Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa
File:                     47631e88-a2aa-356e-a96a-74ad262ed819.roa (raw, json)
Hash identifier:          zKxAzSiCnq3pWn72ppuGCnyOKutEv3H8cMKuDQym4x4=
Subject key identifier:   5E:53:7F:E2:A0:17:10:9E:5D:F1:64:A1:E7:FA:A1:19:AB:A3:5F:80
Certificate issuer:       /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial:       010D0C9F432858452C3689023474B8A15E9A3080
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa
Signing time:             Mon 11 Mar 2024 13:51:31 +0000
ROA not before:           Mon 11 Mar 2024 13:51:31 +0000
ROA not after:            Sun 09 Jun 2024 13:51:31 +0000
asID:                     14618
IP address blocks:        150.9.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:36:89:02:34:74:b8:a1:5e:9a:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
        Validity
            Not Before: Mar 11 13:51:31 2024 GMT
            Not After : Jun  9 13:51:31 2024 GMT
        Subject: CN=567c5a1c-9537-4614-b6d4-723f65517255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:3f:b5:83:1b:d4:bb:b8:8d:2d:f6:74:b5:
                    f2:5d:dc:95:ae:c9:64:59:1c:8a:11:73:a2:03:1d:
                    3d:9a:aa:20:6a:b7:1a:5c:7e:a4:40:f2:91:e2:24:
                    c3:a0:98:d4:49:b8:07:26:7d:d2:1c:a6:3c:59:04:
                    a1:69:35:1f:a8:1a:48:3a:b4:f7:48:5c:4b:43:53:
                    a3:9a:d6:34:1b:0f:e3:6f:ee:4e:21:01:32:19:16:
                    bd:91:b6:57:8b:3a:4a:b6:2e:a3:4f:09:03:af:f7:
                    41:eb:d8:33:b8:01:7d:ff:22:44:60:68:f4:03:5b:
                    6b:df:68:a9:c9:99:e0:c5:a8:a4:2b:b9:fa:38:f7:
                    fb:d1:a5:0c:76:0c:c5:3c:d7:ff:2c:70:f4:c3:80:
                    c3:44:b5:89:4d:4a:8a:3a:5f:d5:15:8c:68:e4:0c:
                    5d:d7:17:e6:66:11:c1:ad:4c:4e:46:14:91:71:c6:
                    92:ed:fe:c9:ab:fd:4c:db:fc:2d:75:16:84:6c:ca:
                    b8:9f:56:72:2e:68:0c:5a:8c:4c:30:43:bf:90:32:
                    4b:f7:0a:a0:82:66:fa:25:f4:78:8b:46:d9:c9:21:
                    75:96:19:d8:b9:50:36:8f:5a:79:d8:77:1a:f4:30:
                    bd:12:91:6e:e1:01:2c:40:e0:1f:b7:f5:0e:74:2f:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:53:7F:E2:A0:17:10:9E:5D:F1:64:A1:E7:FA:A1:19:AB:A3:5F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/47631e88-a2aa-356e-a96a-74ad262ed819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl

            X509v3 Authority Key Identifier:
                keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:56:cb:ae:b5:55:5d:37:95:a1:63:09:6a:08:99:c5:88:35:
         f2:93:d2:1a:f4:59:34:51:72:88:7c:71:5c:54:d1:09:23:0d:
         0b:3f:29:31:cb:79:ea:44:15:9a:d2:68:e3:77:62:de:5f:46:
         4f:04:1e:59:35:37:5e:2b:ac:9f:52:eb:65:cf:e2:e1:d0:84:
         61:9e:b0:c4:2d:1f:cf:51:02:44:91:b2:e1:8b:94:64:c2:0d:
         58:74:75:2e:af:68:7e:71:10:81:d0:14:0d:3b:66:98:f3:63:
         8e:64:f5:95:79:12:4b:43:51:22:90:8f:7d:a3:0a:3e:ce:5a:
         10:62:11:70:a0:44:3a:dd:ba:d3:c8:53:95:e4:45:fc:67:bd:
         0c:36:13:fc:c4:c8:15:c2:b2:ba:1e:03:bc:02:ff:66:a5:99:
         38:77:2b:ea:30:f1:b7:df:b8:b3:32:3a:c6:46:5c:d0:3e:76:
         3b:f4:4d:30:93:e0:25:fe:16:d6:db:5e:ce:06:3f:b1:46:26:
         0a:e8:58:ec:4d:9a:c3:ab:ed:ae:03:57:bf:90:94:e7:23:9e:
         ea:c6:5d:25:9f:87:dc:4a:34:c2:f1:a4:ba:a4:eb:e3:b7:62:
         23:6e:71:c3:e5:c2:da:a3:8b:0f:69:aa:2b:c5:91:f8:89:90:
         94:ac:38:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsNokCNHS4oV6aMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk
MTA1MB4XDTI0MDMxMTEzNTEzMVoXDTI0MDYwOTEzNTEzMVowLzEtMCsGA1UEAxMk
NTY3YzVhMWMtOTUzNy00NjE0LWI2ZDQtNzIzZjY1NTE3MjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuo/tYMb1Lu4jS32dLXyXdyVrslkWRyKEXOi
Ax09mqogarcaXH6kQPKR4iTDoJjUSbgHJn3SHKY8WQShaTUfqBpIOrT3SFxLQ1Oj
mtY0Gw/jb+5OIQEyGRa9kbZXizpKti6jTwkDr/dB69gzuAF9/yJEYGj0A1tr32ip
yZngxaikK7n6OPf70aUMdgzFPNf/LHD0w4DDRLWJTUqKOl/VFYxo5Axd1xfmZhHB
rUxORhSRccaS7f7Jq/1M2/wtdRaEbMq4n1ZyLmgMWoxMMEO/kDJL9wqggmb6JfR4
i0bZySF1lhnYuVA2j1p52Hca9DC9EpFu4QEsQOAft/UOdC/pVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF5Tf+KgFxCeXfFkoef6oRmro1+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi
ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvNDc2MzFlODgtYTJhYS0z
NTZlLWE5NmEtNzRhZDI2MmVkODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx
MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0
ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0
MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgnfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVWy661VV03laFjCWoImcWINfKT0hr0WTRRcoh8cVxU0QkjDQs/KTHL
eepEFZrSaON3Yt5fRk8EHlk1N14rrJ9S62XP4uHQhGGesMQtH89RAkSRsuGLlGTC
DVh0dS6vaH5xEIHQFA07ZpjzY45k9ZV5EktDUSKQj32jCj7OWhBiEXCgRDrdutPI
U5XkRfxnvQw2E/zEyBXCsroeA7wC/2almTh3K+ow8bffuLMyOsZGXNA+djv0TTCT
4CX+FtbbXs4GP7FGJgroWOxNmsOr7a4DV7+QlOcjnurGXSWfh9xKNMLxpLqk6+O3
YiNuccPlwtqjiw9pqivFkfiJkJSsOOc=
-----END CERTIFICATE-----
Generated at Thu May 2 08:03:58 2024 by rpki-client on console-ams.rpki-client.org