Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa
File:                     a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa (raw, json)
Hash identifier:          GHpIEESaC1N8ncNGWXW/ZEInQBY4v/vKdB/EBs3TkPU=
Subject key identifier:   15:CB:F9:CE:37:0F:8E:78:53:97:42:0F:27:E8:3E:41:40:8D:7C:23
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F43285847924BE2DC7AC3035907179800
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     22612
IP address blocks:        198.187.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:e2:dc:7a:c3:03:59:07:17:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=36ac3eaf-ec3b-461f-be41-3f3e010fb0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:11:ab:63:3f:60:63:58:ed:2c:c5:47:c6:
                    df:f1:e4:4a:50:5c:15:30:58:0e:ee:38:c6:a8:44:
                    2f:bd:10:8d:91:b2:24:5a:e5:dd:b7:8a:14:07:71:
                    45:2f:b4:00:7c:8f:06:ea:cf:3e:05:88:60:8a:be:
                    7a:a6:d4:a9:f0:7b:7b:0e:ba:50:3f:d1:d1:32:9d:
                    64:b0:44:3a:85:c6:cb:b8:93:40:45:8b:9f:85:6f:
                    b6:45:b5:bd:7a:ed:6d:0f:0c:7d:a2:09:bf:71:f8:
                    fe:16:51:b1:dd:77:41:e0:11:cd:5e:b7:8c:ca:30:
                    b3:5d:c3:88:15:e3:bc:d9:3c:be:fc:8f:bc:43:0c:
                    9c:ee:28:86:e6:46:aa:8f:04:4d:47:12:e0:30:ce:
                    ef:91:e0:2a:aa:fb:f6:5d:ab:81:22:17:1a:1b:b2:
                    23:ec:2c:79:f9:99:38:9b:af:bc:93:8e:e4:eb:81:
                    1c:11:cc:c5:7f:e0:b5:2c:21:e0:0b:7f:4f:b6:5a:
                    c8:28:89:53:34:3d:d4:2d:c9:ec:f1:14:18:e2:33:
                    32:ff:66:3a:07:d3:e9:b3:ab:2a:6a:00:43:22:67:
                    bc:01:07:ec:52:7f:1e:23:a4:c2:04:9d:08:14:0e:
                    6f:3e:14:32:09:0e:57:87:f8:b2:3d:e7:e0:f5:bd:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CB:F9:CE:37:0F:8E:78:53:97:42:0F:27:E8:3E:41:40:8D:7C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/a2157bfa-82b1-312b-b1ce-5486bb3ae492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:90:f8:fa:8a:19:13:98:2d:4e:04:46:98:5c:00:01:91:fa:
         b9:54:0c:7d:51:df:7f:ce:33:06:46:0b:21:d6:c0:30:9c:eb:
         0e:d2:a0:7f:1f:cc:5f:7b:ca:3f:46:65:2e:63:0c:59:5c:89:
         e8:df:45:1f:d6:13:7c:67:23:39:13:a2:78:f0:c9:3a:b3:9a:
         d9:50:7b:fd:8b:c9:1b:aa:42:11:d1:16:66:47:b4:b9:41:ae:
         9e:d3:ff:bb:6d:3e:89:36:1f:1e:6d:3e:bc:9b:eb:0b:c9:bd:
         4e:67:93:6c:e7:2b:7d:51:9c:35:08:c6:2f:97:bd:17:91:48:
         2b:22:3f:e4:48:d9:45:87:56:ae:cb:1a:3d:d4:b9:da:c0:f0:
         3a:d5:26:dd:00:a8:e0:5e:1a:dd:8e:9b:33:91:ed:b0:ec:16:
         8e:c8:52:dd:1f:36:45:78:83:48:4f:e6:23:9c:a5:91:bc:49:
         f6:c9:74:a5:f4:fe:59:81:ab:db:c5:11:08:17:bb:7c:95:fc:
         f5:34:db:7f:e9:df:2e:c9:bb:bd:c2:30:74:95:7c:48:08:1b:
         0f:82:6f:23:1c:9e:56:ac:99:a4:0d:10:4f:aa:72:67:71:44:
         31:0b:df:a9:c7:a1:fe:3b:86:e0:99:97:13:57:0c:86:8b:4b:
         c4:06:8c:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS+LcesMDWQcXmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw
YjZlMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk
MzZhYzNlYWYtZWMzYi00NjFmLWJlNDEtM2YzZTAxMGZiMGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1MRq2M/YGNY7SzFR8bf8eRKUFwVMFgO7jjG
qEQvvRCNkbIkWuXdt4oUB3FFL7QAfI8G6s8+BYhgir56ptSp8Ht7DrpQP9HRMp1k
sEQ6hcbLuJNARYufhW+2RbW9eu1tDwx9ogm/cfj+FlGx3XdB4BHNXreMyjCzXcOI
FeO82Ty+/I+8Qwyc7iiG5kaqjwRNRxLgMM7vkeAqqvv2XauBIhcaG7Ij7Cx5+Zk4
m6+8k47k64EcEczFf+C1LCHgC39PtlrIKIlTND3ULcns8RQY4jMy/2Y6B9Pps6sq
agBDIme8AQfsUn8eI6TCBJ0IFA5vPhQyCQ5Xh/iyPefg9b2oVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXL+c43D454U5dCDyfoPkFAjXwjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz
MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvYTIxNTdiZmEtODJiMS0z
MTJiLWIxY2UtNTQ4NmJiM2FlNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1
ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2
MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk
NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxrscMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOQ+PqKGROYLU4ERphcAAGR+rlUDH1R33/OMwZGCyHWwDCc6w7SoH8f
zF97yj9GZS5jDFlciejfRR/WE3xnIzkTonjwyTqzmtlQe/2LyRuqQhHRFmZHtLlB
rp7T/7ttPok2Hx5tPryb6wvJvU5nk2znK31RnDUIxi+XvReRSCsiP+RI2UWHVq7L
Gj3UudrA8DrVJt0AqOBeGt2OmzOR7bDsFo7IUt0fNkV4g0hP5iOcpZG8SfbJdKX0
/lmBq9vFEQgXu3yV/PU023/p3y7Ju73CMHSVfEgIGw+CbyMcnlasmaQNEE+qcmdx
RDEL36nHof47huCZlxNXDIaLS8QGjKE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:51 2024 by rpki-client on console-ams.rpki-client.org