Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/5e381d2c-07d6-3224-a037-e03d46a96114.roa
File:                     5e381d2c-07d6-3224-a037-e03d46a96114.roa (raw, json)
Hash identifier:          C8144Xy0e6QOcDvNx94emI61qytDTPtHObb+mPxEdOM=
Subject key identifier:   00:DF:26:B1:13:3F:BD:DC:40:2E:2D:5F:42:F1:A7:2D:75:E2:5C:65
Certificate issuer:       /CN=16bc29f5-43ef-48ab-b3df-a2828f565715
Certificate serial:       010D0C9F43285847BD915A584DD667B5A72A1480
Authority key identifier: 8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/5e381d2c-07d6-3224-a037-e03d46a96114.roa
Signing time:             Sat 02 Nov 2024 01:00:31 +0000
ROA not before:           Sat 02 Nov 2024 01:00:31 +0000
ROA not after:            Fri 31 Jan 2025 02:00:31 +0000
asID:                     16942
IP address blocks:        170.117.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:91:5a:58:4d:d6:67:b5:a7:2a:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bc29f5-43ef-48ab-b3df-a2828f565715
        Validity
            Not Before: Nov  2 01:00:31 2024 GMT
            Not After : Jan 31 02:00:31 2025 GMT
        Subject: CN=08b8b3d8-f5ef-41cc-b802-3a9abc450af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:49:6b:3b:36:e1:68:0c:51:55:53:85:13:
                    5a:aa:5f:26:92:0f:e3:3c:36:53:14:90:32:05:9b:
                    ba:de:ae:9a:0d:5d:f1:20:48:51:5b:64:c6:59:24:
                    bb:60:7c:59:96:5d:5c:6a:9b:a1:8b:35:bb:27:a0:
                    7d:bf:eb:dc:3e:e6:25:84:c7:9d:e4:12:1d:83:7f:
                    d6:a7:7f:b3:a7:7b:1f:2e:a9:2f:ac:84:22:23:e2:
                    af:db:48:7c:ca:b2:9b:8a:8f:87:ec:7f:ee:0c:46:
                    39:58:fb:01:cf:7f:50:3c:9f:5d:f3:a0:d3:6e:8e:
                    b2:88:3f:b2:b6:65:73:90:e5:24:75:c9:2d:f5:90:
                    52:45:79:cb:ac:fb:45:33:a6:b6:bc:f8:12:de:87:
                    65:87:74:e5:4c:db:17:8b:1f:69:fa:c5:7b:d7:0f:
                    01:02:94:08:54:c4:26:b2:9b:ec:3d:5a:77:40:a0:
                    c3:99:8a:18:8b:29:ca:eb:6e:3d:ed:29:2b:58:10:
                    10:f2:fa:df:53:ae:6d:07:0f:4f:2c:e0:af:e6:ac:
                    cc:5c:63:02:56:51:31:1d:6a:af:99:7b:f3:38:f5:
                    8d:ad:55:e0:7c:0c:c4:73:b4:e3:c6:b4:0a:a4:56:
                    1c:0e:ea:17:2a:fe:f1:4b:6e:09:2b:80:ed:7a:10:
                    09:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DF:26:B1:13:3F:BD:DC:40:2E:2D:5F:42:F1:A7:2D:75:E2:5C:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/5e381d2c-07d6-3224-a037-e03d46a96114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.117.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:30:18:5e:05:be:32:1a:e1:1a:24:18:44:db:dc:cf:46:
         11:7d:0a:dd:db:d4:25:45:09:6c:ae:4a:bb:f8:a6:83:31:17:
         f5:b2:a6:ff:a7:aa:3e:c7:46:bf:75:62:01:80:73:d4:b6:31:
         ac:c9:86:23:61:aa:57:50:c0:a0:21:2a:62:8c:07:11:04:21:
         53:1d:03:16:c0:d6:5d:6d:bf:8e:96:43:09:44:31:84:9d:b6:
         28:73:48:55:65:d0:91:a2:91:77:9c:fe:5f:3b:d8:4f:9f:bc:
         1b:cf:a0:a2:62:dc:3d:43:95:25:f5:b1:ec:b0:f3:5e:bb:08:
         90:c0:73:d6:e0:26:92:7e:8b:1d:97:65:51:0a:d2:83:7c:93:
         8e:96:5d:59:88:22:cd:08:64:b1:90:4c:93:98:73:86:a5:9d:
         cf:81:8b:25:aa:34:b3:b6:07:60:08:42:42:21:96:17:92:ab:
         19:f3:9d:e9:4f:55:97:cc:46:01:29:a6:83:1b:3a:2f:5f:b8:
         cc:7d:2d:c9:1d:60:c0:5e:bb:29:f5:61:7d:6e:ba:19:58:9e:
         00:bc:42:50:1d:22:d3:56:0a:10:c2:d7:0a:87:62:9f:40:1c:
         20:af:83:c9:a0:a4:b7:e6:d6:22:af:11:46:51:20:e0:e3:2b:
         25:59:e0:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe9kVpYTdZntacqFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZiYzI5ZjUtNDNlZi00OGFiLWIzZGYtYTI4MjhmNTY1
NzE1MB4XDTI0MTEwMjAxMDAzMVoXDTI1MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
MDhiOGIzZDgtZjVlZi00MWNjLWI4MDItM2E5YWJjNDUwYWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYNJazs24WgMUVVThRNaql8mkg/jPDZTFJAy
BZu63q6aDV3xIEhRW2TGWSS7YHxZll1capuhizW7J6B9v+vcPuYlhMed5BIdg3/W
p3+zp3sfLqkvrIQiI+Kv20h8yrKbio+H7H/uDEY5WPsBz39QPJ9d86DTbo6yiD+y
tmVzkOUkdckt9ZBSRXnLrPtFM6a2vPgS3odlh3TlTNsXix9p+sV71w8BApQIVMQm
spvsPVp3QKDDmYoYiynK62497SkrWBAQ8vrfU65tBw9PLOCv5qzMXGMCVlExHWqv
mXvzOPWNrVXgfAzEc7TjxrQKpFYcDuoXKv7xS24JK4DtehAJnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADfJrETP73cQC4tX0Lxpy114lxlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNmJj
MjlmNS00M2VmLTQ4YWItYjNkZi1hMjgyOGY1NjU3MTUvNWUzODFkMmMtMDdkNi0z
MjI0LWEwMzctZTAzZDQ2YTk2MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTZiYzI5ZjUtNDNlZi00OGFiLWIz
ZGYtYTI4MjhmNTY1NzE1LzE2YmMyOWY1LTQzZWYtNDhhYi1iM2RmLWEyODI4ZjU2
NTcxNS5jcmwwHwYDVR0jBBgwFoAUisP2MWx4vlP/QSJZsB53a4ZPSZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xNmJjMjlmNS00M2VmLTQ4YWItYjNkZi1hMjgy
OGY1NjU3MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqnXcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACz8MBheBb4yGuEaJBhE29zPRhF9Ct3b1CVFCWyuSrv4poMxF/Wypv+n
qj7HRr91YgGAc9S2MazJhiNhqldQwKAhKmKMBxEEIVMdAxbA1l1tv46WQwlEMYSd
tihzSFVl0JGikXec/l872E+fvBvPoKJi3D1DlSX1seyw8167CJDAc9bgJpJ+ix2X
ZVEK0oN8k46WXVmIIs0IZLGQTJOYc4alnc+BiyWqNLO2B2AIQkIhlheSqxnznelP
VZfMRgEppoMbOi9fuMx9LckdYMBeuyn1YX1uuhlYngC8QlAdItNWChDC1wqHYp9A
HCCvg8mgpLfm1iKvEUZRIODjKyVZ4Bc=
-----END CERTIFICATE-----
Generated at Sun Nov 24 00:16:45 2024 by rpki-client on console-ams.rpki-client.org