Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/b5fdcb10-bd22-3588-b2e2-fcb932bcc83d.roa
File:                     b5fdcb10-bd22-3588-b2e2-fcb932bcc83d.roa (raw, json)
Hash identifier:          qBgioBfC8IkFkv8074PnHK49Nx/XkvDbC+VQtyuE4MI=
Subject key identifier:   7F:4B:16:1E:ED:55:74:C6:15:FF:01:AD:3A:FD:2C:95:EF:40:57:05
Certificate issuer:       /CN=161143c9-c030-4270-91a4-41e54bbb2357
Certificate serial:       010D0C9F432858472F306F643E2AD3AA2AC3EA80
Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/b5fdcb10-bd22-3588-b2e2-fcb932bcc83d.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     14630
IP address blocks:        198.245.245.0/24 maxlen: 24
                          198.245.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:6f:64:3e:2a:d3:aa:2a:c3:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=3de6c132-df54-47a6-8a80-72edd782ca59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:6d:6b:99:86:09:b4:9a:88:07:ae:da:51:
                    25:14:50:4b:d3:92:43:2d:17:0a:a0:5d:c1:3c:32:
                    24:aa:3c:1a:90:1b:f3:87:fa:c3:0a:25:a9:37:6c:
                    92:4b:10:d0:b6:5f:4e:c3:9f:6e:a1:67:f3:4e:a0:
                    94:92:a1:ca:07:9c:d5:d8:6e:93:bc:f2:ce:c5:c6:
                    85:97:83:10:a6:3e:f9:17:43:19:3d:76:30:f1:00:
                    81:f3:c2:56:ac:f3:65:9b:d6:36:d1:fe:fe:45:2b:
                    fa:72:19:13:7c:ff:dc:3a:ab:2a:5a:cb:1c:d1:1e:
                    7a:02:cb:75:cc:55:a6:1f:6f:58:29:45:86:24:ba:
                    03:87:f1:07:f6:79:bf:16:e3:6d:72:5c:ba:d8:ec:
                    38:3e:3a:98:5d:3f:da:5b:ed:4c:c5:33:be:15:eb:
                    d5:4f:f2:c1:cc:29:bd:66:35:ea:df:d8:0c:b3:52:
                    dd:06:84:dd:6f:f6:47:db:eb:25:9f:f0:d4:a6:51:
                    75:de:38:de:c8:a7:06:a1:ba:0f:c9:f9:31:18:b6:
                    96:93:27:a6:01:2c:f5:65:62:8b:60:3a:0f:5a:41:
                    6c:e2:83:7d:39:31:00:24:32:74:68:b9:6f:3b:ee:
                    9e:e3:f0:1a:97:01:40:eb:53:ef:77:67:f1:ef:43:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4B:16:1E:ED:55:74:C6:15:FF:01:AD:3A:FD:2C:95:EF:40:57:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/b5fdcb10-bd22-3588-b2e2-fcb932bcc83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl

            X509v3 Authority Key Identifier:
                keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.245.0-198.245.246.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:66:6d:6b:64:d9:df:3d:3c:cf:e6:87:c7:4d:e9:58:1c:e6:
         24:53:61:dd:b1:36:68:2e:7c:72:23:0f:11:84:ae:45:14:7c:
         ad:f7:f5:1e:09:50:1c:15:e8:83:41:71:22:2b:ca:19:96:6c:
         f2:ff:06:be:a2:cb:25:96:34:cd:09:ec:11:8d:8e:da:84:bd:
         94:96:54:25:9f:b1:61:58:c9:e6:7d:6b:d2:80:b7:9b:f4:13:
         10:94:0a:23:85:c5:14:b9:04:fd:ce:98:21:48:38:c8:11:3f:
         fd:37:cb:07:17:ce:d0:a4:f4:c2:c8:c5:2a:5e:f8:bc:b4:a9:
         3b:72:a5:c7:0e:11:5e:73:20:f4:61:0e:87:f0:66:28:f9:e2:
         f8:dc:93:d0:07:f6:12:b1:e4:2c:b0:4b:39:7c:39:91:93:60:
         fe:35:85:7b:3f:34:52:e0:a3:6c:34:a4:9f:4f:58:7c:3e:97:
         32:23:d3:90:0c:0c:9d:22:ee:bb:4a:17:8a:bd:44:d2:92:ca:
         a3:b0:c2:92:87:24:fc:52:5f:bc:75:77:a0:30:43:94:dc:58:
         2e:f4:c1:a7:86:fa:17:17:4c:71:5d:38:b7:19:20:38:6a:bc:
         3d:ea:dc:7b:b8:fd:c1:b3:bf:65:99:53:51:c5:46:e1:70:29:
         62:d7:61:e2
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEcvMG9kPirTqirD6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTYxMTQzYzktYzAzMC00MjcwLTkxYTQtNDFlNTRiYmIy
MzU3MB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk
M2RlNmMxMzItZGY1NC00N2E2LThhODAtNzJlZGQ3ODJjYTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHhta5mGCbSaiAeu2lElFFBL05JDLRcKoF3B
PDIkqjwakBvzh/rDCiWpN2ySSxDQtl9Ow59uoWfzTqCUkqHKB5zV2G6TvPLOxcaF
l4MQpj75F0MZPXYw8QCB88JWrPNlm9Y20f7+RSv6chkTfP/cOqsqWssc0R56Ast1
zFWmH29YKUWGJLoDh/EH9nm/FuNtcly62Ow4PjqYXT/aW+1MxTO+FevVT/LBzCm9
ZjXq39gMs1LdBoTdb/ZH2+sln/DUplF13jjeyKcGoboPyfkxGLaWkyemASz1ZWKL
YDoPWkFs4oN9OTEAJDJ0aLlvO+6e4/AalwFA61Pvd2fx70OOWQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFH9LFh7tVXTGFf8BrTr9LJXvQFcFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNjEx
NDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJiYjIzNTcvYjVmZGNiMTAtYmQyMi0z
NTg4LWIyZTItZmNiOTMyYmNjODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTYxMTQzYzktYzAzMC00MjcwLTkx
YTQtNDFlNTRiYmIyMzU3LzE2MTE0M2M5LWMwMzAtNDI3MC05MWE0LTQxZTU0YmJi
MjM1Ny5jcmwwHwYDVR0jBBgwFoAUPx+R7lFHlAQOaAJVx2vCKnTZzmwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1
NGJiYjIzNTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADG9fUD
BADG9fYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEALWZta2TZ3z08z+aHx03pWBzmJFNh3bE2aC58ciMPEYSu
RRR8rff1HglQHBXog0FxIivKGZZs8v8GvqLLJZY0zQnsEY2O2oS9lJZUJZ+xYVjJ
5n1r0oC3m/QTEJQKI4XFFLkE/c6YIUg4yBE//TfLBxfO0KT0wsjFKl74vLSpO3Kl
xw4RXnMg9GEOh/BmKPni+NyT0Af2ErHkLLBLOXw5kZNg/jWFez80UuCjbDSkn09Y
fD6XMiPTkAwMnSLuu0oXir1E0pLKo7DCkock/FJfvHV3oDBDlNxYLvTBp4b6FxdM
cV04txkgOGq8Perce7j9wbO/ZZlTUcVG4XApYtdh4g==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:06 2024 by rpki-client on console-fra.rpki-client.org