Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa
File:                     42377806-4a77-3098-8fd4-c6b8e4389e40.roa (raw, json)
Hash identifier:          soeOn2rodvoYmnsvzWwLf+yoDgKplZl5qP4j7dsgsvw=
Subject key identifier:   A1:1F:03:89:1D:46:01:C4:A0:19:52:A4:AA:8D:B8:A4:7B:8F:89:91
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F432858459E93534E785A13D3601B7E00
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     5050
IP address blocks:        147.73.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:53:4e:78:5a:13:d3:60:1b:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=adbbb583-ff77-478e-bad4-88902c74388d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:d4:04:a6:85:cd:b0:d6:76:46:66:2f:5d:
                    5a:54:65:16:6e:3e:b6:09:b3:7f:5d:68:89:82:73:
                    f1:87:28:9b:3f:d4:4b:8f:48:8f:e2:cd:a4:b0:43:
                    59:01:a7:d7:52:23:c8:55:2c:87:ba:2b:30:21:4a:
                    93:42:47:e3:d8:07:26:dc:6a:61:b1:3b:15:6d:ae:
                    58:36:47:a7:10:eb:72:9b:ef:52:67:3f:77:8e:4f:
                    fd:93:60:81:39:24:11:af:6c:7b:a8:fb:34:b0:4d:
                    7f:3a:dc:2d:a8:09:d3:ca:8d:b1:84:a6:bc:6d:84:
                    fe:88:ee:5c:b2:eb:96:d6:40:a4:2f:79:a6:6a:f3:
                    98:60:be:ea:d3:5c:c4:aa:7c:fa:1d:69:46:2d:d2:
                    80:4f:b8:d3:e7:28:2c:27:7e:b4:02:df:a1:e7:8c:
                    ba:92:77:a5:b7:b9:95:9a:71:6a:d9:f5:ea:af:6b:
                    c9:62:bd:bb:18:d0:2e:17:c0:77:6f:a9:dd:05:3d:
                    1c:dd:d9:23:74:28:b7:95:28:4b:f3:00:85:4d:83:
                    0d:85:d0:f8:26:b6:ed:b4:a4:81:32:bf:16:01:c8:
                    0c:64:3f:55:7c:ad:2b:7c:c5:a3:57:ad:ec:01:da:
                    b4:e3:bd:52:61:50:eb:ea:9e:b7:21:7c:fc:52:0b:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1F:03:89:1D:46:01:C4:A0:19:52:A4:AA:8D:B8:A4:7B:8F:89:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a1:9e:a3:7f:0c:fb:6a:42:00:85:a4:b4:1f:b7:da:6c:b0:
         eb:9b:66:ad:bf:15:ea:df:b7:54:a3:3c:55:30:dc:34:25:72:
         ae:35:8c:19:f3:1a:29:24:d3:8b:ce:97:4a:32:fa:02:09:4a:
         a3:65:0e:5e:a6:a5:0d:51:97:c9:f6:e9:1e:fd:8a:cd:9a:83:
         f6:9b:cd:cf:cd:23:03:0d:00:5b:6a:5c:f9:4b:ad:66:7c:83:
         9d:a5:27:9f:1c:d2:b3:9f:ab:e5:9d:69:ff:89:17:1a:49:eb:
         9f:eb:98:94:58:b9:ef:9f:3e:64:b9:d1:e7:df:af:ea:1c:2b:
         d6:db:5f:2b:eb:ec:3c:c0:49:a6:31:0e:b5:2e:75:f9:4c:76:
         98:a9:82:45:a1:6d:b1:aa:77:43:c2:57:bf:1c:03:57:df:44:
         99:b8:c2:e9:04:36:d3:e9:5f:8f:cd:fe:fd:9e:d2:09:c6:f8:
         02:5f:8b:0a:0a:5d:14:91:55:ea:e4:21:c8:16:fa:32:a2:9e:
         c6:43:45:37:36:0a:83:03:63:24:46:d9:09:10:2a:90:a3:b5:
         7a:6c:d6:5b:26:80:c0:ef:92:7b:22:d5:68:42:b1:83:29:47:
         12:c8:60:d9:cc:bf:18:81:cd:43:3b:8f:4a:ed:0c:fa:51:9b:
         22:15:f3:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek1NOeFoT02AbfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz
MGQyMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
YWRiYmI1ODMtZmY3Ny00NzhlLWJhZDQtODg5MDJjNzQzODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kPUBKaFzbDWdkZmL11aVGUWbj62CbN/XWiJ
gnPxhyibP9RLj0iP4s2ksENZAafXUiPIVSyHuiswIUqTQkfj2Acm3GphsTsVba5Y
NkenEOtym+9SZz93jk/9k2CBOSQRr2x7qPs0sE1/OtwtqAnTyo2xhKa8bYT+iO5c
suuW1kCkL3mmavOYYL7q01zEqnz6HWlGLdKAT7jT5ygsJ360At+h54y6knelt7mV
mnFq2fXqr2vJYr27GNAuF8B3b6ndBT0c3dkjdCi3lShL8wCFTYMNhdD4JrbttKSB
Mr8WAcgMZD9VfK0rfMWjV63sAdq0471SYVDr6p63IXz8UguexQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKEfA4kdRgHEoBlSpKqNuKR7j4mRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4
YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNDIzNzc4MDYtNGE3Ny0z
MDk4LThmZDQtYzZiOGU0Mzg5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0
OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz
MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw
MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJihnqN/DPtqQgCFpLQft9pssOubZq2/Ferft1SjPFUw3DQlcq41jBnz
Gikk04vOl0oy+gIJSqNlDl6mpQ1Rl8n26R79is2ag/abzc/NIwMNAFtqXPlLrWZ8
g52lJ58c0rOfq+Wdaf+JFxpJ65/rmJRYue+fPmS50effr+ocK9bbXyvr7DzASaYx
DrUudflMdpipgkWhbbGqd0PCV78cA1ffRJm4wukENtPpX4/N/v2e0gnG+AJfiwoK
XRSRVerkIcgW+jKinsZDRTc2CoMDYyRG2QkQKpCjtXps1lsmgMDvknsi1WhCsYMp
RxLIYNnMvxiBzUM7j0rtDPpRmyIV85k=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:41:15 2024 by rpki-client on console-fra.rpki-client.org