Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa
File:                     78e1a8de-e628-3875-8faa-140c188a17e8.roa (raw, json)
Hash identifier:          4gJP/+vzDqD5oUUGw6siJvBw0LuytSPi8BymhAaK3+8=
Subject key identifier:   9F:EE:D0:4E:0F:C3:BA:6D:5A:7F:BA:82:60:7D:47:55:EE:51:65:7C
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328584552D7BD3DAA6DA508B0838500
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa
Signing time:             Mon 25 Mar 2024 09:57:03 +0000
ROA not before:           Mon 25 Mar 2024 09:57:03 +0000
ROA not after:            Sun 23 Jun 2024 09:57:03 +0000
asID:                     150452
IP address blocks:        103.28.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:52:d7:bd:3d:aa:6d:a5:08:b0:83:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Mar 25 09:57:03 2024 GMT
            Not After : Jun 23 09:57:03 2024 GMT
        Subject: CN=86ffbbde-0f53-4b35-beba-88efe3f6a933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:9a:56:55:e8:54:62:34:99:cd:6a:54:a1:
                    0b:4d:08:5d:5e:cd:da:ba:e5:7c:a1:22:8f:5e:75:
                    0e:41:7c:da:fa:8e:81:93:d1:41:79:b1:54:25:0d:
                    bd:6a:ee:19:a4:ee:05:85:64:25:1a:d5:58:5e:7f:
                    9a:94:45:4d:0a:2c:c8:ad:cb:ad:c3:85:4a:c3:98:
                    51:8e:80:13:07:25:1d:79:b2:60:1b:ac:9b:22:92:
                    4c:de:db:61:44:13:a7:7f:ab:19:6e:3e:df:ca:fc:
                    23:3c:19:9b:9f:08:93:d5:09:e5:ed:b2:d2:74:22:
                    07:0f:be:66:3d:be:2d:20:22:1c:51:ae:0a:98:ac:
                    a2:58:e6:2c:14:c2:fd:e1:fd:38:ab:38:0d:b6:6c:
                    02:84:da:ab:a2:6d:05:81:36:a7:b4:d3:d5:c1:4c:
                    f8:fb:22:de:c7:df:b6:bb:d8:b5:21:85:68:0f:49:
                    73:da:a1:4c:19:d9:46:00:c6:3e:5b:1c:5e:65:c1:
                    79:99:cf:f5:4e:bd:16:be:59:af:cd:67:bb:99:c4:
                    09:05:3a:13:0c:c6:e1:87:45:7d:46:44:03:d4:b9:
                    47:28:52:17:17:2f:ba:64:58:f8:ce:64:09:9c:25:
                    85:4d:ec:f8:31:e4:9d:4b:8c:19:c9:63:cb:c1:07:
                    41:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EE:D0:4E:0F:C3:BA:6D:5A:7F:BA:82:60:7D:47:55:EE:51:65:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:1a:e8:8d:f6:ab:54:4d:44:ef:cd:8d:ef:f9:99:32:4b:3f:
         ad:93:59:33:fd:d1:44:b6:82:36:74:e1:a9:42:57:42:a1:48:
         88:a8:a4:c8:f0:dd:53:c5:d7:6b:1a:5b:c2:cf:c7:82:cc:61:
         17:eb:fa:e5:4c:69:6c:c1:d6:a9:2d:a3:6c:e6:fe:34:37:42:
         e6:57:c8:62:1c:eb:d7:54:f0:76:ba:50:4a:8e:7c:c9:da:02:
         73:69:32:83:de:bb:56:3e:49:25:81:81:07:fb:b2:1d:26:e7:
         a2:b3:b2:79:ed:f6:e9:58:5d:54:69:d0:ed:b4:94:60:08:40:
         4c:b5:c5:4c:85:a8:e1:68:27:12:1f:2c:01:af:a4:0e:86:18:
         e4:46:24:62:87:9d:ef:17:92:a5:0d:8d:1c:6f:24:fe:05:db:
         40:b4:58:e4:86:dd:40:3c:ce:a6:39:da:fa:cd:9d:a2:6e:8d:
         8d:33:ca:59:d9:ad:52:6c:5c:5e:57:60:76:20:c6:4f:1a:97:
         b2:c2:ce:51:7c:ae:e6:0f:d8:2c:0f:d9:a8:57:79:60:19:84:
         23:4b:08:20:81:cc:6d:1c:e8:8c:c8:ff:f5:13:2f:3f:64:38:
         7f:4c:5e:a3:44:ee:e2:08:75:a3:d3:7f:4a:92:a6:62:db:44:
         af:bb:c8:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVS1709qm2lCLCDhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3
NGJjMB4XDTI0MDMyNTA5NTcwM1oXDTI0MDYyMzA5NTcwM1owLzEtMCsGA1UEAxMk
ODZmZmJiZGUtMGY1My00YjM1LWJlYmEtODhlZmUzZjZhOTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdKaVlXoVGI0mc1qVKELTQhdXs3auuV8oSKP
XnUOQXza+o6Bk9FBebFUJQ29au4ZpO4FhWQlGtVYXn+alEVNCizIrcutw4VKw5hR
joATByUdebJgG6ybIpJM3tthRBOnf6sZbj7fyvwjPBmbnwiT1Qnl7bLSdCIHD75m
Pb4tICIcUa4KmKyiWOYsFML94f04qzgNtmwChNqrom0FgTantNPVwUz4+yLex9+2
u9i1IYVoD0lz2qFMGdlGAMY+WxxeZcF5mc/1Tr0WvlmvzWe7mcQJBToTDMbhh0V9
RkQD1LlHKFIXFy+6ZFj4zmQJnCWFTez4MeSdS4wZyWPLwQdBmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/u0E4Pw7ptWn+6gmB9R1XuUWV8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2
NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvNzhlMWE4ZGUtZTYyOC0z
ODc1LThmYWEtMTQwYzE4OGExN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm
MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl
NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5
NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHwa6I32q1RNRO/Nje/5mTJLP62TWTP90US2gjZ04alCV0KhSIiopMjw
3VPF12saW8LPx4LMYRfr+uVMaWzB1qkto2zm/jQ3QuZXyGIc69dU8Ha6UEqOfMna
AnNpMoPeu1Y+SSWBgQf7sh0m56Kzsnnt9ulYXVRp0O20lGAIQEy1xUyFqOFoJxIf
LAGvpA6GGORGJGKHne8XkqUNjRxvJP4F20C0WOSG3UA8zqY52vrNnaJujY0zylnZ
rVJsXF5XYHYgxk8al7LCzlF8ruYP2CwP2ahXeWAZhCNLCCCBzG0c6IzI//UTLz9k
OH9MXqNE7uIIdaPTf0qSpmLbRK+7yGM=
-----END CERTIFICATE-----
Generated at Sat May 4 14:43:44 2024 by rpki-client on console-fra.rpki-client.org