Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa
File:                     2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa (raw, json)
Hash identifier:          n6UYPrFtD3zXBaLXpTxOuaqfkef7ANqEJ/Z7TpFkCxE=
Subject key identifier:   CE:D4:D4:B3:79:10:26:0E:78:62:EB:01:BE:50:05:11:6B:5B:73:4D
Certificate issuer:       /CN=8cf8807c-494e-41ab-842c-c0672d6283b1
Certificate serial:       010D0C9F432858473A5B8E61F40729FF399EB1C0
Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     22251
IP address blocks:        208.68.24.0/24 maxlen: 24
                          208.68.25.0/24 maxlen: 24
                          208.68.26.0/24 maxlen: 24
                          208.68.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:8e:61:f4:07:29:ff:39:9e:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=850b4ccb-ab86-480a-9ca4-afd2f8b592a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:37:a4:f8:71:c3:dd:80:b6:5a:9d:d8:9c:
                    9a:21:67:4e:f3:14:f7:8a:13:44:60:69:47:9a:84:
                    93:5c:df:aa:e1:d8:23:6c:f8:40:bb:ab:72:f4:e9:
                    29:a9:13:cb:07:b4:47:4d:f1:c9:22:6a:7f:65:b2:
                    9a:9b:e9:f9:fd:0f:71:13:08:62:88:b4:53:26:c7:
                    9e:e4:32:0d:f3:e1:ae:4a:95:66:71:6f:be:5d:6d:
                    79:3f:9b:71:43:39:77:2f:50:b5:a1:97:cb:9f:39:
                    85:6b:3d:d3:61:7d:20:f3:2e:19:29:0a:56:f5:f7:
                    29:44:ac:f7:43:27:6f:b4:3f:b8:7e:e9:7c:1b:13:
                    7f:d1:e5:80:af:ea:b7:5a:99:fd:af:e0:95:14:6a:
                    85:56:56:3b:22:39:b6:01:75:2c:50:2e:47:0f:1f:
                    5a:ab:66:53:7e:04:db:86:21:d1:5e:b1:4b:2f:dd:
                    23:4f:08:a3:35:81:97:c0:57:07:28:78:d3:61:ac:
                    9a:d7:fe:9e:62:49:66:d3:27:f9:3d:0d:ae:a7:70:
                    dc:67:92:18:95:2e:39:ac:9d:d5:1a:05:61:ec:88:
                    02:39:61:c4:82:b8:03:51:43:1f:1c:f2:67:63:13:
                    cb:ed:64:21:b3:4d:99:28:b1:25:7f:8b:3e:f3:55:
                    26:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D4:D4:B3:79:10:26:0E:78:62:EB:01:BE:50:05:11:6B:5B:73:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/2b1f63dc-d0f1-3c17-bdd7-e07d78d9b56d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl

            X509v3 Authority Key Identifier:
                keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:12:ce:75:02:c6:a2:1a:fe:b0:8c:4b:b8:e8:27:36:53:db:
         70:c9:45:a8:c5:a0:ca:ba:24:eb:41:76:a0:74:4b:cd:6f:a5:
         3a:79:fc:81:c4:18:09:7a:bf:43:92:43:57:cc:e4:63:db:e2:
         d8:d8:c2:5a:8e:0a:94:87:58:1e:27:b0:1f:45:0a:4a:2a:3e:
         1f:d8:51:28:c3:da:48:c3:f5:fd:c5:3c:ef:dc:d3:66:16:bb:
         ed:18:f3:21:91:52:d4:40:2b:d1:a6:80:ee:5e:79:c3:8b:ed:
         a4:0b:36:98:29:77:ea:8b:c8:f2:f5:02:69:5a:5a:5b:1f:c8:
         3c:cf:58:ce:60:d9:88:35:12:25:27:b2:00:df:cd:c4:ba:0b:
         71:16:a8:83:5a:70:62:91:20:c8:2b:0c:29:e2:4d:b6:c5:22:
         5d:96:a7:72:fb:8a:18:2f:c9:ea:70:9e:d2:c3:51:b8:b1:95:
         b8:51:87:9d:82:59:b6:4e:11:f6:bf:56:15:44:cd:bb:11:fb:
         f2:67:d8:93:77:5f:71:ef:c7:c5:29:8c:75:ef:20:d9:5a:4f:
         56:ed:9a:24:4c:5d:94:ac:e2:bb:fc:d6:d6:86:2c:b4:0e:07:
         81:68:13:67:5c:9e:3d:01:0a:6f:1c:6d:cb:a9:fc:ee:27:b0:
         f3:d5:c4:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W45h9Acp/zmescAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4
M2IxMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ODUwYjRjY2ItYWI4Ni00ODBhLTljYTQtYWZkMmY4YjU5MmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFk3pPhxw92Atlqd2JyaIWdO8xT3ihNEYGlH
moSTXN+q4dgjbPhAu6ty9OkpqRPLB7RHTfHJImp/ZbKam+n5/Q9xEwhiiLRTJsee
5DIN8+GuSpVmcW++XW15P5txQzl3L1C1oZfLnzmFaz3TYX0g8y4ZKQpW9fcpRKz3
QydvtD+4ful8GxN/0eWAr+q3Wpn9r+CVFGqFVlY7Ijm2AXUsUC5HDx9aq2ZTfgTb
hiHRXrFLL90jTwijNYGXwFcHKHjTYaya1/6eYklm0yf5PQ2up3DcZ5IYlS45rJ3V
GgVh7IgCOWHEgrgDUUMfHPJnYxPL7WQhs02ZKLElf4s+81UmnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7U1LN5ECYOeGLrAb5QBRFrW3NNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4
ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvMmIxZjYzZGMtZDBmMS0z
YzE3LWJkZDctZTA3ZDc4ZDliNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0
MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy
ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3
MmQ2MjgzYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYSznUCxqIa/rCMS7joJzZT23DJRajFoMq6JOtBdqB0S81vpTp5/IHE
GAl6v0OSQ1fM5GPb4tjYwlqOCpSHWB4nsB9FCkoqPh/YUSjD2kjD9f3FPO/c02YW
u+0Y8yGRUtRAK9GmgO5eecOL7aQLNpgpd+qLyPL1AmlaWlsfyDzPWM5g2Yg1EiUn
sgDfzcS6C3EWqINacGKRIMgrDCniTbbFIl2Wp3L7ihgvyepwntLDUbixlbhRh52C
WbZOEfa/VhVEzbsR+/Jn2JN3X3Hvx8UpjHXvINlaT1btmiRMXZSs4rv81taGLLQO
B4FoE2dcnj0BCm8cbcup/O4nsPPVxFc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:27 2024 by rpki-client on console-ams.rpki-client.org