Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/755a0eff-bdd4-327d-a182-76044a08f058.roa
File:                     755a0eff-bdd4-327d-a182-76044a08f058.roa (raw, json)
Hash identifier:          Is39QQ9zrZxK54+iGRBE9hWu2IrK7Nr5Bm7NfF5jJIM=
Subject key identifier:   2F:0D:19:1E:6C:32:E4:5D:E4:5B:2B:2C:29:8D:1D:3B:BA:FB:35:9C
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F432858451E54FB8F4914BD674C57DB80
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/755a0eff-bdd4-327d-a182-76044a08f058.roa
Signing time:             Wed 06 Mar 2024 14:31:33 +0000
ROA not before:           Wed 06 Mar 2024 14:31:33 +0000
ROA not after:            Tue 04 Jun 2024 13:31:33 +0000
asID:                     3738
IP address blocks:        192.250.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1e:54:fb:8f:49:14:bd:67:4c:57:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Mar  6 14:31:33 2024 GMT
            Not After : Jun  4 13:31:33 2024 GMT
        Subject: CN=6620a5a5-1df9-41c1-bd1a-b59409160d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:c7:0c:70:47:fc:b1:92:05:85:5a:7c:3a:
                    5c:9a:48:3b:de:b7:69:7e:a2:ed:f4:8a:b6:05:eb:
                    ba:73:60:29:2a:ee:c7:18:88:9a:43:8b:8c:cc:35:
                    2c:68:a1:25:30:cc:7f:55:43:11:6d:d1:f6:b6:f0:
                    09:12:e2:cf:5b:04:32:e9:6a:85:ce:55:e1:f1:9b:
                    85:e8:45:cb:b7:17:42:df:a4:f2:57:20:f2:96:ec:
                    b6:4a:4c:2d:2d:35:db:ab:aa:ec:cc:89:6c:82:b1:
                    93:fa:79:de:6c:da:c7:bb:13:e2:98:78:01:18:1a:
                    78:a6:bd:84:b4:02:a9:e3:cd:1a:02:a3:ec:24:e4:
                    a6:9a:1a:5d:9c:f6:01:bb:76:e3:7d:44:9f:69:d0:
                    18:af:05:48:3d:e3:53:2d:6c:3a:d2:67:41:52:0e:
                    eb:c6:ce:25:a9:56:0f:5d:18:82:1c:34:0d:4d:d8:
                    30:9c:6a:b9:b1:5e:d4:ac:8b:4b:02:ea:0d:cc:e9:
                    50:af:40:e8:02:ec:0d:92:1b:81:80:1b:36:f6:5c:
                    71:d3:08:db:82:c3:65:ea:6c:aa:5a:63:14:7b:38:
                    92:80:d3:14:de:76:ab:73:13:b0:25:61:27:98:a1:
                    d9:fd:55:8c:6a:16:78:bd:09:ba:a0:25:9f:6b:13:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0D:19:1E:6C:32:E4:5D:E4:5B:2B:2C:29:8D:1D:3B:BA:FB:35:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/755a0eff-bdd4-327d-a182-76044a08f058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:91:b0:91:cc:11:df:03:8b:cb:47:e0:b1:bc:f5:5b:bf:05:
         4a:aa:97:6a:e6:1b:d8:bd:24:05:db:fd:df:f4:64:e9:7a:a7:
         98:ad:b0:fb:9f:38:97:a4:5c:3e:75:72:c5:39:a5:21:c7:73:
         b8:b9:91:91:ea:c7:31:0c:f4:cf:d7:8a:3f:51:c3:ba:d8:bf:
         b0:89:ba:60:35:ae:9d:c2:89:83:c7:f5:c3:55:45:a0:20:f3:
         3a:d4:a7:80:57:11:0b:28:ab:5d:5c:19:1b:10:f8:a0:57:ea:
         71:e9:52:68:01:9a:63:13:e0:f0:4d:78:6c:1b:73:56:e1:24:
         62:53:9a:3e:a2:92:9f:70:c9:78:ab:93:fd:3b:28:00:3a:ec:
         e2:4e:48:71:33:44:a4:37:e2:56:d2:cf:b6:ee:3e:11:50:c2:
         60:04:14:8c:ae:45:55:00:dd:0c:9c:44:82:b8:54:00:a5:a5:
         22:a9:3a:ec:be:ce:db:af:be:ee:d8:ca:0a:0d:0e:00:f3:e0:
         3a:93:f7:42:bf:61:65:f3:aa:f4:0b:b7:57:b9:52:96:5a:0c:
         4a:c6:54:af:e2:bf:3f:6e:aa:94:99:c7:67:7b:7b:53:e4:94:
         b2:18:83:bf:1c:57:27:7c:ac:b2:60:52:89:a4:9b:57:19:9c:
         06:3b:39:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUeVPuPSRS9Z0xX24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl
YzAwMB4XDTI0MDMwNjE0MzEzM1oXDTI0MDYwNDEzMzEzM1owLzEtMCsGA1UEAxMk
NjYyMGE1YTUtMWRmOS00MWMxLWJkMWEtYjU5NDA5MTYwZDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+rHDHBH/LGSBYVafDpcmkg73rdpfqLt9Iq2
Beu6c2ApKu7HGIiaQ4uMzDUsaKElMMx/VUMRbdH2tvAJEuLPWwQy6WqFzlXh8ZuF
6EXLtxdC36TyVyDyluy2SkwtLTXbq6rszIlsgrGT+nnebNrHuxPimHgBGBp4pr2E
tAKp480aAqPsJOSmmhpdnPYBu3bjfUSfadAYrwVIPeNTLWw60mdBUg7rxs4lqVYP
XRiCHDQNTdgwnGq5sV7UrItLAuoNzOlQr0DoAuwNkhuBgBs29lxx0wjbgsNl6myq
WmMUeziSgNMU3narcxOwJWEnmKHZ/VWMahZ4vQm6oCWfaxNpHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC8NGR5sMuRd5FsrLCmNHTu6+zWcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj
MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNzU1YTBlZmYtYmRkNC0z
MjdkLWExODItNzYwNDRhMDhmMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk
NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4
ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1
NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPosMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqRsJHMEd8Di8tH4LG89Vu/BUqql2rmG9i9JAXb/d/0ZOl6p5itsPuf
OJekXD51csU5pSHHc7i5kZHqxzEM9M/Xij9Rw7rYv7CJumA1rp3CiYPH9cNVRaAg
8zrUp4BXEQsoq11cGRsQ+KBX6nHpUmgBmmMT4PBNeGwbc1bhJGJTmj6ikp9wyXir
k/07KAA67OJOSHEzRKQ34lbSz7buPhFQwmAEFIyuRVUA3QycRIK4VAClpSKpOuy+
ztuvvu7YygoNDgDz4DqT90K/YWXzqvQLt1e5UpZaDErGVK/ivz9uqpSZx2d7e1Pk
lLIYg78cVyd8rLJgUomkm1cZnAY7OQs=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:02 2024 by rpki-client on console-fra.rpki-client.org