Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/991e404f-8d3f-3233-a41d-35ee0ba90723.roa
File:                     991e404f-8d3f-3233-a41d-35ee0ba90723.roa (raw, json)
Hash identifier:          5FcdBYKeiYPNrYFH+oE2KMZUD2Ng4ZOSAmrtpnox3Zg=
Subject key identifier:   42:52:DC:95:B7:1D:4C:29:94:6B:D2:E1:76:2E:8C:C3:00:02:EE:FA
Certificate issuer:       /CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
Certificate serial:       010D0C9F432858459E935D4AFBD9BBB958A33220
Authority key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/991e404f-8d3f-3233-a41d-35ee0ba90723.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     400725
IP address blocks:        199.45.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:5d:4a:fb:d9:bb:b9:58:a3:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=4f4a327d-91e0-4086-b8ed-b145e700366b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:14:0d:26:96:82:3e:bc:6a:b8:ad:df:b4:b4:
                    77:3d:82:72:bc:c4:17:fe:2c:a1:e4:5d:d6:41:6f:
                    ad:7d:33:83:bd:61:eb:f9:4e:0a:6f:80:57:3c:db:
                    c7:22:20:fb:e6:2b:57:d9:3d:bc:7c:54:be:a9:c0:
                    75:27:41:57:9e:f6:a5:3b:ff:f4:aa:e6:d3:dd:77:
                    e2:fb:43:74:47:7d:22:21:be:28:fe:7a:8b:49:78:
                    ea:d5:5b:c4:10:93:ef:13:42:0a:e1:b4:7e:98:1e:
                    f1:37:84:a0:7a:ec:12:71:58:cb:0f:62:6a:cc:f2:
                    12:42:6f:02:5b:17:6e:0a:31:4d:f2:ba:3c:ae:31:
                    f7:c3:4a:5e:5b:ff:53:6f:68:d8:54:79:43:91:bd:
                    5a:19:fc:3f:f0:8f:af:bf:2c:f9:e5:86:fc:8a:2b:
                    92:c7:1c:30:54:a8:ea:cb:39:0a:08:7a:ae:e5:c5:
                    a3:b5:8e:dd:4c:bf:22:a8:d6:d1:1e:5b:7f:8c:8c:
                    73:9a:7e:2a:e3:66:4e:38:a3:48:cf:58:6e:2b:9a:
                    da:15:08:5c:6e:0e:c4:66:ba:8e:a0:6d:64:b5:50:
                    95:bb:11:07:76:ae:d9:a6:53:69:3c:13:ea:92:10:
                    13:30:1c:f8:f8:12:1f:ed:c0:ba:d9:1a:2d:ce:30:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:52:DC:95:B7:1D:4C:29:94:6B:D2:E1:76:2E:8C:C3:00:02:EE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/991e404f-8d3f-3233-a41d-35ee0ba90723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl

            X509v3 Authority Key Identifier:
                keyid:5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:86:8a:d6:2d:06:3d:1b:25:ec:7c:77:ef:5f:4e:02:e8:
         8a:c8:2b:81:c7:e0:78:c8:0a:29:17:47:4f:d2:8f:f0:32:43:
         8b:36:15:a9:e5:84:90:d2:0e:6c:3d:99:25:a9:21:f2:a2:6f:
         36:35:67:d2:a3:2c:f0:9c:11:f8:5a:92:e7:9c:b4:d2:06:93:
         57:d4:ad:b1:1b:e8:5e:ee:d1:9e:de:79:f0:0a:cb:18:63:92:
         c6:98:d7:c9:c1:d3:cd:90:c3:e4:a3:85:05:eb:82:89:aa:3e:
         f9:ad:b8:8f:19:86:56:73:ee:af:a6:d2:f1:96:ad:36:70:87:
         7f:a3:5d:ce:94:4b:74:2a:df:b6:33:a5:6d:13:63:89:3e:c2:
         d6:93:7b:f4:20:2f:71:8f:00:13:c7:25:f1:b9:87:84:e9:3f:
         41:86:7d:52:e3:00:a4:75:6b:c8:f5:01:4c:9a:de:a4:98:8a:
         3a:35:5e:b5:2b:96:1c:51:5a:47:24:69:d0:d8:69:09:9a:cd:
         d3:5c:1c:fd:d0:90:80:89:8c:3d:b7:82:cc:27:71:89:5b:d0:
         84:8d:ea:21:cb:85:1e:59:d2:37:34:23:3f:3c:f7:c8:81:63:
         80:5f:f3:ac:21:e0:92:50:23:a5:fc:51:f6:0d:df:62:1e:2a:
         64:b3:3a:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek11K+9m7uVijMiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA1MGI0ZGUtZjRjOC00ZWU3LTkwN2EtNGRmMzkyNTNl
MWFlMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
NGY0YTMyN2QtOTFlMC00MDg2LWI4ZWQtYjE0NWU3MDAzNjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxQNJpaCPrxquK3ftLR3PYJyvMQX/iyh5F3W
QW+tfTODvWHr+U4Kb4BXPNvHIiD75itX2T28fFS+qcB1J0FXnvalO//0qubT3Xfi
+0N0R30iIb4o/nqLSXjq1VvEEJPvE0IK4bR+mB7xN4SgeuwScVjLD2JqzPISQm8C
WxduCjFN8ro8rjH3w0peW/9Tb2jYVHlDkb1aGfw/8I+vvyz55Yb8iiuSxxwwVKjq
yzkKCHqu5cWjtY7dTL8iqNbRHlt/jIxzmn4q42ZOOKNIz1huK5raFQhcbg7EZrqO
oG1ktVCVuxEHdq7ZplNpPBPqkhATMBz4+BIf7cC62RotzjCDBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJS3JW3HUwplGvS4XYujMMAAu76MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMDUw
YjRkZS1mNGM4LTRlZTctOTA3YS00ZGYzOTI1M2UxYWUvOTkxZTQwNGYtOGQzZi0z
MjMzLWE0MWQtMzVlZTBiYTkwNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDA1MGI0ZGUtZjRjOC00ZWU3LTkw
N2EtNGRmMzkyNTNlMWFlL2QwNTBiNGRlLWY0YzgtNGVlNy05MDdhLTRkZjM5MjUz
ZTFhZS5jcmwwHwYDVR0jBBgwFoAUW4G2qbzxiX0FzUQN8+oO7x1NeOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kMDUwYjRkZS1mNGM4LTRlZTctOTA3YS00ZGYz
OTI1M2UxYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy3xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANqhorWLQY9GyXsfHfvX04C6IrIK4HH4HjICikXR0/Sj/AyQ4s2Fanl
hJDSDmw9mSWpIfKibzY1Z9KjLPCcEfhakuectNIGk1fUrbEb6F7u0Z7eefAKyxhj
ksaY18nB082Qw+SjhQXrgomqPvmtuI8ZhlZz7q+m0vGWrTZwh3+jXc6US3Qq37Yz
pW0TY4k+wtaTe/QgL3GPABPHJfG5h4TpP0GGfVLjAKR1a8j1AUya3qSYijo1XrUr
lhxRWkckadDYaQmazdNcHP3QkICJjD23gswncYlb0ISN6iHLhR5Z0jc0Iz8898iB
Y4Bf86wh4JJQI6X8UfYN32IeKmSzOlg=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:10 2024 by rpki-client on console-fra.rpki-client.org