Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/d0193209-c102-33bd-94d8-acc37beb2999.roa
File:                     d0193209-c102-33bd-94d8-acc37beb2999.roa (raw, json)
Hash identifier:          gKWSXgmMbX0Zf1MwEc/bQqBtGMM9g+g24slyyZ+sc7k=
Subject key identifier:   BE:A6:C3:AC:B1:7C:6E:68:5C:E1:96:F8:7E:E6:C9:B7:C5:E3:93:8A
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F43285847C8D9E723AFCB92A4751CC7A0
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/d0193209-c102-33bd-94d8-acc37beb2999.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     209242
IP address blocks:        216.205.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e7:23:af:cb:92:a4:75:1c:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=152fe3bd-a8d0-4a3b-bf02-5f0b8bffc3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:41:2a:ee:37:39:83:9d:3a:75:4e:7b:69:
                    74:76:9b:7e:02:32:c0:d7:3d:fd:f9:6d:7d:b5:4d:
                    cd:e3:1f:f7:18:29:fe:59:f6:07:40:3a:df:37:9c:
                    79:5f:28:30:3d:fe:57:23:b7:2c:5e:d6:e0:c5:00:
                    6f:b3:40:98:53:7a:d3:ff:19:96:81:ca:85:5b:5e:
                    16:f5:06:54:98:96:ef:67:96:fc:a5:b9:f5:74:bf:
                    fc:f7:1f:2e:7e:f6:66:3a:8f:4b:ff:4e:39:ec:96:
                    fb:e7:41:6f:f4:2d:ea:d7:e6:74:21:dd:35:61:54:
                    73:7a:ef:8e:15:4f:ad:90:fb:a9:56:eb:66:18:25:
                    d9:23:a6:01:63:0e:ae:a6:d0:68:a7:0c:a7:d7:f5:
                    0e:dd:26:26:03:5e:8c:1c:88:6f:ff:df:82:91:cd:
                    e0:fd:cf:df:1e:b2:37:af:72:8f:76:32:c2:01:ab:
                    b4:98:31:4f:c8:32:7c:ee:ab:bc:79:3c:b5:82:27:
                    74:f6:ce:26:b9:46:95:df:3e:fb:0e:ce:0d:dc:4c:
                    03:6a:59:d4:b1:59:bd:24:c4:25:e9:cf:d3:8d:8b:
                    2f:ad:32:28:a4:82:34:f9:0c:ea:2a:05:c8:f2:31:
                    f8:18:62:d4:16:ea:a8:0a:d3:cb:a9:e0:0b:4a:ab:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A6:C3:AC:B1:7C:6E:68:5C:E1:96:F8:7E:E6:C9:B7:C5:E3:93:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/d0193209-c102-33bd-94d8-acc37beb2999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:06:bf:18:79:4a:66:f9:2f:70:53:28:8a:03:be:4c:f7:97:
         1f:d6:6e:f8:a9:ac:1f:67:28:83:a3:cd:5a:1f:77:62:14:82:
         60:e1:77:2c:39:90:25:3a:fe:be:a2:25:ff:a1:bf:1d:57:56:
         17:48:2f:c5:be:6f:43:83:c8:7d:61:4c:7d:4a:fa:e8:8e:91:
         93:e9:c5:f3:67:e6:c4:fa:db:49:bd:d6:41:91:d4:aa:2c:ab:
         a4:63:52:bf:c1:65:76:e3:b5:2a:ee:63:cf:68:b5:bd:a8:1f:
         79:cf:b8:05:44:6a:1e:fa:ae:9f:e1:5f:3e:c2:71:54:f5:ef:
         a3:7a:94:f3:40:aa:51:2c:42:36:d7:fa:cc:15:31:6a:24:1f:
         6d:0f:34:4c:15:1b:84:e2:8c:ef:4e:ef:25:e5:7b:4f:ec:a4:
         b2:d5:ff:62:c1:5f:2e:85:d7:83:9d:a2:6d:18:2a:b0:2d:ba:
         79:ca:59:d3:39:ff:37:fa:c3:a3:af:f1:b1:05:72:2b:c3:22:
         bf:0a:2c:df:fe:cf:51:8b:9c:7f:f7:ca:be:3e:f5:4d:cd:89:
         b9:ef:ac:85:1e:57:f6:a1:85:9f:f5:74:1c:97:b2:c8:84:9a:
         fa:3f:ad:02:94:ca:2d:10:d3:95:4b:d6:b2:29:d3:f5:41:33:
         b3:66:94:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2ecjr8uSpHUcx6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl
YTJiMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk
MTUyZmUzYmQtYThkMC00YTNiLWJmMDItNWYwYjhiZmZjM2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqhBKu43OYOdOnVOe2l0dpt+AjLA1z39+W19
tU3N4x/3GCn+WfYHQDrfN5x5XygwPf5XI7csXtbgxQBvs0CYU3rT/xmWgcqFW14W
9QZUmJbvZ5b8pbn1dL/89x8ufvZmOo9L/0457Jb750Fv9C3q1+Z0Id01YVRzeu+O
FU+tkPupVutmGCXZI6YBYw6uptBopwyn1/UO3SYmA16MHIhv/9+Ckc3g/c/fHrI3
r3KPdjLCAau0mDFPyDJ87qu8eTy1gid09s4muUaV3z77Ds4N3EwDalnUsVm9JMQl
6c/TjYsvrTIopII0+QzqKgXI8jH4GGLUFuqoCtPLqeALSqtckQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6mw6yxfG5oXOGW+H7mybfF45OKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2
OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvZDAxOTMyMDktYzEwMi0z
M2JkLTk0ZDgtYWNjMzdiZWIyOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj
NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi
ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3
NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M00MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYGvxh5Smb5L3BTKIoDvkz3lx/WbviprB9nKIOjzVofd2IUgmDhdyw5
kCU6/r6iJf+hvx1XVhdIL8W+b0ODyH1hTH1K+uiOkZPpxfNn5sT620m91kGR1Kos
q6RjUr/BZXbjtSruY89otb2oH3nPuAVEah76rp/hXz7CcVT176N6lPNAqlEsQjbX
+swVMWokH20PNEwVG4TijO9O7yXle0/spLLV/2LBXy6F14Odom0YKrAtunnKWdM5
/zf6w6Ov8bEFcivDIr8KLN/+z1GLnH/3yr4+9U3NibnvrIUeV/ahhZ/1dByXssiE
mvo/rQKUyi0Q05VL1rIp0/VBM7NmlPI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org