Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/8694a2eb-3abf-34f0-b0b0-dbfadce28a5a.roa
File:                     8694a2eb-3abf-34f0-b0b0-dbfadce28a5a.roa (raw, json)
Hash identifier:          wgzD9X99uokkxHfCo0KzMgoJvrEY8P/pEAp8c6PmFlo=
Subject key identifier:   1D:69:54:13:43:BF:E3:0E:5D:02:04:A3:35:96:71:2F:44:8A:41:BC
Certificate issuer:       /CN=7b231006-d2b6-41f0-82bb-4d669658922f
Certificate serial:       010D0C9F43285847CD7B06C3A4F7AF55BAFB7740
Authority key identifier: E2:BA:BF:80:05:D7:D3:B2:FE:E2:30:F8:08:8E:00:21:10:80:2B:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/8694a2eb-3abf-34f0-b0b0-dbfadce28a5a.roa
Signing time:             Thu 07 Nov 2024 17:48:33 +0000
ROA not before:           Thu 07 Nov 2024 17:48:33 +0000
ROA not after:            Wed 05 Feb 2025 17:48:33 +0000
asID:                     399073
IP address blocks:        162.221.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/7b231006-d2b6-41f0-82bb-4d669658922f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/7b231006-d2b6-41f0-82bb-4d669658922f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:7b:06:c3:a4:f7:af:55:ba:fb:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b231006-d2b6-41f0-82bb-4d669658922f
        Validity
            Not Before: Nov  7 17:48:33 2024 GMT
            Not After : Feb  5 17:48:33 2025 GMT
        Subject: CN=4affea2a-e753-4437-9759-bb5e6c58ac14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:c5:61:c8:3c:12:78:a6:d0:5f:9f:0b:5c:
                    7e:96:96:d0:0d:d9:2d:29:4d:6a:99:03:ba:12:d5:
                    8e:5f:75:b0:5b:0f:d2:68:c8:c6:7b:36:03:e3:da:
                    da:a9:66:3c:9c:b7:35:21:5d:c3:ec:09:cb:c1:53:
                    1a:87:5b:30:97:0e:0c:71:6b:40:62:aa:21:f8:5e:
                    82:ed:09:7b:f4:4a:d6:81:2d:ed:4d:48:4d:6d:e5:
                    66:9e:b6:40:f6:71:3a:62:27:ce:0e:d3:97:06:42:
                    ac:81:11:1f:fc:55:b4:fc:7e:67:63:3e:8b:cd:27:
                    c3:c1:80:7b:c1:53:16:0d:99:ed:19:f6:00:db:37:
                    6c:e2:5b:7d:bc:45:66:9c:85:af:bb:c3:11:c2:6a:
                    4b:b1:f1:ac:29:35:33:b6:9a:58:07:82:29:b4:99:
                    d9:7a:66:d7:01:21:0e:ae:ea:7b:44:67:f8:ed:49:
                    ce:cb:b1:aa:02:27:7b:d8:c7:13:13:32:64:fd:26:
                    91:c1:eb:0d:67:34:14:cf:5c:98:c3:7e:07:e6:3c:
                    27:60:69:85:e8:e4:6a:04:8c:65:84:10:3d:55:33:
                    e0:30:8a:74:bc:9e:f9:53:3a:59:c6:4d:27:48:56:
                    17:4b:5d:a2:8d:d8:fb:29:34:62:2a:07:c6:74:97:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:69:54:13:43:BF:E3:0E:5D:02:04:A3:35:96:71:2F:44:8A:41:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/8694a2eb-3abf-34f0-b0b0-dbfadce28a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f/7b231006-d2b6-41f0-82bb-4d669658922f.crl

            X509v3 Authority Key Identifier:
                keyid:E2:BA:BF:80:05:D7:D3:B2:FE:E2:30:F8:08:8E:00:21:10:80:2B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b231006-d2b6-41f0-82bb-4d669658922f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3a:3a:b3:7a:3a:fc:dc:f8:bd:fc:78:ac:db:14:69:30:1d:
         7b:75:7d:01:24:e6:3a:2e:76:be:a3:bb:d4:c0:f4:63:4c:e4:
         65:4b:44:15:96:0c:05:7e:b7:df:e2:58:bf:4d:bb:f7:e5:cc:
         06:04:c9:f8:c9:92:da:f1:62:ce:4b:c3:01:10:33:2e:c2:88:
         e3:ab:d0:90:05:06:47:06:eb:a1:28:29:c3:f1:5d:a6:9c:d6:
         58:12:e4:74:17:b1:a9:c5:c5:92:40:19:76:2f:31:c6:2c:72:
         73:0e:14:ea:37:54:1c:be:9c:b9:7b:ca:a4:ef:b4:49:b9:9a:
         52:17:a3:0a:ca:49:af:30:81:43:1d:3f:39:53:35:8e:5a:58:
         8a:1a:15:af:74:11:80:21:9c:7e:c4:c2:34:f5:8e:c2:4f:8e:
         0a:c3:32:6e:8c:4c:c5:1e:c5:e4:00:fc:85:2c:81:8d:d9:1d:
         dc:96:25:9b:ad:aa:d8:ae:22:cb:b8:7b:81:b9:0f:2c:75:83:
         f9:60:30:5f:bf:da:65:2e:61:f2:a1:78:93:79:52:1a:b3:32:
         15:7f:36:a0:55:02:25:b4:e2:1a:64:a5:f5:28:00:12:13:89:
         c8:4c:50:4d:42:58:17:c8:3c:a0:b1:1c:31:ca:db:9c:cd:65:
         69:a5:15:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfNewbDpPevVbr7d0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IyMzEwMDYtZDJiNi00MWYwLTgyYmItNGQ2Njk2NTg5
MjJmMB4XDTI0MTEwNzE3NDgzM1oXDTI1MDIwNTE3NDgzM1owLzEtMCsGA1UEAxMk
NGFmZmVhMmEtZTc1My00NDM3LTk3NTktYmI1ZTZjNThhYzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25nFYcg8Enim0F+fC1x+lpbQDdktKU1qmQO6
EtWOX3WwWw/SaMjGezYD49raqWY8nLc1IV3D7AnLwVMah1swlw4McWtAYqoh+F6C
7Ql79ErWgS3tTUhNbeVmnrZA9nE6YifODtOXBkKsgREf/FW0/H5nYz6LzSfDwYB7
wVMWDZntGfYA2zds4lt9vEVmnIWvu8MRwmpLsfGsKTUztppYB4IptJnZembXASEO
rup7RGf47UnOy7GqAid72McTEzJk/SaRwesNZzQUz1yYw34H5jwnYGmF6ORqBIxl
hBA9VTPgMIp0vJ75UzpZxk0nSFYXS12ijdj7KTRiKgfGdJch5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1pVBNDv+MOXQIEozWWcS9EikG8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YjIz
MTAwNi1kMmI2LTQxZjAtODJiYi00ZDY2OTY1ODkyMmYvODY5NGEyZWItM2FiZi0z
NGYwLWIwYjAtZGJmYWRjZTI4YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2IyMzEwMDYtZDJiNi00MWYwLTgy
YmItNGQ2Njk2NTg5MjJmLzdiMjMxMDA2LWQyYjYtNDFmMC04MmJiLTRkNjY5NjU4
OTIyZi5jcmwwHwYDVR0jBBgwFoAU4rq/gAXX07L+4jD4CI4AIRCAK0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YjIzMTAwNi1kMmI2LTQxZjAtODJiYi00ZDY2
OTY1ODkyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot0MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC06OrN6Ovzc+L38eKzbFGkwHXt1fQEk5joudr6ju9TA9GNM5GVLRBWW
DAV+t9/iWL9Nu/flzAYEyfjJktrxYs5LwwEQMy7CiOOr0JAFBkcG66EoKcPxXaac
1lgS5HQXsanFxZJAGXYvMcYscnMOFOo3VBy+nLl7yqTvtEm5mlIXowrKSa8wgUMd
PzlTNY5aWIoaFa90EYAhnH7EwjT1jsJPjgrDMm6MTMUexeQA/IUsgY3ZHdyWJZut
qtiuIsu4e4G5Dyx1g/lgMF+/2mUuYfKheJN5UhqzMhV/NqBVAiW04hpkpfUoABIT
ichMUE1CWBfIPKCxHDHK25zNZWmlFRk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org