Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/abf701ec-494a-39e4-b346-585255e4aae7.roa
File:                     abf701ec-494a-39e4-b346-585255e4aae7.roa (raw, json)
Hash identifier:          geTaqzF8Qt9z98QVhkkz+Uwn/IvMI9qPJODm5uKDzak=
Subject key identifier:   DB:80:22:13:3C:B1:56:1A:E3:EC:7D:8A:94:17:DC:91:B6:CA:F3:00
Certificate issuer:       /CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
Certificate serial:       010D0C9F432858478CB68D12A8132D152164CC00
Authority key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/abf701ec-494a-39e4-b346-585255e4aae7.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     19782
IP address blocks:        163.245.0.0/16 maxlen: 24
                          205.215.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8d:12:a8:13:2d:15:21:64:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=a4422767-6605-4615-bcba-841ec2ddaafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:30:d5:89:ca:f5:0c:0b:7a:ea:2e:c8:a3:85:
                    4d:b6:e3:85:e7:ba:e8:b7:ba:e8:70:fa:63:fb:cc:
                    1e:35:45:48:dc:9a:a2:91:bc:10:66:66:ec:5d:96:
                    62:32:30:d0:74:e2:97:27:b7:af:d9:dc:48:26:0d:
                    41:49:6d:74:88:4f:52:fd:08:53:0b:11:4b:b6:2a:
                    89:b8:f3:95:93:df:96:39:59:c4:56:d9:27:b1:16:
                    d5:fa:43:9a:b9:d2:31:df:ab:7c:32:69:34:0f:60:
                    df:c1:9f:7f:95:53:0e:f9:47:9e:25:9a:c1:1b:e0:
                    09:a6:67:b8:6d:89:8e:a8:fc:9d:8b:32:e8:9d:ea:
                    4c:50:0f:e1:e2:d1:5d:70:e8:1b:cd:e9:b3:9a:80:
                    23:9b:3e:0f:bd:cb:a3:a2:69:ca:78:1f:c4:d0:a7:
                    25:15:e2:da:be:81:e7:b4:ce:d0:7d:3a:d0:63:0c:
                    a5:fc:6b:e3:e5:53:fe:55:72:ab:0d:e3:20:69:3f:
                    d7:61:40:1e:a2:68:bb:20:ad:e4:b1:60:d6:36:20:
                    3f:ef:41:3b:9b:02:92:40:45:06:21:75:2f:1b:52:
                    cb:0b:bf:62:4c:d1:fe:24:18:6f:72:9e:53:da:8a:
                    ab:13:d7:fa:f7:e0:9d:66:5f:57:cb:b4:b8:44:56:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:80:22:13:3C:B1:56:1A:E3:EC:7D:8A:94:17:DC:91:B6:CA:F3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/abf701ec-494a-39e4-b346-585255e4aae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl

            X509v3 Authority Key Identifier:
                keyid:74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.245.0.0/16
                  205.215.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:79:6b:ca:f6:64:31:34:d0:4d:61:50:ef:6f:7c:72:5a:e3:
         1c:54:9f:90:35:c1:e8:aa:28:04:57:60:e8:3e:e2:d0:54:13:
         7b:f9:42:63:4b:9c:f8:48:e4:de:f6:0c:74:61:48:b7:e2:35:
         d6:26:ac:bf:29:d4:dd:e7:c3:d4:f7:0e:94:9e:b1:d7:13:c7:
         5c:4d:71:43:92:78:4e:f1:80:f5:b9:5b:49:58:d0:d0:4a:03:
         bf:05:31:3f:19:80:fc:85:38:3f:57:16:c6:cf:8c:3d:3c:49:
         ec:97:ba:ce:2a:2a:56:40:4b:df:ee:f9:ce:c5:ed:db:e9:e2:
         e9:a3:e9:0b:6b:22:0e:5a:99:24:f1:5d:16:c4:12:a5:6e:75:
         6a:5c:8f:96:50:50:91:71:43:62:8c:e5:c1:40:2e:7b:a7:0e:
         2f:0e:e0:42:36:7d:77:21:08:b9:d8:78:60:0c:bf:2e:a6:89:
         e4:c7:f5:52:96:7b:c1:f0:a1:7c:4f:2a:79:1e:75:a2:25:ba:
         b0:91:92:8e:f7:e7:52:f0:80:39:19:99:2a:9a:d4:2f:08:da:
         a7:68:ad:02:ba:b8:dc:4f:41:86:33:dc:35:21:c7:cc:b3:c4:
         54:15:85:a9:07:57:0a:fa:93:92:36:d4:94:d0:3a:79:b6:ef:
         78:f7:91:43
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEeMto0SqBMtFSFkzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU2ZTI2MGMtNDIxZC00OGMzLWI0N2QtZDc2YWMwNzRm
YmJhMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
YTQ0MjI3NjctNjYwNS00NjE1LWJjYmEtODQxZWMyZGRhYWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjDVicr1DAt66i7Io4VNtuOF57rot7rocPpj
+8weNUVI3JqikbwQZmbsXZZiMjDQdOKXJ7ev2dxIJg1BSW10iE9S/QhTCxFLtiqJ
uPOVk9+WOVnEVtknsRbV+kOaudIx36t8Mmk0D2DfwZ9/lVMO+UeeJZrBG+AJpme4
bYmOqPydizLonepMUA/h4tFdcOgbzemzmoAjmz4PvcujomnKeB/E0KclFeLavoHn
tM7QfTrQYwyl/Gvj5VP+VXKrDeMgaT/XYUAeomi7IK3ksWDWNiA/70E7mwKSQEUG
IXUvG1LLC79iTNH+JBhvcp5T2oqrE9f69+CdZl9Xy7S4RFZrEQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFNuAIhM8sVYa4+x9ipQX3JG2yvMAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZTZl
MjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3NGZiYmEvYWJmNzAxZWMtNDk0YS0z
OWU0LWIzNDYtNTg1MjU1ZTRhYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWU2ZTI2MGMtNDIxZC00OGMzLWI0
N2QtZDc2YWMwNzRmYmJhL2FlNmUyNjBjLTQyMWQtNDhjMy1iNDdkLWQ3NmFjMDc0
ZmJiYS5jcmwwHwYDVR0jBBgwFoAUdJNgXKylcmMaureVLt1nAoPePOMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZh
YzA3NGZiYmEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAo/UDBAbN
10AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAHHlryvZkMTTQTWFQ7298clrjHFSfkDXB6KooBFdg6D7i0FQT
e/lCY0uc+Ejk3vYMdGFIt+I11iasvynU3efD1PcOlJ6x1xPHXE1xQ5J4TvGA9blb
SVjQ0EoDvwUxPxmA/IU4P1cWxs+MPTxJ7Je6zioqVkBL3+75zsXt2+ni6aPpC2si
DlqZJPFdFsQSpW51alyPllBQkXFDYozlwUAue6cOLw7gQjZ9dyEIudh4YAy/LqaJ
5Mf1UpZ7wfChfE8qeR51oiW6sJGSjvfnUvCAORmZKprULwjap2itArq43E9BhjPc
NSHHzLPEVBWFqQdXCvqTkjbUlNA6ebbvePeRQw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:07:04 2024 by rpki-client on console-ams.rpki-client.org