Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa
File:                     0047fcfd-7aec-34bb-aede-a399b404d33d.roa (raw, json)
Hash identifier:          WERd9RJxRBuk9jF7v9nvqntiXmQAcmkL7kqHAA7Nq94=
Subject key identifier:   BA:FD:6D:62:79:ED:55:ED:F7:C3:41:29:16:DE:86:AA:72:E4:79:97
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858459D2DEC8DF12218C89D9F1EC0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     35916
IP address blocks:        172.111.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:ec:8d:f1:22:18:c8:9d:9f:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=01d75e57-1b9c-466f-a071-e4883bcca57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:74:38:3c:58:81:24:86:41:b1:47:ca:64:
                    d8:fb:72:56:e0:12:06:bd:a5:25:e5:f4:40:f1:f9:
                    5f:e9:54:a5:2a:42:fb:cf:e5:86:a1:60:d8:07:b1:
                    2b:58:e0:7c:f1:17:0e:99:8c:0b:cb:11:b3:17:36:
                    96:d2:41:a1:14:88:eb:c6:8d:3f:30:61:cc:bb:90:
                    b3:e0:f8:93:b0:f7:ae:14:38:11:a5:e3:e3:d4:5f:
                    fc:62:3f:fb:9b:ba:92:31:80:47:e2:bd:b4:81:52:
                    d7:ce:a4:ac:ae:f9:2d:a0:a8:f8:64:b4:f6:3a:52:
                    55:4c:51:5a:5c:10:c9:08:75:8a:fd:88:8f:e1:68:
                    74:ab:6f:e1:b1:31:fe:6f:8b:aa:19:68:17:fa:c8:
                    22:c0:8f:46:45:39:aa:e4:1e:9e:b9:b7:01:cf:97:
                    07:0a:f8:77:2f:9f:ce:1f:70:dd:dd:e9:6b:ad:37:
                    6a:2a:ba:e4:35:d3:6c:8a:fe:c3:1a:cc:71:de:1f:
                    ad:3e:bd:e7:91:39:3f:6a:73:aa:2c:48:25:46:a7:
                    7e:5e:ad:28:2e:12:ed:61:9d:66:8c:39:40:61:01:
                    d6:0d:13:ea:e1:54:df:b1:11:7c:00:b7:2e:f9:54:
                    d5:e0:6e:78:78:5e:0c:61:28:33:d8:c1:9d:e7:5f:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FD:6D:62:79:ED:55:ED:F7:C3:41:29:16:DE:86:AA:72:E4:79:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:42:95:cd:61:1c:06:c1:2d:39:63:c9:b3:11:7b:5e:20:b8:
         c6:c5:c2:68:b5:1e:ff:e7:99:96:55:eb:10:c8:27:48:3d:0e:
         6c:18:74:50:35:59:67:98:33:c2:e7:71:de:b1:26:85:60:fc:
         d7:ac:c9:6f:46:97:6a:0d:f6:98:44:fa:cc:fb:6b:ed:d5:86:
         98:a9:b2:0b:46:39:d6:12:b9:bf:92:43:fe:0a:e9:f2:3c:76:
         ea:6b:36:5d:7a:ce:f5:2d:88:d3:1f:2e:9f:9e:63:8e:c7:9c:
         e8:52:f3:47:ff:51:84:62:55:b6:1e:87:d9:68:7d:96:3e:6a:
         40:6e:8d:6a:69:f7:71:dc:1b:48:c2:ec:09:7e:80:ed:50:08:
         56:60:eb:75:f1:e2:5f:04:95:ae:ab:f5:c8:47:2b:76:0f:5d:
         3b:be:73:a2:84:7c:37:77:8d:7b:92:14:94:98:0b:a6:85:e9:
         63:fd:fd:c1:57:af:56:65:ca:4c:d9:c1:1d:33:ad:db:54:66:
         dc:ca:6c:36:0e:27:48:ab:ee:5d:c2:29:ef:e7:c0:83:55:4f:
         a1:cd:6f:cc:27:13:13:a4:ca:fb:82:7b:3a:1e:72:1a:83:1f:
         03:d1:9a:4b:dd:71:da:f6:8b:67:1a:66:32:22:70:84:a0:f4:
         36:de:9b:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWdLeyN8SIYyJ2fHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTI0MDQyMTAxMDAyNVoXDTI0MDcyMDAxMDAyNVowLzEtMCsGA1UEAxMk
MDFkNzVlNTctMWI5Yy00NjZmLWEwNzEtZTQ4ODNiY2NhNTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZl0ODxYgSSGQbFHymTY+3JW4BIGvaUl5fRA
8flf6VSlKkL7z+WGoWDYB7ErWOB88RcOmYwLyxGzFzaW0kGhFIjrxo0/MGHMu5Cz
4PiTsPeuFDgRpePj1F/8Yj/7m7qSMYBH4r20gVLXzqSsrvktoKj4ZLT2OlJVTFFa
XBDJCHWK/YiP4Wh0q2/hsTH+b4uqGWgX+sgiwI9GRTmq5B6eubcBz5cHCvh3L5/O
H3Dd3elrrTdqKrrkNdNsiv7DGsxx3h+tPr3nkTk/anOqLEglRqd+Xq0oLhLtYZ1m
jDlAYQHWDRPq4VTfsRF8ALcu+VTV4G54eF4MYSgz2MGd51/GLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLr9bWJ57VXt98NBKRbehqpy5HmXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvMDA0N2ZjZmQtN2FlYy0z
NGJiLWFlZGUtYTM5OWI0MDRkMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG85MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBClc1hHAbBLTljybMRe14guMbFwmi1Hv/nmZZV6xDIJ0g9DmwYdFA1
WWeYM8Lncd6xJoVg/NesyW9Gl2oN9phE+sz7a+3VhpipsgtGOdYSub+SQ/4K6fI8
duprNl16zvUtiNMfLp+eY47HnOhS80f/UYRiVbYeh9lofZY+akBujWpp93HcG0jC
7Al+gO1QCFZg63Xx4l8Ela6r9chHK3YPXTu+c6KEfDd3jXuSFJSYC6aF6WP9/cFX
r1ZlykzZwR0zrdtUZtzKbDYOJ0ir7l3CKe/nwINVT6HNb8wnExOkyvuCezoechqD
HwPRmkvdcdr2i2caZjIicISg9Dbem5k=
-----END CERTIFICATE-----
Generated at Fri May 17 20:57:36 2024 by rpki-client on console-fra.rpki-client.org