Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20beb614-4346-3184-a84d-70a502d99dbe.roa
File:                     20beb614-4346-3184-a84d-70a502d99dbe.roa (raw, json)
Hash identifier:          wTp9LSZPByHE4bKWt+CIMNtc0F99vejlL/3gYWs2/Dc=
Subject key identifier:   C4:40:24:A4:58:67:8F:81:05:8F:5C:CD:97:51:54:BE:25:42:94:38
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847521619DD2AAF3628357D65C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20beb614-4346-3184-a84d-70a502d99dbe.roa
Signing time:             Tue 24 Sep 2024 13:00:40 +0000
ROA not before:           Tue 24 Sep 2024 13:00:40 +0000
ROA not after:            Mon 23 Dec 2024 14:00:40 +0000
asID:                     16625
IP address blocks:        173.222.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:16:19:dd:2a:af:36:28:35:7d:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:40 2024 GMT
            Not After : Dec 23 14:00:40 2024 GMT
        Subject: CN=2b6be719-5847-41cf-86e6-c3a20f612dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:74:42:4e:7e:22:7a:89:92:c6:37:be:7a:
                    ba:ad:02:c9:6d:f5:2b:88:42:26:a5:52:2a:33:99:
                    02:ac:1f:8b:cf:42:a8:b4:93:04:51:d4:cd:df:ce:
                    7d:5e:87:8e:f9:a6:36:7c:b1:cb:ba:76:cf:2b:c7:
                    f5:b7:19:47:c6:98:34:aa:fc:98:8e:2d:ac:35:a8:
                    c8:ef:0c:19:cf:b1:44:17:46:c7:89:dd:c3:4a:c9:
                    0b:e9:9e:99:59:92:9b:f1:2f:35:2c:5f:bc:60:49:
                    43:2f:45:72:33:c2:b5:80:ab:81:53:3c:80:97:07:
                    75:48:c6:90:e8:4d:0f:65:43:dc:18:69:6c:2d:82:
                    47:23:b9:94:29:fc:a7:f7:27:6f:1f:7c:88:7b:63:
                    d6:e1:68:a8:6d:f8:aa:c1:b0:e6:6d:33:78:b9:67:
                    30:48:7d:e9:cd:13:d6:76:e3:d6:5a:fe:4a:a3:d8:
                    09:49:56:2b:0d:2f:32:47:f6:45:5a:b4:b0:fd:85:
                    7c:a6:d9:81:3f:4b:ad:b0:b0:0d:5e:8b:7d:49:9c:
                    f3:6f:93:6e:d5:23:46:d6:7f:88:00:40:e2:4c:ef:
                    9a:e6:28:bf:75:06:5d:eb:98:0d:ce:c6:c0:c2:83:
                    ab:4c:cc:36:88:6b:5f:a6:5e:5f:0f:1c:2e:77:bf:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:40:24:A4:58:67:8F:81:05:8F:5C:CD:97:51:54:BE:25:42:94:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20beb614-4346-3184-a84d-70a502d99dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:ef:bb:af:4c:fd:1c:7b:d5:23:db:3f:38:8c:10:49:0d:
         e5:e0:ee:04:c4:67:6c:06:52:7c:1b:ca:d5:8d:3e:02:71:77:
         56:39:87:7c:c4:f6:40:26:d3:0b:66:60:5f:4a:e8:2b:be:59:
         44:6c:a2:5c:85:ac:3f:3d:8c:6e:f3:4e:80:7c:90:d7:51:80:
         33:87:b9:76:86:08:b1:5e:65:2a:26:8f:cc:e9:44:90:d5:24:
         db:11:e0:18:00:8b:34:45:c7:f8:93:ed:63:aa:b4:71:5a:6a:
         b5:de:11:97:d1:e2:56:57:d8:23:b3:25:a6:e1:e8:53:9c:dc:
         40:7c:c2:b6:eb:2a:99:0d:b7:04:fc:1c:94:54:b0:ac:98:d5:
         e8:19:c9:4a:b2:06:c0:ad:21:85:bb:1b:b8:0f:79:bc:86:d8:
         24:77:8c:f7:53:82:f0:92:1f:d8:ed:ca:87:63:87:ae:d2:10:
         04:62:16:d5:59:c2:fe:65:db:da:24:25:6f:12:77:3b:56:4a:
         59:d5:59:56:01:4a:43:f7:0b:47:29:79:77:7e:a7:c1:e9:5c:
         2a:d6:49:50:1a:8f:e0:8b:d6:91:1f:4a:f9:98:e5:1c:8a:14:
         6d:bd:6a:52:d7:ab:e6:fd:44:ff:c6:58:c5:43:36:6f:50:4e:
         cf:88:81:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdSFhndKq82KDV9ZcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkyNDEzMDA0MFoXDTI0MTIyMzE0MDA0MFowLzEtMCsGA1UEAxMk
MmI2YmU3MTktNTg0Ny00MWNmLTg2ZTYtYzNhMjBmNjEyZGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy50Qk5+InqJksY3vnq6rQLJbfUriEImpVIq
M5kCrB+Lz0KotJMEUdTN3859XoeO+aY2fLHLunbPK8f1txlHxpg0qvyYji2sNajI
7wwZz7FEF0bHid3DSskL6Z6ZWZKb8S81LF+8YElDL0VyM8K1gKuBUzyAlwd1SMaQ
6E0PZUPcGGlsLYJHI7mUKfyn9ydvH3yIe2PW4WiobfiqwbDmbTN4uWcwSH3pzRPW
duPWWv5Ko9gJSVYrDS8yR/ZFWrSw/YV8ptmBP0utsLANXot9SZzzb5Nu1SNG1n+I
AEDiTO+a5ii/dQZd65gNzsbAwoOrTMw2iGtfpl5fDxwud78oMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRAJKRYZ4+BBY9czZdRVL4lQpQ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBiZWI2MTQtNDM0Ni0z
MTg0LWE4NGQtNzBhNTAyZDk5ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd60MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8W77uvTP0ce9Uj2z84jBBJDeXg7gTEZ2wGUnwbytWNPgJxd1Y5h3zE
9kAm0wtmYF9K6Cu+WURsolyFrD89jG7zToB8kNdRgDOHuXaGCLFeZSomj8zpRJDV
JNsR4BgAizRFx/iT7WOqtHFaarXeEZfR4lZX2COzJabh6FOc3EB8wrbrKpkNtwT8
HJRUsKyY1egZyUqyBsCtIYW7G7gPebyG2CR3jPdTgvCSH9jtyodjh67SEARiFtVZ
wv5l29okJW8SdztWSlnVWVYBSkP3C0cpeXd+p8HpXCrWSVAaj+CL1pEfSvmY5RyK
FG29alLXq+b9RP/GWMVDNm9QTs+IgV8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:20 2024 by rpki-client on console-fra.rpki-client.org