Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
File:                     041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa (raw, json)
Hash identifier:          rqunjDvPwJB/QO6N7KfuuIrXy9RUUpn97uMaD0Ber9Q=
Subject key identifier:   1F:85:94:06:55:65:A5:BC:91:11:EE:0F:21:A4:F3:F7:8B:51:A7:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584754E0F5285A2159B922A6B200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     7342
IP address blocks:        209.131.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:f5:28:5a:21:59:b9:22:a6:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=b71b21f2-6914-4bfa-ae75-ab23ecdf81ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:62:aa:7c:cf:a7:49:6f:67:bb:38:7d:eb:
                    b6:67:7b:27:11:b5:5c:4e:79:3d:ba:53:45:b4:77:
                    13:57:10:ee:98:66:e6:c1:25:a0:c0:97:c1:cf:8a:
                    cd:b6:ce:e1:e2:51:f0:69:94:d7:0d:8f:b4:a2:0a:
                    46:66:55:75:22:9d:62:9b:dd:59:7f:c1:24:c1:43:
                    f0:78:8b:48:c4:c8:45:a9:58:13:c4:b2:0b:08:bb:
                    b2:6f:07:8a:cc:7e:e4:9c:5a:d2:0f:8b:81:1f:9b:
                    f4:19:95:d5:14:5a:9f:46:8c:c6:8b:31:b5:c0:35:
                    4a:35:18:65:8a:74:6d:32:55:79:8e:d4:fb:f3:79:
                    b3:cd:c8:c9:4d:f2:70:14:4a:50:bc:3a:4c:91:67:
                    e9:86:3c:26:70:0d:72:25:c1:37:85:7d:1a:14:5c:
                    9b:ed:63:4b:95:b2:f8:cf:ee:c1:9d:c9:ea:d6:9b:
                    95:02:7c:2f:87:df:f8:0a:5c:3e:60:68:92:55:67:
                    20:02:42:b7:d5:a0:50:cc:a2:2a:fb:a7:89:6f:3c:
                    e4:75:a4:29:08:a3:f4:c6:95:ba:30:b1:ad:80:ff:
                    68:42:0b:e6:b0:2f:e5:63:bc:d9:45:7a:c6:b9:b1:
                    d9:46:e3:23:a8:b9:39:3b:46:33:8c:fd:85:38:97:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:85:94:06:55:65:A5:BC:91:11:EE:0F:21:A4:F3:F7:8B:51:A7:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:2f:da:30:3e:34:ec:69:89:43:6b:fc:97:c6:3c:49:7c:
         f2:fc:ff:c4:20:82:9c:60:d8:92:6c:f6:c4:a8:c2:3d:fa:f0:
         33:13:22:42:70:fc:06:b8:fb:6b:c4:14:8f:79:45:1b:55:c0:
         01:70:3e:e1:c9:5f:b8:fb:2c:de:76:9b:12:db:36:64:49:3d:
         9b:ff:61:92:b6:c7:d0:ab:9f:13:b8:1f:c2:1f:a0:45:07:8a:
         b8:e2:5a:82:0a:b0:62:ce:5c:43:09:7e:a0:c1:7e:50:ea:b6:
         ce:ca:9d:23:97:94:4f:97:24:61:f9:ce:70:dd:e7:a6:83:b6:
         ad:21:50:8c:2a:2f:5b:67:27:1b:21:05:03:46:b1:81:7f:18:
         0c:21:70:dc:83:99:9f:a1:1e:60:cd:dd:1d:b3:90:75:fb:cd:
         0d:54:a5:5d:52:2e:1d:92:45:7c:5d:ff:ae:ca:80:a9:60:e4:
         bc:3d:4d:33:37:49:d5:90:b3:e4:08:70:f4:5f:75:44:72:35:
         8b:b5:a0:dc:82:35:b9:cd:e9:5e:59:dd:35:2c:da:4d:d0:8e:
         4e:c2:20:b5:70:21:37:1b:51:bd:6b:56:61:ad:55:1b:70:da:
         39:55:54:c6:fc:73:83:b4:0b:d9:1c:0b:6d:bb:d6:46:93:24:
         02:ba:16:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4PUoWiFZuSKmsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
YjcxYjIxZjItNjkxNC00YmZhLWFlNzUtYWIyM2VjZGY4MWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztJiqnzPp0lvZ7s4feu2Z3snEbVcTnk9ulNF
tHcTVxDumGbmwSWgwJfBz4rNts7h4lHwaZTXDY+0ogpGZlV1Ip1im91Zf8EkwUPw
eItIxMhFqVgTxLILCLuybweKzH7knFrSD4uBH5v0GZXVFFqfRozGizG1wDVKNRhl
inRtMlV5jtT783mzzcjJTfJwFEpQvDpMkWfphjwmcA1yJcE3hX0aFFyb7WNLlbL4
z+7Bncnq1puVAnwvh9/4Clw+YGiSVWcgAkK31aBQzKIq+6eJbzzkdaQpCKP0xpW6
MLGtgP9oQgvmsC/lY7zZRXrGubHZRuMjqLk5O0YzjP2FOJcUYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB+FlAZVZaW8kRHuDyGk8/eLUad6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDQxZjBjZDEtMDQyMy0z
ZjFhLWE2YzYtNDJmNmI3NWEwMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABK5L9owPjTsaYlDa/yXxjxJfPL8/8Qggpxg2JJs9sSowj368DMTIkJw
/Aa4+2vEFI95RRtVwAFwPuHJX7j7LN52mxLbNmRJPZv/YZK2x9CrnxO4H8IfoEUH
irjiWoIKsGLOXEMJfqDBflDqts7KnSOXlE+XJGH5znDd56aDtq0hUIwqL1tnJxsh
BQNGsYF/GAwhcNyDmZ+hHmDN3R2zkHX7zQ1UpV1SLh2SRXxd/67KgKlg5Lw9TTM3
SdWQs+QIcPRfdURyNYu1oNyCNbnN6V5Z3TUs2k3Qjk7CILVwITcbUb1rVmGtVRtw
2jlVVMb8c4O0C9kcC2271kaTJAK6Fvg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:19:22 2024 by rpki-client on console-fra.rpki-client.org