Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/988e0b4e-3240-396d-97e0-830a846df2b8.roa
File:                     988e0b4e-3240-396d-97e0-830a846df2b8.roa (raw, json)
Hash identifier:          8kp+0eInj84pqogOvexQEHLLIGDP1uqsvmwBPMObuLc=
Subject key identifier:   C4:8C:C4:5C:87:9C:54:09:86:5B:9C:80:6F:D6:EA:EB:22:9E:AF:D2
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F432858424E60A49F6CED0FBB7C982E40
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/988e0b4e-3240-396d-97e0-830a846df2b8.roa
Signing time:             Wed 21 Jun 2023 12:00:00 +0000
ROA not before:           Wed 21 Jun 2023 12:00:00 +0000
ROA not after:            Sat 09 Aug 2025 04:00:00 +0000
asID:                     9823
IP address blocks:        159.182.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:60:a4:9f:6c:ed:0f:bb:7c:98:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jun 21 12:00:00 2023 GMT
            Not After : Aug  9 04:00:00 2025 GMT
        Subject: CN=9a67dbee-2b4a-40c0-87f5-dee973e04c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:38:64:8b:84:92:96:bb:d9:74:2a:76:34:
                    6e:08:20:20:d1:9f:d1:45:4c:cd:12:43:1c:da:06:
                    8d:d7:39:f5:57:87:81:2b:1f:b6:20:22:27:70:da:
                    b2:2b:4e:a7:2d:97:48:75:8a:6c:13:2b:2b:20:0d:
                    96:59:18:d7:e0:7e:20:a9:c9:19:1a:ce:9b:bf:3e:
                    be:9a:e2:35:05:a9:96:13:2c:5c:47:a3:a5:80:88:
                    ef:08:d4:bd:ab:ac:7c:a3:d7:8e:a5:af:4b:c6:c0:
                    53:73:df:53:ff:d4:b8:ef:f8:bc:49:f0:ba:d2:ed:
                    8a:1c:b7:88:69:9f:45:f3:a8:63:5b:52:e2:4d:18:
                    9b:39:86:7f:95:7e:61:cd:e1:21:b5:af:5e:ab:cc:
                    de:e1:b6:b4:df:92:b9:7d:43:e0:33:39:4e:6c:07:
                    28:c9:c1:aa:9d:d1:a6:26:78:ea:79:b2:79:81:f1:
                    ea:ce:ee:6f:e1:ca:1b:e1:9d:fe:a0:8c:5e:5a:ac:
                    ba:cb:99:e3:e5:b6:15:3c:5b:d9:cb:75:b9:ea:64:
                    32:8e:5f:5b:aa:87:7e:f8:00:5e:6e:02:3d:09:27:
                    28:0b:4d:64:a2:56:c3:1e:35:7e:fb:9e:90:89:82:
                    a5:80:97:7c:76:63:48:c8:e4:fa:42:0e:34:37:34:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:C4:5C:87:9C:54:09:86:5B:9C:80:6F:D6:EA:EB:22:9E:AF:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/988e0b4e-3240-396d-97e0-830a846df2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:67:3b:d5:7d:5a:85:7d:58:a4:fb:c4:bd:4a:99:ea:44:
         66:ec:69:ef:ca:fd:37:5b:d8:22:d0:cb:9a:74:37:8b:07:ac:
         05:a8:eb:29:12:60:5c:fc:b0:9d:96:d9:b4:5e:d7:67:83:88:
         05:59:c7:64:9b:f5:8a:ab:91:02:dc:46:03:7d:c8:1e:66:f8:
         82:d2:b0:bc:5e:4f:c3:8c:64:87:9e:4c:79:96:34:72:fb:15:
         c4:4c:8c:22:90:ca:b2:7d:03:43:59:fa:29:1f:c7:69:06:1c:
         8a:59:b7:d9:a2:21:c0:54:50:66:df:ec:1c:35:31:00:33:9c:
         d3:05:58:7f:48:34:2f:9c:f2:f4:9b:fb:06:af:72:a0:e8:01:
         c2:7f:3f:07:cc:04:ae:bd:2b:94:39:dc:5f:0f:e7:f0:3e:e7:
         ac:67:fe:81:9c:f2:1a:e3:a8:0b:6a:25:ee:31:6d:38:f2:08:
         d9:ea:7b:6e:6e:2c:ca:ae:bb:c0:a1:e9:7d:3c:db:2c:f4:02:
         8d:3e:35:06:96:ad:0d:29:01:62:46:44:0c:91:3b:8f:f3:1c:
         30:76:bb:75:62:8c:94:28:58:8a:dc:b7:b7:55:5a:91:09:2e:
         7a:10:2a:3d:1f:aa:67:d7:ba:65:79:71:e3:da:7a:fd:70:14:
         4f:19:c4:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJOYKSfbO0Pu3yYLkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw
ZDhlMB4XDTIzMDYyMTEyMDAwMFoXDTI1MDgwOTA0MDAwMFowLzEtMCsGA1UEAxMk
OWE2N2RiZWUtMmI0YS00MGMwLTg3ZjUtZGVlOTczZTA0YzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD44ZIuEkpa72XQqdjRuCCAg0Z/RRUzNEkMc
2gaN1zn1V4eBKx+2ICIncNqyK06nLZdIdYpsEysrIA2WWRjX4H4gqckZGs6bvz6+
muI1BamWEyxcR6OlgIjvCNS9q6x8o9eOpa9LxsBTc99T/9S47/i8SfC60u2KHLeI
aZ9F86hjW1LiTRibOYZ/lX5hzeEhta9eq8ze4ba035K5fUPgMzlObAcoycGqndGm
JnjqebJ5gfHqzu5v4cob4Z3+oIxeWqy6y5nj5bYVPFvZy3W56mQyjl9bqod++ABe
bgI9CScoC01kolbDHjV++56QiYKlgJd8dmNIyOT6Qg40NzRudQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSMxFyHnFQJhlucgG/W6usinq/SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj
ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvOTg4ZTBiNGUtMzI0MC0z
OTZkLTk3ZTAtODMwYTg0NmRmMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk
MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2
MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk
NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn7YxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZvZzvVfVqFfVik+8S9SpnqRGbsae/K/Tdb2CLQy5p0N4sHrAWo6ykS
YFz8sJ2W2bRe12eDiAVZx2Sb9YqrkQLcRgN9yB5m+ILSsLxeT8OMZIeeTHmWNHL7
FcRMjCKQyrJ9A0NZ+ikfx2kGHIpZt9miIcBUUGbf7Bw1MQAznNMFWH9INC+c8vSb
+wavcqDoAcJ/PwfMBK69K5Q53F8P5/A+56xn/oGc8hrjqAtqJe4xbTjyCNnqe25u
LMquu8Ch6X082yz0Ao0+NQaWrQ0pAWJGRAyRO4/zHDB2u3VijJQoWIrct7dVWpEJ
LnoQKj0fqmfXumV5cePaev1wFE8ZxIo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:56:20 2024 by rpki-client on console-fra.rpki-client.org