Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa
File:                     441364f7-b81f-3438-8e4e-5021ad9b611e.roa (raw, json)
Hash identifier:          WjOeATKDoSF1gN2SRL90KOd+0eGOTrkKMR8mBGhhNkg=
Subject key identifier:   57:A3:A3:2A:4D:94:56:4E:6F:04:65:CA:B4:33:EB:D2:60:EF:C5:4A
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584582A89681156F87660AB2D240
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     399629
IP address blocks:        192.153.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:96:81:15:6f:87:66:0a:b2:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=84c89413-bbf5-4595-adf3-1588c63438eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:d7:4c:37:49:d8:08:9d:23:b9:79:a6:1b:
                    2a:9b:13:0b:92:04:79:31:1d:ba:fc:e1:09:3a:f2:
                    df:4b:5e:9c:4a:3d:49:5c:22:be:1d:89:9a:9e:f9:
                    3a:a5:89:be:df:5f:e4:fe:38:b8:30:f5:35:56:69:
                    74:5e:42:17:d9:79:3b:37:73:7a:da:e5:0d:a8:d2:
                    a9:78:8e:b3:72:ca:c1:9d:e2:eb:ca:66:90:af:bc:
                    cf:60:a1:23:73:c0:c8:1f:8a:97:22:16:a1:d7:dd:
                    3f:9d:ce:2c:6c:12:e8:80:eb:72:ce:eb:23:12:c5:
                    db:e6:53:10:3a:27:51:3c:81:95:e7:4f:44:16:35:
                    62:a6:d7:47:fb:47:3a:40:88:15:ec:ff:08:5e:6d:
                    87:c1:88:2a:9d:fe:ff:2c:1f:4c:df:29:59:48:81:
                    33:fe:9c:8a:fa:48:19:2e:29:b2:be:67:20:3e:49:
                    fd:40:e2:48:78:f8:06:b8:c4:a1:0a:0d:e9:17:d2:
                    0e:cf:bc:f1:20:81:3d:32:03:a4:5d:fa:bd:73:9c:
                    58:89:63:93:45:01:4d:f2:46:4f:87:a1:58:4d:48:
                    91:30:16:6d:71:d1:ec:8e:28:39:8a:c3:92:88:e3:
                    69:40:7a:b9:c1:19:79:9d:16:7f:d6:3e:53:1f:f2:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A3:A3:2A:4D:94:56:4E:6F:04:65:CA:B4:33:EB:D2:60:EF:C5:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/441364f7-b81f-3438-8e4e-5021ad9b611e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:5e:ca:71:e2:f8:ab:6e:81:bf:33:28:60:9a:45:b3:d6:
         0e:c9:18:ad:12:d1:54:96:e9:9b:5d:76:f5:a1:a4:3a:33:ea:
         5e:e4:6a:e2:fe:25:a5:84:89:bf:16:84:db:60:3f:65:ef:e7:
         cd:8e:39:01:ac:c1:f1:fb:cb:99:65:28:10:84:e3:de:ac:0f:
         65:77:6b:8b:93:74:8d:43:55:42:18:15:1f:d7:1c:c3:10:eb:
         7f:5a:b8:35:c4:51:ff:7b:e3:5e:7e:89:f5:6b:a2:40:72:78:
         c9:ae:68:7f:68:d7:aa:67:cf:c2:2b:54:ed:d1:82:fc:1b:c0:
         bf:ae:c8:75:7b:45:9a:5e:5a:8a:a3:43:c3:fd:ec:9a:6e:01:
         da:c9:3a:ee:e1:bf:d5:57:d4:7f:b7:49:e8:75:30:8c:51:ef:
         1a:e5:3e:8b:e0:4e:c5:0d:72:2d:29:76:75:7e:6d:ab:d8:a3:
         1b:e4:f6:83:44:77:73:a3:44:65:61:a5:ef:9c:2c:38:a4:16:
         80:6b:07:2a:7e:06:e8:f6:84:38:29:f6:12:72:d4:b3:42:3f:
         1d:72:66:d9:cf:ff:2c:61:d3:0a:5d:20:5a:3c:4f:f2:ed:0f:
         7b:5a:f1:44:77:27:95:c4:53:48:47:66:d8:4f:86:61:98:83:
         d6:e0:8e:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqJaBFW+HZgqy0kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk
ODRjODk0MTMtYmJmNS00NTk1LWFkZjMtMTU4OGM2MzQzOGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+3XTDdJ2AidI7l5phsqmxMLkgR5MR26/OEJ
OvLfS16cSj1JXCK+HYmanvk6pYm+31/k/ji4MPU1Vml0XkIX2Xk7N3N62uUNqNKp
eI6zcsrBneLrymaQr7zPYKEjc8DIH4qXIhah190/nc4sbBLogOtyzusjEsXb5lMQ
OidRPIGV509EFjViptdH+0c6QIgV7P8IXm2HwYgqnf7/LB9M3ylZSIEz/pyK+kgZ
LimyvmcgPkn9QOJIePgGuMShCg3pF9IOz7zxIIE9MgOkXfq9c5xYiWOTRQFN8kZP
h6FYTUiRMBZtcdHsjig5isOSiONpQHq5wRl5nRZ/1j5TH/IWCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFejoypNlFZObwRlyrQz69Jg78VKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDQxMzY0ZjctYjgxZi0z
NDM4LThlNGUtNTAyMWFkOWI2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJk5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfxXspx4virboG/MyhgmkWz1g7JGK0S0VSW6ZtddvWhpDoz6l7kauL+
JaWEib8WhNtgP2Xv582OOQGswfH7y5llKBCE496sD2V3a4uTdI1DVUIYFR/XHMMQ
639auDXEUf97415+ifVrokByeMmuaH9o16pnz8IrVO3RgvwbwL+uyHV7RZpeWoqj
Q8P97JpuAdrJOu7hv9VX1H+3Seh1MIxR7xrlPovgTsUNci0pdnV+bavYoxvk9oNE
d3OjRGVhpe+cLDikFoBrByp+Buj2hDgp9hJy1LNCPx1yZtnP/yxh0wpdIFo8T/Lt
D3ta8UR3J5XEU0hHZthPhmGYg9bgjuQ=
-----END CERTIFICATE-----
Generated at Sat May 18 03:50:32 2024 by rpki-client on console-fra.rpki-client.org