Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/c474fd3e-335b-3835-9e74-bcc4f785d18f.roa
File:                     c474fd3e-335b-3835-9e74-bcc4f785d18f.roa (raw, json)
Hash identifier:          wqLQhQWF0yg+4C2bV1PhYm7erZe+CkL9S2n6wonGpmo=
Subject key identifier:   4C:50:CF:6E:10:FE:1A:FA:ED:BD:0C:C5:83:16:61:DE:49:55:96:4C
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858474DE5FFC5579A2067AE730B00
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/c474fd3e-335b-3835-9e74-bcc4f785d18f.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     212374
IP address blocks:        199.115.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e5:ff:c5:57:9a:20:67:ae:73:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=4da6a019-69ca-4e22-bdc9-0b300e942fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:be:fc:23:4f:50:85:56:77:66:87:d2:2b:
                    a9:cc:25:73:5d:65:99:dd:de:52:c7:28:a6:6a:f0:
                    95:27:a0:0d:cf:7f:2d:13:ec:40:d2:cd:a5:55:53:
                    df:09:f8:de:62:39:7a:34:4e:5d:26:aa:fa:35:9b:
                    0f:86:08:4f:d8:ac:59:5a:62:8d:81:4d:a1:54:a4:
                    3d:23:b8:62:c3:30:ff:e5:8f:0f:35:ef:82:5b:fa:
                    1d:c9:8e:53:a2:61:6f:05:db:76:d9:34:97:06:d0:
                    9a:08:21:69:be:f0:c3:e0:25:e5:8f:a5:4f:cd:e2:
                    3b:31:ea:9b:30:ed:39:75:ce:9e:dd:8a:ac:aa:42:
                    1d:1b:ba:9e:62:03:15:67:56:2d:0f:d9:71:f2:9f:
                    c9:2c:d3:03:1a:88:b9:e2:8f:5c:76:2c:8d:2c:b7:
                    c1:c7:f3:bb:d3:38:96:26:9c:c7:67:5c:03:eb:b0:
                    c5:42:1e:33:d3:af:52:d5:4a:13:08:d4:9c:35:a3:
                    af:63:61:76:dc:6f:cd:ab:98:bb:4a:16:77:72:9a:
                    9a:29:a0:ae:e8:8e:64:ce:a7:8e:ad:70:e1:1e:42:
                    d7:16:38:90:0e:1d:f9:a1:03:57:e9:4a:a7:fa:84:
                    26:c3:84:84:a2:23:29:28:49:ac:a7:73:ac:75:eb:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:50:CF:6E:10:FE:1A:FA:ED:BD:0C:C5:83:16:61:DE:49:55:96:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/c474fd3e-335b-3835-9e74-bcc4f785d18f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:23:1f:34:cc:77:49:1d:83:d9:88:db:ab:d3:ed:09:ac:ca:
         53:38:75:75:92:4d:d2:51:44:24:d3:b3:8b:60:bb:6d:5f:6f:
         0f:1c:6d:60:61:10:ce:c1:bf:ce:ec:66:6f:ad:52:63:25:1c:
         87:7d:58:ff:f6:8e:d2:a0:e7:c3:c8:39:d8:69:35:ea:ca:0b:
         b6:d6:33:a9:95:57:34:38:7f:8a:44:2d:0d:e6:ef:a1:1b:c8:
         e8:a3:f5:03:8c:6c:a3:fc:4f:1e:3c:06:3a:80:6f:13:d8:ef:
         27:ca:b2:57:db:74:b3:15:7d:00:a5:18:f7:8a:65:7a:fe:9f:
         c6:9a:c4:84:74:40:6d:f2:1e:5a:84:08:31:36:ae:64:58:13:
         58:65:e3:d6:aa:87:fd:6e:5e:cc:12:f0:e1:7c:f5:56:5d:02:
         68:9a:2f:af:0c:43:b7:db:97:75:87:c7:61:12:01:26:39:99:
         03:9f:e8:54:a0:eb:74:28:20:63:cb:6a:4a:57:27:e8:71:a4:
         14:41:a5:7c:e7:43:9c:b3:f0:74:70:57:1c:e7:af:c0:b2:38:
         15:c5:ec:5d:6c:69:7f:d3:e2:48:5d:0a:6d:13:09:77:ec:c3:
         9f:85:09:8a:7c:6b:ed:15:1a:3f:6e:c5:a1:fc:56:3e:f7:b0:
         38:fd:a2:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5f/FV5ogZ65zCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWMxMWQzNTgtNjliOS00Yzk2LWJmNDctZTNlZGQ1Y2Zm
MjE4MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk
NGRhNmEwMTktNjljYS00ZTIyLWJkYzktMGIzMDBlOTQyZmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ6+/CNPUIVWd2aH0iupzCVzXWWZ3d5Sxyim
avCVJ6ANz38tE+xA0s2lVVPfCfjeYjl6NE5dJqr6NZsPhghP2KxZWmKNgU2hVKQ9
I7hiwzD/5Y8PNe+CW/odyY5TomFvBdt22TSXBtCaCCFpvvDD4CXlj6VPzeI7Meqb
MO05dc6e3YqsqkIdG7qeYgMVZ1YtD9lx8p/JLNMDGoi54o9cdiyNLLfBx/O70ziW
JpzHZ1wD67DFQh4z069S1UoTCNScNaOvY2F23G/Nq5i7ShZ3cpqaKaCu6I5kzqeO
rXDhHkLXFjiQDh35oQNX6Uqn+oQmw4SEoiMpKEmsp3Osdeus7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExQz24Q/hr67b0MxYMWYd5JVZZMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzEx
ZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2VkZDVjZmYyMTgvYzQ3NGZkM2UtMzM1Yi0z
ODM1LTllNzQtYmNjNGY3ODVkMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWMxMWQzNTgtNjliOS00Yzk2LWJm
NDctZTNlZGQ1Y2ZmMjE4L2VjMTFkMzU4LTY5YjktNGM5Ni1iZjQ3LWUzZWRkNWNm
ZjIxOC5jcmwwHwYDVR0jBBgwFoAUoUAcC1VOMwu+PVO2Hd8acJrxAbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzExZDM1OC02OWI5LTRjOTYtYmY0Ny1lM2Vk
ZDVjZmYyMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3NpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAjHzTMd0kdg9mI26vT7QmsylM4dXWSTdJRRCTTs4tgu21fbw8cbWBh
EM7Bv87sZm+tUmMlHId9WP/2jtKg58PIOdhpNerKC7bWM6mVVzQ4f4pELQ3m76Eb
yOij9QOMbKP8Tx48BjqAbxPY7yfKslfbdLMVfQClGPeKZXr+n8aaxIR0QG3yHlqE
CDE2rmRYE1hl49aqh/1uXswS8OF89VZdAmiaL68MQ7fbl3WHx2ESASY5mQOf6FSg
63QoIGPLakpXJ+hxpBRBpXznQ5yz8HRwVxznr8CyOBXF7F1saX/T4khdCm0TCXfs
w5+FCYp8a+0VGj9uxaH8Vj73sDj9ojk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:48 2024 by rpki-client on console-fra.rpki-client.org