Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b06ea68-25c8-37c2-bfda-275e421cf11c.roa
File:                     0b06ea68-25c8-37c2-bfda-275e421cf11c.roa (raw, json)
Hash identifier:          9DhmZ43M9Hk5txcjWY4VnmNM5ZmWGFMaeMhT0iHJ6/Q=
Subject key identifier:   94:D1:4A:44:1B:6C:3D:69:06:80:D3:F8:2E:F5:4E:14:0C:50:FF:1D
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F43285845D503C92CC051AC44AD3DDD20
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b06ea68-25c8-37c2-bfda-275e421cf11c.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     47050
IP address blocks:        173.224.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c9:2c:c0:51:ac:44:ad:3d:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=29b32714-2d70-48bb-899d-8c0ee032efe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:54:1d:08:15:51:12:09:c0:d2:67:a3:d0:a3:
                    00:5f:c0:65:91:d5:1d:b1:97:04:89:ca:e4:05:c3:
                    d9:25:eb:11:11:3d:94:d4:b4:54:74:93:17:06:4c:
                    95:59:be:27:d9:83:e7:65:3b:e9:60:23:ac:3c:b8:
                    05:4b:e0:51:7a:32:b2:3e:93:5c:fd:86:6f:4b:1e:
                    12:f2:5d:59:4e:32:1a:93:c9:30:c6:b5:1f:e4:1d:
                    5c:c1:b6:c4:41:90:4a:09:7b:79:5a:52:fa:12:e7:
                    39:b3:1f:fb:27:2c:a1:f4:bb:b1:06:aa:26:9c:a0:
                    d2:8f:2e:0a:dd:6b:f2:db:61:08:fb:ed:df:6d:c2:
                    63:d7:00:cc:8e:bb:af:ac:36:ce:81:37:e9:8d:90:
                    06:8a:86:de:c2:b7:ec:6e:3c:09:28:8a:d0:09:74:
                    be:70:83:b5:e1:eb:98:e3:37:a3:e3:3e:c2:40:a7:
                    85:88:6c:be:fa:db:b4:ee:54:e1:ff:a6:cf:a8:7b:
                    f1:41:88:a9:c3:8b:44:aa:04:14:e6:d1:f9:2b:f0:
                    88:50:c2:69:34:07:d1:98:27:ca:66:e6:75:ad:66:
                    4e:ed:55:2a:76:2e:f7:0f:87:38:7e:4f:c4:a5:24:
                    3d:7d:4b:57:3b:d7:9d:83:0c:40:43:3f:60:c6:85:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D1:4A:44:1B:6C:3D:69:06:80:D3:F8:2E:F5:4E:14:0C:50:FF:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b06ea68-25c8-37c2-bfda-275e421cf11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:67:27:e4:80:42:8e:eb:71:45:ea:a5:b4:b3:40:f9:56:f2:
         5d:b2:ee:b9:14:08:7c:28:67:31:7a:56:08:99:ca:69:58:3e:
         08:b7:3f:34:46:23:1f:96:f9:26:b3:58:bf:25:ab:1e:0b:df:
         ee:6d:76:ac:9e:bc:76:dc:5f:fb:e5:e5:3a:6e:b9:af:73:a1:
         e2:de:39:48:e0:78:7f:d6:b5:71:ec:54:d4:fc:93:e7:0e:77:
         be:7c:9b:6f:cc:80:f9:dc:18:ad:74:92:c7:eb:2c:e9:08:c6:
         4a:20:22:57:01:6a:5e:cc:fe:12:aa:b9:41:fc:4b:76:c1:9d:
         27:e3:48:3b:f4:0f:e5:30:80:ad:43:d6:35:0d:06:c0:16:64:
         9d:7e:d6:d8:3f:40:4c:89:a0:92:de:ed:49:b4:31:15:24:a0:
         6c:c0:7d:49:03:bd:cc:11:29:2c:4e:6d:c0:b3:a2:49:b4:c3:
         b5:19:07:62:88:82:b2:1a:88:26:2f:ca:6d:95:7d:b3:7b:63:
         27:8a:70:3f:04:81:37:6e:97:58:63:82:4c:8e:09:1e:8e:bc:
         bf:be:8e:59:10:90:b8:eb:77:d4:3d:22:49:07:8e:92:95:9a:
         7c:5d:62:05:10:6f:a2:2a:ce:21:f3:81:93:c8:52:4a:4d:82:
         96:80:59:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA8kswFGsRK093SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI1ZjJkYWYtN2Q3YS00ODQ4LWJiZDItMDU1ZjQzYWU4
OTcwMB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
MjliMzI3MTQtMmQ3MC00OGJiLTg5OWQtOGMwZWUwMzJlZmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVQdCBVREgnA0mej0KMAX8BlkdUdsZcEicrk
BcPZJesRET2U1LRUdJMXBkyVWb4n2YPnZTvpYCOsPLgFS+BRejKyPpNc/YZvSx4S
8l1ZTjIak8kwxrUf5B1cwbbEQZBKCXt5WlL6Euc5sx/7Jyyh9LuxBqomnKDSjy4K
3Wvy22EI++3fbcJj1wDMjruvrDbOgTfpjZAGiobewrfsbjwJKIrQCXS+cIO14euY
4zej4z7CQKeFiGy++tu07lTh/6bPqHvxQYipw4tEqgQU5tH5K/CIUMJpNAfRmCfK
ZuZ1rWZO7VUqdi73D4c4fk/EpSQ9fUtXO9edgwxAQz9gxoVZFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTRSkQbbD1pBoDT+C71ThQMUP8dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVm
MmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVmNDNhZTg5NzAvMGIwNmVhNjgtMjVjOC0z
N2MyLWJmZGEtMjc1ZTQyMWNmMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGI1ZjJkYWYtN2Q3YS00ODQ4LWJi
ZDItMDU1ZjQzYWU4OTcwLzBiNWYyZGFmLTdkN2EtNDg0OC1iYmQyLTA1NWY0M2Fl
ODk3MC5jcmwwHwYDVR0jBBgwFoAUMZIFdzydzonOld5Ql69DAR5Wb+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVmMmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVm
NDNhZTg5NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreBUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdnJ+SAQo7rcUXqpbSzQPlW8l2y7rkUCHwoZzF6VgiZymlYPgi3PzRG
Ix+W+SazWL8lqx4L3+5tdqyevHbcX/vl5Tpuua9zoeLeOUjgeH/WtXHsVNT8k+cO
d758m2/MgPncGK10ksfrLOkIxkogIlcBal7M/hKquUH8S3bBnSfjSDv0D+UwgK1D
1jUNBsAWZJ1+1tg/QEyJoJLe7Um0MRUkoGzAfUkDvcwRKSxObcCzokm0w7UZB2KI
grIaiCYvym2VfbN7YyeKcD8EgTdul1hjgkyOCR6OvL++jlkQkLjrd9Q9IkkHjpKV
mnxdYgUQb6IqziHzgZPIUkpNgpaAWaQ=
-----END CERTIFICATE-----
Generated at Sun May 12 19:09:55 2024 by rpki-client on console-ams.rpki-client.org