Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa
File:                     929941d8-be63-3be5-89d7-62a997289367.roa (raw, json)
Hash identifier:          Ww7/BPA7y7Ay4KU9d5/tnSclsrxXzrGTw8EwSWhNmRI=
Subject key identifier:   58:D6:C6:05:5E:1C:F9:F1:50:6C:DF:EB:0B:BE:78:A3:AE:BF:26:8A
Certificate issuer:       /CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Certificate serial:       010D0C9F432858471345A3125876FAC3C00776C0
Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa
Signing time:             Mon 02 Sep 2024 01:00:31 +0000
ROA not before:           Mon 02 Sep 2024 01:00:31 +0000
ROA not after:            Sun 01 Dec 2024 02:00:31 +0000
asID:                     14618
IP address blocks:        208.71.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:13:45:a3:12:58:76:fa:c3:c0:07:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17
        Validity
            Not Before: Sep  2 01:00:31 2024 GMT
            Not After : Dec  1 02:00:31 2024 GMT
        Subject: CN=6bbecc56-265a-49ad-ad0d-35b8f3890cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ae:35:75:24:34:b5:8f:e5:6d:d6:45:01:4c:
                    ea:ec:e9:7c:64:e3:05:58:fe:d4:08:13:ad:00:23:
                    a8:02:a3:6c:9c:ff:72:5f:7f:df:29:a2:42:0a:59:
                    8b:d2:58:cc:ea:e1:1c:1a:d9:db:7b:07:5b:c9:d5:
                    6e:b5:c8:58:8c:29:81:75:a3:20:94:48:26:d2:82:
                    e1:33:b7:bc:42:e4:70:51:9d:6b:91:1b:9e:14:dc:
                    bf:ff:b5:73:7a:a6:a3:1d:f1:8c:9b:1f:a9:4b:30:
                    db:88:af:58:c3:af:32:25:8b:49:f1:f6:b5:15:20:
                    65:33:0e:59:4e:a8:fc:f4:77:66:fd:cd:43:53:4c:
                    12:c3:c1:e5:91:cf:0b:19:0b:c5:f4:ec:fc:c1:7d:
                    2f:59:3f:fd:da:78:3a:c5:e0:25:15:ca:ab:44:9a:
                    fe:b6:ba:77:32:59:84:99:2f:85:3c:15:5d:4d:74:
                    b8:08:e5:d9:2c:0f:af:32:c2:b9:d3:f3:4f:d5:0e:
                    c7:9a:1f:29:a6:11:20:2d:b2:9f:be:e9:ef:82:1b:
                    d4:e7:a3:ea:f9:1c:97:79:ce:57:ae:a2:1a:57:aa:
                    c6:ce:be:43:71:40:ed:8d:64:45:71:e4:83:51:9f:
                    a4:c7:35:39:94:f0:5f:48:e2:78:e5:67:21:c5:35:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D6:C6:05:5E:1C:F9:F1:50:6C:DF:EB:0B:BE:78:A3:AE:BF:26:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl

            X509v3 Authority Key Identifier:
                keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b2:8d:7a:3a:80:62:9f:8c:0a:31:f1:3f:14:b4:22:0a:f1:
         77:87:24:2d:4d:85:10:28:72:be:d6:af:06:b9:c9:fc:79:62:
         7e:62:76:25:ad:aa:db:21:93:ae:cc:46:10:97:7e:9b:93:4c:
         4b:a8:ee:04:c2:4f:12:f6:1b:93:69:84:f5:6f:b5:6b:a6:5b:
         e7:05:30:d4:e4:32:55:13:7e:f6:fc:cf:7d:70:86:f4:2e:c2:
         97:46:9c:ba:61:34:cc:c9:54:19:07:5c:32:29:e3:5d:23:42:
         7a:1b:63:22:0d:cf:ef:01:40:af:58:c8:e4:81:1e:84:ba:ef:
         f2:4b:9b:f8:e4:36:a1:56:66:2b:c0:ab:2d:a7:7c:ea:df:f8:
         8e:a2:82:8e:a2:73:f6:22:74:2e:c6:5d:23:06:cd:31:62:52:
         70:50:ac:2b:9f:bf:b1:df:cf:d3:27:4c:ba:54:60:27:ca:55:
         8a:58:09:f5:b4:1e:ac:15:b4:67:80:ae:cb:8c:c4:73:2c:6f:
         47:d9:e3:a0:f7:d6:3f:30:27:ca:39:ce:96:71:0f:f6:ff:39:
         86:f8:cc:ff:da:44:2f:07:b7:e3:f6:9f:07:99:d5:4b:75:8a:
         da:49:61:83:fa:d4:6d:aa:c1:85:6a:60:09:49:8d:2c:03:a1:
         5a:b2:95:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcTRaMSWHb6w8AHdsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1
YjE3MB4XDTI0MDkwMjAxMDAzMVoXDTI0MTIwMTAyMDAzMVowLzEtMCsGA1UEAxMk
NmJiZWNjNTYtMjY1YS00OWFkLWFkMGQtMzViOGYzODkwY2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9641dSQ0tY/lbdZFAUzq7Ol8ZOMFWP7UCBOt
ACOoAqNsnP9yX3/fKaJCClmL0ljM6uEcGtnbewdbydVutchYjCmBdaMglEgm0oLh
M7e8QuRwUZ1rkRueFNy//7VzeqajHfGMmx+pSzDbiK9Yw68yJYtJ8fa1FSBlMw5Z
Tqj89Hdm/c1DU0wSw8Hlkc8LGQvF9Oz8wX0vWT/92ng6xeAlFcqrRJr+trp3MlmE
mS+FPBVdTXS4COXZLA+vMsK50/NP1Q7Hmh8pphEgLbKfvunvghvU56Pq+RyXec5X
rqIaV6rGzr5DcUDtjWRFceSDUZ+kxzU5lPBfSOJ45WchxTWL/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjWxgVeHPnxUGzf6wu+eKOuvyaKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh
MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvOTI5OTQxZDgtYmU2My0z
YmU1LTg5ZDctNjJhOTk3Mjg5MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5
ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3
NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw
NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+yjXo6gGKfjAox8T8UtCIK8XeHJC1NhRAocr7Wrwa5yfx5Yn5idiWt
qtshk67MRhCXfpuTTEuo7gTCTxL2G5NphPVvtWumW+cFMNTkMlUTfvb8z31whvQu
wpdGnLphNMzJVBkHXDIp410jQnobYyINz+8BQK9YyOSBHoS67/JLm/jkNqFWZivA
qy2nfOrf+I6igo6ic/YidC7GXSMGzTFiUnBQrCufv7Hfz9MnTLpUYCfKVYpYCfW0
HqwVtGeArsuMxHMsb0fZ46D31j8wJ8o5zpZxD/b/OYb4zP/aRC8Ht+P2nweZ1Ut1
itpJYYP61G2qwYVqYAlJjSwDoVqylSA=
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:16:20 2024 by rpki-client on console-ams.rpki-client.org