Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/587f1f37-c520-3bd7-84d3-d4b12dcde3bf.roa
File:                     587f1f37-c520-3bd7-84d3-d4b12dcde3bf.roa (raw, json)
Hash identifier:          oH70nndkwrocAncqBAsLK37guLEDO/O/ZmJGgCBDBG8=
Subject key identifier:   3D:BA:79:5A:A1:52:2A:1C:10:16:D0:1D:7F:4B:B1:F0:E0:02:18:65
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553331392918C7A4E87090440
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/587f1f37-c520-3bd7-84d3-d4b12dcde3bf.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        174.130.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:13:92:91:8c:7a:4e:87:09:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=8cdfc534-55aa-490a-a536-19f32375edc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cb:91:7b:10:37:c8:bf:0e:52:f3:76:3f:7e:
                    2f:92:d9:49:93:3a:df:97:e3:cf:ca:f2:fd:01:9c:
                    c0:7a:d6:20:4a:60:89:88:fc:27:e5:11:f2:ee:73:
                    8b:5e:96:c9:a1:1d:42:20:d5:89:44:73:cb:4b:09:
                    72:94:8f:04:26:15:dc:0d:c3:e5:d4:9f:33:0b:7a:
                    9e:f3:2e:c9:91:ad:d9:89:4f:fb:a3:6d:46:52:2e:
                    4f:e9:86:96:73:3f:a7:46:e3:f8:02:23:62:8f:97:
                    31:39:86:d5:5a:6c:53:5e:ab:66:a1:e6:f4:b0:b2:
                    a6:6d:0a:29:c4:40:b7:67:f9:89:62:e7:6a:ba:63:
                    30:fe:93:d0:64:ce:8e:7d:88:44:2e:54:af:79:f0:
                    5f:53:55:7e:e0:f3:fd:67:0d:a1:05:c5:49:5b:dd:
                    82:a3:bd:b5:da:6a:85:0a:4c:af:d6:ac:08:3b:f0:
                    9d:8d:91:37:03:5d:39:04:bf:22:69:06:08:5d:f6:
                    30:d4:8b:3f:ff:21:78:5f:ad:b0:4e:bb:84:e3:71:
                    33:4e:ba:8d:8e:0a:ed:c5:59:28:c6:18:7e:80:19:
                    1b:2c:9c:93:fe:f7:24:b6:86:e0:5b:8e:b8:6f:20:
                    c5:e2:d5:fe:96:b4:e4:59:d3:57:0a:09:03:37:bc:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BA:79:5A:A1:52:2A:1C:10:16:D0:1D:7F:4B:B1:F0:E0:02:18:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/587f1f37-c520-3bd7-84d3-d4b12dcde3bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:aa:d0:0f:5a:e0:37:2b:75:5d:7b:ab:d3:fb:ac:76:69:8a:
         19:24:20:f4:42:b6:3a:32:f7:1d:15:4b:fe:4b:a7:b0:97:b4:
         e6:26:06:4b:f4:95:34:67:7e:7b:4e:50:17:b7:a2:43:02:8d:
         33:91:4f:41:c8:7e:92:a9:b5:f7:da:0a:d6:6e:4e:8c:11:4d:
         9d:c5:0e:9d:91:3c:69:5e:de:a8:01:22:c8:1e:a0:f0:2e:1f:
         af:7f:b1:75:5a:f6:ce:7d:83:28:b8:cb:29:1b:48:87:d3:39:
         8a:76:91:8e:13:7c:ab:37:e3:85:8c:5b:ed:7d:ae:9f:31:8b:
         21:1d:10:cf:2f:19:69:58:14:38:03:ca:8c:b3:ac:6c:ad:d3:
         02:ce:b4:39:3e:f2:fa:14:e4:be:2e:48:41:bc:e5:e1:ee:99:
         9b:f9:41:bb:fb:66:4b:4d:91:e3:21:c4:8d:bf:fb:d3:ea:5f:
         bb:df:5a:5e:52:bf:92:4f:07:d0:66:98:21:9b:4a:e5:15:98:
         87:36:d2:e8:9d:45:48:fb:85:dd:87:49:81:99:36:06:f4:77:
         e3:b8:13:2a:83:95:3b:bd:cf:ec:13:6f:ec:74:75:b5:84:b5:
         ab:6a:46:3f:f9:c2:3d:0b:9d:44:cb:c5:89:53:ac:37:4e:d9:
         7f:be:2c:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMxOSkYx6TocJBEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
OGNkZmM1MzQtNTVhYS00OTBhLWE1MzYtMTlmMzIzNzVlZGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cuRexA3yL8OUvN2P34vktlJkzrfl+PPyvL9
AZzAetYgSmCJiPwn5RHy7nOLXpbJoR1CINWJRHPLSwlylI8EJhXcDcPl1J8zC3qe
8y7Jka3ZiU/7o21GUi5P6YaWcz+nRuP4AiNij5cxOYbVWmxTXqtmoeb0sLKmbQop
xEC3Z/mJYudqumMw/pPQZM6OfYhELlSvefBfU1V+4PP9Zw2hBcVJW92Co7212mqF
Ckyv1qwIO/CdjZE3A105BL8iaQYIXfYw1Is//yF4X62wTruE43EzTrqNjgrtxVko
xhh+gBkbLJyT/vcktobgW464byDF4tX+lrTkWdNXCgkDN7zTNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD26eVqhUiocEBbQHX9LsfDgAhhlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTg3ZjFmMzctYzUyMC0z
YmQ3LTg0ZDMtZDRiMTJkY2RlM2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroIYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeq0A9a4DcrdV17q9P7rHZpihkkIPRCtjoy9x0VS/5Lp7CXtOYmBkv0
lTRnfntOUBe3okMCjTORT0HIfpKptffaCtZuTowRTZ3FDp2RPGle3qgBIsgeoPAu
H69/sXVa9s59gyi4yykbSIfTOYp2kY4TfKs344WMW+19rp8xiyEdEM8vGWlYFDgD
yoyzrGyt0wLOtDk+8voU5L4uSEG85eHumZv5Qbv7ZktNkeMhxI2/+9PqX7vfWl5S
v5JPB9BmmCGbSuUVmIc20uidRUj7hd2HSYGZNgb0d+O4EyqDlTu9z+wTb+x0dbWE
tatqRj/5wj0LnUTLxYlTrDdO2X++LDw=
-----END CERTIFICATE-----
Generated at Thu May 23 02:54:02 2024 by rpki-client on console-ams.rpki-client.org