Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/b1760df8-e2ea-3449-91b9-9d7b18e15e4e.roa
File:                     b1760df8-e2ea-3449-91b9-9d7b18e15e4e.roa (raw, json)
Hash identifier:          1YdtPSKcQAa506lVXeihltDIv0Pmnbtwv4+hOwU1E/c=
Subject key identifier:   5D:10:40:D4:AC:1B:7E:72:02:1D:E7:24:8F:F8:78:AB:78:F3:D9:7D
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F432858482BEEC13552A1217D6942EF40
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/b1760df8-e2ea-3449-91b9-9d7b18e15e4e.roa
Signing time:             Wed 11 Dec 2024 13:47:42 +0000
ROA not before:           Wed 11 Dec 2024 13:47:42 +0000
ROA not after:            Tue 11 Mar 2025 12:47:42 +0000
asID:                     160
IP address blocks:        205.208.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:ee:c1:35:52:a1:21:7d:69:42:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: Dec 11 13:47:42 2024 GMT
            Not After : Mar 11 12:47:42 2025 GMT
        Subject: CN=4bff1691-7b55-4908-8a62-3ef68c9512ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:53:ae:46:22:78:fb:14:dd:95:97:ef:bc:
                    3b:a2:72:2e:cb:c2:08:0d:a9:78:a8:e5:fe:ec:79:
                    b0:ea:ea:36:10:d7:71:1e:57:db:c1:8f:fe:e6:96:
                    28:b5:98:23:d2:af:c2:d7:e8:6e:eb:f6:9b:87:ae:
                    54:4e:58:56:34:d1:95:44:d2:2a:e7:34:49:37:97:
                    3d:2e:01:a5:9e:2b:cd:25:5f:d3:37:65:6a:07:97:
                    c9:b4:10:07:32:b0:06:13:86:c9:65:ca:e7:82:a2:
                    a3:ed:15:d8:4a:3e:87:58:ec:b4:72:fc:5b:e3:fa:
                    dd:58:f8:8f:53:9f:70:29:bd:b4:3d:53:b5:ec:bb:
                    1b:f6:b9:77:f1:fe:73:6d:3b:45:54:db:99:5a:c1:
                    d8:7c:1f:f1:5f:bf:84:e5:4c:6c:de:f9:f6:e3:c4:
                    3c:76:df:c4:9e:71:15:b3:05:11:40:b1:22:de:f9:
                    22:a3:c9:8e:7d:ee:fb:06:79:5e:f7:1d:5e:c1:ca:
                    3c:e1:76:ea:8d:95:60:05:61:b4:df:8e:5e:1b:5b:
                    af:e0:fd:24:5e:0b:78:39:f6:ab:a5:be:d2:49:57:
                    c6:2f:18:18:a8:d2:89:9d:02:11:20:ad:f7:54:13:
                    00:ad:b5:d7:f5:8c:9e:ab:31:83:97:66:ce:dd:a5:
                    99:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:10:40:D4:AC:1B:7E:72:02:1D:E7:24:8F:F8:78:AB:78:F3:D9:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/b1760df8-e2ea-3449-91b9-9d7b18e15e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.208.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:ed:38:33:cb:cb:5c:6b:57:88:02:26:70:f9:12:26:38:
         91:66:4c:3b:08:e6:b6:a3:e6:4d:ec:43:ab:24:a9:0d:5c:8b:
         d4:96:41:7b:9b:01:12:7e:63:88:ed:83:db:e7:af:69:c0:74:
         9d:10:55:ea:21:ff:69:96:4d:29:56:d5:3d:69:49:e7:82:c6:
         b2:e1:30:60:6c:03:c0:9b:1a:5e:3f:20:7f:09:b0:36:36:67:
         3e:79:3b:9e:4e:93:0b:38:2d:35:b8:19:de:e4:8b:02:b8:47:
         20:e9:48:f1:f4:f2:29:88:63:35:3e:92:96:f8:62:02:d8:d0:
         02:94:88:cb:71:c1:bf:70:99:99:90:db:dc:c8:1f:07:a4:dc:
         1d:ea:e1:e7:f9:fc:3a:9d:52:1a:e1:89:f2:68:4c:86:be:23:
         38:5e:62:7b:1f:82:ca:2a:56:c9:57:ff:ab:5d:d4:bd:18:e6:
         cf:72:22:68:4e:35:17:a8:6f:03:c9:27:2e:57:d3:2e:06:3a:
         d2:5e:d4:a1:f0:96:24:02:fb:fd:2e:d2:39:5e:d2:d5:b0:e3:
         b3:ca:93:ea:cc:5b:85:18:5f:24:6f:9b:98:b0:24:13:c5:33:
         c6:7b:5e:96:de:28:77:3f:8d:f5:d5:ee:4d:0d:b4:0b:39:0f:
         40:bc:0b:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr7sE1UqEhfWlC70AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi
MzMzMB4XDTI0MTIxMTEzNDc0MloXDTI1MDMxMTEyNDc0MlowLzEtMCsGA1UEAxMk
NGJmZjE2OTEtN2I1NS00OTA4LThhNjItM2VmNjhjOTUxMmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSJTrkYiePsU3ZWX77w7onIuy8IIDal4qOX+
7Hmw6uo2ENdxHlfbwY/+5pYotZgj0q/C1+hu6/abh65UTlhWNNGVRNIq5zRJN5c9
LgGlnivNJV/TN2VqB5fJtBAHMrAGE4bJZcrngqKj7RXYSj6HWOy0cvxb4/rdWPiP
U59wKb20PVO17Lsb9rl38f5zbTtFVNuZWsHYfB/xX7+E5Uxs3vn248Q8dt/EnnEV
swURQLEi3vkio8mOfe77Bnle9x1ewco84XbqjZVgBWG0345eG1uv4P0kXgt4Ofar
pb7SSVfGLxgYqNKJnQIRIK33VBMArbXX9YyeqzGDl2bO3aWZZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0QQNSsG35yAh3nJI/4eKt489l9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy
MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvYjE3NjBkZjgtZTJlYS0z
NDQ5LTkxYjktOWQ3YjE4ZTE1ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw
ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz
YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl
MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzdAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGX87Tgzy8tca1eIAiZw+RImOJFmTDsI5raj5k3sQ6skqQ1ci9SWQXub
ARJ+Y4jtg9vnr2nAdJ0QVeoh/2mWTSlW1T1pSeeCxrLhMGBsA8CbGl4/IH8JsDY2
Zz55O55Okws4LTW4Gd7kiwK4RyDpSPH08imIYzU+kpb4YgLY0AKUiMtxwb9wmZmQ
29zIHwek3B3q4ef5/DqdUhrhifJoTIa+IzheYnsfgsoqVslX/6td1L0Y5s9yImhO
NReobwPJJy5X0y4GOtJe1KHwliQC+/0u0jle0tWw47PKk+rMW4UYXyRvm5iwJBPF
M8Z7XpbeKHc/jfXV7k0NtAs5D0C8C7Y=
-----END CERTIFICATE-----
Generated at Fri Dec 27 23:45:12 2024 by rpki-client on console-fra.rpki-client.org