e8:ca:6a:56:66:0d:2f:84:e4:8e:
         a0:31:fc:64:f9:a5:32:e4:9d:3e:f5:01:6f:13:3d:d2:c8:ba:
         a1:85:e2:18:d1:68:46:65:4b:7a:82:ab:5f:db:60:2c:81:11:
         e0:dc:d0:4c:95:63:17:d5:ff:02:58:f8:e5:6d:a2:4b:30:30:
         cb:fc:2f:89:1d:07:38:31:5d:8a:f5:04:6c:bb:83:1d:12:ae:
         de:e9:6b:71:c2:f8:94:32:a3:8a:7b:57:0a:bd:c3:74:8f:c3:
         1c:08:09:21:8e:57:11:e8:bc:f1:6a:d3:34:3b:82:48:d7:8b:
         b5:10:a0:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcdCxcbnL7qP8EpFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2
MzkzMB4XDTI0MDkwNTEzMDA0MVoXDTI0MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NzA2OTgxNWYtMTRiNC00OGU1LWEwYjgtZDY4ZTQ1ODU0OGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2QyzE+k4qcYgU6F0zGGZ7IUrnPcPNZFGAyL
KFyEXgGefICehWOmZnNl8QnrLvokdQbzxQbKIMeNbpwOdSHwEHo8vmYftJXyOwlo
w86U+WdD1B5lAu+tBv6HsgEzwxpqH7zscSm3lyDmPB36MzlW744xHXnDPUoUKi8l
QnRwwhwgpQbhOunAWjwW7KpR6xgEzoQH2/U9hxbK58ZmtUQZgwz3ds4mpMnl0NXJ
N7EzBlD7hSSLDfL+AgwUoYBvsWF+SnHzkacoFFJF+zNsu0Q/m3wmNsfi5XajHzGw
mn1MF2hAbC2JGYHnfq4fZvFz1aUB5mVTSKKWoXfKxwUqGTcoYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFiTacnQH4/OTO51p2hLxS9ipEIcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0
ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvOWVkODhlZjItY2E4Zi0z
ZGE5LTlhOGYtNmNjY2E2NzRhNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3
NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz
NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy
OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzySMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWtKSJpd6+eKWFhp82tp4fQBXFNWwQSgfLWtPxpxmVcObpby+fk4J3d
CAyRWO5jQZYplAHstUtvmJQq8fjZ7ULjkBBbvwZ1c95u8UeWXNWE2VpcM1SUNmfW
fTvz9NlRSsk8GkAXJlBe4Nn+LjrKFq/SYF34xdL9zitTG0dKXgCRp+hpx4Fn6Mpq
VmYNL4TkjqAx/GT5pTLknT71AW8TPdLIuqGF4hjRaEZlS3qCq1/bYCyBEeDc0EyV
YxfV/wJY+OVtokswMMv8L4kdBzgxXYr1BGy7gx0Srt7pa3HC+JQyo4p7Vwq9w3SP
wxwICSGOVxHovPFq0zQ7gkjXi7UQoJ8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org