Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa
File:                     f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa (raw, json)
Hash identifier:          pb8dwiPVIJHo11DUbbWx5Ma3nJ1b0TIsKw6QLLa2gDA=
Subject key identifier:   8D:AB:61:1B:75:BA:54:F9:B3:35:2E:12:09:81:7C:C0:7D:90:DC:1A
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F43285845C2DE3C91EAC8FEE63BCEFA00
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa
Signing time:             Sat 04 May 2024 13:00:35 +0000
ROA not before:           Sat 04 May 2024 13:00:35 +0000
ROA not after:            Fri 02 Aug 2024 13:00:35 +0000
asID:                     33442
IP address blocks:        149.23.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c2:de:3c:91:ea:c8:fe:e6:3b:ce:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: May  4 13:00:35 2024 GMT
            Not After : Aug  2 13:00:35 2024 GMT
        Subject: CN=630d9dd9-8ce4-4b7e-a4f6-246e5438ca76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:63:2b:6f:fc:09:6c:10:bc:59:c6:09:14:
                    8c:31:85:bd:fa:8c:a1:dc:54:bd:4d:0d:c7:8e:7b:
                    00:e3:57:e2:17:06:9c:b4:ba:99:c7:d8:ef:c4:09:
                    c0:f0:c7:88:ec:64:1c:31:e3:18:43:2f:5f:83:d8:
                    a0:61:77:cf:ca:ce:13:a4:3b:64:2a:0e:a1:f5:87:
                    48:04:b9:11:a9:dc:c8:86:bb:5c:ef:64:2b:3d:60:
                    42:0f:9d:8b:10:77:eb:ea:eb:8c:8a:4f:48:46:3b:
                    f2:ed:95:f1:ea:17:d2:46:5c:5e:db:45:a3:cc:93:
                    e3:cb:60:b9:6b:64:5d:c4:fb:9b:68:2c:e4:db:52:
                    0e:69:e5:32:5d:ec:34:fc:73:4e:a8:5a:53:9c:ca:
                    1a:8c:b5:33:d9:32:9e:b9:0f:f3:89:cb:d4:f9:83:
                    84:b0:7f:75:87:35:d7:40:d8:de:26:a9:21:03:4a:
                    c3:34:65:27:40:5e:86:01:3a:69:fa:32:b0:bc:21:
                    3f:66:ed:d5:fb:e9:b4:5d:41:d5:e2:4b:1f:72:4a:
                    a9:c2:4e:4b:80:a5:90:fc:00:da:0b:71:5c:da:c0:
                    42:38:ff:b8:06:39:da:aa:54:26:57:23:60:ca:7c:
                    21:8c:90:2b:d8:33:61:1c:fc:bc:a8:3b:0b:2c:d9:
                    30:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AB:61:1B:75:BA:54:F9:B3:35:2E:12:09:81:7C:C0:7D:90:DC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/f2dc8ac3-060a-37ba-b6c9-78827fca5907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4b:6a:d6:15:94:bb:a1:4b:37:36:ae:0e:3a:fc:e5:52:13:
         5c:3a:46:c1:10:af:1a:c0:c1:c0:5b:fc:ed:07:25:4f:41:80:
         17:70:9d:02:df:fe:0d:63:4f:12:6d:03:80:d8:45:9f:ff:6d:
         42:d7:f2:5d:74:21:f5:10:f1:91:54:54:4d:ea:32:16:7e:dc:
         9a:97:19:12:12:63:70:24:9d:3e:60:ac:01:63:36:95:8b:45:
         46:5b:c6:3e:a8:2c:fa:97:3c:01:e3:a6:a6:c0:89:8e:ac:8c:
         5f:03:34:eb:c7:b0:58:04:df:8f:d1:ca:a0:87:92:d2:ba:a5:
         07:ab:8a:88:1e:aa:a7:dc:67:97:a2:1c:f3:1e:3d:c9:2d:31:
         6e:95:51:4d:20:1b:28:3c:cf:ba:21:39:cf:8c:2c:c4:00:20:
         f8:0f:e3:90:1f:14:77:d9:93:18:c4:3c:bb:d1:ff:8e:ec:22:
         97:fe:75:19:7a:b1:3f:9c:f0:66:b9:75:b2:a4:03:0c:3f:08:
         57:d1:7a:b7:e6:bd:81:a7:c0:28:1d:34:39:81:f6:e2:9c:c2:
         02:08:ea:b3:fe:88:5d:3a:9f:d1:cc:f5:d6:ca:fb:20:3c:65:
         cf:bc:cb:6d:c9:ac:6e:a4:d8:51:98:d1:a6:82:31:30:25:f0:
         d8:69:10:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXC3jyR6sj+5jvO+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy
ZTA2MB4XDTI0MDUwNDEzMDAzNVoXDTI0MDgwMjEzMDAzNVowLzEtMCsGA1UEAxMk
NjMwZDlkZDktOGNlNC00YjdlLWE0ZjYtMjQ2ZTU0MzhjYTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfljK2/8CWwQvFnGCRSMMYW9+oyh3FS9TQ3H
jnsA41fiFwactLqZx9jvxAnA8MeI7GQcMeMYQy9fg9igYXfPys4TpDtkKg6h9YdI
BLkRqdzIhrtc72QrPWBCD52LEHfr6uuMik9IRjvy7ZXx6hfSRlxe20WjzJPjy2C5
a2RdxPubaCzk21IOaeUyXew0/HNOqFpTnMoajLUz2TKeuQ/zicvU+YOEsH91hzXX
QNjeJqkhA0rDNGUnQF6GATpp+jKwvCE/Zu3V++m0XUHV4ksfckqpwk5LgKWQ/ADa
C3Fc2sBCOP+4BjnaqlQmVyNgynwhjJAr2DNhHPy8qDsLLNkwcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2rYRt1ulT5szUuEgmBfMB9kNwaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk
NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvZjJkYzhhYzMtMDYwYS0z
N2JhLWI2YzktNzg4MjdmY2E1OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0
YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm
MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0
OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRd+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJLatYVlLuhSzc2rg46/OVSE1w6RsEQrxrAwcBb/O0HJU9BgBdwnQLf
/g1jTxJtA4DYRZ//bULX8l10IfUQ8ZFUVE3qMhZ+3JqXGRISY3AknT5grAFjNpWL
RUZbxj6oLPqXPAHjpqbAiY6sjF8DNOvHsFgE34/RyqCHktK6pQeriogeqqfcZ5ei
HPMePcktMW6VUU0gGyg8z7ohOc+MLMQAIPgP45AfFHfZkxjEPLvR/47sIpf+dRl6
sT+c8Ga5dbKkAww/CFfRerfmvYGnwCgdNDmB9uKcwgII6rP+iF06n9HM9dbK+yA8
Zc+8y23JrG6k2FGY0aaCMTAl8NhpEFk=
-----END CERTIFICATE-----
Generated at Fri May 10 16:40:04 2024 by rpki-client on console-ams.rpki-client.org