Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa
File:                     8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa (raw, json)
Hash identifier:          zfVKg99E+rY7nWFkVndhHvVQgyqjhDpSvr6kxNcokdE=
Subject key identifier:   55:DC:46:C4:43:8C:08:32:1A:0E:37:8D:29:85:B1:44:7A:63:9B:4D
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F432858454AD2CEFB402C46F71B134780
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        143.244.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:ce:fb:40:2c:46:f7:1b:13:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=7b385b24-b637-4d85-ab5a-adfad8d59da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:af:65:27:cd:c9:1a:1b:66:a7:75:ec:0a:41:
                    2d:86:4d:a0:f3:24:de:f3:f4:55:bf:81:62:30:f8:
                    90:af:41:2e:42:6f:1c:50:26:5c:54:28:21:9a:80:
                    ac:c0:99:23:37:19:20:da:02:d6:79:ee:a5:e8:3f:
                    c1:55:55:18:da:fe:58:7c:96:93:5f:f3:be:4f:d7:
                    1a:8d:cf:72:12:67:2f:67:f6:f6:e3:f5:cf:29:63:
                    ff:95:5b:79:7a:89:5f:b5:22:2f:ec:e2:f7:56:d9:
                    92:3f:cc:d4:a0:08:22:2e:f3:75:b2:9d:96:3a:cc:
                    33:af:7e:be:24:08:57:ec:13:85:46:e9:2d:a3:5a:
                    30:04:73:4a:74:dd:8d:76:4c:8e:f7:d7:49:e9:6f:
                    33:33:18:9d:71:ea:d0:3b:2c:e5:e2:dd:92:a6:99:
                    83:bd:69:cc:c7:cc:ec:ef:5e:44:9b:16:15:76:66:
                    56:a2:22:1a:9a:b0:26:42:68:c9:25:cf:a1:9d:3f:
                    3b:34:3a:cf:41:e7:68:95:f8:a9:bb:f6:ad:23:12:
                    6e:b7:df:11:10:f7:ab:11:00:7f:56:e4:32:69:d0:
                    be:4a:71:79:a7:f9:fa:98:3b:39:9c:c3:07:86:83:
                    8e:ef:d4:c4:07:24:93:e7:ff:33:1f:f8:29:af:91:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DC:46:C4:43:8C:08:32:1A:0E:37:8D:29:85:B1:44:7A:63:9B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b4c0059-ce2f-302d-8ad0-264f28ac2566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:78:df:ee:df:8d:0c:2d:80:ed:2e:fa:0b:27:91:e2:d3:2c:
         cc:2c:f6:e5:e4:98:39:44:9d:65:f3:47:80:21:55:b5:38:93:
         c5:fc:6f:37:71:41:54:18:4c:4a:7b:f2:0f:06:df:e0:81:76:
         7c:67:e0:1f:1c:81:f7:2a:4c:4e:98:54:02:6f:d6:e1:3a:5b:
         e0:fd:a5:0d:c9:a0:89:b3:30:3d:57:04:20:42:b9:f2:30:6a:
         82:c5:04:4f:98:56:69:f3:72:b8:ea:0c:10:a2:bf:bb:6b:90:
         9a:5b:2f:e8:db:3b:08:6e:f7:48:90:d5:4d:5d:81:5a:57:72:
         b5:bf:c3:85:47:f9:a0:56:a2:8a:6e:26:7f:44:92:01:da:7e:
         0a:53:47:89:24:c1:11:14:4a:2a:8e:46:6d:c2:5d:c8:6a:a4:
         a3:97:81:61:6e:19:6d:a0:2e:b2:76:c0:80:70:74:2f:7d:56:
         54:3a:70:06:9d:34:b6:9e:35:6f:8c:a0:c0:ff:5d:cd:86:92:
         69:48:7c:03:3a:84:fe:cd:92:15:89:a6:a9:13:2d:1a:98:87:
         73:6e:bf:e4:ee:85:e5:7e:b0:f2:7c:49:80:47:a5:34:c7:e6:
         61:cd:76:f7:d4:d4:8b:4e:17:c7:55:e9:f5:1c:62:00:26:fa:
         a6:80:91:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVK0s77QCxG9xsTR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI0MDMyMjEzMDAzNFoXDTI0MDYyMDEzMDAzNFowLzEtMCsGA1UEAxMk
N2IzODViMjQtYjYzNy00ZDg1LWFiNWEtYWRmYWQ4ZDU5ZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK9lJ83JGhtmp3XsCkEthk2g8yTe8/RVv4Fi
MPiQr0EuQm8cUCZcVCghmoCswJkjNxkg2gLWee6l6D/BVVUY2v5YfJaTX/O+T9ca
jc9yEmcvZ/b24/XPKWP/lVt5eolftSIv7OL3VtmSP8zUoAgiLvN1sp2WOswzr36+
JAhX7BOFRukto1owBHNKdN2NdkyO99dJ6W8zMxidcerQOyzl4t2SppmDvWnMx8zs
715EmxYVdmZWoiIamrAmQmjJJc+hnT87NDrPQedolfipu/atIxJut98REPerEQB/
VuQyadC+SnF5p/n6mDs5nMMHhoOO79TEByST5/8zH/gpr5H79QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFXcRsRDjAgyGg43jSmFsUR6Y5tNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvOGI0YzAwNTktY2UyZi0z
MDJkLThhZDAtMjY0ZjI4YWMyNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/RQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZ43+7fjQwtgO0u+gsnkeLTLMws9uXkmDlEnWXzR4AhVbU4k8X8bzdx
QVQYTEp78g8G3+CBdnxn4B8cgfcqTE6YVAJv1uE6W+D9pQ3JoImzMD1XBCBCufIw
aoLFBE+YVmnzcrjqDBCiv7trkJpbL+jbOwhu90iQ1U1dgVpXcrW/w4VH+aBWoopu
Jn9EkgHafgpTR4kkwREUSiqORm3CXchqpKOXgWFuGW2gLrJ2wIBwdC99VlQ6cAad
NLaeNW+MoMD/Xc2GkmlIfAM6hP7NkhWJpqkTLRqYh3Nuv+TuheV+sPJ8SYBHpTTH
5mHNdvfU1ItOF8dV6fUcYgAm+qaAkVc=
-----END CERTIFICATE-----
Generated at Thu May 2 08:53:29 2024 by rpki-client on console-fra.rpki-client.org