Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8f9cf233-e114-3a64-88e0-1ab6665eaf11.roa
File:                     8f9cf233-e114-3a64-88e0-1ab6665eaf11.roa (raw, json)
Hash identifier:          gG4niXTknxJvC6qatFQ3RzeD4HB9lvDpbAG70TL+C3w=
Subject key identifier:   98:6D:DC:D5:78:6C:0F:18:85:BB:BE:A6:B6:A4:2C:D7:78:F5:59:86
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F43285848035AC2041BD616B312945A00
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8f9cf233-e114-3a64-88e0-1ab6665eaf11.roa
Signing time:             Wed 27 Nov 2024 00:57:11 +0000
ROA not before:           Wed 27 Nov 2024 00:57:11 +0000
ROA not after:            Tue 25 Feb 2025 00:57:11 +0000
asID:                     22418
IP address blocks:        192.157.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:5a:c2:04:1b:d6:16:b3:12:94:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Nov 27 00:57:11 2024 GMT
            Not After : Feb 25 00:57:11 2025 GMT
        Subject: CN=2836c678-257d-49fe-8698-f578921ad611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:a0:c8:9c:c9:ba:be:8f:4f:09:dd:65:76:
                    c1:21:98:44:a8:f4:01:e5:20:e3:8b:f3:24:71:61:
                    cf:29:7b:87:02:03:a7:af:4e:bd:a0:f6:6d:70:17:
                    9c:00:58:be:6c:72:c9:73:db:0d:84:6a:51:87:3a:
                    14:2b:e1:00:30:84:50:4e:02:8f:9f:0e:85:61:3b:
                    9f:d8:cc:f6:26:26:37:67:18:87:ee:29:5d:30:39:
                    e7:bf:3c:21:bb:b1:4d:c4:67:c7:dd:c5:85:2a:89:
                    60:25:35:ae:52:db:b0:c4:8b:f4:94:b4:f0:4a:8f:
                    ff:48:88:f0:17:40:aa:69:10:e3:e7:6c:be:50:e7:
                    66:ac:e1:6d:b2:15:af:c9:47:74:31:8f:b6:fc:51:
                    2e:75:58:32:bf:6c:a8:93:05:1d:ef:f5:69:5d:3a:
                    07:dd:a4:82:7b:1e:8a:87:79:1c:3d:60:f8:9e:fd:
                    27:9e:bf:9f:6b:5f:70:a3:d6:54:0e:e1:e8:cd:c6:
                    96:b5:f2:97:65:20:0c:2c:79:76:68:75:13:25:37:
                    e1:b3:89:6e:4c:90:e3:97:cb:9b:08:15:01:e5:66:
                    ec:81:69:dc:ce:e0:67:3a:0c:f0:c0:f2:72:6a:8e:
                    b1:f6:76:b4:ec:ce:19:ba:42:9c:07:5a:ee:46:9f:
                    c3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6D:DC:D5:78:6C:0F:18:85:BB:BE:A6:B6:A4:2C:D7:78:F5:59:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8f9cf233-e114-3a64-88e0-1ab6665eaf11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a2:6f:53:96:2b:4e:f0:a2:fe:71:58:db:ec:9e:4f:99:8b:
         fb:44:99:a2:64:4d:5e:fd:b8:10:3c:f8:df:d6:66:c5:88:46:
         d1:86:13:20:b0:ba:6a:20:10:c2:3a:6b:1a:d0:10:21:7b:c8:
         40:e0:b2:5d:14:2a:2b:e5:be:53:04:a8:53:48:52:31:e4:e8:
         09:e5:8f:2d:7d:4b:98:8b:b5:78:11:04:76:2c:6a:76:30:a1:
         ec:72:1a:0d:54:6a:f1:12:b6:a3:10:9a:06:aa:e3:71:21:82:
         4d:5e:06:a5:36:7d:e9:a9:c0:12:5b:5f:34:a2:dd:32:b1:48:
         2a:36:94:f6:16:ed:ee:5a:1a:b2:ea:45:47:85:09:bf:30:21:
         0b:04:99:bb:40:bb:d4:ec:67:b6:ae:09:70:27:16:59:cd:f9:
         13:15:5f:fc:e6:16:88:73:52:6a:75:66:be:4a:af:bb:93:7c:
         71:0e:48:63:97:3d:bf:40:30:7b:cf:d4:84:99:87:b7:c8:c1:
         71:c8:fc:59:33:c6:3d:a7:75:6a:c7:0c:57:9e:16:cd:30:e4:
         42:32:32:f3:64:25:ec:7f:b9:86:13:5c:69:82:e2:24:7b:26:
         af:74:7a:3c:53:3c:9a:cd:14:b8:43:53:3c:bf:79:23:8d:d8:
         53:97:41:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDWsIEG9YWsxKUWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3
NzlhMB4XDTI0MTEyNzAwNTcxMVoXDTI1MDIyNTAwNTcxMVowLzEtMCsGA1UEAxMk
MjgzNmM2NzgtMjU3ZC00OWZlLTg2OTgtZjU3ODkyMWFkNjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4egyJzJur6PTwndZXbBIZhEqPQB5SDji/Mk
cWHPKXuHAgOnr069oPZtcBecAFi+bHLJc9sNhGpRhzoUK+EAMIRQTgKPnw6FYTuf
2Mz2JiY3ZxiH7ildMDnnvzwhu7FNxGfH3cWFKolgJTWuUtuwxIv0lLTwSo//SIjw
F0CqaRDj52y+UOdmrOFtshWvyUd0MY+2/FEudVgyv2yokwUd7/VpXToH3aSCex6K
h3kcPWD4nv0nnr+fa19wo9ZUDuHozcaWtfKXZSAMLHl2aHUTJTfhs4luTJDjl8ub
CBUB5WbsgWnczuBnOgzwwPJyao6x9na07M4ZukKcB1ruRp/DhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJht3NV4bA8Yhbu+prakLNd49VmGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4
MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvOGY5Y2YyMzMtZTExNC0z
YTY0LTg4ZTAtMWFiNjY2NWVhZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw
ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0
Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz
MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKib1OWK07wov5xWNvsnk+Zi/tEmaJkTV79uBA8+N/WZsWIRtGGEyCw
umogEMI6axrQECF7yEDgsl0UKivlvlMEqFNIUjHk6Anljy19S5iLtXgRBHYsanYw
oexyGg1UavEStqMQmgaq43Ehgk1eBqU2fempwBJbXzSi3TKxSCo2lPYW7e5aGrLq
RUeFCb8wIQsEmbtAu9TsZ7auCXAnFlnN+RMVX/zmFohzUmp1Zr5Kr7uTfHEOSGOX
Pb9AMHvP1ISZh7fIwXHI/Fkzxj2ndWrHDFeeFs0w5EIyMvNkJex/uYYTXGmC4iR7
Jq90ejxTPJrNFLhDUzy/eSON2FOXQZE=
-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org