Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b34d1f69-a972-3112-9d9b-3f0f47630569.roa
File:                     b34d1f69-a972-3112-9d9b-3f0f47630569.roa (raw, json)
Hash identifier:          c21Hmw3yMpIycgSHE1uRxUibf5O7Pu0a0rJJr7SP/5E=
Subject key identifier:   4A:DD:25:A1:67:FB:6C:02:7B:1C:77:FF:73:88:C9:DD:8A:F4:E9:7C
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F43285847CD51D72C5F579A5746980B20
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b34d1f69-a972-3112-9d9b-3f0f47630569.roa
Signing time:             Thu 07 Nov 2024 16:25:34 +0000
ROA not before:           Thu 07 Nov 2024 16:25:34 +0000
ROA not after:            Wed 05 Feb 2025 16:25:34 +0000
asID:                     401415
IP address blocks:        216.249.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:51:d7:2c:5f:57:9a:57:46:98:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Nov  7 16:25:34 2024 GMT
            Not After : Feb  5 16:25:34 2025 GMT
        Subject: CN=ed426dfd-4ec3-4ed0-8fb7-0a10c4792001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:b9:c9:02:04:f6:0d:e2:6a:de:33:e8:98:
                    1f:f1:1a:f2:b4:b5:e3:bc:43:b5:99:ae:16:8d:87:
                    db:c3:eb:24:3e:1c:4b:54:6c:49:4c:4d:8d:f4:97:
                    05:31:43:3a:16:3b:56:dd:82:db:fa:ed:e1:39:e0:
                    de:d7:44:88:72:9f:df:5f:cc:67:b7:89:fd:b5:61:
                    20:d6:8d:cc:98:64:e8:e8:47:ef:fe:06:b2:d0:3a:
                    24:89:ac:91:bc:cb:d1:c7:a9:23:c8:38:0b:b8:3c:
                    cb:72:44:02:79:39:6e:73:14:05:6d:44:fe:ae:c6:
                    57:27:d5:69:31:6d:bd:9e:8e:29:58:f4:66:2d:ba:
                    8f:dc:f6:d1:91:96:78:8a:d4:a6:ad:2f:c3:d0:1e:
                    29:a9:66:80:fb:42:4f:5a:ba:c3:10:96:d9:1f:17:
                    9a:94:92:d2:4b:9c:cf:2f:96:fc:44:06:7b:5b:3d:
                    53:5b:bd:73:9d:a2:75:a9:69:c9:4a:aa:79:06:96:
                    ce:53:98:55:75:9c:1b:4b:7f:34:87:a9:ab:2d:1f:
                    97:f0:3a:fc:f3:a4:4d:af:88:dd:c0:43:2d:d7:54:
                    b2:f4:6b:23:e5:43:cf:58:a4:02:4f:cc:d4:97:45:
                    41:0e:a5:f9:85:e7:8b:05:99:ef:8c:42:35:71:05:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DD:25:A1:67:FB:6C:02:7B:1C:77:FF:73:88:C9:DD:8A:F4:E9:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b34d1f69-a972-3112-9d9b-3f0f47630569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0a:1c:65:ea:2b:cc:fb:ee:3e:28:2c:e3:7c:0e:03:90:1f:
         17:ca:6e:86:95:b1:f2:f1:65:c3:0e:96:1b:45:d9:89:e5:23:
         04:d6:5b:e3:6a:17:66:2e:b7:69:23:50:ca:b6:ff:ac:2c:af:
         03:9b:3e:2e:c9:76:b1:2c:9a:ac:c6:b5:7e:a8:a6:de:50:4a:
         8a:c1:c9:b4:24:4e:61:ff:3c:22:a2:1b:bd:9c:06:0a:b1:45:
         b7:d3:c2:e4:50:1d:eb:71:b4:56:b1:3c:26:ae:85:db:b3:b3:
         eb:8c:4e:a0:dd:ad:d8:f1:cf:48:49:99:cb:49:8e:1c:75:3c:
         9d:45:31:90:7d:cd:83:64:5b:43:4e:ba:a0:e2:d0:43:18:49:
         24:db:68:23:56:3d:b5:04:75:90:76:96:43:1a:f1:63:24:f5:
         36:49:fc:92:73:e1:d1:91:39:b7:6a:11:7a:54:43:10:a2:81:
         3e:09:16:8d:96:eb:c2:e2:75:c0:e9:d7:ce:c9:31:f9:dc:7c:
         a3:b4:b5:1a:2a:ac:c1:41:b2:5f:6c:30:a8:22:c9:df:a1:8e:
         18:06:10:5e:13:59:bf:1b:91:b1:cc:99:e6:ef:c7:4f:63:c0:
         79:0a:38:c4:b7:45:93:89:26:97:8d:56:e0:d8:7b:41:0d:21:
         f1:6d:5d:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfNUdcsX1eaV0aYCyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTEwNzE2MjUzNFoXDTI1MDIwNTE2MjUzNFowLzEtMCsGA1UEAxMk
ZWQ0MjZkZmQtNGVjMy00ZWQwLThmYjctMGExMGM0NzkyMDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugS5yQIE9g3iat4z6Jgf8RrytLXjvEO1ma4W
jYfbw+skPhxLVGxJTE2N9JcFMUM6FjtW3YLb+u3hOeDe10SIcp/fX8xnt4n9tWEg
1o3MmGTo6Efv/gay0DokiayRvMvRx6kjyDgLuDzLckQCeTlucxQFbUT+rsZXJ9Vp
MW29no4pWPRmLbqP3PbRkZZ4itSmrS/D0B4pqWaA+0JPWrrDEJbZHxealJLSS5zP
L5b8RAZ7Wz1TW71znaJ1qWnJSqp5BpbOU5hVdZwbS380h6mrLR+X8Dr886RNr4jd
wEMt11Sy9Gsj5UPPWKQCT8zUl0VBDqX5heeLBZnvjEI1cQVe3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErdJaFn+2wCexx3/3OIyd2K9Ol8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjM0ZDFmNjktYTk3Mi0z
MTEyLTlkOWItM2YwZjQ3NjMwNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PnAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0KHGXqK8z77j4oLON8DgOQHxfKboaVsfLxZcMOlhtF2YnlIwTWW+Nq
F2Yut2kjUMq2/6wsrwObPi7JdrEsmqzGtX6opt5QSorBybQkTmH/PCKiG72cBgqx
RbfTwuRQHetxtFaxPCauhduzs+uMTqDdrdjxz0hJmctJjhx1PJ1FMZB9zYNkW0NO
uqDi0EMYSSTbaCNWPbUEdZB2lkMa8WMk9TZJ/JJz4dGRObdqEXpUQxCigT4JFo2W
68LidcDp187JMfncfKO0tRoqrMFBsl9sMKgiyd+hjhgGEF4TWb8bkbHMmebvx09j
wHkKOMS3RZOJJpeNVuDYe0ENIfFtXQ4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:35 2024 by rpki-client on console-ams.rpki-client.org