Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d760c8c9-b00b-3a9c-8a73-a5f3fa319262.roa
File:                     d760c8c9-b00b-3a9c-8a73-a5f3fa319262.roa (raw, json)
Hash identifier:          ppAwSK08gdyqV+jmLFaimici5qwHwu+t4skjPuuOUw8=
Subject key identifier:   34:AE:F5:7D:4B:D9:C1:C7:3F:1C:66:2A:CD:48:11:0B:F9:E8:7D:AA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847617193A2DBDF872E3869CAC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d760c8c9-b00b-3a9c-8a73-a5f3fa319262.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     16625
IP address blocks:        184.25.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:93:a2:db:df:87:2e:38:69:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=3a55d3de-3b9a-4f83-9df0-bc4c16defcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:2e:af:78:99:d5:60:9b:74:28:15:4f:4e:
                    3a:44:2e:34:a0:89:7f:30:3f:b2:0c:75:e5:a9:48:
                    61:82:18:26:bc:ce:08:60:f2:a6:bc:31:48:f0:08:
                    57:2b:74:4f:d4:26:42:c1:a5:93:23:13:c3:35:63:
                    09:05:24:d6:c8:de:19:6c:eb:16:e7:2a:25:64:27:
                    5e:e2:a6:9a:e6:14:d6:b7:c1:47:1e:c0:9f:a4:19:
                    84:08:60:9d:a2:a2:b1:69:42:d0:50:a5:00:0f:74:
                    33:8e:7f:a8:20:58:a1:43:d0:01:2c:27:18:3a:92:
                    92:c7:fa:66:f0:99:3a:66:1a:4e:18:e2:cc:b2:c4:
                    11:e5:f0:8f:7c:0f:02:9a:9c:52:d8:91:8a:1c:2b:
                    2c:05:88:28:78:c5:6c:c5:a4:20:a6:66:f2:37:ef:
                    ce:4f:05:5e:db:1a:eb:a2:78:ad:0d:b7:48:ac:69:
                    7c:ef:5e:d0:04:5d:b3:d9:ac:30:87:4a:ab:95:3d:
                    21:9c:ca:e7:53:b7:07:76:e1:bf:47:0d:e9:8e:cb:
                    f6:81:48:88:82:0d:7b:ff:b8:62:2c:07:0b:a3:c5:
                    c0:97:70:0f:2f:6d:5d:43:63:56:04:57:39:96:ee:
                    d5:2a:53:75:7b:94:d8:9f:61:2d:3f:6e:28:52:8c:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AE:F5:7D:4B:D9:C1:C7:3F:1C:66:2A:CD:48:11:0B:F9:E8:7D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d760c8c9-b00b-3a9c-8a73-a5f3fa319262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:68:6f:e7:da:24:59:75:90:cb:53:d7:28:ac:32:dd:1d:d1:
         69:df:f8:f6:84:87:ed:f2:9a:3c:fd:4f:97:a7:e3:34:e4:06:
         b1:df:53:76:8f:fc:a9:90:d7:e9:a3:42:3a:12:9d:9e:2f:cc:
         98:10:06:e4:43:51:bf:6b:cf:01:f3:71:82:91:62:f7:b8:28:
         3c:d6:9f:0f:fd:27:22:10:58:66:35:e5:16:93:50:9c:fc:43:
         3c:4f:59:8a:29:25:ab:55:ab:3e:aa:ed:cc:b1:ad:c4:c1:80:
         ba:be:66:f2:9b:1a:97:16:f2:a1:fe:2f:22:6b:9a:16:34:91:
         46:ed:ce:ac:a4:d0:39:81:59:e4:24:ef:a2:dc:a6:cd:83:8b:
         1d:61:42:37:fa:0f:48:74:49:61:3a:30:c5:dc:65:9d:35:d7:
         76:f4:00:2c:49:9d:0b:89:01:92:fd:a0:06:b2:6a:d4:d9:5c:
         95:6d:c7:ab:eb:fe:fb:9f:b4:8d:67:43:7e:a9:6c:1f:5f:b4:
         52:b2:21:73:c7:4b:67:2e:b1:54:7a:0e:6a:68:e6:22:1f:47:
         38:6b:1d:51:56:38:30:52:8e:bb:05:ff:8d:9a:1e:ad:a8:6e:
         53:ce:54:f3:10:73:18:06:2c:a8:25:f5:6f:84:50:ad:b1:24:
         39:3b:4e:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdhcZOi29+HLjhpysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
M2E1NWQzZGUtM2I5YS00ZjgzLTlkZjAtYmM0YzE2ZGVmY2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtusur3iZ1WCbdCgVT046RC40oIl/MD+yDHXl
qUhhghgmvM4IYPKmvDFI8AhXK3RP1CZCwaWTIxPDNWMJBSTWyN4ZbOsW5yolZCde
4qaa5hTWt8FHHsCfpBmECGCdoqKxaULQUKUAD3Qzjn+oIFihQ9ABLCcYOpKSx/pm
8Jk6ZhpOGOLMssQR5fCPfA8CmpxS2JGKHCssBYgoeMVsxaQgpmbyN+/OTwVe2xrr
onitDbdIrGl8717QBF2z2awwh0qrlT0hnMrnU7cHduG/Rw3pjsv2gUiIgg17/7hi
LAcLo8XAl3APL21dQ2NWBFc5lu7VKlN1e5TYn2EtP24oUoyg0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSu9X1L2cHHPxxmKs1IEQv56H2qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDc2MGM4YzktYjAwYi0z
YTljLThhNzMtYTVmM2ZhMzE5MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBn0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNob+faJFl1kMtT1yisMt0d0Wnf+PaEh+3ymjz9T5en4zTkBrHfU3aP
/KmQ1+mjQjoSnZ4vzJgQBuRDUb9rzwHzcYKRYve4KDzWnw/9JyIQWGY15RaTUJz8
QzxPWYopJatVqz6q7cyxrcTBgLq+ZvKbGpcW8qH+LyJrmhY0kUbtzqyk0DmBWeQk
76Lcps2Dix1hQjf6D0h0SWE6MMXcZZ0113b0ACxJnQuJAZL9oAayatTZXJVtx6vr
/vuftI1nQ36pbB9ftFKyIXPHS2cusVR6Dmpo5iIfRzhrHVFWODBSjrsF/42aHq2o
blPOVPMQcxgGLKgl9W+EUK2xJDk7Tmk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:48:28 2024 by rpki-client on console-ams.rpki-client.org