Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa
File:                     fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa (raw, json)
Hash identifier:          O7f+2XJCrqWOvF/8VneHiKRE15mA/f3SfFBLtCxDdRs=
Subject key identifier:   4D:80:44:F3:0F:45:9C:56:AF:97:19:31:E5:7A:18:FD:EC:84:C7:E8
Certificate issuer:       /CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
Certificate serial:       010D0C9F43285847E78F642FF2755C7CC4DFD6A0
Authority key identifier: D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     14973
IP address blocks:        198.235.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:64:2f:f2:75:5c:7c:c4:df:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=2b1c6758-04f1-4ddc-85e6-6a53da857223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:e0:ed:35:3a:a9:82:9b:93:1c:34:58:3a:
                    75:b5:d2:74:d9:cf:b4:95:6d:a5:5c:cd:bc:38:0e:
                    bc:45:17:3d:f1:9a:d6:4e:cb:38:98:88:ec:fa:b9:
                    94:91:de:a4:e4:ab:ab:b7:64:da:62:e0:e3:66:b6:
                    eb:d8:04:d1:5c:1f:35:3e:86:72:db:90:65:9d:21:
                    8f:7a:f9:81:ad:89:00:71:6e:94:81:9e:4c:d0:aa:
                    69:c5:d6:50:07:7c:fa:d7:8e:69:df:43:35:84:5b:
                    93:b6:8d:9c:06:f9:1d:9c:1b:45:a9:6b:a7:ec:be:
                    e0:23:b4:45:b8:69:55:37:95:ed:45:18:a3:97:51:
                    2a:65:c0:e1:e1:f1:b8:c0:92:22:4d:85:5e:b4:ce:
                    c4:86:77:a3:db:4d:5f:7b:ce:ce:b6:4a:f0:1d:10:
                    05:4d:22:04:8b:07:1c:f1:c8:cc:7f:d2:26:38:3c:
                    e6:47:45:4e:ee:84:4f:73:70:5e:73:dc:a5:ad:03:
                    86:eb:c8:0b:0e:e4:b0:f2:51:14:02:8e:62:8f:75:
                    dd:2f:b2:94:40:95:ac:bc:31:82:39:2e:17:16:cc:
                    41:52:94:2e:72:2f:9e:c7:af:0c:d9:f4:e2:dd:51:
                    21:9e:4d:b5:04:eb:96:fa:f4:43:cd:3a:63:b7:14:
                    1b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:80:44:F3:0F:45:9C:56:AF:97:19:31:E5:7A:18:FD:EC:84:C7:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/fa20f6a2-d7c3-3a2f-804c-51fa8817e2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.crl

            X509v3 Authority Key Identifier:
                keyid:D4:D0:18:D8:5B:E7:7E:C9:3A:40:DC:47:B4:F5:9E:4B:61:30:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ee5ce8bc-c3cd-4f99-8e3f-b4d8cd6bc7e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:a8:98:b8:d0:f4:3a:e0:6c:1c:19:b7:a3:d1:4f:19:22:
         99:fb:e7:50:66:49:a9:dc:e0:9f:00:2f:d2:88:8b:e0:c2:ed:
         82:5f:61:ba:84:3f:32:ac:5e:70:a7:1f:76:7f:9b:35:58:03:
         db:96:8c:f2:2d:06:34:64:ed:fe:ec:6e:8f:38:f0:8b:4b:e2:
         bb:5c:4f:aa:00:a4:b3:2a:5c:3c:5b:eb:0f:1c:d3:bb:4b:46:
         98:1e:fd:12:5f:4e:4b:1f:d5:fa:f6:1a:ed:07:a4:32:56:84:
         e2:e6:65:cc:32:17:97:1e:45:08:6f:43:74:dd:2b:2b:9f:78:
         4c:27:0d:13:0a:8e:ae:8e:d3:a1:bc:38:e2:1a:0e:9f:c2:28:
         6d:81:76:6f:1a:c7:e4:37:00:6c:5e:c7:af:bc:93:3f:4e:c6:
         ef:4d:c6:07:25:a2:93:9e:27:de:9d:1b:45:94:45:30:0b:b4:
         1a:9c:36:80:96:f8:27:f9:b8:6a:a0:6f:61:39:fc:53:e2:8c:
         b7:33:e8:f4:5b:46:10:84:ff:56:e0:f2:51:0c:f2:75:13:76:
         dc:52:77:80:4f:6d:d8:d2:66:95:ea:65:51:9d:2a:be:e1:f4:
         f6:94:fa:27:18:87:e1:55:27:12:b3:c0:e3:5d:af:1e:7d:b2:
         3b:8d:c8:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj2Qv8nVcfMTf1qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU1Y2U4YmMtYzNjZC00Zjk5LThlM2YtYjRkOGNkNmJj
N2U4MB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk
MmIxYzY3NTgtMDRmMS00ZGRjLTg1ZTYtNmE1M2RhODU3MjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3fg7TU6qYKbkxw0WDp1tdJ02c+0lW2lXM28
OA68RRc98ZrWTss4mIjs+rmUkd6k5Kurt2TaYuDjZrbr2ATRXB81PoZy25BlnSGP
evmBrYkAcW6UgZ5M0KppxdZQB3z6145p30M1hFuTto2cBvkdnBtFqWun7L7gI7RF
uGlVN5XtRRijl1EqZcDh4fG4wJIiTYVetM7Ehnej201fe87OtkrwHRAFTSIEiwcc
8cjMf9ImODzmR0VO7oRPc3Bec9ylrQOG68gLDuSw8lEUAo5ij3XdL7KUQJWsvDGC
OS4XFsxBUpQuci+ex68M2fTi3VEhnk21BOuW+vRDzTpjtxQbmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2ARPMPRZxWr5cZMeV6GP3shMfoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZTVj
ZThiYy1jM2NkLTRmOTktOGUzZi1iNGQ4Y2Q2YmM3ZTgvZmEyMGY2YTItZDdjMy0z
YTJmLTgwNGMtNTFmYTg4MTdlMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWU1Y2U4YmMtYzNjZC00Zjk5LThl
M2YtYjRkOGNkNmJjN2U4L2VlNWNlOGJjLWMzY2QtNGY5OS04ZTNmLWI0ZDhjZDZi
YzdlOC5jcmwwHwYDVR0jBBgwFoAU1NAY2Fvnfsk6QNxHtPWeS2EwPhQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lZTVjZThiYy1jM2NkLTRmOTktOGUzZi1iNGQ4
Y2Q2YmM3ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxus2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAweqJi40PQ64GwcGbej0U8ZIpn751BmSanc4J8AL9KIi+DC7YJfYbqE
PzKsXnCnH3Z/mzVYA9uWjPItBjRk7f7sbo848ItL4rtcT6oApLMqXDxb6w8c07tL
Rpge/RJfTksf1fr2Gu0HpDJWhOLmZcwyF5ceRQhvQ3TdKyufeEwnDRMKjq6O06G8
OOIaDp/CKG2Bdm8ax+Q3AGxex6+8kz9Oxu9NxgclopOeJ96dG0WURTALtBqcNoCW
+Cf5uGqgb2E5/FPijLcz6PRbRhCE/1bg8lEM8nUTdtxSd4BPbdjSZpXqZVGdKr7h
9PaU+icYh+FVJxKzwONdrx59sjuNyJo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:56 2024 by rpki-client on console-fra.rpki-client.org