Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa
File:                     bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa (raw, json)
Hash identifier:          G2vID5CeyTZjUcS8JfY97ccvm3zVq2lx89nHcoAVxHg=
Subject key identifier:   60:EE:62:F4:9B:B8:D9:D0:7F:46:66:9E:47:7B:EB:83:04:F1:62:15
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584757AB713A48E2ED2F029BF8C0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     237
IP address blocks:        35.62.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:71:3a:48:e2:ed:2f:02:9b:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=910c5005-f375-4f6c-80fe-f26d0cd54d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:4c:5a:e4:6b:ff:fe:4e:3a:79:b2:9c:6a:
                    23:69:b7:27:8b:6b:c8:88:da:f6:52:34:3e:dc:cd:
                    d2:de:eb:cd:50:eb:0b:01:e8:0c:cc:d9:7c:fb:5f:
                    d7:de:72:de:9e:7a:0c:46:b9:f5:0f:4e:19:54:23:
                    1a:22:9e:4c:ab:6f:e2:35:ac:33:c9:31:27:a1:9c:
                    65:5f:d2:ca:20:42:2e:6d:8a:d3:ca:e4:92:d9:05:
                    80:f7:ab:71:4a:95:e2:f7:70:c6:73:48:35:5a:f6:
                    fc:a7:7b:31:f9:1c:ed:6e:d4:10:28:56:a2:91:7e:
                    d2:e9:31:2d:cd:cf:cc:df:6f:bc:8f:6b:1d:90:96:
                    66:f9:50:1b:c4:49:c2:6b:a4:93:e0:79:22:18:8d:
                    49:76:02:d5:92:90:a5:0f:57:d6:0a:67:8c:ec:9e:
                    c6:f1:6d:c6:62:33:a3:e2:9e:cb:00:db:ff:1b:fe:
                    50:d7:7d:ca:2b:74:57:17:36:1c:7f:ec:a4:8a:35:
                    0e:87:3b:67:09:82:95:60:00:38:9b:0b:ec:c8:d9:
                    52:d8:9e:80:f6:b3:3f:cf:45:0e:cf:cb:34:68:9a:
                    40:47:dd:a2:91:e9:6b:78:47:06:6c:b6:70:96:3c:
                    2e:1e:e4:16:98:73:b4:3b:50:17:76:5b:d8:d8:a4:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:62:F4:9B:B8:D9:D0:7F:46:66:9E:47:7B:EB:83:04:F1:62:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/bcf71a6e-1b5e-383d-818d-f47168dac5dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.62.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:45:05:de:a4:b2:83:d7:39:0c:95:36:45:4d:34:80:78:9d:
         ac:e3:a5:90:f4:77:15:38:a9:87:86:98:9e:89:36:39:b4:b5:
         a0:ad:23:54:0f:28:36:a8:9d:2a:f1:49:98:c9:af:4f:87:1e:
         32:18:51:61:4a:cc:f4:aa:4f:fd:38:1b:c4:e2:8d:3e:2d:2b:
         0f:40:c0:41:ab:d8:65:89:2f:2d:fd:d7:4c:b3:e4:85:20:73:
         8b:a4:7b:7f:e5:43:96:c7:4c:a4:64:71:01:4c:49:23:20:33:
         8a:ae:55:37:9f:8b:29:0c:9f:49:27:90:b5:5d:a7:26:a7:b1:
         99:e7:64:5f:17:07:89:d0:6d:aa:de:84:be:70:41:d7:c5:d5:
         39:df:e7:3c:80:5c:1a:6b:ff:83:98:26:a2:9d:ee:38:18:03:
         50:e9:1a:c4:f4:f0:f8:f8:6b:bc:6f:15:00:52:c9:88:87:48:
         90:98:20:2a:42:98:40:f9:dd:96:cb:52:7f:ea:4c:b3:66:a5:
         ba:a2:ed:2d:dc:d2:16:31:9b:26:a1:77:62:46:55:da:49:c8:
         79:ac:77:22:66:a4:f8:3e:5b:bb:92:b2:40:d4:b8:a1:a7:6c:
         ce:c5:3c:fa:61:23:d4:0a:e4:63:c3:d3:22:d8:df:72:1c:db:
         7c:35:20:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdXq3E6SOLtLwKb+MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI0MDkyNjEzMDA0MVoXDTI0MTIyNTE0MDA0MVowLzEtMCsGA1UEAxMk
OTEwYzUwMDUtZjM3NS00ZjZjLTgwZmUtZjI2ZDBjZDU0ZDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslBMWuRr//5OOnmynGojabcni2vIiNr2UjQ+
3M3S3uvNUOsLAegMzNl8+1/X3nLennoMRrn1D04ZVCMaIp5Mq2/iNawzyTEnoZxl
X9LKIEIubYrTyuSS2QWA96txSpXi93DGc0g1Wvb8p3sx+RztbtQQKFaikX7S6TEt
zc/M32+8j2sdkJZm+VAbxEnCa6ST4HkiGI1JdgLVkpClD1fWCmeM7J7G8W3GYjOj
4p7LANv/G/5Q133KK3RXFzYcf+ykijUOhztnCYKVYAA4mwvsyNlS2J6A9rM/z0UO
z8s0aJpAR92ikelreEcGbLZwljwuHuQWmHO0O1AXdlvY2KSLewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDuYvSbuNnQf0Zmnkd764ME8WIVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvYmNmNzFhNmUtMWI1ZS0z
ODNkLTgxOGQtZjQ3MTY4ZGFjNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIz4MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhFBd6ksoPXOQyVNkVNNIB4nazjpZD0dxU4qYeGmJ6JNjm0taCtI1QP
KDaonSrxSZjJr0+HHjIYUWFKzPSqT/04G8TijT4tKw9AwEGr2GWJLy3910yz5IUg
c4uke3/lQ5bHTKRkcQFMSSMgM4quVTefiykMn0knkLVdpyansZnnZF8XB4nQbare
hL5wQdfF1Tnf5zyAXBpr/4OYJqKd7jgYA1DpGsT08Pj4a7xvFQBSyYiHSJCYICpC
mED53ZbLUn/qTLNmpbqi7S3c0hYxmyahd2JGVdpJyHmsdyJmpPg+W7uSskDUuKGn
bM7FPPphI9QK5GPD0yLY33Ic23w1IME=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:49 2024 by rpki-client on console-fra.rpki-client.org