Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa
File:                     f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa (raw, json)
Hash identifier:          blMLFgMlmPJRNwn+Xd9Xl4DNFYjLZ7+jSjekfE/cKyU=
Subject key identifier:   90:68:02:DD:F8:F8:C6:B2:2C:AE:8F:36:5E:DB:2E:5F:FF:C2:7B:A5
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584797E137A20CB09FFAD906E688
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        192.156.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:37:a2:0c:b0:9f:fa:d9:06:e6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=9031faeb-e296-4bf1-a711-931937b348cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:27:05:62:0c:0a:85:2e:bb:8c:4f:26:63:
                    51:f8:50:19:55:d4:1e:27:ee:1d:e5:bf:00:28:37:
                    84:ef:76:cc:1a:16:3a:c3:c1:f5:be:1f:d8:6d:db:
                    02:68:28:21:b3:ec:80:44:59:f9:76:3a:a9:44:4f:
                    cf:8d:4a:cb:1f:a2:f9:55:06:0a:6b:c2:f5:d3:d2:
                    c7:af:b0:19:9d:98:35:7e:6c:d8:34:3d:18:a7:f7:
                    17:1c:a1:dd:b1:1c:ea:d5:e9:39:42:60:4a:a4:78:
                    78:ed:aa:2a:e2:6a:7f:54:d2:98:f9:6e:cf:84:61:
                    e0:a8:22:bb:84:f4:86:56:17:a3:db:2c:3c:23:2a:
                    66:41:2c:9b:48:1c:75:62:4c:54:43:3f:b1:ef:08:
                    d3:49:93:6f:69:8d:e8:8e:44:b9:08:f2:1b:50:31:
                    d7:f8:dc:d2:5a:ad:39:4c:d7:97:62:1a:52:69:59:
                    d4:23:d0:d4:76:f9:c7:79:4c:56:be:58:38:7c:9a:
                    cf:9d:6d:f2:53:1a:b7:bc:cf:0e:13:f3:75:dc:2f:
                    2e:4a:74:90:b3:e1:de:3a:f8:90:1f:b3:52:1c:71:
                    ff:f4:2c:93:eb:24:15:e1:39:81:51:76:12:14:69:
                    be:7f:34:ec:98:58:b7:a2:bd:4e:20:b0:2d:6c:88:
                    5d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:68:02:DD:F8:F8:C6:B2:2C:AE:8F:36:5E:DB:2E:5F:FF:C2:7B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/f1a5d8f6-d36b-3291-8055-f88d64057ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.156.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:38:ea:d9:5b:48:3f:75:b4:63:19:24:35:78:76:20:ca:98:
         53:e7:ca:83:4f:01:1a:23:0f:a2:30:5f:63:f5:e0:7f:2a:0b:
         ab:41:fb:22:5f:4b:29:a9:e1:9d:bc:d5:06:3b:f7:4c:e3:bc:
         c7:56:a2:cf:82:02:04:4b:ff:5e:14:fa:b2:e1:3a:7f:ee:ec:
         99:c5:c6:a4:c0:82:75:8c:d6:9a:80:2c:a0:3e:fc:a8:d2:85:
         7a:97:54:3c:d0:65:31:69:3f:a4:aa:cc:2c:cb:85:43:b8:06:
         c9:1a:fb:97:83:97:e1:30:2b:b3:0e:a3:2e:99:80:c7:e8:b3:
         5a:33:a7:4d:cb:2d:54:4f:7f:89:24:99:89:db:17:a2:aa:3d:
         05:cc:db:83:01:69:07:25:2d:1e:7a:d8:93:31:ca:3a:a4:5b:
         f6:f4:db:2c:c4:19:40:1c:96:61:3c:15:6d:2d:b2:ab:96:3f:
         93:43:b0:5c:12:ee:42:1b:00:30:be:97:c8:81:57:31:92:e4:
         62:4f:12:17:b9:e3:c6:b5:f6:8a:a9:36:76:1b:86:d4:70:21:
         0c:25:af:1a:00:22:c7:59:d5:2c:c5:06:15:05:d6:80:57:59:
         92:af:16:ca:9c:ce:8a:67:e2:30:cb:77:bd:01:2b:3f:a6:c5:
         75:9a:b0:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4TeiDLCf+tkG5ogwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk
OTAzMWZhZWItZTI5Ni00YmYxLWE3MTEtOTMxOTM3YjM0OGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz90nBWIMCoUuu4xPJmNR+FAZVdQeJ+4d5b8A
KDeE73bMGhY6w8H1vh/YbdsCaCghs+yARFn5djqpRE/PjUrLH6L5VQYKa8L109LH
r7AZnZg1fmzYND0Yp/cXHKHdsRzq1ek5QmBKpHh47aoq4mp/VNKY+W7PhGHgqCK7
hPSGVhej2yw8IypmQSybSBx1YkxUQz+x7wjTSZNvaY3ojkS5CPIbUDHX+NzSWq05
TNeXYhpSaVnUI9DUdvnHeUxWvlg4fJrPnW3yUxq3vM8OE/N13C8uSnSQs+HeOviQ
H7NSHHH/9CyT6yQV4TmBUXYSFGm+fzTsmFi3or1OILAtbIhdBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBoAt34+MayLK6PNl7bLl//wnulMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZjFhNWQ4ZjYtZDM2Yi0z
MjkxLTgwNTUtZjg4ZDY0MDU3ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJzbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEo46tlbSD91tGMZJDV4diDKmFPnyoNPARojD6IwX2P14H8qC6tB+yJf
Symp4Z281QY790zjvMdWos+CAgRL/14U+rLhOn/u7JnFxqTAgnWM1pqALKA+/KjS
hXqXVDzQZTFpP6SqzCzLhUO4Bska+5eDl+EwK7MOoy6ZgMfos1ozp03LLVRPf4kk
mYnbF6KqPQXM24MBaQclLR562JMxyjqkW/b02yzEGUAclmE8FW0tsquWP5NDsFwS
7kIbADC+l8iBVzGS5GJPEhe548a19oqpNnYbhtRwIQwlrxoAIsdZ1SzFBhUF1oBX
WZKvFsqczopn4jDLd70BKz+mxXWasJg=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:28 2024 by rpki-client on console-fra.rpki-client.org