Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87ef1e25-a9ba-3e98-a722-fc379493d000.roa
File:                     87ef1e25-a9ba-3e98-a722-fc379493d000.roa (raw, json)
Hash identifier:          o0E5cW8GPMbw5hmSP4aR+b3TgUqnwbpQiG4Qtyw0RXw=
Subject key identifier:   E3:1F:91:AE:5B:15:C4:E3:A6:3F:CA:89:77:CA:E0:BA:2E:FF:39:23
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858474B1B4E33B721C253725C7700
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87ef1e25-a9ba-3e98-a722-fc379493d000.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     16509
IP address blocks:        134.224.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:4e:33:b7:21:c2:53:72:5c:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=5ae69bd2-3d2f-4ef8-814d-63fbd108f867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:14:0d:4d:fe:26:7d:87:0b:1c:2c:f3:14:
                    95:90:b9:99:e2:2c:49:6c:b7:ab:be:0e:e2:78:af:
                    8f:96:71:91:55:ed:92:5b:44:10:3e:cf:d3:86:6b:
                    ef:ca:93:ca:16:f1:d2:c7:f1:a7:08:53:4e:93:b2:
                    79:54:cf:66:59:35:40:66:6e:7c:32:79:1a:1c:ab:
                    42:64:e2:26:6e:6f:51:9d:8d:ed:f4:35:91:cf:d4:
                    b9:d9:f6:6b:52:23:d8:ad:cf:62:6d:e6:ec:01:7e:
                    d8:57:e3:7a:af:7d:9c:2c:46:1a:43:2d:c7:09:51:
                    0a:b4:72:e4:66:73:d3:3e:d8:f9:b6:4e:85:43:cc:
                    62:5b:1b:a9:a4:3f:0a:04:a2:57:d9:67:30:7b:52:
                    e4:f6:02:45:95:42:f8:c8:55:69:bb:7d:01:8c:e2:
                    95:ce:0f:5b:82:64:32:1a:0c:c6:c8:a6:78:49:f0:
                    28:d0:3b:30:e1:ef:4e:f2:50:92:f0:d3:b3:0d:8c:
                    d2:89:2b:52:25:dc:7f:6a:ba:3b:e8:37:a4:69:69:
                    ad:49:0e:19:50:82:a9:dc:f8:18:f5:16:55:ec:70:
                    0e:de:9f:8b:7a:3f:b0:11:94:4e:63:9b:a9:da:6b:
                    f7:18:11:8d:f4:5f:1f:17:7a:0b:42:3d:ba:f0:6c:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1F:91:AE:5B:15:C4:E3:A6:3F:CA:89:77:CA:E0:BA:2E:FF:39:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87ef1e25-a9ba-3e98-a722-fc379493d000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:62:bf:22:2f:e7:08:29:bc:78:a3:9c:29:e2:2a:61:65:
         c8:cd:5e:fc:8e:29:f5:9d:13:81:d6:8c:ba:68:d7:f2:41:87:
         f2:e9:44:b7:35:a5:13:06:ca:64:f0:93:24:d9:d8:f7:ab:73:
         e7:10:85:a4:6d:00:3a:6a:0e:87:8b:f5:f4:57:dc:85:a6:92:
         44:ed:a5:e7:87:04:76:27:13:f3:80:03:47:ed:91:cd:77:15:
         48:8d:c2:b9:c7:91:c8:9b:1b:c4:48:a3:ac:78:d6:61:b0:56:
         51:98:c9:1b:78:db:4d:fe:96:c9:b0:37:0b:d4:45:e1:4b:40:
         f6:ff:28:e2:82:25:fb:7c:4d:15:e3:47:4b:8e:c8:e9:13:b6:
         09:3f:29:58:19:4c:15:de:24:a0:1c:e8:26:cf:60:43:2f:35:
         9e:48:16:08:8f:00:65:40:d2:c5:0a:75:3a:a6:61:f9:57:fd:
         fe:ea:a6:72:e9:b5:3a:90:2d:48:67:37:4c:7c:ba:11:48:cf:
         16:ca:19:37:0a:45:81:ea:5e:11:89:eb:83:fe:89:60:49:8d:
         2b:30:4e:e7:29:26:1f:04:8f:bf:e2:e5:06:12:d1:bc:b6:06:
         d2:62:68:8d:33:cd:c5:b5:31:0a:97:b5:74:9c:04:ee:34:30:
         39:fd:9b:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG04ztyHCU3JcdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk
NWFlNjliZDItM2QyZi00ZWY4LTgxNGQtNjNmYmQxMDhmODY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsAUDU3+Jn2HCxws8xSVkLmZ4ixJbLervg7i
eK+PlnGRVe2SW0QQPs/ThmvvypPKFvHSx/GnCFNOk7J5VM9mWTVAZm58MnkaHKtC
ZOImbm9RnY3t9DWRz9S52fZrUiPYrc9ibebsAX7YV+N6r32cLEYaQy3HCVEKtHLk
ZnPTPtj5tk6FQ8xiWxuppD8KBKJX2Wcwe1Lk9gJFlUL4yFVpu30BjOKVzg9bgmQy
GgzGyKZ4SfAo0Dsw4e9O8lCS8NOzDYzSiStSJdx/aro76DekaWmtSQ4ZUIKp3PgY
9RZV7HAO3p+Lej+wEZROY5up2mv3GBGN9F8fF3oLQj268GzNrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOMfka5bFcTjpj/KiXfK4Lou/zkjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvODdlZjFlMjUtYTliYS0z
ZTk4LWE3MjItZmMzNzk0OTNkMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhuCoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfGYr8iL+cIKbx4o5wp4iphZcjNXvyOKfWdE4HWjLpo1/JBh/LpRLc1
pRMGymTwkyTZ2Perc+cQhaRtADpqDoeL9fRX3IWmkkTtpeeHBHYnE/OAA0ftkc13
FUiNwrnHkcibG8RIo6x41mGwVlGYyRt4203+lsmwNwvUReFLQPb/KOKCJft8TRXj
R0uOyOkTtgk/KVgZTBXeJKAc6CbPYEMvNZ5IFgiPAGVA0sUKdTqmYflX/f7qpnLp
tTqQLUhnN0x8uhFIzxbKGTcKRYHqXhGJ64P+iWBJjSswTucpJh8Ej7/i5QYS0by2
BtJiaI0zzcW1MQqXtXScBO40MDn9m2c=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:51 2024 by rpki-client on console-fra.rpki-client.org