Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
File:                     8f29609a-346f-3347-abbf-261ce08ce477.roa (raw, json)
Hash identifier:          8xUkbRxbCa4jsTLXyhfN9XjhBHjtKO5aoWTIhh1Pv4U=
Subject key identifier:   50:50:32:A6:01:AE:1E:7D:76:4E:48:6B:58:C4:20:E0:4A:41:18:FD
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584754E0C14E726827CFF2B09C00
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     3356
IP address blocks:        161.129.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:c1:4e:72:68:27:cf:f2:b0:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=10bf2d71-6d2f-47e8-b289-be4f0cd7a83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:be:30:07:42:a3:02:67:78:91:16:28:a6:
                    b9:ea:ae:8e:bb:29:c8:70:0e:ba:49:ec:f9:0a:b6:
                    42:c6:80:10:36:82:7a:0f:4d:12:70:0d:60:e5:f5:
                    83:46:ee:30:c4:b5:6e:b3:12:32:3a:15:31:0c:13:
                    14:d5:81:4d:9e:9c:7b:be:97:e1:8e:97:ad:c0:48:
                    74:0a:4f:03:0c:da:89:57:af:08:63:fb:60:6e:27:
                    c5:8c:02:70:c3:e6:78:31:0d:26:09:09:9f:46:db:
                    23:26:70:0c:f5:9c:f6:8e:46:a0:de:bb:84:c2:40:
                    97:f6:44:f8:7b:a4:44:22:36:5a:65:c5:12:4e:6c:
                    2b:29:f8:f9:ce:0a:73:5f:de:1c:89:90:9b:8e:b6:
                    58:5e:aa:10:c3:d9:9b:f7:9e:60:da:00:b3:a8:0c:
                    53:19:f1:f8:2c:c2:17:19:e4:7b:8f:2a:65:7b:ae:
                    a1:2b:1c:33:04:a7:58:37:8e:8c:5e:2a:b6:db:4b:
                    b5:07:ce:6c:67:2d:71:ae:42:bc:fb:b6:1c:80:8f:
                    3d:eb:03:76:2b:d0:ce:37:df:15:84:9f:9f:9f:f2:
                    99:10:72:dc:e2:38:e4:46:26:e9:08:08:14:35:a1:
                    ee:71:4b:b5:58:6c:1b:6a:b5:76:00:f2:07:8b:d0:
                    ec:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:50:32:A6:01:AE:1E:7D:76:4E:48:6B:58:C4:20:E0:4A:41:18:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:70:bb:8b:fe:17:b2:e6:0a:a9:a3:8d:2c:79:ab:7d:9a:98:
         f0:05:de:b7:61:09:60:2e:2a:e1:e5:1a:34:33:89:e2:13:d1:
         cd:5c:9f:43:f7:e1:7d:74:d9:a5:e3:e0:0b:27:5b:bc:28:1a:
         ce:21:bd:7a:0d:37:48:38:58:25:1c:b0:d7:5a:73:5f:e4:6b:
         21:bb:49:67:8d:56:07:d3:f4:a5:99:3b:89:0f:19:d4:80:81:
         71:2b:59:86:18:cb:4e:59:21:84:d3:13:3e:8d:9e:15:f3:22:
         a5:54:40:7a:d8:e8:f6:c4:7e:3f:00:3c:bb:44:59:4a:97:d6:
         6d:01:c1:d2:77:7e:94:b6:6f:9f:b9:0b:e2:ca:61:f5:be:1e:
         60:0b:82:8f:e5:af:f3:bc:66:4c:34:c0:f8:2d:56:22:ec:4e:
         68:e9:49:59:4a:db:cb:62:41:de:a4:28:4f:6a:6f:91:2a:3c:
         78:38:78:5d:f6:f5:88:ba:e3:68:fc:8b:57:c0:fa:a9:62:8b:
         6f:98:46:b4:04:32:06:45:97:b2:d6:ab:fb:81:ae:d7:45:1e:
         c9:35:94:fc:bd:cb:24:53:58:e7:34:23:d6:27:03:8a:30:bb:
         88:9f:e5:ae:29:bd:90:42:4c:02:ec:ad:02:1a:b9:b0:37:9f:
         b4:05:b0:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4MFOcmgnz/KwnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
MTBiZjJkNzEtNmQyZi00N2U4LWIyODktYmU0ZjBjZDdhODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSm+MAdCowJneJEWKKa56q6OuynIcA66Sez5
CrZCxoAQNoJ6D00ScA1g5fWDRu4wxLVusxIyOhUxDBMU1YFNnpx7vpfhjpetwEh0
Ck8DDNqJV68IY/tgbifFjAJww+Z4MQ0mCQmfRtsjJnAM9Zz2jkag3ruEwkCX9kT4
e6REIjZaZcUSTmwrKfj5zgpzX94ciZCbjrZYXqoQw9mb955g2gCzqAxTGfH4LMIX
GeR7jyple66hKxwzBKdYN46MXiq220u1B85sZy1xrkK8+7YcgI896wN2K9DON98V
hJ+fn/KZEHLc4jjkRibpCAgUNaHucUu1WGwbarV2APIHi9DseQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBQMqYBrh59dk5Ia1jEIOBKQRj9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvOGYyOTYwOWEtMzQ2Zi0z
MzQ3LWFiYmYtMjYxY2UwOGNlNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYElMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdwu4v+F7LmCqmjjSx5q32amPAF3rdhCWAuKuHlGjQzieIT0c1cn0P3
4X102aXj4AsnW7woGs4hvXoNN0g4WCUcsNdac1/kayG7SWeNVgfT9KWZO4kPGdSA
gXErWYYYy05ZIYTTEz6NnhXzIqVUQHrY6PbEfj8APLtEWUqX1m0BwdJ3fpS2b5+5
C+LKYfW+HmALgo/lr/O8Zkw0wPgtViLsTmjpSVlK28tiQd6kKE9qb5EqPHg4eF32
9Yi642j8i1fA+qlii2+YRrQEMgZFl7LWq/uBrtdFHsk1lPy9yyRTWOc0I9YnA4ow
u4if5a4pvZBCTALsrQIaubA3n7QFsH4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:00:37 2024 by rpki-client on console-ams.rpki-client.org