Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa
File:                     c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa (raw, json)
Hash identifier:          xvPyAEhEkE729BqeTxY0zNLfgehJgihsLYI/nvAv724=
Subject key identifier:   29:64:1F:B5:BA:6E:BC:4D:EB:1A:B0:85:68:0D:6E:74:B6:9E:A1:3B
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F43285847299B24E79B598AA89A7E3BC0
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     22742
IP address blocks:        199.241.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:24:e7:9b:59:8a:a8:9a:7e:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=51fbd18e-0e62-4f2c-8296-f12f04b557b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:b0:38:c6:06:a4:aa:46:69:94:ab:67:12:
                    41:8a:10:58:96:4d:d4:5c:23:7c:07:ae:05:64:87:
                    d7:cd:cc:7c:ef:b1:1b:29:15:78:83:59:f8:26:fd:
                    61:10:4a:fc:8d:d1:3c:6e:9a:89:69:f8:ee:e7:68:
                    dc:4a:da:5d:79:bc:a8:3a:a2:a6:f5:4d:b7:d5:d1:
                    1a:64:34:e1:9d:aa:c0:24:ef:92:be:97:93:d1:a8:
                    50:8c:60:4b:e8:2f:aa:59:39:ac:e3:a2:ad:c5:15:
                    54:92:97:f6:a7:08:e6:b7:d5:21:33:4e:38:fb:34:
                    71:00:d4:9e:47:c6:8b:a4:64:49:fe:56:af:96:5f:
                    7c:c5:1f:c9:37:f0:3e:3c:70:37:64:d3:22:32:b7:
                    3e:1b:2f:cc:77:fb:b1:42:fb:6d:9a:8a:c2:31:d5:
                    af:ab:a2:f1:73:66:c2:ee:b5:2a:a4:5b:19:ad:07:
                    5c:d8:ce:fe:eb:8c:6b:f8:f5:32:f5:16:94:1e:9e:
                    71:18:60:b1:9e:28:57:f8:3f:38:21:09:b1:40:2c:
                    2b:23:98:63:46:b6:6f:3c:37:f8:0a:5a:a6:fd:e4:
                    77:f6:c7:28:8b:46:f1:be:45:02:90:f1:59:a3:e3:
                    d8:d8:1f:25:d7:bc:1b:e7:e8:37:de:4b:a8:40:e9:
                    ab:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:64:1F:B5:BA:6E:BC:4D:EB:1A:B0:85:68:0D:6E:74:B6:9E:A1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4d:e4:00:a9:23:9f:19:f4:94:1b:09:d5:ee:f6:6b:32:2a:
         1d:1e:b6:82:18:f3:d0:98:6b:7d:a9:62:d9:08:fc:18:af:31:
         15:b7:27:bd:34:39:c4:74:18:95:24:44:fa:59:f2:8e:af:a0:
         5c:b1:d7:60:65:e9:2f:c4:ba:55:29:35:48:95:b9:5c:9a:2d:
         22:c3:b6:d2:2d:7a:b2:d4:7f:35:c7:e1:43:6f:4b:fe:48:e4:
         d6:06:88:e7:a7:6a:f8:bf:5d:7d:1c:70:c3:53:6a:a9:1c:0e:
         5a:4e:8a:3c:e2:b9:bc:af:ae:b5:68:9d:b1:af:e5:63:5d:66:
         e9:27:29:d8:44:cc:18:91:c5:2f:16:a3:99:1b:2e:6d:b8:1b:
         5e:6a:fe:8f:d1:32:b3:36:a0:b1:7a:57:c7:73:c7:db:00:ce:
         56:b1:8f:41:eb:d3:63:6c:25:41:0d:a3:0e:8b:39:9e:e4:bc:
         10:ed:2c:f3:19:47:da:ee:1b:a7:ab:53:dd:46:1d:8c:4f:66:
         69:a1:b2:75:bb:2c:45:b5:c3:89:df:13:c9:aa:56:b3:70:2b:
         9d:0e:5d:7f:19:84:d0:c0:ec:e2:01:d2:b6:07:de:34:63:07:
         39:c8:97:5e:aa:d6:8c:42:cf:69:df:24:b7:f5:87:c2:0f:84:
         e6:78:88:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyTnm1mKqJp+O8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl
MmI0MB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk
NTFmYmQxOGUtMGU2Mi00ZjJjLTgyOTYtZjEyZjA0YjU1N2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdmwOMYGpKpGaZSrZxJBihBYlk3UXCN8B64F
ZIfXzcx877EbKRV4g1n4Jv1hEEr8jdE8bpqJafju52jcStpdebyoOqKm9U231dEa
ZDThnarAJO+SvpeT0ahQjGBL6C+qWTms46KtxRVUkpf2pwjmt9UhM044+zRxANSe
R8aLpGRJ/lavll98xR/JN/A+PHA3ZNMiMrc+Gy/Md/uxQvttmorCMdWvq6Lxc2bC
7rUqpFsZrQdc2M7+64xr+PUy9RaUHp5xGGCxnihX+D84IQmxQCwrI5hjRrZvPDf4
Clqm/eR39scoi0bxvkUCkPFZo+PY2B8l17wb5+g33kuoQOmr3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClkH7W6brxN6xqwhWgNbnS2nqE7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi
YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYzhjZDZkMWUtZmNhNC0z
YTA4LWEyOTYtNGM2YjYyZGQyZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy
YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw
ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk
ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/H0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1N5ACpI58Z9JQbCdXu9msyKh0etoIY89CYa32pYtkI/BivMRW3J700
OcR0GJUkRPpZ8o6voFyx12Bl6S/EulUpNUiVuVyaLSLDttIterLUfzXH4UNvS/5I
5NYGiOenavi/XX0ccMNTaqkcDlpOijziubyvrrVonbGv5WNdZuknKdhEzBiRxS8W
o5kbLm24G15q/o/RMrM2oLF6V8dzx9sAzlaxj0Hr02NsJUENow6LOZ7kvBDtLPMZ
R9ruG6erU91GHYxPZmmhsnW7LEW1w4nfE8mqVrNwK50OXX8ZhNDA7OIB0rYH3jRj
BznIl16q1oxCz2nfJLf1h8IPhOZ4iHc=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:48 2024 by rpki-client on console-ams.rpki-client.org