Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa
File:                     18be9d53-2126-3b32-bb14-95983399a677.roa (raw, json)
Hash identifier:          wQXz+rrYVdJ+61D1q5YXJgKorObigcVFxsPlLu3cAJA=
Subject key identifier:   84:D3:90:C1:9A:4D:C3:3D:33:82:BA:CA:D2:A5:11:4C:E6:27:5A:59
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F43285847D29F58030FFDE817DA188800
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     3738
IP address blocks:        192.250.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:58:03:0f:fd:e8:17:da:18:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=e9e1979d-ac75-4c3d-af47-9e9046ba51d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:4f:29:2c:d7:d6:8f:04:04:e3:a7:25:e5:
                    82:ec:97:f6:52:24:95:d3:fd:79:f2:96:27:79:64:
                    52:94:c9:bc:c9:5f:65:ec:df:75:4c:47:d0:2d:40:
                    ae:40:75:cc:ad:69:ec:7c:57:56:06:76:b8:35:e8:
                    15:22:70:9a:62:a1:18:d4:56:52:8b:24:4f:60:90:
                    64:7d:8e:c4:36:3b:39:b1:29:7b:1f:d9:a0:4f:43:
                    3e:03:ec:aa:36:b3:cf:fe:52:03:3d:1d:14:ea:fc:
                    00:07:0f:bd:21:04:ac:03:c2:ec:11:b5:44:d1:95:
                    f2:a9:e2:db:4f:c9:5b:e4:85:50:37:78:f0:1e:47:
                    00:95:3e:d9:f7:41:13:9a:d4:a1:2f:4e:a0:30:de:
                    45:f4:c9:62:a0:6b:fc:e3:fc:00:c3:58:e7:dc:6e:
                    bc:31:15:34:7f:b2:ac:2f:5b:1a:d5:3c:ca:d8:72:
                    11:4f:69:bb:20:a9:b8:08:69:78:05:8b:4f:44:a3:
                    12:76:49:a1:cf:42:2b:fd:2a:6c:02:68:bf:88:3b:
                    0d:84:12:f4:e5:c8:2a:35:a8:c4:15:ee:24:58:1d:
                    27:df:35:40:fe:eb:2e:6d:f5:9e:ab:8e:a2:4a:16:
                    53:bd:dc:94:b2:6e:90:7b:bd:2f:9a:0f:32:37:06:
                    40:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D3:90:C1:9A:4D:C3:3D:33:82:BA:CA:D2:A5:11:4C:E6:27:5A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:70:93:59:9b:4f:ff:00:39:8b:63:ba:47:07:e8:34:97:fe:
         e7:d8:1e:1b:b8:eb:0e:9b:82:2b:6b:90:89:ab:82:1c:e1:0f:
         e0:79:76:42:25:ab:ff:53:07:2d:18:8a:36:e0:4b:be:2c:90:
         d1:57:74:51:61:e2:cc:68:76:84:81:43:5e:ab:9f:98:6f:23:
         f3:49:de:26:6a:dd:fe:59:da:d3:ba:d7:ed:1d:11:ba:a0:a2:
         bb:dc:27:63:a4:b6:ed:c7:97:36:c3:5f:18:49:a8:9d:98:29:
         ad:ee:32:86:b0:ac:cc:77:5f:19:68:b8:eb:92:55:09:70:78:
         a9:27:b5:00:34:a8:e0:c1:8c:8f:aa:b7:36:37:0f:40:60:a6:
         79:8d:21:81:ac:61:fb:2e:31:19:df:34:bb:75:51:97:8e:51:
         76:34:9e:ca:ef:c1:55:8e:90:fb:e2:66:86:4d:c8:21:a2:23:
         d7:18:3c:80:5b:8d:1e:95:e8:ff:e6:88:d2:60:f3:72:f9:84:
         25:0f:7c:7b:3a:60:22:a0:18:a0:00:d2:df:80:c7:49:9d:72:
         bc:ca:52:f8:b6:67:94:a2:6d:c0:8d:f9:f5:f4:57:95:84:e0:
         9c:1f:2f:67:de:f7:42:f3:05:06:7a:05:45:9b:42:54:49:c7:
         81:55:9f:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn1gDD/3oF9oYiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl
YzAwMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk
ZTllMTk3OWQtYWM3NS00YzNkLWFmNDctOWU5MDQ2YmE1MWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN1PKSzX1o8EBOOnJeWC7Jf2UiSV0/158pYn
eWRSlMm8yV9l7N91TEfQLUCuQHXMrWnsfFdWBna4NegVInCaYqEY1FZSiyRPYJBk
fY7ENjs5sSl7H9mgT0M+A+yqNrPP/lIDPR0U6vwABw+9IQSsA8LsEbVE0ZXyqeLb
T8lb5IVQN3jwHkcAlT7Z90ETmtShL06gMN5F9MlioGv84/wAw1jn3G68MRU0f7Ks
L1sa1TzK2HIRT2m7IKm4CGl4BYtPRKMSdkmhz0Ir/SpsAmi/iDsNhBL05cgqNajE
Fe4kWB0n3zVA/usubfWeq46iShZTvdyUsm6Qe70vmg8yNwZAvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITTkMGaTcM9M4K6ytKlEUzmJ1pZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj
MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMThiZTlkNTMtMjEyNi0z
YjMyLWJiMTQtOTU5ODMzOTlhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk
NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4
ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1
NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJwk1mbT/8AOYtjukcH6DSX/ufYHhu46w6bgitrkImrghzhD+B5dkIl
q/9TBy0YijbgS74skNFXdFFh4sxodoSBQ16rn5hvI/NJ3iZq3f5Z2tO61+0dEbqg
orvcJ2Oktu3HlzbDXxhJqJ2YKa3uMoawrMx3XxlouOuSVQlweKkntQA0qODBjI+q
tzY3D0BgpnmNIYGsYfsuMRnfNLt1UZeOUXY0nsrvwVWOkPviZoZNyCGiI9cYPIBb
jR6V6P/miNJg83L5hCUPfHs6YCKgGKAA0t+Ax0mdcrzKUvi2Z5SibcCN+fX0V5WE
4JwfL2fe90LzBQZ6BUWbQlRJx4FVn+A=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:16 2024 by rpki-client on console-ams.rpki-client.org