Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/31d57c5c-244f-3c6d-bc40-cf2409894a69.roa
File:                     31d57c5c-244f-3c6d-bc40-cf2409894a69.roa (raw, json)
Hash identifier:          xu/WIia1U3rE4xzahgCGKRaSgUq6oKjQxuDE0Xx4F5k=
Subject key identifier:   FE:3F:82:8F:3D:0D:95:C6:B9:0A:A8:F3:12:C9:A4:9A:E0:81:2C:3B
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F432858457FDDD4156DAD518CC28144E8
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/31d57c5c-244f-3c6d-bc40-cf2409894a69.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     393262
IP address blocks:        150.252.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d4:15:6d:ad:51:8c:c2:81:44:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=d012c7e8-6f09-4c3d-91f4-02190e25a808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:b7:4c:f9:63:03:03:7c:4d:cd:8c:36:65:
                    13:22:87:c7:37:d0:1a:5e:b8:ff:fb:cd:dc:74:04:
                    fc:1b:b5:d9:f9:7a:ad:c4:6d:53:f1:b8:3a:0a:df:
                    67:a6:47:89:50:fe:f6:66:bd:da:79:b3:a6:4a:af:
                    da:c3:5b:70:ec:10:a8:17:77:f5:c8:bd:27:28:01:
                    9b:76:39:c0:21:73:17:0c:64:6d:c2:53:6c:31:1e:
                    ea:29:be:d0:0a:85:a5:fb:db:41:99:fe:20:91:16:
                    0a:28:27:57:09:e1:e2:0a:0b:1e:a0:39:85:f2:32:
                    b5:d2:26:c6:99:9b:5a:34:47:11:ea:fe:fd:bb:6c:
                    13:a0:84:6a:25:3d:46:c3:ce:1c:70:9c:7f:3b:6b:
                    98:06:22:e1:46:d7:bf:c2:dd:41:03:47:92:50:8e:
                    b2:54:f2:c5:ec:90:df:01:63:e7:bb:dc:8e:95:8b:
                    cb:ba:52:61:f6:37:fd:2b:f1:44:de:8f:f7:ae:21:
                    cd:61:30:41:af:f6:cd:92:e1:a3:77:e1:71:44:05:
                    66:31:5c:45:42:8f:4e:c5:b1:e7:71:01:98:6e:c1:
                    f2:a1:26:95:c3:5a:56:b1:92:42:95:8e:a7:5e:f4:
                    2f:80:42:ec:87:cc:6f:0a:57:65:45:10:c4:c4:0e:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3F:82:8F:3D:0D:95:C6:B9:0A:A8:F3:12:C9:A4:9A:E0:81:2C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/31d57c5c-244f-3c6d-bc40-cf2409894a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7c:7d:98:dc:a8:c1:ab:a0:6e:f0:11:b3:4d:66:27:ad:22:
         bc:d2:c1:37:23:0c:f6:68:5b:37:62:a0:67:ba:8d:6b:5f:b2:
         2f:d2:61:b9:91:bc:b1:0a:11:61:b0:b6:96:cd:f8:04:c4:1f:
         e9:75:a5:35:21:99:39:f5:24:09:58:1c:c8:fe:a9:a8:0e:d2:
         5b:ab:56:50:43:8c:a4:b2:d7:55:cb:ba:87:6f:1e:06:06:e3:
         65:8c:2d:a9:27:84:a9:9b:f0:48:93:fc:f5:c7:2c:59:3f:4e:
         11:cb:31:42:85:47:57:64:68:38:45:00:bb:e2:20:b5:bb:96:
         6f:a5:b3:8f:45:d6:d6:d9:61:84:77:b4:e9:ac:b5:06:1a:ea:
         b4:dd:fc:a2:d6:74:7b:49:e2:41:0d:dd:b0:1a:eb:38:d3:da:
         78:85:a8:76:e4:7e:b1:bd:06:9c:8a:f9:c8:b2:c0:69:c2:b2:
         f1:ce:d0:24:84:29:25:a6:b6:b2:32:a7:4b:ae:3d:b2:31:aa:
         1e:65:c3:4b:ee:74:44:9c:8b:93:5e:3a:25:2a:10:37:6f:33:
         b6:23:cc:f6:4c:a8:d9:d2:b6:17:68:9c:c3:df:6f:4d:1a:4f:
         8f:1a:c7:8f:a3:77:15:4b:c6:9b:67:c1:4e:56:65:f7:c0:d0:
         c1:be:ad:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV/3dQVba1RjMKBROgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VjZTA0MDQtODBhOC00NmYyLTkyZWItOGYwYjU1OGM3
ZGJlMB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
ZDAxMmM3ZTgtNmYwOS00YzNkLTkxZjQtMDIxOTBlMjVhODA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy+3TPljAwN8Tc2MNmUTIofHN9AaXrj/+83c
dAT8G7XZ+XqtxG1T8bg6Ct9npkeJUP72Zr3aebOmSq/aw1tw7BCoF3f1yL0nKAGb
djnAIXMXDGRtwlNsMR7qKb7QCoWl+9tBmf4gkRYKKCdXCeHiCgseoDmF8jK10ibG
mZtaNEcR6v79u2wToIRqJT1Gw84ccJx/O2uYBiLhRte/wt1BA0eSUI6yVPLF7JDf
AWPnu9yOlYvLulJh9jf9K/FE3o/3riHNYTBBr/bNkuGjd+FxRAVmMVxFQo9OxbHn
cQGYbsHyoSaVw1pWsZJClY6nXvQvgELsh8xvCldlRRDExA4XbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4/go89DZXGuQqo8xLJpJrggSw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNl
MDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBiNTU4YzdkYmUvMzFkNTdjNWMtMjQ0Zi0z
YzZkLWJjNDAtY2YyNDA5ODk0YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2VjZTA0MDQtODBhOC00NmYyLTky
ZWItOGYwYjU1OGM3ZGJlLzdlY2UwNDA0LTgwYTgtNDZmMi05MmViLThmMGI1NThj
N2RiZS5jcmwwHwYDVR0jBBgwFoAUGNN/t1DuQwFGJh0iV9F4XA6RX9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNlMDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBi
NTU4YzdkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvz0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEt8fZjcqMGroG7wEbNNZietIrzSwTcjDPZoWzdioGe6jWtfsi/SYbmR
vLEKEWGwtpbN+ATEH+l1pTUhmTn1JAlYHMj+qagO0lurVlBDjKSy11XLuodvHgYG
42WMLaknhKmb8EiT/PXHLFk/ThHLMUKFR1dkaDhFALviILW7lm+ls49F1tbZYYR3
tOmstQYa6rTd/KLWdHtJ4kEN3bAa6zjT2niFqHbkfrG9BpyK+ciywGnCsvHO0CSE
KSWmtrIyp0uuPbIxqh5lw0vudESci5NeOiUqEDdvM7YjzPZMqNnSthdonMPfb00a
T48ax4+jdxVLxptnwU5WZffA0MG+rbU=
-----END CERTIFICATE-----
Generated at Tue May 7 02:06:48 2024 by rpki-client on console-fra.rpki-client.org