Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b4383a28-7225-3a9f-8489-f65812ca279c.roa
File:                     b4383a28-7225-3a9f-8489-f65812ca279c.roa (raw, json)
Hash identifier:          RZl2LvCcS/dpY7Weprto1VRiLYiSVqVcpwmZPh/p+Lw=
Subject key identifier:   57:D0:8C:1D:BC:35:05:4B:27:FD:DF:21:CB:B4:96:BF:CA:4E:45:16
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F43285847D999ED09C1C2BD0ED894C300
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b4383a28-7225-3a9f-8489-f65812ca279c.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     3738
IP address blocks:        192.250.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:ed:09:c1:c2:bd:0e:d8:94:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=1fd171bc-fe20-4b3b-a52a-13bf5f6f9da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:e0:8b:37:17:13:3b:8b:d4:84:7b:d4:03:
                    32:db:ae:fc:bb:af:a6:7a:3d:b3:54:4d:df:6b:60:
                    07:6b:be:83:d8:a3:d8:2e:4d:27:b0:a0:2c:50:09:
                    e1:25:a3:32:29:b0:9d:9e:4c:71:3f:0a:c2:a9:af:
                    68:ed:2e:ee:20:a3:8e:11:9c:4c:f4:55:68:96:e5:
                    77:19:f0:9f:f2:7a:8b:58:1a:ae:77:3d:cb:c2:86:
                    52:84:6b:e1:61:05:0f:4c:85:33:68:49:60:c0:75:
                    e4:7d:b0:f2:24:30:73:31:ec:ba:f1:ef:85:b9:b3:
                    c2:04:16:f1:05:57:1b:03:ca:12:28:65:2c:91:81:
                    67:8f:3e:c4:3a:51:9b:c8:16:e8:26:35:38:55:7f:
                    10:c6:a4:6c:f0:b1:56:bb:8d:62:08:44:f9:d9:e7:
                    38:f6:b0:c9:42:59:91:d0:fc:04:0d:b2:c1:75:f1:
                    0d:75:a1:46:d3:87:b1:8a:1a:10:40:28:9c:d1:8b:
                    9b:88:22:34:6f:5d:52:6c:c8:2e:ed:0c:f8:07:7c:
                    e3:1b:2d:1d:cb:b4:34:22:46:cf:96:6c:24:a5:9b:
                    eb:97:d4:e3:67:43:a3:a0:92:2b:c1:5b:d4:f2:62:
                    42:27:3f:5a:e3:54:6f:8b:12:ce:ad:c1:68:f2:27:
                    72:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D0:8C:1D:BC:35:05:4B:27:FD:DF:21:CB:B4:96:BF:CA:4E:45:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/b4383a28-7225-3a9f-8489-f65812ca279c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:55:f3:ef:21:2a:d9:65:4e:0f:97:38:42:1b:5f:99:a8:70:
         1c:0b:a1:79:a9:1d:a6:96:67:62:46:f8:36:0d:5c:ee:14:6e:
         79:49:24:00:03:93:ad:18:39:f5:b5:74:3d:47:ec:86:f2:cc:
         20:22:10:56:56:44:03:5b:52:c7:e9:c8:d4:c8:3c:5d:fa:f9:
         50:6d:d5:4a:be:b8:fa:b6:09:f1:3c:df:cb:08:dc:3a:8c:ef:
         3d:e6:d5:36:ab:eb:aa:51:b1:fe:7d:59:39:a1:4c:96:33:5b:
         e0:df:a8:33:4c:23:c0:1f:4c:ec:e1:e3:25:79:91:b2:4d:00:
         29:8c:b2:c9:a1:75:fc:b2:0c:6e:5b:fd:27:aa:95:44:37:f2:
         8a:26:86:13:aa:24:ea:ce:e2:44:cd:5c:3b:09:fa:4c:32:1d:
         a5:c8:f6:5a:42:ce:03:c6:c4:dd:69:73:58:ce:d6:5b:fc:58:
         ba:14:34:03:7a:28:10:9a:d3:2a:27:5c:de:c1:2d:49:7f:7d:
         b9:8c:e0:6a:e7:b7:e9:24:ff:db:de:1c:ae:96:61:07:da:18:
         ef:43:3e:7d:37:c5:fc:5b:0f:e8:e0:1b:08:d9:00:53:ef:c2:
         08:02:f6:3f:5a:8a:5c:b9:e6:97:5a:b4:39:ac:25:0c:da:ad:
         8a:41:77:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZme0JwcK9DtiUwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl
YzAwMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk
MWZkMTcxYmMtZmUyMC00YjNiLWE1MmEtMTNiZjVmNmY5ZGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySzgizcXEzuL1IR71AMy2678u6+mej2zVE3f
a2AHa76D2KPYLk0nsKAsUAnhJaMyKbCdnkxxPwrCqa9o7S7uIKOOEZxM9FVoluV3
GfCf8nqLWBqudz3LwoZShGvhYQUPTIUzaElgwHXkfbDyJDBzMey68e+FubPCBBbx
BVcbA8oSKGUskYFnjz7EOlGbyBboJjU4VX8QxqRs8LFWu41iCET52ec49rDJQlmR
0PwEDbLBdfENdaFG04exihoQQCic0YubiCI0b11SbMgu7Qz4B3zjGy0dy7Q0IkbP
lmwkpZvrl9TjZ0OjoJIrwVvU8mJCJz9a41RvixLOrcFo8idyIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfQjB28NQVLJ/3fIcu0lr/KTkUWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj
MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYjQzODNhMjgtNzIyNS0z
YTlmLTg0ODktZjY1ODEyY2EyNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk
NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4
ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1
NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNV8+8hKtllTg+XOEIbX5mocBwLoXmpHaaWZ2JG+DYNXO4UbnlJJAAD
k60YOfW1dD1H7IbyzCAiEFZWRANbUsfpyNTIPF36+VBt1Uq+uPq2CfE838sI3DqM
7z3m1Tar66pRsf59WTmhTJYzW+DfqDNMI8AfTOzh4yV5kbJNACmMssmhdfyyDG5b
/SeqlUQ38oomhhOqJOrO4kTNXDsJ+kwyHaXI9lpCzgPGxN1pc1jO1lv8WLoUNAN6
KBCa0yonXN7BLUl/fbmM4Grnt+kk/9veHK6WYQfaGO9DPn03xfxbD+jgGwjZAFPv
wggC9j9aily55pdatDmsJQzarYpBd20=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:16 2024 by rpki-client on console-ams.rpki-client.org