Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/7088b7c3-dc2d-3b94-891f-f067c9d96dc3.roa
File:                     7088b7c3-dc2d-3b94-891f-f067c9d96dc3.roa (raw, json)
Hash identifier:          j41fbC+KnjZYLDE04aMGz8AVt+pKCC2nTFHUOLirTR0=
Subject key identifier:   0C:0C:9E:3C:98:6D:AC:DF:9A:C3:27:CF:60:44:D9:A4:B8:0A:DE:DC
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F43285845E72925BF24CCFCFF83803980
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/7088b7c3-dc2d-3b94-891f-f067c9d96dc3.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     271787
IP address blocks:        149.234.224.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:25:bf:24:cc:fc:ff:83:80:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=3221550f-d178-4748-b893-fd066a4a61bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:6b:ab:f1:1c:cb:de:45:c2:bf:da:bd:de:
                    b4:c3:70:b0:9f:1d:02:ff:06:66:a8:d8:39:db:19:
                    62:ab:50:c4:cd:67:c0:fc:d3:00:05:35:cb:80:01:
                    86:8d:c3:e5:ae:6f:c7:a6:61:be:fc:de:2e:da:5f:
                    b0:59:30:bc:69:9a:4b:dd:18:f9:f4:64:4a:e4:d3:
                    29:ee:c6:0e:13:d6:4e:2b:2d:e8:a9:f1:0c:32:d4:
                    c1:80:91:ac:61:e6:8a:39:38:42:2d:ca:5c:61:bd:
                    de:94:43:77:78:4f:c2:ec:8a:e5:9b:a7:5f:38:aa:
                    c1:b6:cd:a1:7b:db:8d:e1:31:4b:4b:e7:b8:f8:4d:
                    2a:a1:3c:5e:f6:4b:8d:3f:e8:44:d9:7e:11:fe:0a:
                    1e:55:20:9e:9d:9e:a2:74:17:60:72:0e:41:18:b0:
                    ae:03:7b:25:60:2b:49:f9:94:f2:84:03:19:b4:17:
                    d8:14:b4:d2:26:ce:c1:62:3a:a8:ff:fe:8d:8a:70:
                    83:05:3c:ac:3e:6b:de:b8:1a:16:82:5f:05:73:88:
                    ee:5f:62:e1:31:55:8e:b2:5f:b5:4d:ed:3d:d3:aa:
                    3a:d4:fb:39:4d:b0:90:d6:e1:30:cb:64:e0:24:33:
                    9d:ea:2f:e9:66:4b:28:d6:20:39:cb:d8:a9:f2:9f:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0C:9E:3C:98:6D:AC:DF:9A:C3:27:CF:60:44:D9:A4:B8:0A:DE:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/7088b7c3-dc2d-3b94-891f-f067c9d96dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:91:b3:a9:78:59:2b:1f:82:86:64:f5:86:c0:19:79:bc:
         c9:a4:f2:5f:22:31:29:89:74:e4:46:dd:94:29:a5:40:82:7a:
         39:2e:b1:4a:c3:c9:60:6e:4f:2d:4a:da:5e:db:68:90:94:99:
         63:9d:10:c1:c5:d2:45:4f:65:eb:18:e5:40:bb:42:f6:79:fa:
         2c:ab:42:72:35:8f:7b:11:31:4a:a8:46:94:aa:03:1d:7a:51:
         2e:a8:e2:f3:e3:e5:e8:dd:56:53:6d:76:5e:de:92:31:66:04:
         b2:68:79:23:d9:2a:ae:36:74:ce:24:05:c7:31:ac:87:a2:38:
         f2:4a:16:17:2c:a6:48:93:98:d7:2d:70:7d:af:80:2c:08:f6:
         d7:3a:25:ef:3b:bd:8d:db:50:bb:c5:9d:b3:ad:9e:ef:40:1a:
         61:4b:52:d0:0f:b0:4e:76:5f:e2:c4:a2:82:49:10:fd:bf:7b:
         22:4a:45:61:e7:57:65:0d:5f:e7:a7:a3:7a:33:e3:d7:cb:eb:
         ae:52:d4:bc:e8:2e:06:1e:f9:7e:e9:13:a2:9d:94:fb:0f:1b:
         20:6d:c8:c9:2e:9a:1a:42:6d:11:1a:73:bc:1f:b1:26:f7:5d:
         c6:fe:6b:bc:0b:8e:ed:ba:1e:6f:42:a1:50:d0:e6:aa:e1:35:
         8c:2f:1d:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXnKSW/JMz8/4OAOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM1YWRlY2ItNGFjOC00MzJmLTgxN2MtODRiZWM0N2I3
NzA4MB4XDTI0MDUxNzEzMDAzNFoXDTI0MDgxNTEzMDAzNFowLzEtMCsGA1UEAxMk
MzIyMTU1MGYtZDE3OC00NzQ4LWI4OTMtZmQwNjZhNGE2MWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYdrq/Ecy95Fwr/avd60w3Cwnx0C/wZmqNg5
2xliq1DEzWfA/NMABTXLgAGGjcPlrm/HpmG+/N4u2l+wWTC8aZpL3Rj59GRK5NMp
7sYOE9ZOKy3oqfEMMtTBgJGsYeaKOThCLcpcYb3elEN3eE/C7Irlm6dfOKrBts2h
e9uN4TFLS+e4+E0qoTxe9kuNP+hE2X4R/goeVSCenZ6idBdgcg5BGLCuA3slYCtJ
+ZTyhAMZtBfYFLTSJs7BYjqo//6NinCDBTysPmveuBoWgl8Fc4juX2LhMVWOsl+1
Te0906o61Ps5TbCQ1uEwy2TgJDOd6i/pZkso1iA5y9ip8p+0OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwMnjyYbazfmsMnz2BE2aS4Ct7cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh
ZGVjYi00YWM4LTQzMmYtODE3Yy04NGJlYzQ3Yjc3MDgvNzA4OGI3YzMtZGMyZC0z
Yjk0LTg5MWYtZjA2N2M5ZDk2ZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWRlY2ItNGFjOC00MzJmLTgx
N2MtODRiZWM0N2I3NzA4LzFjNWFkZWNiLTRhYzgtNDMyZi04MTdjLTg0YmVjNDdi
NzcwOC5jcmwwHwYDVR0jBBgwFoAUVaoUdtgDOMPMCm7zFN4yMK4vgBswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZGVjYi00YWM4LTQzMmYtODE3Yy04NGJl
YzQ3Yjc3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlergMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPqkbOpeFkrH4KGZPWGwBl5vMmk8l8iMSmJdORG3ZQppUCCejkusUrD
yWBuTy1K2l7baJCUmWOdEMHF0kVPZesY5UC7QvZ5+iyrQnI1j3sRMUqoRpSqAx16
US6o4vPj5ejdVlNtdl7ekjFmBLJoeSPZKq42dM4kBccxrIeiOPJKFhcspkiTmNct
cH2vgCwI9tc6Je87vY3bULvFnbOtnu9AGmFLUtAPsE52X+LEooJJEP2/eyJKRWHn
V2UNX+eno3oz49fL665S1LzoLgYe+X7pE6KdlPsPGyBtyMkumhpCbREac7wfsSb3
Xcb+a7wLju26Hm9CoVDQ5qrhNYwvHRk=
-----END CERTIFICATE-----
Generated at Thu May 23 02:59:18 2024 by rpki-client on console-ams.rpki-client.org