Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/f82fc5d7-4c78-3149-849d-64462b0104bd.roa
File:                     f82fc5d7-4c78-3149-849d-64462b0104bd.roa (raw, json)
Hash identifier:          OIcGksho+IOgK8X6nTqlCUMqIhWYl4I04p/MnGGGL1w=
Subject key identifier:   56:CB:7E:FE:87:13:51:55:55:AA:34:1A:56:86:CA:DB:92:D8:D2:A6
Certificate issuer:       /CN=10aa04f0-7421-4813-bfda-269303d05d1d
Certificate serial:       010D0C9F4328584742BB56FA930F44A1E61D3000
Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/f82fc5d7-4c78-3149-849d-64462b0104bd.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     77
IP address blocks:        128.244.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:56:fa:93:0f:44:a1:e6:1d:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=5d211f0c-9063-40ce-921c-a6023e8067ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:09:06:73:e2:ca:d7:a1:a5:1e:f1:43:89:
                    88:a3:03:e8:91:64:8f:87:c1:c4:de:55:2a:27:24:
                    87:30:7e:68:b7:90:ba:8c:04:0c:45:6f:9e:0a:8a:
                    81:a3:25:45:98:29:0b:a1:5e:11:fe:1f:b4:e3:a0:
                    66:0b:51:bc:c1:26:57:89:37:25:fc:82:e9:0e:36:
                    e5:25:60:f5:ab:ff:86:a1:e5:f0:e3:ae:74:7c:18:
                    02:fd:3a:4a:4b:d8:0c:f3:ed:5e:c7:a2:49:f6:18:
                    ca:cb:97:e0:25:70:0b:f3:80:06:cf:1d:80:60:87:
                    3e:cb:73:a0:91:e6:2e:e6:fe:c5:fc:9d:be:bb:4b:
                    7f:0e:09:3c:63:2c:b2:ce:29:05:d6:c1:00:9e:19:
                    16:3b:62:77:b6:6d:69:4d:44:d0:48:bd:cb:d2:3e:
                    44:92:fc:e7:a8:34:0f:b2:61:29:29:80:ef:15:a6:
                    e4:8f:c2:52:46:a4:80:29:d0:5b:18:6d:9f:b1:17:
                    55:ca:1f:68:62:0c:ce:17:2e:21:ed:43:7f:b0:0a:
                    c7:90:53:0c:e2:50:4c:6e:25:b2:29:9d:8a:e5:35:
                    a7:d7:b2:aa:6e:01:7d:3a:a3:88:53:db:89:e6:c5:
                    76:2e:ca:9d:13:27:55:9d:d0:89:b0:c0:ed:db:3c:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:7E:FE:87:13:51:55:55:AA:34:1A:56:86:CA:DB:92:D8:D2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/f82fc5d7-4c78-3149-849d-64462b0104bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl

            X509v3 Authority Key Identifier:
                keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.244.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:0a:3e:3a:f6:b6:e8:c9:e1:85:94:d9:4a:74:64:4c:07:a0:
         14:65:14:35:68:4f:5f:80:df:b2:8a:19:ef:b9:69:8a:0a:23:
         ef:5a:00:d0:44:ad:13:82:a4:82:02:1c:c6:aa:41:47:78:c0:
         18:22:00:20:3e:be:32:2f:01:f8:f8:cf:da:ff:06:7a:47:56:
         9a:b0:51:4d:07:ec:02:09:de:e2:da:be:4d:62:06:60:bc:df:
         46:e6:e8:0a:fb:93:c6:ae:e2:0d:96:3a:cf:d1:df:13:54:00:
         b7:3a:a3:20:d5:2a:40:49:27:04:29:36:6e:64:ab:41:5c:74:
         bf:14:ce:28:2d:50:4f:1b:3d:88:59:c2:36:c1:fe:27:99:60:
         cb:04:35:bc:b9:c4:f3:71:98:7a:ec:05:3d:e5:84:d3:f0:35:
         49:b7:a5:76:69:da:f8:5a:8b:b9:bf:34:74:cb:5a:4b:80:e7:
         c9:41:59:5b:9c:fd:0d:9d:29:fe:24:81:ff:74:7c:74:b0:ad:
         c8:b5:aa:94:f9:26:b2:50:43:79:84:9a:29:7b:b0:9a:d7:6e:
         30:cd:fc:c8:99:9e:f2:11:aa:0c:07:b6:51:4d:4c:58:a7:09:
         65:25:a2:1c:44:3e:6e:4a:4d:2e:01:07:a2:07:ff:f2:5f:fc:
         de:32:80:ac
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdCu1b6kw9EoeYdMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1
ZDFkMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
NWQyMTFmMGMtOTA2My00MGNlLTkyMWMtYTYwMjNlODA2N2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAEJBnPiytehpR7xQ4mIowPokWSPh8HE3lUq
JySHMH5ot5C6jAQMRW+eCoqBoyVFmCkLoV4R/h+046BmC1G8wSZXiTcl/ILpDjbl
JWD1q/+GoeXw4650fBgC/TpKS9gM8+1ex6JJ9hjKy5fgJXAL84AGzx2AYIc+y3Og
keYu5v7F/J2+u0t/Dgk8YyyyzikF1sEAnhkWO2J3tm1pTUTQSL3L0j5EkvznqDQP
smEpKYDvFabkj8JSRqSAKdBbGG2fsRdVyh9oYgzOFy4h7UN/sArHkFMM4lBMbiWy
KZ2K5TWn17KqbgF9OqOIU9uJ5sV2LsqdEydVndCJsMDt2zyOiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFbLfv6HE1FVVao0GlaGytuS2NKmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh
MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvZjgyZmM1ZDctNGM3OC0z
MTQ5LTg0OWQtNjQ0NjJiMDEwNGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm
ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw
NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz
MDNkMDVkMWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgPQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEA1go+Ova26MnhhZTZSnRkTAegFGUUNWhPX4DfsooZ77lpigoj71oA0ESt
E4KkggIcxqpBR3jAGCIAID6+Mi8B+PjP2v8GekdWmrBRTQfsAgne4tq+TWIGYLzf
RuboCvuTxq7iDZY6z9HfE1QAtzqjINUqQEknBCk2bmSrQVx0vxTOKC1QTxs9iFnC
NsH+J5lgywQ1vLnE83GYeuwFPeWE0/A1Sbeldmna+FqLub80dMtaS4DnyUFZW5z9
DZ0p/iSB/3R8dLCtyLWqlPkmslBDeYSaKXuwmtduMM38yJme8hGqDAe2UU1MWKcJ
ZSWiHEQ+bkpNLgEHogf/8l/83jKArA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org