Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0f5daa42-73de-3d0d-9557-b8b7ae6547c1.roa
File:                     0f5daa42-73de-3d0d-9557-b8b7ae6547c1.roa (raw, json)
Hash identifier:          i8Wt+OQtkMmmjX7/9WZvIrCGg+sR6qPzkMSVAlNzA0k=
Subject key identifier:   8B:CA:60:51:D4:5D:64:38:7D:29:D4:83:C7:7C:71:A7:84:70:38:71
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285847ED24BB3656AFAC0925B27240
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0f5daa42-73de-3d0d-9557-b8b7ae6547c1.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     396253
IP address blocks:        149.19.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:bb:36:56:af:ac:09:25:b2:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=c04d342d-1688-4970-a67e-2e7fb2f340e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:70:aa:6b:b9:fc:b9:85:b3:c1:b0:7c:a2:8b:
                    91:41:dc:92:5f:c1:8b:00:5f:42:80:ce:ec:95:f1:
                    3c:83:5a:26:7e:e5:b0:de:02:22:4b:e9:11:f6:f4:
                    4a:26:a0:da:e1:47:ad:db:3b:b0:7f:cd:75:7c:3c:
                    fd:4b:11:b7:96:e0:fd:f8:dc:1d:e9:90:c6:59:5d:
                    c0:10:cf:f0:1e:4d:11:a6:d4:0d:d7:26:59:23:45:
                    bd:92:65:71:8b:4b:20:f3:bb:24:77:32:98:6e:68:
                    34:8c:77:33:20:61:a8:e1:83:cf:39:e3:e0:ac:5e:
                    df:55:bb:83:f7:e1:5f:68:67:f9:d5:33:a8:69:96:
                    a1:4b:73:dd:70:02:a2:96:f9:2e:55:9c:c2:30:4a:
                    c7:8e:a4:b6:e5:83:14:c2:6d:b8:57:da:78:a2:80:
                    c0:38:5b:ae:67:47:3f:b4:22:e5:02:7e:0e:c2:6b:
                    10:d4:aa:15:e5:1e:05:99:c4:dd:76:5b:85:00:cb:
                    31:68:37:22:45:5f:4c:f6:cd:d8:1b:70:5b:1f:3d:
                    d6:3c:4b:15:ab:78:0c:a7:fe:52:ad:2f:e1:7c:98:
                    59:f1:e6:19:b8:78:0f:f4:ef:54:ab:2c:d1:de:72:
                    2b:38:95:6f:4c:d5:af:84:2e:7e:31:88:bf:8a:6c:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CA:60:51:D4:5D:64:38:7D:29:D4:83:C7:7C:71:A7:84:70:38:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/0f5daa42-73de-3d0d-9557-b8b7ae6547c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e6:52:3f:04:5d:80:5b:a7:d8:1f:0e:00:3e:0a:cf:4c:2f:
         79:1b:70:96:b1:c2:0f:db:31:23:77:c7:81:e6:f7:0a:f7:3e:
         9c:16:3a:6a:be:e0:68:8d:27:12:50:1e:cd:c2:cc:19:1c:f8:
         58:62:9c:cf:36:05:7c:3b:eb:c1:c8:37:39:09:5a:9a:33:fc:
         97:1b:76:78:8d:a2:13:89:95:bf:2c:52:2e:eb:52:9d:85:b8:
         04:5f:a1:a5:8f:6a:04:c8:17:94:55:51:28:c4:d0:25:b4:ca:
         b3:26:96:8d:d6:58:3b:40:eb:d2:50:ad:29:ef:31:ad:26:ac:
         3c:31:8b:c6:6e:04:a0:d2:48:81:17:fd:52:61:4e:57:d2:fc:
         a5:d5:df:8f:5a:e1:18:21:46:8c:4d:fa:56:a8:1a:70:99:a0:
         88:36:9c:82:5d:23:ef:8d:51:fb:44:76:9c:d0:78:15:a2:29:
         25:7f:44:2f:ff:64:d4:cd:4b:ce:a4:73:15:8c:42:18:c8:b6:
         29:43:92:2b:52:74:a8:ee:18:a1:08:90:2d:30:8c:8d:01:ac:
         90:26:c7:02:9b:47:ff:8c:a4:77:c0:4c:d4:bd:da:0e:f0:d4:
         8e:98:64:1b:c5:83:70:25:a8:4e:df:57:71:1e:ce:1d:82:8d:
         14:65:2e:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJLs2Vq+sCSWyckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
YzA0ZDM0MmQtMTY4OC00OTcwLWE2N2UtMmU3ZmIyZjM0MGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXCqa7n8uYWzwbB8oouRQdySX8GLAF9CgM7s
lfE8g1omfuWw3gIiS+kR9vRKJqDa4Uet2zuwf811fDz9SxG3luD9+Nwd6ZDGWV3A
EM/wHk0RptQN1yZZI0W9kmVxi0sg87skdzKYbmg0jHczIGGo4YPPOePgrF7fVbuD
9+FfaGf51TOoaZahS3PdcAKilvkuVZzCMErHjqS25YMUwm24V9p4ooDAOFuuZ0c/
tCLlAn4OwmsQ1KoV5R4FmcTddluFAMsxaDciRV9M9s3YG3BbHz3WPEsVq3gMp/5S
rS/hfJhZ8eYZuHgP9O9UqyzR3nIrOJVvTNWvhC5+MYi/imy04QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvKYFHUXWQ4fSnUg8d8caeEcDhxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMGY1ZGFhNDItNzNkZS0z
ZDBkLTk1NTctYjhiN2FlNjU0N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnmUj8EXYBbp9gfDgA+Cs9ML3kbcJaxwg/bMSN3x4Hm9wr3PpwWOmq+
4GiNJxJQHs3CzBkc+FhinM82BXw768HINzkJWpoz/JcbdniNohOJlb8sUi7rUp2F
uARfoaWPagTIF5RVUSjE0CW0yrMmlo3WWDtA69JQrSnvMa0mrDwxi8ZuBKDSSIEX
/VJhTlfS/KXV349a4RghRoxN+laoGnCZoIg2nIJdI++NUftEdpzQeBWiKSV/RC//
ZNTNS86kcxWMQhjItilDkitSdKjuGKEIkC0wjI0BrJAmxwKbR/+MpHfATNS92g7w
1I6YZBvFg3AlqE7fV3Eezh2CjRRlLig=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org