Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa
File:                     6b7c028f-569f-32db-a599-301f156d588d.roa (raw, json)
Hash identifier:          IwKl/RalkPuBFCTKbGXmbW4ZCrD/WnHj1OnCCQLpUeo=
Subject key identifier:   63:27:16:17:80:C3:C8:D7:A5:AB:6E:A5:FC:52:34:48:AB:36:9F:CE
Certificate issuer:       /CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
Certificate serial:       010D0C9F43285847924BE1A29516B68D9493B480
Authority key identifier: FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        148.59.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:e1:a2:95:16:b6:8d:94:93:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=e2731886-4283-4a50-9026-50c1113ee8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:03:70:af:e6:c7:36:eb:da:22:84:9a:1b:
                    75:84:d6:0c:a2:48:bd:d8:81:5d:ba:19:a2:97:a1:
                    b9:17:1b:23:43:46:41:2c:13:d1:04:a6:42:3f:d2:
                    94:a6:6c:05:10:74:32:01:92:77:d4:dc:a6:1b:b6:
                    52:92:73:ac:94:62:62:49:9a:98:0f:dc:bc:6a:ee:
                    24:46:06:cb:fe:1e:d9:26:f6:7b:3c:14:92:63:9c:
                    df:8e:9b:90:45:a1:60:c6:8e:21:6b:b7:33:5c:de:
                    33:ac:5a:12:e8:81:24:e2:8d:5a:8c:87:3e:fe:d4:
                    e1:cd:aa:95:12:b0:01:ae:a5:98:e4:97:13:08:36:
                    93:e2:2d:43:50:d3:e6:ff:06:0a:0c:af:52:4f:01:
                    9b:10:b9:14:79:75:bb:d4:59:d5:53:1f:6c:e2:f8:
                    c3:c6:ea:eb:2f:75:9b:d5:8a:bc:04:d3:d3:85:7d:
                    4f:f0:f1:9b:b8:bd:87:f9:78:c7:bb:87:ab:85:aa:
                    eb:26:79:01:5c:2d:52:1d:3b:f0:c1:50:05:47:ed:
                    a2:b5:0e:10:c8:19:a5:67:f7:fa:32:05:a8:ec:f2:
                    2c:20:73:45:c0:15:6f:0c:23:aa:c1:fc:6d:98:73:
                    cb:ca:0e:47:31:b9:81:f9:c9:7c:a8:03:22:8e:5b:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:27:16:17:80:C3:C8:D7:A5:AB:6E:A5:FC:52:34:48:AB:36:9F:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/6b7c028f-569f-32db-a599-301f156d588d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl

            X509v3 Authority Key Identifier:
                keyid:FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:aa:bd:dc:25:6c:53:61:3d:b1:c2:b9:d0:e3:a1:89:67:
         c1:a5:99:79:c5:50:17:40:c2:29:ab:01:ce:82:15:81:85:a9:
         e1:c8:0a:64:ad:af:de:fb:13:5a:a8:3a:55:02:3c:91:e5:2d:
         40:37:46:74:95:8b:11:41:7f:7c:aa:f8:69:2a:59:a8:76:8a:
         b3:37:0d:04:96:57:cd:b8:f1:3b:39:67:a9:9a:ba:76:dc:27:
         3e:27:99:40:7b:b3:b1:a7:62:b7:87:8e:83:82:cd:a4:2d:2d:
         11:e5:51:8b:69:ff:ac:91:87:67:ca:c4:a5:cd:a0:22:39:e8:
         02:2c:f9:f0:42:56:2e:61:3a:45:db:b5:04:08:45:28:79:1a:
         61:ca:5e:3c:ac:c6:9f:77:46:b4:1a:70:f7:ed:68:2c:ae:09:
         1c:1e:83:40:53:bd:51:e2:c4:8b:07:1a:38:84:74:75:96:75:
         4e:bf:22:35:be:b2:f1:9c:fd:f8:7f:45:ca:90:7c:2f:66:e1:
         1e:a5:2f:57:62:2a:f7:cc:a6:d7:b0:4f:79:85:72:2c:15:0a:
         09:f3:45:4f:c9:86:7e:63:2c:f2:a9:6a:ea:d3:d6:56:b4:d5:
         64:62:bf:02:c1:97:0e:57:fc:22:7c:aa:f0:e8:74:5a:55:b4:
         52:2f:06:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS+GilRa2jZSTtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNlM2MyMmUtMjQ0OS00MzY3LWJjYzktOTZlYzg3N2Yz
ZTIzMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk
ZTI3MzE4ODYtNDI4My00YTUwLTkwMjYtNTBjMTExM2VlOGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohMDcK/mxzbr2iKEmht1hNYMoki92IFduhmi
l6G5FxsjQ0ZBLBPRBKZCP9KUpmwFEHQyAZJ31NymG7ZSknOslGJiSZqYD9y8au4k
RgbL/h7ZJvZ7PBSSY5zfjpuQRaFgxo4ha7czXN4zrFoS6IEk4o1ajIc+/tThzaqV
ErABrqWY5JcTCDaT4i1DUNPm/wYKDK9STwGbELkUeXW71FnVUx9s4vjDxurrL3Wb
1Yq8BNPThX1P8PGbuL2H+XjHu4erharrJnkBXC1SHTvwwVAFR+2itQ4QyBmlZ/f6
MgWo7PIsIHNFwBVvDCOqwfxtmHPLyg5HMbmB+cl8qAMijltBlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMnFheAw8jXpatupfxSNEirNp/OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Y2Uz
YzIyZS0yNDQ5LTQzNjctYmNjOS05NmVjODc3ZjNlMjMvNmI3YzAyOGYtNTY5Zi0z
MmRiLWE1OTktMzAxZjE1NmQ1ODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGNlM2MyMmUtMjQ0OS00MzY3LWJj
YzktOTZlYzg3N2YzZTIzLzRjZTNjMjJlLTI0NDktNDM2Ny1iY2M5LTk2ZWM4Nzdm
M2UyMy5jcmwwHwYDVR0jBBgwFoAU+l+3Lo6Fgc+b3cfdouBMfcQQirowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80Y2UzYzIyZS0yNDQ5LTQzNjctYmNjOS05NmVj
ODc3ZjNlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDurMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6Kqr3cJWxTYT2xwrnQ46GJZ8GlmXnFUBdAwimrAc6CFYGFqeHICmSt
r977E1qoOlUCPJHlLUA3RnSVixFBf3yq+GkqWah2irM3DQSWV8248Ts5Z6maunbc
Jz4nmUB7s7GnYreHjoOCzaQtLRHlUYtp/6yRh2fKxKXNoCI56AIs+fBCVi5hOkXb
tQQIRSh5GmHKXjysxp93RrQacPftaCyuCRweg0BTvVHixIsHGjiEdHWWdU6/IjW+
svGc/fh/RcqQfC9m4R6lL1diKvfMptewT3mFciwVCgnzRU/Jhn5jLPKpaurT1la0
1WRivwLBlw5X/CJ8qvDodFpVtFIvBqo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:32 2024 by rpki-client on console-fra.rpki-client.org