Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e198289-5cdd-3988-86d8-4d728ce1ffb6.roa
File:                     1e198289-5cdd-3988-86d8-4d728ce1ffb6.roa (raw, json)
Hash identifier:          3qGPl2wPuG2UsLtqV8v6dTex79hj1uNkIIT9uYzfIFU=
Subject key identifier:   AF:3F:E0:9D:00:1B:9C:BE:9C:10:F2:7E:DE:C5:F0:B8:4F:0F:DC:1F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858471E7085B86083F7C3FD3FD380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e198289-5cdd-3988-86d8-4d728ce1ffb6.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     36183
IP address blocks:        172.225.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:85:b8:60:83:f7:c3:fd:3f:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=c5095ecd-3d9a-4eb2-8881-d18399399a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:ef:71:29:b9:9b:ac:2a:6b:ea:61:94:ae:
                    80:72:11:48:50:ea:58:cb:64:61:3a:96:78:41:fb:
                    e2:f3:95:1a:52:18:d1:7e:ab:78:99:4d:2e:13:5a:
                    83:83:81:98:16:db:7e:c5:42:bf:83:57:da:0b:0c:
                    5e:b9:01:08:6b:f4:1f:e5:87:e2:79:3c:e7:70:39:
                    d9:2a:3a:96:54:f5:f4:9e:45:bd:85:0c:33:a0:13:
                    77:fc:27:be:a3:cd:46:de:b3:48:aa:4b:42:6a:d8:
                    b4:bc:bc:ed:ff:54:91:de:f8:ca:03:0e:2e:99:8b:
                    b2:b8:ad:aa:bf:ef:9a:5c:ab:17:a0:a7:cd:bf:67:
                    77:69:e5:4d:6d:42:63:e9:42:9c:1b:cf:e4:9d:6e:
                    12:09:d5:0e:ad:ae:26:7c:d7:e9:b2:40:b5:4e:4a:
                    ba:6a:0f:d5:fd:1e:76:68:60:e1:b1:5b:86:23:aa:
                    a0:ab:59:4a:7a:d7:1a:8a:c2:a5:21:99:31:b8:e3:
                    c0:f7:3a:3d:85:07:5b:eb:c9:0d:77:06:8a:bb:40:
                    6c:4e:d6:09:40:28:40:ac:2d:2d:fa:5f:27:24:f5:
                    cd:5b:83:1d:82:83:af:3d:3e:c6:bd:99:32:a2:f9:
                    fb:0f:2a:20:65:78:84:06:e4:c7:21:c1:d8:23:f0:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3F:E0:9D:00:1B:9C:BE:9C:10:F2:7E:DE:C5:F0:B8:4F:0F:DC:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e198289-5cdd-3988-86d8-4d728ce1ffb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:26:e9:80:60:39:58:a8:23:88:3c:4f:e1:10:ac:9f:af:73:
         39:e9:e3:a2:87:04:ce:d8:dd:a4:da:17:a3:ca:fb:8e:61:09:
         22:b8:c8:2c:48:49:40:a1:2c:7e:e1:12:48:ac:df:d6:5f:14:
         54:66:82:96:5a:70:4c:d8:ed:af:a2:c3:9d:06:60:0c:7c:94:
         b6:a5:fc:78:75:47:66:ce:96:4c:ec:0a:74:15:cb:2d:57:36:
         6c:4d:6b:e6:d0:d7:38:e3:06:26:6d:53:ca:4e:65:89:09:8b:
         92:a3:a4:f0:48:c3:9a:1b:59:88:d8:dd:34:6a:d9:a2:36:1c:
         54:ce:66:a3:00:27:fa:62:1d:bb:b6:b0:43:ae:52:0f:c8:39:
         8e:04:1b:47:96:ee:00:01:25:13:7c:42:7e:a0:8c:13:25:74:
         56:24:43:53:da:8a:4b:ba:c6:fa:f4:39:36:24:c3:5f:d4:1e:
         ff:ae:20:a0:4d:d4:c8:e1:a8:9c:f5:cc:19:92:60:3d:e3:7f:
         72:2f:00:25:74:1b:c4:1b:ef:d6:52:47:7b:68:50:3b:d4:6f:
         5c:4c:31:a2:3a:bd:89:38:a5:eb:02:cc:5b:02:c7:77:04:67:
         92:c3:00:a5:49:dc:2a:e9:75:15:95:a8:37:0a:14:9c:25:64:
         d0:68:b9:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecIW4YIP3w/0/04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
YzUwOTVlY2QtM2Q5YS00ZWIyLTg4ODEtZDE4Mzk5Mzk5YTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/7vcSm5m6wqa+phlK6AchFIUOpYy2RhOpZ4
Qfvi85UaUhjRfqt4mU0uE1qDg4GYFtt+xUK/g1faCwxeuQEIa/Qf5YfieTzncDnZ
KjqWVPX0nkW9hQwzoBN3/Ce+o81G3rNIqktCati0vLzt/1SR3vjKAw4umYuyuK2q
v++aXKsXoKfNv2d3aeVNbUJj6UKcG8/knW4SCdUOra4mfNfpskC1Tkq6ag/V/R52
aGDhsVuGI6qgq1lKetcaisKlIZkxuOPA9zo9hQdb68kNdwaKu0BsTtYJQChArC0t
+l8nJPXNW4MdgoOvPT7GvZkyovn7DyogZXiEBuTHIcHYI/CIfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8/4J0AG5y+nBDyft7F8LhPD9wfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUxOTgyODktNWNkZC0z
OTg4LTg2ZDgtNGQ3MjhjZTFmZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0m6YBgOVioI4g8T+EQrJ+vcznp46KHBM7Y3aTaF6PK+45hCSK4yCxI
SUChLH7hEkis39ZfFFRmgpZacEzY7a+iw50GYAx8lLal/Hh1R2bOlkzsCnQVyy1X
NmxNa+bQ1zjjBiZtU8pOZYkJi5KjpPBIw5obWYjY3TRq2aI2HFTOZqMAJ/piHbu2
sEOuUg/IOY4EG0eW7gABJRN8Qn6gjBMldFYkQ1Paiku6xvr0OTYkw1/UHv+uIKBN
1MjhqJz1zBmSYD3jf3IvACV0G8Qb79ZSR3toUDvUb1xMMaI6vYk4pesCzFsCx3cE
Z5LDAKVJ3CrpdRWVqDcKFJwlZNBouUY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:26:35 2024 by rpki-client on console-fra.rpki-client.org