Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd21e95-254e-3f70-8cdc-06ccb6b1ba20.roa
File:                     2cd21e95-254e-3f70-8cdc-06ccb6b1ba20.roa (raw, json)
Hash identifier:          bvjxsYMyAD+B0GarQTeGs0LtUS2CTWm81PvxaNvx7PA=
Subject key identifier:   AE:3D:35:5A:07:B6:73:E8:95:01:B3:4D:56:90:6F:91:30:1F:1C:20
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB0872362015E35AF742840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd21e95-254e-3f70-8cdc-06ccb6b1ba20.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7922
IP address blocks:        24.30.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:87:23:62:01:5e:35:af:74:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=fb0082c1-cc10-4a34-a5da-c6254f6e00bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:99:cd:88:43:d6:f2:2b:bb:28:47:b5:d5:
                    e9:bd:55:71:4a:bd:1e:09:a6:37:17:9d:92:40:a2:
                    d3:20:42:09:12:c2:b5:39:6d:29:bf:54:2c:8f:0b:
                    1a:5f:cb:6f:7b:8e:b5:7e:df:a2:cb:f8:52:c2:a2:
                    3f:0e:35:66:2c:68:96:70:f8:09:c8:e7:eb:5b:f9:
                    45:97:ef:aa:cb:a5:0f:b5:ba:9f:73:a1:56:e2:38:
                    3d:0b:43:14:66:04:23:2a:51:76:bf:49:33:f1:e8:
                    ac:71:2b:88:ce:9a:e1:4c:75:7f:1c:1d:a4:e4:a2:
                    00:7f:c0:86:e5:a0:e5:2a:00:f6:73:e4:48:b9:85:
                    f5:c3:60:51:35:a2:fe:29:d4:71:01:ed:77:e5:aa:
                    af:00:a5:49:bf:78:74:63:ad:b7:72:47:bf:3a:0c:
                    93:c5:8a:b2:73:5c:4c:26:bb:0c:fe:5d:ba:7b:3b:
                    9a:8d:03:1e:fb:6a:d2:de:9c:e9:95:7b:fc:d5:1e:
                    b4:25:bf:76:cf:e6:74:e5:62:6f:43:83:84:4a:4f:
                    b3:3a:c3:bc:d2:4a:d0:4d:98:39:37:b8:71:54:ed:
                    3b:0a:25:4a:31:aa:7a:5d:34:fd:49:28:fd:2e:75:
                    9f:05:ef:d3:44:4d:bd:77:1c:d3:95:8b:66:dd:35:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:35:5A:07:B6:73:E8:95:01:B3:4D:56:90:6F:91:30:1F:1C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cd21e95-254e-3f70-8cdc-06ccb6b1ba20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.30.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0d:3c:81:96:3d:8d:6c:75:81:5c:da:a3:1b:28:b9:e3:ce:
         af:d0:34:b6:d2:9c:43:9b:f4:44:59:d9:03:2e:45:0e:b6:e0:
         73:98:59:51:77:a2:0f:6e:b3:1b:81:84:48:31:18:55:59:f1:
         ec:f6:89:0e:87:87:28:a2:8e:dc:49:09:b0:af:25:53:15:9d:
         43:fd:7d:c5:06:6a:f8:b2:35:aa:a9:c2:ae:79:2d:9f:c0:ab:
         e2:0e:bc:d5:ae:39:b0:2f:7c:e3:79:58:ae:53:9e:ce:aa:b1:
         97:35:32:c6:cf:8c:dd:c3:34:e1:19:d3:2c:ce:50:21:74:21:
         63:37:d6:c8:0f:f3:a4:f3:78:43:63:e6:ed:50:34:22:15:71:
         cc:4e:f8:0e:18:8b:75:2d:ab:76:5b:c0:f9:13:9c:68:d0:66:
         60:23:aa:b9:28:4d:8d:fd:f8:f3:8e:0d:81:cf:ff:9d:9a:3d:
         a0:34:23:56:2a:87:e3:d5:93:66:3a:4e:57:e1:33:b4:61:f1:
         38:56:ed:1a:b3:5c:35:ca:c0:9e:71:24:f8:f7:12:ef:72:94:
         9b:f8:e8:81:07:9e:30:4f:8d:4c:df:bd:a7:e0:8e:7b:5c:ab:
         57:6f:a4:cc:c6:97:b2:18:11:43:f5:56:4b:ba:11:70:cc:59:
         50:e2:57:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfsIcjYgFeNa90KEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
ZmIwMDgyYzEtY2MxMC00YTM0LWE1ZGEtYzYyNTRmNmUwMGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEeZzYhD1vIruyhHtdXpvVVxSr0eCaY3F52S
QKLTIEIJEsK1OW0pv1QsjwsaX8tve461ft+iy/hSwqI/DjVmLGiWcPgJyOfrW/lF
l++qy6UPtbqfc6FW4jg9C0MUZgQjKlF2v0kz8eiscSuIzprhTHV/HB2k5KIAf8CG
5aDlKgD2c+RIuYX1w2BRNaL+KdRxAe135aqvAKVJv3h0Y623cke/OgyTxYqyc1xM
JrsM/l26ezuajQMe+2rS3pzplXv81R60Jb92z+Z05WJvQ4OESk+zOsO80krQTZg5
N7hxVO07CiVKMap6XTT9SSj9LnWfBe/TRE29dxzTlYtm3TXGlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK49NVoHtnPolQGzTVaQb5EwHxwgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNkMjFlOTUtMjU0ZS0z
ZjcwLThjZGMtMDZjY2I2YjFiYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGB4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwNPIGWPY1sdYFc2qMbKLnjzq/QNLbSnEOb9ERZ2QMuRQ624HOYWVF3
og9usxuBhEgxGFVZ8ez2iQ6HhyiijtxJCbCvJVMVnUP9fcUGaviyNaqpwq55LZ/A
q+IOvNWuObAvfON5WK5Tns6qsZc1MsbPjN3DNOEZ0yzOUCF0IWM31sgP86TzeENj
5u1QNCIVccxO+A4Yi3Utq3ZbwPkTnGjQZmAjqrkoTY39+POODYHP/52aPaA0I1Yq
h+PVk2Y6TlfhM7Rh8ThW7RqzXDXKwJ5xJPj3Eu9ylJv46IEHnjBPjUzfvafgjntc
q1dvpMzGl7IYEUP1Vku6EXDMWVDiV0g=
-----END CERTIFICATE-----
Generated at Fri May 3 14:57:02 2024 by rpki-client on console-fra.rpki-client.org