Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/45e59513-dc26-3e04-abf8-7d34500e5091.roa
File:                     45e59513-dc26-3e04-abf8-7d34500e5091.roa (raw, json)
Hash identifier:          lpev6crcbePTU0vMv4l+0yrtoO20jDXsZPdD29jcZw0=
Subject key identifier:   2B:29:BC:71:38:DC:C4:B4:D9:5A:C0:02:A1:94:88:5F:FF:9C:D1:04
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F43285847CFD4A75E580B5D120BBE1480
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/45e59513-dc26-3e04-abf8-7d34500e5091.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     11810
IP address blocks:        216.185.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a7:5e:58:0b:5d:12:0b:be:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=1db03025-0461-4971-9f29-518f87255d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b7:7d:4e:c0:d1:dd:7b:0f:55:17:97:ac:64:
                    76:65:f2:36:75:d7:64:99:58:87:59:b6:00:41:9d:
                    da:29:0b:09:39:3d:83:cc:68:97:62:37:36:64:2a:
                    d8:7c:25:e9:32:1b:5e:5e:05:27:bc:f0:73:ab:1e:
                    0a:be:b4:f4:df:02:d0:26:9c:00:1d:84:93:f1:6b:
                    8a:fc:75:b4:f3:99:09:1d:af:d2:ac:2b:94:4b:cf:
                    59:92:40:38:40:b8:83:ee:32:a8:b5:d3:74:87:a8:
                    45:25:05:b8:94:e6:78:f9:cb:72:b2:75:ae:6d:1c:
                    46:a5:43:16:c4:3d:b1:04:5d:a3:2f:4c:78:57:fd:
                    64:18:4f:b8:2a:a7:3a:70:ae:24:53:9e:14:aa:fa:
                    e8:6c:38:61:36:e7:46:ab:b2:5d:29:f5:e3:b3:cf:
                    d5:10:a3:d5:49:94:15:d2:b5:36:c5:5c:75:5b:f0:
                    62:42:49:b4:7d:22:4c:c9:b9:b5:3b:bd:cd:3f:b0:
                    dc:62:12:91:49:27:b2:34:57:b9:cc:4a:c3:63:68:
                    0a:06:20:66:d8:78:2b:13:ba:2e:63:b2:04:41:65:
                    83:30:4f:01:3b:e7:fa:d8:5d:da:6b:4a:e8:41:b8:
                    1d:ac:24:f5:5a:71:d0:08:5b:0a:6b:8f:e1:0a:a8:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:29:BC:71:38:DC:C4:B4:D9:5A:C0:02:A1:94:88:5F:FF:9C:D1:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/45e59513-dc26-3e04-abf8-7d34500e5091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:79:e3:8d:d1:e0:c0:91:0f:89:99:ed:56:8a:6e:15:6e:82:
         1e:24:da:c3:23:fb:27:75:ef:bf:01:f7:1a:59:1f:3a:02:41:
         0c:88:8e:fe:0c:d2:12:a3:3d:d2:2f:65:f0:90:f9:f8:51:6d:
         76:70:68:6a:69:72:b7:81:c6:05:59:18:c4:78:a9:6e:de:62:
         fa:59:e1:db:f0:44:13:99:46:1f:26:84:5b:d9:c7:18:89:12:
         70:49:12:e3:a0:d1:a8:17:aa:18:b7:7c:78:de:54:2f:2c:f8:
         fb:11:e5:43:33:cb:b4:dd:7a:c4:ec:b3:4c:37:7e:1b:e7:03:
         37:4c:e2:b0:3c:10:44:b8:86:0c:59:dc:8d:7b:b2:93:1f:81:
         49:f9:e3:70:33:49:de:fc:61:b5:20:15:92:9a:c9:9a:46:a7:
         73:ad:e3:5b:40:f6:5d:d5:6b:4b:bd:1b:d1:80:8f:2b:74:65:
         5c:8d:b7:a8:81:65:58:8b:f4:1b:37:34:9f:aa:19:bf:39:98:
         9c:d4:d4:6e:ba:17:09:e6:f1:10:61:f7:c0:e6:6d:9b:4a:cc:
         b6:32:1e:0c:14:00:34:c9:1a:5a:8b:d7:f5:db:a7:a2:f7:75:
         38:79:f5:eb:4c:93:8a:e6:15:2a:e4:55:96:5e:fb:7f:ff:36:
         39:3e:54:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1KdeWAtdEgu+FIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw
NGRhMB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk
MWRiMDMwMjUtMDQ2MS00OTcxLTlmMjktNTE4Zjg3MjU1ZDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrd9TsDR3XsPVReXrGR2ZfI2dddkmViHWbYA
QZ3aKQsJOT2DzGiXYjc2ZCrYfCXpMhteXgUnvPBzqx4KvrT03wLQJpwAHYST8WuK
/HW085kJHa/SrCuUS89ZkkA4QLiD7jKotdN0h6hFJQW4lOZ4+ctysnWubRxGpUMW
xD2xBF2jL0x4V/1kGE+4Kqc6cK4kU54UqvrobDhhNudGq7JdKfXjs8/VEKPVSZQV
0rU2xVx1W/BiQkm0fSJMybm1O73NP7DcYhKRSSeyNFe5zErDY2gKBiBm2HgrE7ou
Y7IEQWWDME8BO+f62F3aa0roQbgdrCT1WnHQCFsKa4/hCqiPewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCspvHE43MS02VrAAqGUiF//nNEEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4
YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvNDVlNTk1MTMtZGMyNi0z
ZTA0LWFiZjgtN2QzNDUwMGU1MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4
ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1
MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh
NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2LnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHh5443R4MCRD4mZ7VaKbhVugh4k2sMj+yd1778B9xpZHzoCQQyIjv4M
0hKjPdIvZfCQ+fhRbXZwaGppcreBxgVZGMR4qW7eYvpZ4dvwRBOZRh8mhFvZxxiJ
EnBJEuOg0agXqhi3fHjeVC8s+PsR5UMzy7TdesTss0w3fhvnAzdM4rA8EES4hgxZ
3I17spMfgUn543AzSd78YbUgFZKayZpGp3Ot41tA9l3Va0u9G9GAjyt0ZVyNt6iB
ZViL9Bs3NJ+qGb85mJzU1G66Fwnm8RBh98DmbZtKzLYyHgwUADTJGlqL1/Xbp6L3
dTh59etMk4rmFSrkVZZe+3//Njk+VJ4=
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:18:37 2024 by rpki-client on console-fra.rpki-client.org