Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5ea9d2ac-36d3-35f0-99c5-a8427b8ec384.roa
File:                     5ea9d2ac-36d3-35f0-99c5-a8427b8ec384.roa (raw, json)
Hash identifier:          uLbXRARuI8hwKrmo+BwYNhvKpNQkhcildokXnudrBfk=
Subject key identifier:   B2:61:6F:01:D0:64:72:B1:20:75:BF:6C:49:F6:9B:A9:F0:65:2D:6C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285846FCF03701DE6BD00B18CCBB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5ea9d2ac-36d3-35f0-99c5-a8427b8ec384.roa
Signing time:             Sun 25 Aug 2024 01:00:32 +0000
ROA not before:           Sun 25 Aug 2024 01:00:32 +0000
ROA not after:            Sat 23 Nov 2024 02:00:32 +0000
asID:                     397216
IP address blocks:        199.7.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:f0:37:01:de:6b:d0:0b:18:cc:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 25 01:00:32 2024 GMT
            Not After : Nov 23 02:00:32 2024 GMT
        Subject: CN=dd455dd0-dc82-4fca-bdd3-4ae1aded065a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:c5:a1:b1:52:8e:22:0c:f8:c8:02:9f:f3:
                    f6:3c:76:8f:bf:39:4d:17:e6:3b:7f:99:d7:fe:c3:
                    5b:b5:c1:8f:f3:92:0c:38:83:b6:e7:34:5f:8e:ae:
                    68:48:3b:02:5c:d4:80:61:3a:74:af:0b:aa:54:43:
                    0a:d1:ad:48:ad:11:95:81:29:37:61:bc:c6:9a:26:
                    91:d8:08:1e:49:79:df:55:ab:91:65:78:c3:88:0c:
                    da:c2:2a:28:b6:c1:4f:4a:bc:e1:b6:0b:aa:96:d4:
                    de:20:f8:99:44:00:7a:ed:43:d9:63:ce:59:26:1b:
                    7b:85:f7:8f:24:fa:c5:89:0c:22:74:e4:8f:c2:55:
                    af:b7:d0:71:94:39:c0:a4:8e:d7:e7:9f:40:d5:69:
                    58:0c:e6:df:1c:70:df:71:d4:f8:59:5d:82:8a:b8:
                    83:cc:a8:6e:0e:d7:02:5a:76:62:14:6c:7f:ce:bb:
                    40:43:2b:a1:92:e8:8c:b7:0f:e0:2a:22:c7:8e:cc:
                    c1:10:b2:a1:7a:5c:c2:fa:29:98:aa:56:43:15:13:
                    13:de:61:5e:e1:c6:22:b7:3a:8c:3f:1e:79:c4:7e:
                    b9:54:69:62:60:98:c1:64:db:65:9c:93:3d:4b:47:
                    24:93:20:bb:77:fd:9c:31:06:c4:ec:2f:f2:cf:d1:
                    15:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:61:6F:01:D0:64:72:B1:20:75:BF:6C:49:F6:9B:A9:F0:65:2D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5ea9d2ac-36d3-35f0-99c5-a8427b8ec384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:90:cb:db:75:34:64:79:23:52:43:35:11:ae:17:77:82:e4:
         3f:09:ce:ea:83:19:69:e7:0a:c7:92:82:b4:34:09:57:46:0c:
         2f:f8:d3:a8:c1:51:05:fc:bb:9b:eb:c4:88:fb:b2:8e:70:ff:
         49:a3:69:c9:09:df:8a:d1:3f:33:54:5d:35:9e:4c:99:43:05:
         86:74:23:46:48:91:df:69:d3:50:74:56:0d:06:fc:b7:1f:ac:
         19:d8:3d:73:57:eb:8f:e7:37:b3:cc:8d:b7:6d:c9:21:81:8a:
         14:97:13:35:d8:ae:ff:68:85:bd:68:d2:d9:73:46:50:41:8d:
         18:72:f8:6a:c1:7d:10:05:d6:57:44:0f:29:53:36:ac:61:27:
         84:dc:c2:c7:f8:3c:13:ca:38:bd:69:26:95:36:e0:19:9e:2e:
         55:38:f7:b8:42:43:53:72:f0:a1:fe:fc:ef:f1:ca:b5:69:ba:
         a3:62:f5:20:0a:c6:95:0f:15:9d:22:02:3b:6c:43:d7:8e:22:
         61:24:0e:ab:da:28:b3:3d:be:c0:ee:bb:45:80:2b:c6:9a:c6:
         14:33:8d:58:53:b7:e3:6a:5a:0e:f0:1a:e9:fd:2c:e1:02:c0:
         bc:8a:e4:a5:19:3e:7f:81:2a:7a:08:11:4e:06:92:5c:8b:de:
         64:0f:18:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb88DcB3mvQCxjMuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDgyNTAxMDAzMloXDTI0MTEyMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZGQ0NTVkZDAtZGM4Mi00ZmNhLWJkZDMtNGFlMWFkZWQwNjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQLFobFSjiIM+MgCn/P2PHaPvzlNF+Y7f5nX
/sNbtcGP85IMOIO25zRfjq5oSDsCXNSAYTp0rwuqVEMK0a1IrRGVgSk3YbzGmiaR
2AgeSXnfVauRZXjDiAzawiootsFPSrzhtguqltTeIPiZRAB67UPZY85ZJht7hfeP
JPrFiQwidOSPwlWvt9BxlDnApI7X559A1WlYDObfHHDfcdT4WV2CiriDzKhuDtcC
WnZiFGx/zrtAQyuhkuiMtw/gKiLHjszBELKhelzC+imYqlZDFRMT3mFe4cYitzqM
Px55xH65VGliYJjBZNtlnJM9S0ckkyC7d/2cMQbE7C/yz9EV9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJhbwHQZHKxIHW/bEn2m6nwZS1sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNWVhOWQyYWMtMzZkMy0z
NWYwLTk5YzUtYTg0MjdiOGVjMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAeQy9t1NGR5I1JDNRGuF3eC5D8JzuqDGWnnCseSgrQ0CVdGDC/406jB
UQX8u5vrxIj7so5w/0mjackJ34rRPzNUXTWeTJlDBYZ0I0ZIkd9p01B0Vg0G/Lcf
rBnYPXNX64/nN7PMjbdtySGBihSXEzXYrv9ohb1o0tlzRlBBjRhy+GrBfRAF1ldE
DylTNqxhJ4Tcwsf4PBPKOL1pJpU24BmeLlU497hCQ1Ny8KH+/O/xyrVpuqNi9SAK
xpUPFZ0iAjtsQ9eOImEkDqvaKLM9vsDuu0WAK8aaxhQzjVhTt+NqWg7wGun9LOEC
wLyK5KUZPn+BKnoIEU4GklyL3mQPGJg=
-----END CERTIFICATE-----
Generated at Fri Oct 25 18:47:29 2024 by rpki-client on console-fra.rpki-client.org