Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d57e62da-a629-30aa-89c2-03aeac4923de.roa
File:                     d57e62da-a629-30aa-89c2-03aeac4923de.roa (raw, json)
Hash identifier:          DyFQ3S0b8IvvKSr1idBjjfS4T5x1bF/fzFU6bA/PotI=
Subject key identifier:   77:4F:D5:83:0E:61:53:64:77:12:44:8C:3B:52:F6:75:5D:A7:8F:11
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4E29FF88798FCF8B2AB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d57e62da-a629-30aa-89c2-03aeac4923de.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:e2:9f:f8:87:98:fc:f8:b2:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=2e125f70-087b-4764-a1b2-246e7f910c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:2c:7d:53:86:18:20:82:6e:a8:95:ff:49:
                    8f:be:50:05:81:40:1d:46:30:40:13:8e:06:86:a8:
                    b9:31:06:ea:6d:58:2e:58:fe:6a:ed:e4:22:03:c7:
                    47:b2:7e:cc:1d:8b:31:bc:f5:21:ed:5e:67:20:c2:
                    d2:03:00:09:f1:05:f2:39:f0:61:bf:f3:4e:4b:78:
                    39:bf:c2:be:52:99:03:02:48:db:c6:b0:d9:a6:dc:
                    aa:84:d8:90:ff:83:04:9e:a4:2e:77:26:f4:f2:70:
                    43:5b:24:6a:59:85:33:b7:e1:01:5b:76:90:ef:3e:
                    96:ee:1b:8b:c7:3e:c6:65:93:be:77:0f:0d:c6:bd:
                    d8:ff:31:2f:ef:10:a9:db:0f:3a:08:56:78:4b:d4:
                    91:bc:12:df:55:df:9e:88:e3:f4:a6:f4:a1:3c:fc:
                    0d:6c:17:3b:35:01:78:a7:e9:1c:f4:13:7a:ef:eb:
                    d0:58:ed:f6:36:67:b3:f6:4c:72:a9:d8:fd:50:ee:
                    9e:cb:c1:de:60:ed:59:c0:ea:6d:bf:31:a7:94:21:
                    44:7d:88:5c:16:3e:b1:f9:83:18:67:cf:cc:1d:dd:
                    dc:48:88:34:3b:15:58:ac:b6:5d:75:5c:41:46:99:
                    b9:84:eb:4f:8b:c2:38:80:9e:20:e4:31:d2:58:ca:
                    b8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:D5:83:0E:61:53:64:77:12:44:8C:3B:52:F6:75:5D:A7:8F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d57e62da-a629-30aa-89c2-03aeac4923de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d3:22:16:83:1c:c4:03:7d:6b:04:e9:5e:a5:b5:2f:1f:67:
         d7:58:ac:ae:99:ef:5a:4e:9a:f7:93:e2:74:90:17:17:a9:94:
         1b:36:82:ef:00:bc:fd:86:7d:7f:ca:a1:49:05:f6:ef:45:d1:
         c2:88:df:b4:7c:f8:30:74:ac:51:c8:65:6a:b4:ca:19:fe:6e:
         f9:df:f0:ff:15:63:81:85:26:23:62:47:d0:33:f2:1a:a7:5c:
         3f:bf:fb:cf:d3:c7:2d:e7:6e:05:5a:60:3e:12:3b:0d:50:0e:
         8a:5f:d4:0b:0c:f7:18:b2:d6:15:17:6d:36:57:29:77:1e:a6:
         ed:93:8b:af:6f:0f:d3:d5:57:8d:f3:09:89:64:6c:52:5d:2a:
         5d:ff:a0:2c:00:ad:d1:5c:71:96:d2:a7:53:ab:eb:71:68:63:
         14:e2:52:20:4b:f7:17:c7:1c:9f:cb:b3:98:9f:03:a5:32:47:
         b7:fb:e4:47:a2:72:c6:24:2b:69:54:d0:1f:07:4d:25:79:0f:
         73:53:9a:7b:e8:39:6a:76:82:72:c4:9b:d0:e0:25:ed:2f:a2:
         9b:48:74:72:d6:0e:3f:93:62:f4:ee:b3:17:51:b8:4c:1f:73:
         20:55:70:f3:cd:47:ad:56:b3:16:e9:e9:fe:bd:49:88:7b:96:
         62:17:71:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfP1OKf+IeY/PiyqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTEwODE0MDAzOVoXDTI1MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk
MmUxMjVmNzAtMDg3Yi00NzY0LWExYjItMjQ2ZTdmOTEwYzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGosfVOGGCCCbqiV/0mPvlAFgUAdRjBAE44G
hqi5MQbqbVguWP5q7eQiA8dHsn7MHYsxvPUh7V5nIMLSAwAJ8QXyOfBhv/NOS3g5
v8K+UpkDAkjbxrDZptyqhNiQ/4MEnqQudyb08nBDWyRqWYUzt+EBW3aQ7z6W7huL
xz7GZZO+dw8Nxr3Y/zEv7xCp2w86CFZ4S9SRvBLfVd+eiOP0pvShPPwNbBc7NQF4
p+kc9BN67+vQWO32Nmez9kxyqdj9UO6ey8HeYO1ZwOptvzGnlCFEfYhcFj6x+YMY
Z8/MHd3cSIg0OxVYrLZddVxBRpm5hOtPi8I4gJ4g5DHSWMq4CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdP1YMOYVNkdxJEjDtS9nVdp48RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDU3ZTYyZGEtYTYyOS0z
MGFhLTg5YzItMDNhZWFjNDkyM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7TIhaDHMQDfWsE6V6ltS8fZ9dYrK6Z71pOmveT4nSQFxeplBs2gu8A
vP2GfX/KoUkF9u9F0cKI37R8+DB0rFHIZWq0yhn+bvnf8P8VY4GFJiNiR9Az8hqn
XD+/+8/Txy3nbgVaYD4SOw1QDopf1AsM9xiy1hUXbTZXKXcepu2Ti69vD9PVV43z
CYlkbFJdKl3/oCwArdFccZbSp1Or63FoYxTiUiBL9xfHHJ/Ls5ifA6UyR7f75Eei
csYkK2lU0B8HTSV5D3NTmnvoOWp2gnLEm9DgJe0voptIdHLWDj+TYvTusxdRuEwf
cyBVcPPNR61Wsxbp6f69SYh7lmIXcc4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:58 2024 by rpki-client on console-fra.rpki-client.org