Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/e3285cb7-c582-3d33-8de3-9aca150609c6.roa
File:                     e3285cb7-c582-3d33-8de3-9aca150609c6.roa (raw, json)
Hash identifier:          /PD88GApB05muvmLMcJTUODwpOyQYbbe5h8zfd/TYhk=
Subject key identifier:   B5:6D:D1:D5:37:B6:36:6D:13:F4:FB:48:F2:CF:0F:24:FB:D4:E7:DD
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F432858472405C560B03A3C91E4FF8880
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/e3285cb7-c582-3d33-8de3-9aca150609c6.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        69.72.42.0/24 maxlen: 24
                          69.72.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c5:60:b0:3a:3c:91:e4:ff:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=b74d17e5-8b00-496d-a0ac-1742aad35239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:78:7b:cb:78:b6:ef:2a:2d:dd:d6:43:72:
                    ce:7f:c3:d2:ba:cf:d3:8c:5f:ab:fb:3a:db:2c:5d:
                    df:95:5d:88:b9:73:7f:73:86:43:9a:93:81:7a:8c:
                    59:af:16:bb:95:f8:f0:f6:aa:55:0b:a4:3f:65:50:
                    92:86:a6:5c:db:af:18:93:c7:04:c0:b5:a7:78:3e:
                    32:f0:d0:9c:9e:8b:c4:52:08:c4:b4:2f:92:34:64:
                    af:12:06:e1:89:c2:3e:93:4d:ad:13:43:0b:59:59:
                    34:0a:ff:75:30:ef:e8:f7:dc:3d:1a:ad:e5:d4:ed:
                    6c:f7:f2:56:4b:6b:e1:bf:78:c4:dc:71:1b:e2:21:
                    49:37:cc:85:96:72:6c:23:93:db:b8:1d:87:fe:31:
                    d3:43:9a:02:85:63:76:20:56:12:10:27:f2:1e:62:
                    47:1d:09:ca:ff:ce:ca:90:bd:1e:d7:1a:49:7a:61:
                    3e:ac:30:9d:76:91:d6:82:f2:9e:79:52:8c:00:4d:
                    ce:95:a4:31:71:b9:9a:b7:1f:18:0b:88:c4:36:ca:
                    2c:dc:ee:4b:91:f0:d5:35:9e:04:ef:9b:fc:d4:a4:
                    aa:5a:cb:59:09:e2:ed:a0:5d:20:73:92:ec:c4:fe:
                    3d:73:9b:b9:6f:63:67:e7:8b:f7:e7:44:0c:84:e6:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6D:D1:D5:37:B6:36:6D:13:F4:FB:48:F2:CF:0F:24:FB:D4:E7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/e3285cb7-c582-3d33-8de3-9aca150609c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:24:19:4d:53:ee:65:2f:71:8f:0c:0f:fa:9b:49:ef:46:f1:
         74:25:51:9d:bf:02:96:ca:da:e2:90:49:ac:fb:6d:50:7b:a5:
         ce:28:9e:dc:39:0b:0f:d1:94:2b:82:af:3d:16:c7:b3:33:59:
         84:de:54:3e:da:7e:ca:48:c0:93:4d:83:76:5d:2d:cb:1d:f3:
         4d:49:84:ed:2e:ab:bb:a1:62:05:84:5d:ec:8f:84:3a:7a:80:
         dc:64:1f:9a:34:a5:18:1f:a1:09:47:2d:e7:e5:c8:55:ff:d5:
         4a:ee:51:08:ef:98:09:f3:42:ba:3f:9c:f1:28:7d:7e:a9:d4:
         5c:38:77:41:17:81:1b:53:09:3a:8d:a0:36:b6:16:5b:74:da:
         58:8f:b3:8a:d5:20:80:1f:8f:b7:7a:92:ab:d2:af:dc:a5:ae:
         f9:05:be:86:ad:92:c4:42:3f:a7:bd:a8:9f:f7:a4:b9:bd:3e:
         af:8b:78:a0:46:7c:20:5b:9b:cc:29:73:54:21:b0:9b:a4:68:
         f8:b3:6e:bc:a6:f3:17:7a:3c:03:9b:e5:aa:79:ac:c4:f8:0a:
         99:d6:76:ba:52:4c:c4:60:6d:5d:9a:c3:3b:e1:cf:e9:5b:a5:
         60:ba:44:3c:76:c1:ef:50:72:63:83:90:3e:9c:e5:0b:4e:4c:
         4a:ea:f5:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBcVgsDo8keT/iIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3
OTI4MB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
Yjc0ZDE3ZTUtOGIwMC00OTZkLWEwYWMtMTc0MmFhZDM1MjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoV4e8t4tu8qLd3WQ3LOf8PSus/TjF+r+zrb
LF3flV2IuXN/c4ZDmpOBeoxZrxa7lfjw9qpVC6Q/ZVCShqZc268Yk8cEwLWneD4y
8NCcnovEUgjEtC+SNGSvEgbhicI+k02tE0MLWVk0Cv91MO/o99w9Gq3l1O1s9/JW
S2vhv3jE3HEb4iFJN8yFlnJsI5PbuB2H/jHTQ5oChWN2IFYSECfyHmJHHQnK/87K
kL0e1xpJemE+rDCddpHWgvKeeVKMAE3OlaQxcbmatx8YC4jENsos3O5LkfDVNZ4E
75v81KSqWstZCeLtoF0gc5LsxP49c5u5b2Nn54v350QMhOZLhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVt0dU3tjZtE/T7SPLPDyT71OfdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi
MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvZTMyODVjYjctYzU4Mi0z
ZDMzLThkZTMtOWFjYTE1MDYwOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1
MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy
NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2
ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUgqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEkGU1T7mUvcY8MD/qbSe9G8XQlUZ2/ApbK2uKQSaz7bVB7pc4ontw5
Cw/RlCuCrz0Wx7MzWYTeVD7afspIwJNNg3ZdLcsd801JhO0uq7uhYgWEXeyPhDp6
gNxkH5o0pRgfoQlHLeflyFX/1UruUQjvmAnzQro/nPEofX6p1Fw4d0EXgRtTCTqN
oDa2Flt02liPs4rVIIAfj7d6kqvSr9ylrvkFvoatksRCP6e9qJ/3pLm9Pq+LeKBG
fCBbm8wpc1QhsJukaPizbrym8xd6PAOb5ap5rMT4CpnWdrpSTMRgbV2awzvhz+lb
pWC6RDx2we9QcmODkD6c5QtOTErq9Xg=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:20 2024 by rpki-client on console-fra.rpki-client.org