Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa
File:                     9ab84c57-3305-30ff-b583-4bb0023c64b2.roa (raw, json)
Hash identifier:          8NlbDP1uioz07lGjn5lBB/7AEyySPfRYTKg9QPqvCug=
Subject key identifier:   41:39:6A:4D:3A:58:06:15:8D:11:B0:19:6A:64:EB:0B:BE:A9:61:07
Certificate issuer:       /CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc
Certificate serial:       010D0C9F432858473A5B9002D955D79D7D0BD300
Authority key identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     53949
IP address blocks:        162.213.172.0/22 maxlen: 24
                          173.225.144.0/20 maxlen: 24
                          192.119.134.0/24 maxlen: 24
                          198.98.208.0/20 maxlen: 24
                          206.198.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:90:02:d9:55:d7:9d:7d:0b:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=0ac1577e-8919-45c3-b8c6-8d6a6da00333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:17:b8:5b:22:3d:8f:56:02:de:7e:15:9b:
                    79:39:7e:e2:d9:ba:7b:2a:b0:9c:27:a7:df:eb:4c:
                    76:9e:34:fb:d7:58:f3:76:8b:8d:90:2e:0b:96:ff:
                    d4:37:5b:6a:17:ef:a9:26:a6:49:53:dc:6c:11:9a:
                    1b:43:97:73:3d:9b:61:ce:8f:79:14:ca:21:35:02:
                    50:94:95:76:6d:6f:de:9f:ee:01:ab:63:45:08:1d:
                    3d:6b:75:e9:b8:a5:0a:87:c9:43:53:1c:b5:a0:ff:
                    aa:af:46:9e:e1:af:ec:12:58:70:d1:f3:24:40:64:
                    36:d4:06:6d:7f:40:fc:e5:f0:3a:ec:83:59:60:46:
                    4c:e9:e0:a5:89:7f:b2:55:70:cf:82:7c:05:b5:49:
                    1b:2a:2f:4d:4a:43:04:9f:20:3a:1c:40:58:11:5c:
                    91:3f:bf:21:f8:25:8e:1e:d5:d3:dc:63:f9:3a:78:
                    3b:34:63:63:2b:d5:50:c9:84:d6:a5:d3:95:1e:c2:
                    5e:74:63:b4:a6:63:af:5e:5d:c5:50:5c:3e:fb:06:
                    72:5c:81:20:8f:f2:4a:7d:53:41:64:04:c3:51:ef:
                    22:ad:56:31:eb:91:6e:2d:81:9c:6f:ec:59:b8:19:
                    3c:6a:8e:7b:17:37:36:5c:ec:78:8c:b9:c5:4b:7f:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:39:6A:4D:3A:58:06:15:8D:11:B0:19:6A:64:EB:0B:BE:A9:61:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/9ab84c57-3305-30ff-b583-4bb0023c64b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.crl

            X509v3 Authority Key Identifier:
                keyid:68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.172.0/22
                  173.225.144.0/20
                  192.119.134.0/24
                  198.98.208.0/20
                  206.198.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7a:d6:a5:ac:b7:57:29:46:a3:9f:eb:77:f9:8f:38:cb:4e:
         35:67:7b:d4:a4:c8:dd:45:0c:8e:2c:83:f4:6a:2b:72:e6:9a:
         4b:e0:49:37:13:77:62:cd:e0:7e:16:06:78:3f:d1:94:33:19:
         d7:e7:b9:cc:3d:19:98:8f:c9:24:bf:a5:c4:69:df:3c:c9:50:
         2d:f1:51:c4:15:51:dd:71:e4:12:cb:0b:2f:43:7b:44:f2:d4:
         e1:ea:4f:f4:37:03:1b:92:84:a1:92:b7:55:39:ce:96:14:9c:
         ba:65:62:58:50:76:0e:a3:31:73:01:bd:d0:ad:90:e5:7e:93:
         03:71:a0:a9:f7:ad:17:f3:3d:16:bf:99:93:05:2f:70:89:e1:
         d0:b3:12:2c:69:39:63:62:7c:ee:1f:19:6b:94:ef:26:aa:a5:
         65:9c:01:9e:e1:b0:67:4f:bf:22:20:23:aa:80:26:58:b3:cb:
         b5:27:f4:92:a1:f5:63:5d:9a:46:64:f7:f0:5d:35:35:b7:9b:
         28:b5:60:51:91:de:26:cc:43:4b:04:85:d5:e8:1c:72:4d:2d:
         01:95:42:00:9a:18:e1:c5:57:7d:3d:43:8d:99:4b:63:92:bd:
         08:c4:80:b7:e5:e8:ea:6f:70:b8:ea:c3:74:a7:ef:a5:4d:7e:
         63:9d:3b:95
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEc6W5AC2VXXnX0L0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzliMDZjNTItYzY4ZC00NGVjLWFlNjUtN2ViYjJhOTlk
NmNjMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
MGFjMTU3N2UtODkxOS00NWMzLWI4YzYtOGQ2YTZkYTAwMzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipkXuFsiPY9WAt5+FZt5OX7i2bp7KrCcJ6ff
60x2njT711jzdouNkC4Llv/UN1tqF++pJqZJU9xsEZobQ5dzPZthzo95FMohNQJQ
lJV2bW/en+4Bq2NFCB09a3XpuKUKh8lDUxy1oP+qr0ae4a/sElhw0fMkQGQ21AZt
f0D85fA67INZYEZM6eCliX+yVXDPgnwFtUkbKi9NSkMEnyA6HEBYEVyRP78h+CWO
HtXT3GP5Ong7NGNjK9VQyYTWpdOVHsJedGO0pmOvXl3FUFw++wZyXIEgj/JKfVNB
ZATDUe8irVYx65FuLYGcb+xZuBk8ao57Fzc2XOx4jLnFS3/5qwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFEE5ak06WAYVjRGwGWpk6wu+qWEHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOWIw
NmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJiMmE5OWQ2Y2MvOWFiODRjNTctMzMwNS0z
MGZmLWI1ODMtNGJiMDAyM2M2NGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzliMDZjNTItYzY4ZC00NGVjLWFl
NjUtN2ViYjJhOTlkNmNjL2M5YjA2YzUyLWM2OGQtNDRlYy1hZTY1LTdlYmIyYTk5
ZDZjYy5jcmwwHwYDVR0jBBgwFoAUaOyfwjm0WKnUlDgLr8FYHehZvX8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jOWIwNmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJi
MmE5OWQ2Y2MuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCotWsAwQE
reGQAwQAwHeGAwQExmLQAwQCzsbMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAx61qWst1cpRqOf63f5jzjL
TjVne9SkyN1FDI4sg/RqK3LmmkvgSTcTd2LN4H4WBng/0ZQzGdfnucw9GZiPySS/
pcRp3zzJUC3xUcQVUd1x5BLLCy9De0Ty1OHqT/Q3AxuShKGSt1U5zpYUnLplYlhQ
dg6jMXMBvdCtkOV+kwNxoKn3rRfzPRa/mZMFL3CJ4dCzEixpOWNifO4fGWuU7yaq
pWWcAZ7hsGdPvyIgI6qAJlizy7Un9JKh9WNdmkZk9/BdNTW3myi1YFGR3ibMQ0sE
hdXoHHJNLQGVQgCaGOHFV309Q42ZS2OSvQjEgLfl6OpvcLjqw3Sn76VNfmOdO5U=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org