Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa
File:                     ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa (raw, json)
Hash identifier:          yAnodSyXyAjPhPRGNaKbPxU4hjsXbC1+T3AhGifvrM8=
Subject key identifier:   EF:48:F2:0F:96:DF:17:0D:B8:DA:C5:CD:A4:B5:69:88:64:DA:B2:71
Certificate issuer:       /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial:       010D0C9F432858458C6DCA118DC8515A40561700
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     397635
IP address blocks:        149.117.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:ca:11:8d:c8:51:5a:40:56:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=06ef4d04-a6cd-461f-86cf-eba65882fc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:d3:08:85:12:e4:e4:8c:43:62:3d:0e:62:
                    10:e8:32:f9:9d:33:a4:c4:b7:3e:75:1b:7c:fc:76:
                    ee:6f:ec:ed:05:a5:6e:56:70:b1:74:a8:6a:80:37:
                    f6:be:fb:1e:8e:d9:e4:bc:2a:af:ef:db:16:ba:c6:
                    87:8d:6d:1a:9a:d8:c5:65:fc:78:dd:af:65:09:05:
                    76:eb:8b:22:55:e7:24:d7:b0:e6:38:bc:4a:5b:5f:
                    bf:aa:ad:a5:df:c6:4f:ff:b4:bf:9c:a8:95:37:ff:
                    af:57:4b:49:c0:03:c6:c6:55:b4:a2:d7:45:1c:8c:
                    10:4f:a1:60:be:61:c9:a7:e0:6e:47:2a:0b:2e:36:
                    67:67:bd:93:d7:6a:51:bd:28:24:6d:3b:5b:1e:05:
                    3a:c1:d9:af:e6:b8:25:7a:19:87:90:ec:8b:bc:8a:
                    79:48:97:0b:84:e8:9f:4b:c2:d0:6f:a0:02:bc:b4:
                    1e:1a:ce:6e:d3:a3:c7:36:1f:94:d1:f2:e5:15:8a:
                    64:89:57:c0:25:f7:3d:32:7e:41:b3:26:88:d4:1a:
                    0e:9b:8e:27:58:29:c7:9d:e0:a1:b7:5b:d5:39:96:
                    25:bb:e2:35:db:48:23:e5:89:f2:42:b1:3b:60:7c:
                    45:46:73:82:7d:ba:8d:ba:14:f9:29:11:20:33:ea:
                    0f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:48:F2:0F:96:DF:17:0D:B8:DA:C5:CD:A4:B5:69:88:64:DA:B2:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl

            X509v3 Authority Key Identifier:
                keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.117.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:7c:b5:c5:43:98:1d:03:b6:40:81:4c:ef:03:54:37:5e:
         1f:4b:f8:20:76:93:7f:30:ee:9c:ae:9a:c5:75:e4:cd:ea:9b:
         72:86:78:ed:51:f9:c5:ed:83:c6:bf:0a:81:c4:22:c7:be:f0:
         c1:b3:0e:0f:e1:83:c8:1d:d7:df:96:62:ca:e8:d5:87:d6:b9:
         ca:2f:97:e6:c0:37:68:87:9f:27:3d:22:66:95:06:4b:2d:c0:
         00:76:a5:6c:09:38:30:b0:e9:b6:c6:78:78:6a:4a:95:60:80:
         ec:86:ef:f0:7f:6b:f4:e0:45:c1:ef:fa:fd:aa:5a:c8:a3:a8:
         3d:66:24:98:29:e7:23:10:75:10:6b:44:2e:12:64:e1:0d:ec:
         97:e3:75:8b:be:f0:37:3b:e4:49:05:4e:1f:50:a6:73:41:d2:
         a7:b0:c7:87:f4:3b:4b:23:ca:96:0c:6f:c4:1e:b8:b5:6b:ff:
         36:61:31:06:f8:f3:26:75:6c:66:00:0b:11:21:88:20:1d:05:
         68:84:ed:7f:5f:81:66:be:04:d1:9f:15:50:1d:90:aa:27:2d:
         ad:0c:98:0c:9d:97:05:fa:50:bf:77:7d:7c:3a:8a:82:19:d8:
         b1:3d:ba:73:a0:92:3f:a5:64:a2:7e:c9:01:cc:98:ae:fd:6a:
         9b:93:79:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWMbcoRjchRWkBWFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3
NTgzMB4XDTI0MDQxNTAxMDAyNloXDTI0MDcxNDAxMDAyNlowLzEtMCsGA1UEAxMk
MDZlZjRkMDQtYTZjZC00NjFmLTg2Y2YtZWJhNjU4ODJmYzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWvTCIUS5OSMQ2I9DmIQ6DL5nTOkxLc+dRt8
/Hbub+ztBaVuVnCxdKhqgDf2vvsejtnkvCqv79sWusaHjW0amtjFZfx43a9lCQV2
64siVeck17DmOLxKW1+/qq2l38ZP/7S/nKiVN/+vV0tJwAPGxlW0otdFHIwQT6Fg
vmHJp+BuRyoLLjZnZ72T12pRvSgkbTtbHgU6wdmv5rglehmHkOyLvIp5SJcLhOif
S8LQb6ACvLQeGs5u06PHNh+U0fLlFYpkiVfAJfc9Mn5BsyaI1BoOm44nWCnHneCh
t1vVOZYlu+I120gj5YnyQrE7YHxFRnOCfbqNuhT5KREgM+oPCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO9I8g+W3xcNuNrFzaS1aYhk2rJxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk
NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvZmYwMDg0YzYtYjVjYS0z
ZjMzLTlhMDAtMjNhN2ZmZWY4MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx
ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0
NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2
MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXUgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrLfLXFQ5gdA7ZAgUzvA1Q3Xh9L+CB2k38w7pyumsV15M3qm3KGeO1R
+cXtg8a/CoHEIse+8MGzDg/hg8gd19+WYsro1YfWucovl+bAN2iHnyc9ImaVBkst
wAB2pWwJODCw6bbGeHhqSpVggOyG7/B/a/TgRcHv+v2qWsijqD1mJJgp5yMQdRBr
RC4SZOEN7JfjdYu+8Dc75EkFTh9QpnNB0qewx4f0O0sjypYMb8QeuLVr/zZhMQb4
8yZ1bGYACxEhiCAdBWiE7X9fgWa+BNGfFVAdkKonLa0MmAydlwX6UL93fXw6ioIZ
2LE9unOgkj+lZKJ+yQHMmK79apuTecA=
-----END CERTIFICATE-----
Generated at Mon Jun 3 21:55:02 2024 by rpki-client on console-fra.rpki-client.org