Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa
File:                     8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa (raw, json)
Hash identifier:          lUEZ0V8yeZSRalG/j+PVs5pM55SZGolroqb7ZLnZbhE=
Subject key identifier:   57:1C:65:42:9F:C7:DB:74:80:4A:3A:65:DB:94:5E:7E:74:BD:17:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B89B689A44CB4E0977500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        100.15.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:89:b6:89:a4:4c:b4:e0:97:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=3cf025fc-9b39-4c6f-813d-8c4724ab6fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:83:42:ab:42:c8:16:a6:bd:b0:47:09:07:
                    81:b4:4b:fb:80:eb:ef:84:df:25:e4:51:94:1a:23:
                    85:82:57:41:27:c6:1c:6b:dd:f8:03:c4:cd:e4:bb:
                    19:33:76:57:0d:0d:1d:c5:f6:cd:ea:92:77:dd:78:
                    27:48:3c:30:fa:c2:2f:64:c2:31:ed:51:0c:af:16:
                    2f:41:ea:d5:b6:dc:6b:8a:a9:6d:aa:46:23:e7:23:
                    6a:cd:32:b7:1c:83:d2:f1:91:4b:ff:1d:0a:85:cf:
                    8a:ca:c4:23:5c:1e:3d:3a:ad:d9:29:2f:c3:55:da:
                    12:61:77:29:8a:26:5a:48:ae:2f:75:63:34:73:46:
                    2d:5d:27:81:43:ce:29:03:d1:46:f8:f6:70:a0:90:
                    1b:a9:60:72:d7:31:4d:f8:4d:10:d4:64:10:a0:56:
                    56:31:5f:24:2b:ec:b6:11:6b:60:14:a2:66:7a:e0:
                    4d:2e:13:36:10:20:2d:c9:04:07:e2:a3:1b:4e:c3:
                    dd:36:03:8a:d7:32:8f:77:d3:66:25:db:4d:e8:f1:
                    e1:9f:dc:0f:8e:d4:93:c0:f8:bc:ba:b4:88:20:5b:
                    8e:28:b3:ae:c0:ee:96:cd:37:bd:2b:40:77:5b:d1:
                    7f:a7:18:da:13:d6:91:f0:e0:61:fd:92:ea:8c:c5:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1C:65:42:9F:C7:DB:74:80:4A:3A:65:DB:94:5E:7E:74:BD:17:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c454f36-04f7-32fb-b76e-eb37f740b1d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:de:55:de:d3:f2:75:99:3b:9d:a0:80:f4:f8:5c:ca:54:f2:
         25:74:60:11:66:93:f5:23:b5:03:ab:4e:47:d4:f1:93:dc:4d:
         f8:e3:65:09:6f:48:7e:bf:9a:b3:62:90:23:b6:0e:ad:89:3a:
         e6:21:62:7e:e6:6e:a4:38:46:c3:b6:90:15:df:f2:d6:8e:d6:
         63:bb:00:c2:4a:bb:c1:2b:ed:82:43:3a:8e:8b:a5:c0:b4:63:
         2a:51:d4:b1:d0:ef:e1:c0:4c:14:b3:aa:31:06:43:5d:28:57:
         e5:ee:f4:37:84:dc:7c:03:a9:0d:59:2a:7d:82:08:6a:45:05:
         fc:7d:b6:76:ba:f3:d1:d1:00:c7:18:a3:5b:fa:92:70:84:37:
         3e:cf:57:f5:db:26:a0:05:ab:cd:c8:05:40:79:bc:83:cd:0c:
         97:fe:4a:0c:8f:ad:51:c9:d9:1d:30:50:a7:b9:26:4a:64:e0:
         e7:ed:b5:bf:1b:f9:74:50:26:a1:05:e5:fe:9b:ac:60:2b:dd:
         c4:07:ee:91:ff:24:44:83:55:44:ed:64:e3:59:27:21:4b:33:
         c0:ad:f4:ef:db:bb:de:0c:14:cb:5f:ca:d1:6e:27:8d:64:b3:
         5a:08:39:3e:06:11:c6:81:9f:31:18:3e:6e:c9:a3:a0:26:b8:
         e2:0e:ea:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEdTe4m2iaRMtOCXdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
M2NmMDI1ZmMtOWIzOS00YzZmLTgxM2QtOGM0NzI0YWI2ZmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp6DQqtCyBamvbBHCQeBtEv7gOvvhN8l5FGU
GiOFgldBJ8Yca934A8TN5LsZM3ZXDQ0dxfbN6pJ33XgnSDww+sIvZMIx7VEMrxYv
QerVttxriqltqkYj5yNqzTK3HIPS8ZFL/x0Khc+KysQjXB49Oq3ZKS/DVdoSYXcp
iiZaSK4vdWM0c0YtXSeBQ84pA9FG+PZwoJAbqWBy1zFN+E0Q1GQQoFZWMV8kK+y2
EWtgFKJmeuBNLhM2ECAtyQQH4qMbTsPdNgOK1zKPd9NmJdtN6PHhn9wPjtSTwPi8
urSIIFuOKLOuwO6WzTe9K0B3W9F/pxjaE9aR8OBh/ZLqjMViTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFccZUKfx9t0gEo6ZduUXn50vRfJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGM0NTRmMzYtMDRmNy0z
MmZiLWI3NmUtZWIzN2Y3NDBiMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZA8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZ95V3tPydZk7naCA9PhcylTyJXRgEWaT9SO1A6tOR9Txk9xN+ONlCW9I
fr+as2KQI7YOrYk65iFifuZupDhGw7aQFd/y1o7WY7sAwkq7wSvtgkM6joulwLRj
KlHUsdDv4cBMFLOqMQZDXShX5e70N4TcfAOpDVkqfYIIakUF/H22drrz0dEAxxij
W/qScIQ3Ps9X9dsmoAWrzcgFQHm8g80Ml/5KDI+tUcnZHTBQp7kmSmTg5+21vxv5
dFAmoQXl/pusYCvdxAfukf8kRINVRO1k41knIUszwK3079u73gwUy1/K0W4njWSz
Wgg5PgYRxoGfMRg+bsmjoCa44g7q+w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:38 2024 by rpki-client on console-ams.rpki-client.org