Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa
File:                     9db9c639-d02d-33c9-bdb4-066c23602c3f.roa (raw, json)
Hash identifier:          AzwGG6VrqYjHoDqgeopK38GYV2R0aBXSHnt6d3kTJS4=
Subject key identifier:   86:8D:73:35:FA:3C:FF:10:76:9E:5E:35:CF:A7:AF:4C:7C:F4:3A:BB
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F43285847CFD4AD182B741F553E165380
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     293
IP address blocks:        192.188.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ad:18:2b:74:1f:55:3e:16:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=8441501b-7430-4b08-8af0-5b5d79eb2145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:1d:37:58:e1:8d:59:96:6c:ae:cf:f9:32:
                    19:1e:3f:5d:c9:48:ea:a2:38:4b:68:25:48:c6:3e:
                    7c:15:f5:74:1c:21:3b:75:25:fc:82:d5:7a:19:62:
                    63:3a:e1:ae:df:c0:40:43:7e:24:f1:e6:46:dd:f1:
                    59:3d:2c:ae:7f:a3:63:db:9d:29:72:03:43:23:e0:
                    03:5a:8a:c0:8d:0f:38:45:0b:0f:33:25:1b:2a:1c:
                    30:8d:a4:41:ef:8b:e0:a0:c0:3f:12:be:96:25:9e:
                    d6:62:e4:5b:3f:91:1c:f3:40:b8:75:e9:95:2a:6e:
                    14:cd:f3:31:97:77:85:74:ec:90:ff:7f:cb:24:9d:
                    79:40:3e:a0:3b:75:96:3e:8d:ec:38:50:79:d5:5a:
                    74:74:a8:f8:97:62:0b:3b:6d:25:ec:52:c2:cb:ce:
                    6f:96:41:77:04:11:d6:10:e6:2d:12:0f:8c:bf:cf:
                    60:8c:3d:1a:6c:d0:d9:1d:c2:a2:4b:5b:c7:e4:f8:
                    16:49:f2:be:e5:79:7a:36:df:fb:b7:8e:ca:df:5e:
                    c9:ac:e0:75:70:f9:a3:c8:b4:6c:84:d2:32:fb:c0:
                    37:c3:40:83:d2:0c:f8:35:e3:8c:30:a0:72:3c:d6:
                    ea:1d:07:af:30:40:10:a6:e8:9f:5e:2a:b0:48:6c:
                    62:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8D:73:35:FA:3C:FF:10:76:9E:5E:35:CF:A7:AF:4C:7C:F4:3A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:39:51:4b:ba:5e:b8:e5:bc:0e:8c:66:dc:94:07:17:5d:8f:
         13:e6:d9:98:61:60:f7:04:18:84:ac:12:e9:66:a5:06:27:c4:
         14:dd:ed:28:95:24:ea:2e:55:f4:a5:3b:b9:73:5c:fe:6a:63:
         ec:2b:48:17:79:2e:73:2a:90:df:f4:50:71:ef:ad:17:b3:dc:
         d7:33:f3:f0:b6:31:a3:22:48:e4:ce:dd:38:7a:8f:e3:39:10:
         01:d9:5a:13:06:c8:dd:de:18:ac:9e:44:db:e8:77:05:88:f2:
         1f:48:e0:ae:4d:57:80:db:50:7d:dd:57:1a:04:6d:0f:a8:d6:
         7d:e4:bb:7f:48:2e:58:19:10:bc:79:97:f4:46:51:da:5d:c6:
         ad:90:c5:81:26:b9:90:06:2b:4e:67:c3:ab:91:91:2c:47:c5:
         56:4a:24:fd:2c:18:95:f7:a7:7d:63:98:de:3a:7d:64:49:95:
         8f:89:28:03:53:a1:7c:df:ea:ef:a2:9d:2a:55:f3:35:e5:be:
         83:8a:31:f7:0a:67:c3:92:78:d5:1e:17:0f:9d:24:ca:34:40:
         05:4d:28:5c:70:90:21:7d:ec:74:42:ab:a6:47:9e:4a:e1:9d:
         d9:93:69:80:ed:b8:eb:55:06:ae:50:fc:37:11:ca:67:ed:84:
         1b:e6:41:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1K0YK3QfVT4WU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz
ZmM1MB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk
ODQ0MTUwMWItNzQzMC00YjA4LThhZjAtNWI1ZDc5ZWIyMTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksIdN1jhjVmWbK7P+TIZHj9dyUjqojhLaCVI
xj58FfV0HCE7dSX8gtV6GWJjOuGu38BAQ34k8eZG3fFZPSyuf6Nj250pcgNDI+AD
WorAjQ84RQsPMyUbKhwwjaRB74vgoMA/Er6WJZ7WYuRbP5Ec80C4demVKm4UzfMx
l3eFdOyQ/3/LJJ15QD6gO3WWPo3sOFB51Vp0dKj4l2ILO20l7FLCy85vlkF3BBHW
EOYtEg+Mv89gjD0abNDZHcKiS1vH5PgWSfK+5Xl6Nt/7t47K317JrOB1cPmjyLRs
hNIy+8A3w0CD0gz4NeOMMKByPNbqHQevMEAQpuifXiqwSGxieQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIaNczX6PP8Qdp5eNc+nr0x89Dq7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2
ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvOWRiOWM2MzktZDAyZC0z
M2M5LWJkYjQtMDY2YzIzNjAyYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl
MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2
MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwLwYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGA5UUu6XrjlvA6MZtyUBxddjxPm2ZhhYPcEGISsEulmpQYnxBTd7SiV
JOouVfSlO7lzXP5qY+wrSBd5LnMqkN/0UHHvrRez3Ncz8/C2MaMiSOTO3Th6j+M5
EAHZWhMGyN3eGKyeRNvodwWI8h9I4K5NV4DbUH3dVxoEbQ+o1n3ku39ILlgZELx5
l/RGUdpdxq2QxYEmuZAGK05nw6uRkSxHxVZKJP0sGJX3p31jmN46fWRJlY+JKANT
oXzf6u+inSpV8zXlvoOKMfcKZ8OSeNUeFw+dJMo0QAVNKFxwkCF97HRCq6ZHnkrh
ndmTaYDtuOtVBq5Q/DcRymfthBvmQck=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org