Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
File:                     6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa (raw, json)
Hash identifier:          x1lJhe3WxhqSbptM4comkaWcGCFzzoimTQrwbkqLB5Y=
Subject key identifier:   F9:E3:D5:BC:A1:9E:B8:56:4B:C6:BE:98:CF:BB:2B:8C:44:75:9D:7A
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F43285847AE36B1C4CF2C772C60C76400
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     33442
IP address blocks:        149.23.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b1:c4:cf:2c:77:2c:60:c7:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=ffcb71a3-7f00-494a-b6c2-9e98c76fd651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:62:a8:09:1a:de:70:8a:99:a8:b4:8b:cb:
                    3c:e5:73:1d:61:fa:b9:c9:d4:30:5a:7a:55:f2:4b:
                    c5:ce:3e:a2:08:7c:f6:3e:a7:99:04:f2:5d:c1:93:
                    18:b2:06:d8:03:c9:ed:99:ec:ea:b4:0c:8a:f2:b6:
                    db:5d:f0:58:30:05:df:3a:e4:b8:99:45:ef:06:7e:
                    e7:65:d5:bd:99:75:34:fe:54:37:56:f4:a8:58:ea:
                    bc:d2:3c:5f:ab:b6:20:5b:8a:d3:fd:61:6b:68:10:
                    f5:2c:ed:1a:ff:3e:5f:e7:0c:42:2a:5c:66:3d:c5:
                    6a:05:10:af:1a:9b:eb:40:9e:4f:6f:89:c3:d4:64:
                    5d:36:38:47:cd:78:3c:59:74:bd:1f:31:2f:f6:35:
                    e0:3b:26:2e:e8:6b:3e:98:ca:d2:7f:83:cb:7a:14:
                    0c:29:29:31:48:c2:dc:0a:4b:9f:a2:35:c1:7f:ea:
                    06:35:88:ca:5e:df:37:82:b8:99:b3:a7:a3:84:4e:
                    68:c2:62:1d:dc:fa:a7:4e:a6:e7:76:02:03:a7:6a:
                    91:5e:ad:b0:55:2e:05:52:71:b0:6d:76:4f:6a:a6:
                    68:6e:9f:7e:ac:81:9e:ef:f3:69:1d:fb:fe:78:ec:
                    60:2f:51:fa:17:ad:c8:f9:db:d8:e6:dc:de:ad:b4:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E3:D5:BC:A1:9E:B8:56:4B:C6:BE:98:CF:BB:2B:8C:44:75:9D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6d77ea4d-41ab-3d6b-a2bb-0e31a997e164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:41:5a:c4:11:80:cf:9c:0d:ea:b1:a7:1f:45:a8:e6:bc:38:
         ad:a7:b6:bb:91:f6:a5:f1:a3:62:1e:02:5a:c7:5b:73:91:66:
         51:87:1c:11:ce:b2:a1:d1:c1:56:b4:ff:3d:0f:3f:9c:10:36:
         c2:37:da:ba:b6:2f:db:ea:38:39:de:7c:7d:d9:16:b6:9b:39:
         6a:80:87:0f:86:bf:de:32:6b:4a:c9:83:53:53:9c:c0:36:a8:
         e1:8d:00:11:14:4c:67:04:ff:ee:e1:f1:bb:31:c8:e2:7b:7b:
         6f:d4:7a:2c:56:9b:93:55:9d:1d:32:49:1a:18:6a:2b:76:14:
         73:ac:36:df:05:bd:c2:df:b0:e2:a0:ff:a1:88:47:73:1d:cd:
         a1:de:fd:45:8f:a1:08:0e:f7:fd:e0:76:b3:0c:b1:bd:cb:fb:
         fe:53:8f:ae:3c:dc:d5:29:18:7c:b4:5a:90:6e:ed:d9:86:f3:
         18:78:84:bd:c1:45:e7:66:52:c3:32:7b:91:5b:6c:63:a4:e4:
         ef:ba:c9:80:c6:00:a8:f3:dc:24:5d:60:c7:a5:1f:f1:0d:13:
         ec:eb:71:65:7c:7f:8a:26:51:b8:04:bb:3a:1f:fe:14:20:b7:
         f4:36:3b:0d:d6:ac:27:f7:1c:97:d6:e8:22:c4:0b:4f:17:03:
         9e:01:e3:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeuNrHEzyx3LGDHZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy
ZTA2MB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZmZjYjcxYTMtN2YwMC00OTRhLWI2YzItOWU5OGM3NmZkNjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdpiqAka3nCKmai0i8s85XMdYfq5ydQwWnpV
8kvFzj6iCHz2PqeZBPJdwZMYsgbYA8ntmezqtAyK8rbbXfBYMAXfOuS4mUXvBn7n
ZdW9mXU0/lQ3VvSoWOq80jxfq7YgW4rT/WFraBD1LO0a/z5f5wxCKlxmPcVqBRCv
GpvrQJ5Pb4nD1GRdNjhHzXg8WXS9HzEv9jXgOyYu6Gs+mMrSf4PLehQMKSkxSMLc
CkufojXBf+oGNYjKXt83griZs6ejhE5owmId3PqnTqbndgIDp2qRXq2wVS4FUnGw
bXZPaqZobp9+rIGe7/NpHfv+eOxgL1H6F63I+dvY5tzerbSTCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnj1byhnrhWS8a+mM+7K4xEdZ16MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk
NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNmQ3N2VhNGQtNDFhYi0z
ZDZiLWEyYmItMGUzMWE5OTdlMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0
YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm
MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0
OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5BWsQRgM+cDeqxpx9FqOa8OK2ntruR9qXxo2IeAlrHW3ORZlGHHBHO
sqHRwVa0/z0PP5wQNsI32rq2L9vqODnefH3ZFrabOWqAhw+Gv94ya0rJg1NTnMA2
qOGNABEUTGcE/+7h8bsxyOJ7e2/UeixWm5NVnR0ySRoYait2FHOsNt8FvcLfsOKg
/6GIR3MdzaHe/UWPoQgO9/3gdrMMsb3L+/5Tj6483NUpGHy0WpBu7dmG8xh4hL3B
RedmUsMye5FbbGOk5O+6yYDGAKjz3CRdYMelH/ENE+zrcWV8f4omUbgEuzof/hQg
t/Q2Ow3WrCf3HJfW6CLEC08XA54B4z8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org