Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/c7f56a69-0c3c-37e5-80e1-32c30e788993.roa
File:                     c7f56a69-0c3c-37e5-80e1-32c30e788993.roa (raw, json)
Hash identifier:          7+pa397OOW1SaLiobuICzXp+g3SxuxAnw1BKQU6lPNo=
Subject key identifier:   87:EC:6E:20:F4:66:1D:2C:8F:5B:E2:48:D1:A1:1A:D8:4A:82:03:2E
Certificate issuer:       /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
Certificate serial:       010D0C9F4328584795168C55148775B00AD65B00
Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/c7f56a69-0c3c-37e5-80e1-32c30e788993.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        216.152.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:8c:55:14:87:75:b0:0a:d6:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=62b08691-d144-4e3e-b5a5-938435a51a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:62:3f:6b:b0:75:7f:b7:14:4b:30:ba:ab:
                    80:8a:f1:6c:9e:1a:1a:92:06:f0:ad:58:f4:d2:d7:
                    6e:a6:6b:60:8d:10:01:94:6a:69:54:a8:2f:ba:68:
                    4d:a3:1a:f3:60:22:6d:f8:12:40:85:4d:25:5f:95:
                    2c:96:f4:4e:b0:9f:ac:6b:57:d4:e8:74:d6:25:51:
                    64:69:fa:e1:7b:74:d6:a2:44:8b:30:d0:a4:14:49:
                    9a:14:5b:de:13:ae:a6:3f:b1:48:45:d6:31:b0:61:
                    0e:6b:eb:10:50:4d:27:c4:29:9f:51:98:b5:dd:62:
                    a3:2d:b1:9c:ff:60:26:17:2c:ad:14:1d:33:d4:56:
                    2d:3e:94:e9:5b:ce:06:b9:dd:76:17:d8:ca:69:28:
                    89:c2:03:19:13:4b:09:6b:71:91:d2:ce:60:a5:52:
                    07:e6:1d:4e:62:f4:db:22:f2:5e:3a:3e:93:89:fb:
                    4c:83:83:b2:f1:a7:62:e9:90:91:bd:5e:be:db:b7:
                    79:08:23:21:89:c2:5d:38:2b:ae:55:25:45:61:6d:
                    26:1e:60:29:d8:46:0d:26:ce:7c:eb:05:e5:f0:d1:
                    4e:0f:82:7b:d1:68:55:7f:48:53:d3:a3:15:cf:1e:
                    3e:c7:a6:74:68:7c:10:75:49:01:a7:de:91:0e:d1:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:6E:20:F4:66:1D:2C:8F:5B:E2:48:D1:A1:1A:D8:4A:82:03:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/c7f56a69-0c3c-37e5-80e1-32c30e788993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl

            X509v3 Authority Key Identifier:
                keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8a:67:0a:61:80:24:18:82:a8:12:e1:84:a9:6c:3d:af:8d:
         32:9d:b8:88:57:35:19:10:ed:57:a6:2b:b7:61:ba:7e:51:ed:
         68:2e:ba:81:52:39:13:c2:b4:a9:fa:95:6d:cf:66:e8:98:9d:
         b4:13:c0:68:c5:4a:c5:60:ca:b1:b2:aa:b4:33:2c:3f:76:9a:
         57:d7:f8:43:b8:37:93:6d:35:aa:ec:f6:1e:92:ad:dc:3d:4b:
         18:cd:15:69:d0:cd:a6:38:39:4f:1a:91:00:01:06:ba:cf:19:
         1c:c3:18:f1:ac:49:c6:0f:2c:47:a9:16:c9:f4:15:09:90:14:
         3f:e0:be:ac:2a:2b:0a:b1:7d:48:d6:b9:9b:85:4d:1e:b2:e7:
         d8:24:8b:ce:99:a5:ac:51:ff:b3:68:6d:d3:81:37:ff:35:12:
         d7:36:33:07:8c:e4:e8:59:0b:d3:0d:f1:65:91:bd:56:c2:88:
         bb:22:2b:c0:97:30:9c:54:6a:b2:a7:0e:2a:aa:27:63:c1:08:
         20:2f:3a:3a:2f:3e:90:c8:4e:cb:d2:6a:6d:ea:b7:90:95:2b:
         53:f2:5b:b1:31:be:ad:59:a4:10:80:ce:8c:6d:69:1a:fb:42:
         90:a5:ca:05:7c:e5:07:37:7b:e3:ac:11:fe:86:a2:1e:ed:5a:
         ad:d0:d7:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeVFoxVFId1sArWWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdlYWZlNjUtY2MxNi00OGE3LWIyMjEtYjAwYmZjMTgx
ZjNmMB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk
NjJiMDg2OTEtZDE0NC00ZTNlLWI1YTUtOTM4NDM1YTUxYTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYJiP2uwdX+3FEswuquAivFsnhoakgbwrVj0
0tdupmtgjRABlGppVKgvumhNoxrzYCJt+BJAhU0lX5UslvROsJ+sa1fU6HTWJVFk
afrhe3TWokSLMNCkFEmaFFveE66mP7FIRdYxsGEOa+sQUE0nxCmfUZi13WKjLbGc
/2AmFyytFB0z1FYtPpTpW84Gud12F9jKaSiJwgMZE0sJa3GR0s5gpVIH5h1OYvTb
IvJeOj6TiftMg4Oy8adi6ZCRvV6+27d5CCMhicJdOCuuVSVFYW0mHmAp2EYNJs58
6wXl8NFOD4J70WhVf0hT06MVzx4+x6Z0aHwQdUkBp96RDtGOQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfsbiD0Zh0sj1viSNGhGthKggMuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Vh
ZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMxODFmM2YvYzdmNTZhNjktMGMzYy0z
N2U1LTgwZTEtMzJjMzBlNzg4OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlYWZlNjUtY2MxNi00OGE3LWIy
MjEtYjAwYmZjMTgxZjNmL2E3ZWFmZTY1LWNjMTYtNDhhNy1iMjIxLWIwMGJmYzE4
MWYzZi5jcmwwHwYDVR0jBBgwFoAUv+4sp0Nt2qgrIMzjrx/bklO5H3cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBi
ZmMxODFmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6KZwphgCQYgqgS4YSpbD2vjTKduIhXNRkQ7VemK7dhun5R7WguuoFS
ORPCtKn6lW3PZuiYnbQTwGjFSsVgyrGyqrQzLD92mlfX+EO4N5NtNars9h6Srdw9
SxjNFWnQzaY4OU8akQABBrrPGRzDGPGsScYPLEepFsn0FQmQFD/gvqwqKwqxfUjW
uZuFTR6y59gki86ZpaxR/7NobdOBN/81Etc2MweM5OhZC9MN8WWRvVbCiLsiK8CX
MJxUarKnDiqqJ2PBCCAvOjovPpDITsvSam3qt5CVK1PyW7Exvq1ZpBCAzoxtaRr7
QpClygV85Qc3e+OsEf6Goh7tWq3Q1wo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:13 2024 by rpki-client on console-fra.rpki-client.org