Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/61ed64dc-1f60-3010-9e8b-88eff0752414.roa
File:                     61ed64dc-1f60-3010-9e8b-88eff0752414.roa (raw, json)
Hash identifier:          WHVKnSNGEcwC2ip6y0Ks++l4QaAm27/hhtrxPbq8UcU=
Subject key identifier:   B7:63:92:38:CE:62:5C:15:06:E8:A9:10:3F:28:EB:C9:2C:38:A4:CE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63546E538AA20129D2100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/61ed64dc-1f60-3010-9e8b-88eff0752414.roa
Signing time:             Fri 12 Apr 2024 17:24:40 +0000
ROA not before:           Fri 12 Apr 2024 17:24:40 +0000
ROA not after:            Thu 11 Jul 2024 17:24:40 +0000
asID:                     7922
IP address blocks:        142.111.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:35:46:e5:38:aa:20:12:9d:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:40 2024 GMT
            Not After : Jul 11 17:24:40 2024 GMT
        Subject: CN=a4a90986-ac9e-4838-98c3-87487a433170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:7a:b4:c7:0e:ca:2b:2a:e1:da:32:af:fa:
                    16:b0:c0:1c:b0:8a:c7:ac:eb:5a:72:1e:73:2a:31:
                    69:00:ba:47:3f:4c:5f:5d:c1:0c:2b:cb:ae:42:5e:
                    ff:90:ec:39:10:b1:f1:0e:ac:99:f0:84:53:ab:37:
                    90:db:fa:7f:b9:f5:2b:61:19:2c:6f:e1:12:2d:cc:
                    58:95:bd:0e:b2:3e:2b:f0:44:20:76:b7:55:f6:0b:
                    fe:a1:1f:5b:8c:cc:49:35:07:ef:e7:bb:70:84:36:
                    1a:e6:b1:30:4b:d5:94:0b:a3:55:1f:83:e0:49:c8:
                    21:66:0e:af:4a:70:58:dc:a9:d7:86:b7:4e:f8:82:
                    ad:ed:9b:73:2f:b5:bb:8c:91:3f:65:7a:d8:1d:97:
                    82:07:be:cc:ba:c9:84:01:30:2e:9b:76:3e:42:e8:
                    bf:2f:3c:77:6c:72:24:ff:26:28:4e:b0:fd:5c:d9:
                    97:11:85:a6:31:2c:49:18:a8:fb:2c:08:ee:d4:ff:
                    3a:66:bf:6a:91:81:c8:2d:9b:0a:43:82:ed:99:f2:
                    5c:df:81:11:d8:50:9f:06:f4:a3:0f:01:49:e0:68:
                    a1:86:99:34:bc:f0:86:1a:de:3c:81:e2:31:7e:45:
                    bc:37:99:4f:74:d4:84:5f:63:26:21:b5:eb:e4:39:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:63:92:38:CE:62:5C:15:06:E8:A9:10:3F:28:EB:C9:2C:38:A4:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/61ed64dc-1f60-3010-9e8b-88eff0752414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:db:de:86:82:64:df:59:71:d7:46:ec:cf:23:d9:ea:c7:
         90:3e:d9:09:46:8b:b0:22:3e:54:6c:ac:bb:4e:7b:73:5b:9d:
         95:31:70:56:e1:8d:a2:85:34:c7:4a:3b:f2:33:3b:66:2d:8a:
         43:39:fb:d6:52:66:63:4b:f6:92:27:00:0e:58:2f:a5:ca:80:
         6c:fc:79:86:84:f4:83:54:59:cd:37:a7:63:c8:17:05:19:f2:
         ec:ce:c9:d7:a7:6b:77:d5:8d:ac:53:e7:6f:41:36:f3:8b:a0:
         af:8c:be:8b:40:85:86:5f:07:72:83:73:46:03:d5:c0:ac:fd:
         6f:7b:db:46:85:9c:a5:a2:fc:50:35:8e:ab:0f:f5:0c:3c:65:
         b2:c2:0a:ee:28:6b:37:83:e2:b6:da:f9:e9:34:65:7c:9f:f4:
         21:68:e2:2d:13:cb:d7:33:62:64:58:6f:92:08:c1:91:04:52:
         11:bf:c1:9f:ea:4d:84:d3:53:06:c0:72:73:8f:cf:8f:42:88:
         90:d9:07:e6:9c:26:be:21:fd:e3:ab:9c:43:2e:6f:fd:61:a6:
         c1:ce:b1:c1:b6:cd:85:a9:08:91:43:bb:67:d1:2b:1a:58:a3:
         14:7c:b6:90:18:f6:ee:e8:6c:ac:7a:a8:a5:85:a2:19:08:4e:
         8a:84:d5:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWF9jVG5TiqIBKdIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDQxMjE3MjQ0MFoXDTI0MDcxMTE3MjQ0MFowLzEtMCsGA1UEAxMk
YTRhOTA5ODYtYWM5ZS00ODM4LTk4YzMtODc0ODdhNDMzMTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWV6tMcOyisq4doyr/oWsMAcsIrHrOtach5z
KjFpALpHP0xfXcEMK8uuQl7/kOw5ELHxDqyZ8IRTqzeQ2/p/ufUrYRksb+ESLcxY
lb0Osj4r8EQgdrdV9gv+oR9bjMxJNQfv57twhDYa5rEwS9WUC6NVH4PgScghZg6v
SnBY3KnXhrdO+IKt7ZtzL7W7jJE/ZXrYHZeCB77MusmEATAum3Y+Qui/Lzx3bHIk
/yYoTrD9XNmXEYWmMSxJGKj7LAju1P86Zr9qkYHILZsKQ4LtmfJc34ER2FCfBvSj
DwFJ4Gihhpk0vPCGGt48geIxfkW8N5lPdNSEX2MmIbXr5Dla0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLdjkjjOYlwVBuipED8o68ksOKTOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjFlZDY0ZGMtMWY2MC0z
MDEwLTllOGItODhlZmYwNzUyNDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBf296GgmTfWXHXRuzPI9nqx5A+2QlGi7AiPlRsrLtOe3NbnZUxcFbh
jaKFNMdKO/IzO2YtikM5+9ZSZmNL9pInAA5YL6XKgGz8eYaE9INUWc03p2PIFwUZ
8uzOydena3fVjaxT529BNvOLoK+MvotAhYZfB3KDc0YD1cCs/W9720aFnKWi/FA1
jqsP9Qw8ZbLCCu4oazeD4rba+ek0ZXyf9CFo4i0Ty9czYmRYb5IIwZEEUhG/wZ/q
TYTTUwbAcnOPz49CiJDZB+acJr4h/eOrnEMub/1hpsHOscG2zYWpCJFDu2fRKxpY
oxR8tpAY9u7obKx6qKWFohkIToqE1f8=
-----END CERTIFICATE-----
Generated at Fri May 3 22:27:39 2024 by rpki-client on console-ams.rpki-client.org