Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b734d4f5-f17c-3d01-b6e0-a9ce084300f5.roa
File:                     b734d4f5-f17c-3d01-b6e0-a9ce084300f5.roa (raw, json)
Hash identifier:          jgEYO4NbZEJzS9VDVp0Q2qzAC5Wpkc4Itu9EOTl8xvE=
Subject key identifier:   20:B8:8D:22:63:4F:05:8B:7B:A8:19:54:C8:47:D4:67:77:38:A8:17
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584762D6729B4EBDE3A4DF665A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b734d4f5-f17c-3d01-b6e0-a9ce084300f5.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     20940
IP address blocks:        184.27.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:72:9b:4e:bd:e3:a4:df:66:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=bfe3fd36-99f9-46a9-ba7b-739fb9de85fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:82:7b:be:cd:d8:45:f2:51:8a:c1:74:9d:
                    67:a0:9a:18:32:58:d1:d5:58:c8:ba:9d:ec:e8:92:
                    66:51:c4:a3:86:18:57:84:45:f8:56:ea:6c:28:e9:
                    08:4a:a1:b4:29:41:3d:95:40:cf:68:2b:4a:c0:9a:
                    99:21:ec:cd:fb:c4:a9:3f:d3:82:01:51:3c:2e:ac:
                    c1:b9:43:4b:08:7e:5b:3e:ed:21:b2:4c:bf:6f:8d:
                    cc:9b:66:2a:a4:7f:27:e3:d4:6d:8d:d0:ad:ad:f2:
                    6d:b9:e9:8c:86:27:f9:6a:8e:0d:71:01:61:ef:67:
                    84:95:04:a6:06:60:8d:b8:76:e7:09:0d:78:cd:85:
                    1b:fb:b7:ed:81:2e:19:5f:d0:4e:52:21:1d:cc:2b:
                    d8:24:1d:25:28:b9:38:76:13:e7:bd:4c:5c:3e:a2:
                    f5:2e:71:19:d4:9d:4f:81:02:c1:d0:81:55:ac:ac:
                    97:78:21:22:ea:9b:a3:31:f8:39:2b:43:50:c0:56:
                    50:ef:b9:87:10:aa:89:14:c2:64:50:82:01:31:c9:
                    a5:af:34:ef:22:27:f7:4e:6a:8e:4d:ab:09:b4:08:
                    32:be:c3:cd:67:12:c7:22:06:c1:da:17:ee:4b:80:
                    d7:28:74:83:f9:b9:3b:37:2d:d4:fa:10:e5:1c:22:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B8:8D:22:63:4F:05:8B:7B:A8:19:54:C8:47:D4:67:77:38:A8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b734d4f5-f17c-3d01-b6e0-a9ce084300f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.27.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3e:ce:8a:85:b8:23:42:17:35:88:c8:5e:13:75:4c:9a:0c:
         ea:3e:eb:dc:e3:b7:dd:e3:01:59:64:4d:08:80:f6:69:60:8b:
         66:aa:90:1f:20:11:a1:1b:e6:df:24:6d:2d:64:d8:c3:19:1c:
         ff:68:a2:c1:af:1d:ca:87:27:8f:8d:a8:af:fd:14:b1:9b:72:
         eb:9c:b9:07:c9:e5:e8:08:7d:cd:c7:82:e7:f8:e2:ac:f9:1d:
         37:97:11:21:39:89:e6:33:fa:e7:01:65:05:ae:dd:bc:db:0a:
         61:23:fd:ad:2b:95:2e:f0:53:4b:f9:4a:13:a7:ed:b0:1b:ee:
         f0:c6:8d:8c:20:1b:a8:f1:1a:f0:fd:7b:4e:98:dc:37:94:a7:
         6f:10:47:a9:d8:9f:b1:21:94:4a:04:8d:b9:f4:0f:1d:f9:6a:
         ab:69:99:8f:d7:d6:1f:75:f7:58:1e:4b:fb:64:c3:38:52:6b:
         7d:a6:ed:df:bb:da:e3:a8:ec:28:4a:b8:26:40:61:94:65:86:
         75:08:65:4e:8d:31:f0:8d:a1:ab:aa:a1:65:a1:de:d2:0f:42:
         88:d7:4a:0c:cd:dc:27:8d:28:10:ff:4d:de:12:30:b9:41:d9:
         d3:4b:44:91:ce:69:f1:89:eb:45:48:00:56:99:9f:6c:ff:f2:
         6c:0a:ef:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdi1nKbTr3jpN9mWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkzMDEzMDA0MloXDTI0MTIyOTE0MDA0MlowLzEtMCsGA1UEAxMk
YmZlM2ZkMzYtOTlmOS00NmE5LWJhN2ItNzM5ZmI5ZGU4NWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryeCe77N2EXyUYrBdJ1noJoYMljR1VjIup3s
6JJmUcSjhhhXhEX4VupsKOkISqG0KUE9lUDPaCtKwJqZIezN+8SpP9OCAVE8LqzB
uUNLCH5bPu0hsky/b43Mm2YqpH8n49RtjdCtrfJtuemMhif5ao4NcQFh72eElQSm
BmCNuHbnCQ14zYUb+7ftgS4ZX9BOUiEdzCvYJB0lKLk4dhPnvUxcPqL1LnEZ1J1P
gQLB0IFVrKyXeCEi6pujMfg5K0NQwFZQ77mHEKqJFMJkUIIBMcmlrzTvIif3TmqO
TasJtAgyvsPNZxLHIgbB2hfuS4DXKHSD+bk7Ny3U+hDlHCL5WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCC4jSJjTwWLe6gZVMhH1Gd3OKgXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjczNGQ0ZjUtZjE3Yy0z
ZDAxLWI2ZTAtYTljZTA4NDMwMGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBvZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0+zoqFuCNCFzWIyF4TdUyaDOo+69zjt93jAVlkTQiA9mlgi2aqkB8g
EaEb5t8kbS1k2MMZHP9oosGvHcqHJ4+NqK/9FLGbcuucuQfJ5egIfc3Hguf44qz5
HTeXESE5ieYz+ucBZQWu3bzbCmEj/a0rlS7wU0v5ShOn7bAb7vDGjYwgG6jxGvD9
e06Y3DeUp28QR6nYn7EhlEoEjbn0Dx35aqtpmY/X1h9191geS/tkwzhSa32m7d+7
2uOo7ChKuCZAYZRlhnUIZU6NMfCNoauqoWWh3tIPQojXSgzN3CeNKBD/Td4SMLlB
2dNLRJHOafGJ60VIAFaZn2z/8mwK78g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:30 2024 by rpki-client on console-fra.rpki-client.org