Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5791133b-6a13-3286-80bc-99eabe0312f7.roa
File:                     5791133b-6a13-3286-80bc-99eabe0312f7.roa (raw, json)
Hash identifier:          Mx2cu51s/Oc9UbcF5CNg/J0SXFgIuBLRnSSDcQHooc8=
Subject key identifier:   49:08:26:41:D1:4D:53:4E:90:58:9A:D1:42:0B:D1:49:6E:AA:25:39
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F432858454D9D74F932E7655C2E1E1580
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5791133b-6a13-3286-80bc-99eabe0312f7.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     396253
IP address blocks:        149.19.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:74:f9:32:e7:65:5c:2e:1e:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=24bf09ed-1635-4f35-824f-0e10a2376068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:e2:0a:2b:9d:21:30:dc:21:13:98:84:71:
                    f8:39:87:43:19:eb:f6:e7:23:b4:c0:25:8c:40:ce:
                    ea:4e:37:d1:a5:96:46:be:d0:ae:88:81:13:aa:29:
                    b0:be:33:a1:5b:02:af:1a:50:bf:e8:08:1a:f5:5b:
                    39:22:c5:92:ea:77:d2:ca:59:02:95:2a:76:4e:1c:
                    cd:de:39:89:b6:77:be:e9:cd:8c:3f:b5:2a:3c:86:
                    90:c6:35:ac:b5:5b:b7:7c:5d:46:76:b3:19:8e:9c:
                    b8:69:c5:d7:04:92:f1:2d:70:a9:1c:e5:93:66:b6:
                    c6:37:b9:79:61:54:32:c7:f4:0b:65:ae:3a:eb:81:
                    11:03:2f:e1:40:ef:48:fa:99:d7:db:10:77:86:4a:
                    bf:d1:88:30:d4:03:b6:f9:21:37:4b:1c:84:e6:56:
                    4e:f7:10:91:11:cd:40:bc:37:39:62:49:ae:8f:00:
                    49:00:aa:1a:45:91:3f:eb:ba:29:7e:57:ce:1f:d2:
                    56:b7:da:9d:34:af:e6:4a:9d:79:a3:be:e1:7b:79:
                    b5:68:a1:82:13:bc:21:17:5e:a3:03:81:8d:4e:8f:
                    c9:11:3e:77:b1:99:c1:ac:6c:f6:a3:4d:ee:ac:15:
                    65:2e:68:d0:fd:e8:59:81:13:f7:3b:5e:01:9e:0c:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:08:26:41:D1:4D:53:4E:90:58:9A:D1:42:0B:D1:49:6E:AA:25:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/5791133b-6a13-3286-80bc-99eabe0312f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:51:01:84:46:12:0b:5f:2d:eb:58:26:2d:18:a5:0e:77:9d:
         03:fa:9b:ba:21:4b:b6:5d:f6:45:f3:ad:49:71:90:18:d9:64:
         df:2b:f9:20:00:68:ca:dd:be:bd:c4:4e:b3:82:e0:f5:4f:db:
         f1:f2:29:31:8f:d1:6b:31:c5:3f:1f:2b:ed:0c:53:bf:a1:49:
         49:d9:b4:e5:a9:d3:24:64:26:2a:41:e7:69:7f:c4:07:18:83:
         9a:b8:53:e5:ce:d7:73:eb:0b:57:ec:92:da:f4:8a:61:5e:ac:
         f1:3d:43:71:cd:84:84:1e:ff:6c:5b:0b:8a:e0:9e:0d:05:d2:
         bb:f8:63:6b:4d:1d:c4:a5:31:75:bd:ba:21:64:13:87:7d:d8:
         2f:cd:0c:14:16:34:64:b5:66:0e:9b:64:25:e9:6f:f6:3f:88:
         4a:ff:9a:54:19:43:20:b8:93:75:22:e5:c3:54:07:26:a7:e3:
         de:1d:e0:97:9d:65:90:8c:78:f0:d8:57:87:83:33:2c:b8:a8:
         f6:7b:a6:c6:0f:65:02:22:59:b5:16:6c:d1:46:e6:7b:16:ca:
         c0:59:8a:b1:d6:3a:b3:28:61:51:54:ed:73:4a:eb:41:65:bc:
         45:a5:dd:40:71:b1:d8:0a:f5:1d:bb:cb:26:09:7e:b4:cb:10:
         b3:ae:43:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVNnXT5MudlXC4eFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
MjRiZjA5ZWQtMTYzNS00ZjM1LTgyNGYtMGUxMGEyMzc2MDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6HiCiudITDcIROYhHH4OYdDGev25yO0wCWM
QM7qTjfRpZZGvtCuiIETqimwvjOhWwKvGlC/6Aga9Vs5IsWS6nfSylkClSp2ThzN
3jmJtne+6c2MP7UqPIaQxjWstVu3fF1GdrMZjpy4acXXBJLxLXCpHOWTZrbGN7l5
YVQyx/QLZa4664ERAy/hQO9I+pnX2xB3hkq/0Ygw1AO2+SE3SxyE5lZO9xCREc1A
vDc5YkmujwBJAKoaRZE/67opflfOH9JWt9qdNK/mSp15o77he3m1aKGCE7whF16j
A4GNTo/JET53sZnBrGz2o03urBVlLmjQ/ehZgRP3O14BngwddQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkIJkHRTVNOkFia0UIL0UluqiU5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNTc5MTEzM2ItNmExMy0z
Mjg2LTgwYmMtOTllYWJlMDMxMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFRAYRGEgtfLetYJi0YpQ53nQP6m7ohS7Zd9kXzrUlxkBjZZN8r+SAA
aMrdvr3ETrOC4PVP2/HyKTGP0WsxxT8fK+0MU7+hSUnZtOWp0yRkJipB52l/xAcY
g5q4U+XO13PrC1fsktr0imFerPE9Q3HNhIQe/2xbC4rgng0F0rv4Y2tNHcSlMXW9
uiFkE4d92C/NDBQWNGS1Zg6bZCXpb/Y/iEr/mlQZQyC4k3Ui5cNUByan494d4Jed
ZZCMePDYV4eDMyy4qPZ7psYPZQIiWbUWbNFG5nsWysBZirHWOrMoYVFU7XNK60Fl
vEWl3UBxsdgK9R27yyYJfrTLELOuQ9A=
-----END CERTIFICATE-----
Generated at Fri May 17 22:00:39 2024 by rpki-client on console-ams.rpki-client.org