Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/61d90c80-c9a3-3af4-946a-30352c46c7e0.roa
File:                     61d90c80-c9a3-3af4-946a-30352c46c7e0.roa (raw, json)
Hash identifier:          DZ4Z8WrZaNoSTHjh+HrrImr7ml6V3nZ8o2CeWBtjinE=
Subject key identifier:   B3:02:41:23:72:5B:AC:41:82:1E:30:E6:31:6F:56:47:8D:71:9F:CC
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F432858471A406E66ABD9E4F25D3C0A80
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/61d90c80-c9a3-3af4-946a-30352c46c7e0.roa
Signing time:             Wed 04 Sep 2024 13:00:41 +0000
ROA not before:           Wed 04 Sep 2024 13:00:41 +0000
ROA not after:            Tue 03 Dec 2024 14:00:41 +0000
asID:                     19281
IP address blocks:        149.112.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:40:6e:66:ab:d9:e4:f2:5d:3c:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Sep  4 13:00:41 2024 GMT
            Not After : Dec  3 14:00:41 2024 GMT
        Subject: CN=2883efb4-43af-4ece-8b3b-c05f6f5218f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:c1:09:f8:54:6b:5d:ac:17:6a:6a:2e:53:
                    e4:e6:cc:90:bf:a5:a4:a5:a1:8c:da:59:ab:85:6b:
                    57:27:a0:1e:4b:34:9f:0e:1d:96:a0:c7:89:87:5c:
                    7b:e3:67:fb:70:a8:be:d9:f7:cc:4e:e1:8b:67:e2:
                    d4:33:35:f7:b6:8c:4b:c7:a7:ca:7a:21:1c:00:1d:
                    04:82:0e:77:ca:20:f3:d5:06:96:4f:62:55:c6:b1:
                    65:53:26:2b:97:5a:11:ab:8a:05:58:76:35:eb:98:
                    3a:0b:5b:03:db:dc:7e:1c:08:fb:7d:f8:04:d4:d3:
                    64:3f:ae:68:65:b1:60:2f:af:01:8d:58:bc:9e:76:
                    05:cc:ee:72:41:c7:82:cd:3b:b9:2b:b4:14:a6:15:
                    ac:a2:2a:b3:78:5e:a2:8a:64:38:e0:05:36:d4:5b:
                    d2:08:26:85:f7:bf:f3:53:93:6b:56:a7:cd:65:50:
                    b1:a6:27:fb:13:cf:91:d0:7f:a3:ab:fb:40:9d:f4:
                    26:fa:4b:03:91:4b:fb:93:80:ff:58:cf:b5:f1:c5:
                    1f:10:5e:9c:71:de:15:46:8d:a3:a9:b0:66:b8:5f:
                    a6:99:84:92:49:19:bc:ad:34:a2:03:74:63:de:c2:
                    82:f1:d8:d8:d9:d4:6d:a4:48:31:73:1a:f9:29:7b:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:41:23:72:5B:AC:41:82:1E:30:E6:31:6F:56:47:8D:71:9F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/61d90c80-c9a3-3af4-946a-30352c46c7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c4:d9:f0:92:44:58:d8:67:5a:78:77:2f:f7:74:a1:ab:af:
         8b:c2:1e:f9:73:c6:ad:58:f1:bc:a5:a5:2e:52:c3:6e:5f:20:
         96:0c:e2:9a:1a:b1:f0:9e:ae:91:29:56:39:2d:4f:65:e5:54:
         2a:cb:ed:df:b7:e6:a1:c3:fd:c5:43:d4:2b:23:6c:06:c3:d5:
         96:6c:32:1f:4d:2a:cb:e4:ce:2d:d3:71:7c:2b:a1:bb:75:7c:
         a9:b4:f2:ca:57:37:84:60:93:d1:5f:e7:3a:76:d9:ce:70:f4:
         30:1d:96:ce:a6:10:4c:5b:3f:d9:64:f0:04:59:09:65:b5:99:
         ff:52:48:09:39:3c:d3:3a:d1:e4:2c:93:0c:35:9b:1c:6f:ed:
         fe:17:00:34:c2:0c:a4:91:c1:9f:67:fa:84:bc:42:6a:b3:94:
         40:60:7c:43:a8:3d:e4:69:6c:95:54:c6:5c:74:87:fb:4c:d1:
         51:06:1d:81:d0:f5:c2:42:27:aa:1c:2a:97:bd:4d:13:06:a4:
         a2:8c:1d:a4:01:2f:ec:24:b6:2e:ff:32:24:cd:31:e0:41:6f:
         01:3e:95:4a:c3:20:78:70:36:bb:20:63:3f:30:f1:ea:0f:25:
         f1:fb:18:10:ab:52:50:a5:69:21:d5:17:83:60:0f:8a:80:8f:
         82:e8:74:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcaQG5mq9nk8l08CoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThmY2VmMzEtYmM2MS00MjE3LWE2NDgtMmQ1YmIwMGM5
M2E5MB4XDTI0MDkwNDEzMDA0MVoXDTI0MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk
Mjg4M2VmYjQtNDNhZi00ZWNlLThiM2ItYzA1ZjZmNTIxOGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l7BCfhUa12sF2pqLlPk5syQv6WkpaGM2lmr
hWtXJ6AeSzSfDh2WoMeJh1x742f7cKi+2ffMTuGLZ+LUMzX3toxLx6fKeiEcAB0E
gg53yiDz1QaWT2JVxrFlUyYrl1oRq4oFWHY165g6C1sD29x+HAj7ffgE1NNkP65o
ZbFgL68BjVi8nnYFzO5yQceCzTu5K7QUphWsoiqzeF6iimQ44AU21FvSCCaF97/z
U5NrVqfNZVCxpif7E8+R0H+jq/tAnfQm+ksDkUv7k4D/WM+18cUfEF6ccd4VRo2j
qbBmuF+mmYSSSRm8rTSiA3Rj3sKC8djY2dRtpEgxcxr5KXsKBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMCQSNyW6xBgh4w5jFvVkeNcZ/MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZj
ZWYzMS1iYzYxLTQyMTctYTY0OC0yZDViYjAwYzkzYTkvNjFkOTBjODAtYzlhMy0z
YWY0LTk0NmEtMzAzNTJjNDZjN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNThmY2VmMzEtYmM2MS00MjE3LWE2
NDgtMmQ1YmIwMGM5M2E5LzU4ZmNlZjMxLWJjNjEtNDIxNy1hNjQ4LTJkNWJiMDBj
OTNhOS5jcmwwHwYDVR0jBBgwFoAUVLP5RXnTuHPWUn9Y82AjBARQS2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OGZjZWYzMS1iYzYxLTQyMTctYTY0OC0yZDVi
YjAwYzkzYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7E2fCSRFjYZ1p4dy/3dKGrr4vCHvlzxq1Y8bylpS5Sw25fIJYM4poa
sfCerpEpVjktT2XlVCrL7d+35qHD/cVD1CsjbAbD1ZZsMh9NKsvkzi3TcXwrobt1
fKm08spXN4Rgk9Ff5zp22c5w9DAdls6mEExbP9lk8ARZCWW1mf9SSAk5PNM60eQs
kww1mxxv7f4XADTCDKSRwZ9n+oS8QmqzlEBgfEOoPeRpbJVUxlx0h/tM0VEGHYHQ
9cJCJ6ocKpe9TRMGpKKMHaQBL+wkti7/MiTNMeBBbwE+lUrDIHhwNrsgYz8w8eoP
JfH7GBCrUlClaSHVF4NgD4qAj4LodNc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:49 2024 by rpki-client on console-ams.rpki-client.org