Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d54abf1c-414d-3325-b626-9905dc9f7438.roa
File:                     d54abf1c-414d-3325-b626-9905dc9f7438.roa (raw, json)
Hash identifier:          8S0Br348dByU09UMZzlPHA8uTxCM8roOv3WWgVbrrOs=
Subject key identifier:   01:91:99:05:4E:7F:30:C8:40:46:30:E9:37:75:2E:AD:3B:F0:DF:2C
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F432858478E1BB3C0CD146115D9EC2A90
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d54abf1c-414d-3325-b626-9905dc9f7438.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     19740
IP address blocks:        172.84.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:b3:c0:cd:14:61:15:d9:ec:2a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=301553c7-a7fe-43fc-98f1-5cda72b8f8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:ef:3d:c8:88:1b:f3:80:62:2b:60:10:7e:
                    fd:57:b3:27:77:0b:d2:16:15:b0:26:8c:32:b0:37:
                    b9:dd:fa:05:ae:12:87:e8:ee:17:3b:0b:35:8f:d1:
                    17:98:8f:e9:ba:94:2e:3a:18:6f:9a:ed:9f:41:06:
                    f4:47:0e:8e:ac:86:d0:16:80:51:c2:e1:44:47:58:
                    7a:8b:f4:ab:80:30:47:b5:27:fd:1b:14:f2:d6:92:
                    df:ad:9f:6f:7f:4b:16:06:d7:76:61:5b:2a:7d:8b:
                    74:4e:36:e7:98:63:b4:5b:c0:a9:ac:9f:7f:47:d4:
                    bb:21:43:f4:71:f8:24:73:1e:7c:ab:05:4b:10:fc:
                    67:9d:82:b4:6e:7f:78:08:c8:83:03:d1:d6:be:5d:
                    da:59:02:69:49:25:62:29:ce:50:d1:cd:d6:12:1d:
                    7d:5a:42:c5:25:f5:5f:4d:1b:c1:37:bd:3e:f3:ce:
                    e3:3b:7c:70:d1:18:1e:cf:c9:38:8f:03:d6:0a:eb:
                    69:03:43:18:0f:22:f0:65:84:37:2d:d5:c5:fd:f6:
                    70:c9:a7:f4:17:44:28:91:26:3e:17:6e:22:a0:7d:
                    d2:4a:1e:0f:58:b2:34:f6:38:c5:02:0c:1d:00:4a:
                    ed:1f:80:af:7b:62:1d:80:8a:d4:b5:4a:fe:3f:b3:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:99:05:4E:7F:30:C8:40:46:30:E9:37:75:2E:AD:3B:F0:DF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d54abf1c-414d-3325-b626-9905dc9f7438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:71:b7:23:ce:ba:b3:ae:4e:8c:c8:ec:b8:5e:25:1d:a1:
         f8:be:52:39:25:1a:dd:3f:20:e6:38:03:ca:9e:8d:a8:e4:06:
         ab:f5:cf:3e:b0:53:15:35:76:09:40:51:ef:d1:e5:3c:b9:b4:
         47:ea:d2:cb:22:92:45:f5:08:03:3f:bc:99:d2:38:65:10:90:
         5c:2a:82:56:a2:36:3b:29:73:a9:18:83:e9:f1:a0:a3:db:3b:
         43:d5:f8:7d:de:5c:6e:e1:3a:20:63:b5:df:f0:eb:5d:5b:3c:
         a1:aa:70:b4:9b:c2:31:92:26:3f:ad:e0:6a:19:54:69:06:a1:
         19:1c:c5:4a:63:08:db:fc:ef:d5:a3:87:1d:00:19:31:0d:da:
         8e:00:8b:36:0c:51:09:73:0a:5a:5b:61:b9:a9:ee:2b:ea:9e:
         a7:20:1b:35:29:71:dd:25:21:71:30:71:03:6f:1f:df:a3:4c:
         2a:ca:b9:38:5c:ec:b2:5f:84:7b:d5:47:7b:67:6f:b2:c8:df:
         ec:4f:1d:8f:b2:ab:f3:62:04:d1:c9:57:7f:bf:28:51:b5:26:
         d3:fb:5f:b5:0f:a3:ad:6d:92:20:a8:7b:74:01:1b:ef:b9:8b:
         2e:a8:08:42:33:88:1d:f6:65:ae:b1:43:f0:a8:80:2a:61:9c:
         a1:f8:2b:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG7PAzRRhFdnsKpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz
NGQ2MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk
MzAxNTUzYzctYTdmZS00M2ZjLTk4ZjEtNWNkYTcyYjhmOGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutHvPciIG/OAYitgEH79V7MndwvSFhWwJowy
sDe53foFrhKH6O4XOws1j9EXmI/pupQuOhhvmu2fQQb0Rw6OrIbQFoBRwuFER1h6
i/SrgDBHtSf9GxTy1pLfrZ9vf0sWBtd2YVsqfYt0TjbnmGO0W8CprJ9/R9S7IUP0
cfgkcx58qwVLEPxnnYK0bn94CMiDA9HWvl3aWQJpSSViKc5Q0c3WEh19WkLFJfVf
TRvBN70+887jO3xw0Rgez8k4jwPWCutpA0MYDyLwZYQ3LdXF/fZwyaf0F0QokSY+
F24ioH3SSh4PWLI09jjFAgwdAErtH4Cve2IdgIrUtUr+P7MuzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGRmQVOfzDIQEYw6Td1Lq078N8sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey
NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvZDU0YWJmMWMtNDE0ZC0z
MzI1LWI2MjYtOTkwNWRjOWY3NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0
YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1
MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2
MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFRfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC36cbcjzrqzrk6MyOy4XiUdofi+UjklGt0/IOY4A8qejajkBqv1zz6w
UxU1dglAUe/R5Ty5tEfq0ssikkX1CAM/vJnSOGUQkFwqglaiNjspc6kYg+nxoKPb
O0PV+H3eXG7hOiBjtd/w611bPKGqcLSbwjGSJj+t4GoZVGkGoRkcxUpjCNv879Wj
hx0AGTEN2o4AizYMUQlzClpbYbmp7ivqnqcgGzUpcd0lIXEwcQNvH9+jTCrKuThc
7LJfhHvVR3tnb7LI3+xPHY+yq/NiBNHJV3+/KFG1JtP7X7UPo61tkiCoe3QBG++5
iy6oCEIziB32Za6xQ/CogCphnKH4K2o=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org