Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b94b0b9-e410-3b46-bb15-e5dc995fd930.roa
File:                     0b94b0b9-e410-3b46-bb15-e5dc995fd930.roa (raw, json)
Hash identifier:          tfUwu6/vwXPSpHeixwORXxAcQSkeR2JiasVolZ5/hlU=
Subject key identifier:   A1:54:D8:73:60:C6:1E:BF:D9:15:DC:4E:80:A2:3D:9C:6A:76:0D:83
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845777DD189249545182A14E660
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b94b0b9-e410-3b46-bb15-e5dc995fd930.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     36183
IP address blocks:        172.224.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:d1:89:24:95:45:18:2a:14:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=a2c7fcae-b078-406b-90d0-684c0fb945bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:3b:00:9b:ad:92:bc:e3:84:4e:66:de:d8:
                    32:c2:72:e0:52:5c:d8:37:f1:e7:86:ff:2e:cf:f6:
                    e9:ac:d5:92:81:23:a9:c1:51:be:70:21:80:25:1c:
                    ee:f7:fb:ff:db:f4:90:7c:c8:41:db:3a:3f:5a:0d:
                    a4:03:c6:f5:4b:e8:f6:e5:71:50:d2:bd:24:47:60:
                    b4:4f:59:9d:11:c0:23:9f:2f:17:20:d8:a0:1c:80:
                    2f:9e:61:14:89:0d:71:0d:fa:b6:dd:7c:05:8e:26:
                    2c:05:78:9b:5a:0e:c7:85:58:b4:ba:c4:23:10:45:
                    f8:47:bb:ed:cf:65:e0:a8:78:0d:01:3d:e7:59:c8:
                    d8:f5:0b:8e:46:ed:79:6a:ca:2d:47:ee:bd:d6:6f:
                    f6:f9:1a:8d:8f:31:84:6e:d1:50:03:fe:46:17:1f:
                    77:4b:ae:5a:a7:a0:b1:e1:b9:9c:43:03:c1:a2:4a:
                    8e:29:f0:85:30:3b:1d:37:ae:54:5b:bb:6c:a1:8b:
                    e0:29:d6:6b:14:b4:25:b5:51:e9:ee:0c:b4:b2:09:
                    30:1e:b7:a1:8e:66:e6:67:55:66:03:d2:d9:56:d8:
                    9f:f7:b0:2b:b4:1a:ff:39:b7:52:58:28:21:33:05:
                    48:76:b0:64:60:b1:fd:89:3d:33:22:b7:6a:a4:74:
                    81:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:D8:73:60:C6:1E:BF:D9:15:DC:4E:80:A2:3D:9C:6A:76:0D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b94b0b9-e410-3b46-bb15-e5dc995fd930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:1d:6e:f1:8a:31:5b:28:94:17:e8:5b:72:e9:d8:5e:3e:
         f0:6c:05:72:e2:71:da:cb:ad:71:2b:75:88:d7:ae:88:93:e9:
         22:f3:7c:8d:9a:86:26:bb:22:c9:9a:65:81:49:7a:6b:fe:15:
         b0:ac:eb:d0:40:01:fb:59:c5:7f:d1:d7:8b:3e:de:14:ca:a5:
         c1:44:19:83:4e:8a:80:49:e6:b1:7b:98:d1:e3:32:1f:59:b1:
         6e:ec:c6:c5:7a:54:3e:65:81:f0:b3:73:98:4c:1b:7b:c5:d8:
         9e:b9:5c:ed:79:46:dc:cf:0e:91:6f:e2:c0:01:ae:cb:c8:82:
         1e:15:8b:ed:3b:09:20:0a:75:13:91:ee:31:9b:af:24:80:03:
         0e:3a:ba:25:ae:6a:c1:41:fb:40:e3:6d:a3:cf:5d:89:f6:bf:
         83:80:33:6f:7b:61:55:4f:ab:da:fc:c8:b2:6c:f0:73:5d:81:
         de:26:03:b9:71:38:ad:22:17:50:e5:41:c3:40:d6:a4:ad:06:
         0b:7a:38:30:9e:5b:22:76:b4:51:f3:7c:92:33:62:1c:00:00:
         a6:83:9d:d4:35:bd:85:6a:f7:75:b1:41:fa:9c:88:94:53:3a:
         39:f2:70:df:9c:3d:01:2b:5e:43:d9:56:38:70:07:7d:9f:0d:
         1c:ab:cb:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fdGJJJVFGCoU5mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
YTJjN2ZjYWUtYjA3OC00MDZiLTkwZDAtNjg0YzBmYjk0NWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlE7AJutkrzjhE5m3tgywnLgUlzYN/Hnhv8u
z/bprNWSgSOpwVG+cCGAJRzu9/v/2/SQfMhB2zo/Wg2kA8b1S+j25XFQ0r0kR2C0
T1mdEcAjny8XINigHIAvnmEUiQ1xDfq23XwFjiYsBXibWg7HhVi0usQjEEX4R7vt
z2XgqHgNAT3nWcjY9QuORu15asotR+691m/2+RqNjzGEbtFQA/5GFx93S65ap6Cx
4bmcQwPBokqOKfCFMDsdN65UW7tsoYvgKdZrFLQltVHp7gy0sgkwHrehjmbmZ1Vm
A9LZVtif97ArtBr/ObdSWCghMwVIdrBkYLH9iT0zIrdqpHSBVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFU2HNgxh6/2RXcToCiPZxqdg2DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGI5NGIwYjktZTQxMC0z
YjQ2LWJiMTUtZTVkYzk5NWZkOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5yHW7xijFbKJQX6Fty6dhePvBsBXLicdrLrXErdYjXroiT6SLzfI2a
hia7IsmaZYFJemv+FbCs69BAAftZxX/R14s+3hTKpcFEGYNOioBJ5rF7mNHjMh9Z
sW7sxsV6VD5lgfCzc5hMG3vF2J65XO15RtzPDpFv4sABrsvIgh4Vi+07CSAKdROR
7jGbrySAAw46uiWuasFB+0DjbaPPXYn2v4OAM297YVVPq9r8yLJs8HNdgd4mA7lx
OK0iF1DlQcNA1qStBgt6ODCeWyJ2tFHzfJIzYhwAAKaDndQ1vYVq93WxQfqciJRT
OjnycN+cPQErXkPZVjhwB32fDRyryyo=
-----END CERTIFICATE-----
Generated at Fri May 17 21:09:12 2024 by rpki-client on console-ams.rpki-client.org