Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c0b529f1-928a-3e8c-925c-e9b06c455bbd.roa
File:                     c0b529f1-928a-3e8c-925c-e9b06c455bbd.roa (raw, json)
Hash identifier:          +1gxkO0h6knUkxn5UT8KjAmWBzu1njsYWE4xzd6D57w=
Subject key identifier:   B3:24:3D:B4:72:1F:07:8E:F7:CE:94:8A:57:3F:1C:9C:20:5B:EC:37
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285847802654D29CAE017E460C8440
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c0b529f1-928a-3e8c-925c-e9b06c455bbd.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     29802
IP address blocks:        181.41.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:54:d2:9c:ae:01:7e:46:0c:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=34107e77-ae5c-4f7b-8d26-31d43fc65b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:42:e8:c6:f5:c5:40:29:8e:0c:5d:fa:57:
                    ed:2b:54:5c:a9:64:ca:aa:32:ae:0e:fb:3a:ca:db:
                    31:80:a0:f5:52:92:39:49:75:4a:d9:91:74:b8:46:
                    1e:9d:db:b9:da:0b:01:bf:8a:59:b4:4f:31:60:5f:
                    4e:49:4c:0b:4d:61:c9:09:65:cc:fd:e6:da:85:67:
                    53:2f:70:27:fd:c7:2d:61:be:d6:6b:1d:7d:88:a0:
                    7e:3a:a6:dc:62:46:98:5e:ad:8c:60:ae:aa:75:59:
                    7e:04:da:ab:b8:55:b9:70:95:04:fc:a6:ea:8c:e6:
                    65:61:6b:d2:72:ec:3a:59:1f:19:17:30:d2:e8:71:
                    25:ad:5c:46:5e:13:1e:3f:76:4c:86:19:e5:1c:4d:
                    9a:d7:75:f7:87:86:c9:d0:54:7c:d9:61:fa:7c:0f:
                    2e:00:3a:cb:0a:b1:48:42:02:dd:30:71:97:9e:c7:
                    26:01:33:af:7e:2b:34:e7:39:1d:b7:d2:b0:ae:75:
                    44:50:27:c2:d7:93:f0:36:46:4a:d2:2b:73:64:1f:
                    a4:25:2c:c2:77:25:32:3b:46:f4:17:17:8c:93:67:
                    b8:01:ed:22:f6:63:dc:57:29:80:dd:99:ac:bd:2f:
                    fb:c3:13:0e:3a:f6:a6:9c:a8:40:b6:f9:05:48:f2:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:3D:B4:72:1F:07:8E:F7:CE:94:8A:57:3F:1C:9C:20:5B:EC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c0b529f1-928a-3e8c-925c-e9b06c455bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:bd:05:87:fc:08:06:5d:1a:cd:f1:e0:ca:9d:de:ab:d1:5e:
         0b:92:de:00:fc:0f:b4:dc:af:51:33:24:d0:6e:c6:e8:a8:c0:
         23:39:be:2a:03:64:a0:3a:1a:14:06:34:cd:6e:47:ad:47:2a:
         1b:d8:db:7a:1d:04:26:ba:c5:93:13:ec:f3:27:43:45:dc:d6:
         f7:3c:c2:6c:a4:f9:20:20:e3:c1:6a:60:ce:ac:6e:fb:f0:0e:
         8f:e3:26:cd:20:d7:1f:1a:13:17:4e:fa:e3:30:4b:8e:af:11:
         9d:6d:50:e6:44:05:f7:d8:85:b4:49:b9:4c:16:c7:2a:20:db:
         75:82:59:e4:c6:67:fe:ca:f4:73:a6:d5:85:00:80:04:ae:81:
         ef:42:a5:04:e0:ed:4e:5f:bb:6e:7b:c0:3e:e6:c3:11:5f:ac:
         7f:34:68:7a:d0:07:ae:93:da:76:d7:a7:25:e1:b1:f6:00:b8:
         9e:c0:c2:f1:cc:e5:23:6f:b7:91:dc:ea:e7:41:59:20:24:d5:
         0c:84:44:c0:41:b9:da:a6:18:9e:f6:01:8b:2c:cd:65:17:37:
         41:7a:f9:27:c1:f6:7a:92:11:c0:8c:61:b5:9c:68:21:3a:89:
         5a:4a:4d:66:ab:c4:43:f4:21:06:c5:8e:0c:15:4d:51:8c:8c:
         23:1e:14:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJlTSnK4BfkYMhEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
MzQxMDdlNzctYWU1Yy00ZjdiLThkMjYtMzFkNDNmYzY1YjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl81C6Mb1xUApjgxd+lftK1RcqWTKqjKuDvs6
ytsxgKD1UpI5SXVK2ZF0uEYendu52gsBv4pZtE8xYF9OSUwLTWHJCWXM/ebahWdT
L3An/cctYb7Wax19iKB+OqbcYkaYXq2MYK6qdVl+BNqruFW5cJUE/KbqjOZlYWvS
cuw6WR8ZFzDS6HElrVxGXhMeP3ZMhhnlHE2a13X3h4bJ0FR82WH6fA8uADrLCrFI
QgLdMHGXnscmATOvfis05zkdt9KwrnVEUCfC15PwNkZK0itzZB+kJSzCdyUyO0b0
FxeMk2e4Ae0i9mPcVymA3ZmsvS/7wxMOOvamnKhAtvkFSPKpJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMkPbRyHweO986Uilc/HJwgW+w3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYzBiNTI5ZjEtOTI4YS0z
ZThjLTkyNWMtZTliMDZjNDU1YmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtSmMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHO9BYf8CAZdGs3x4Mqd3qvRXguS3gD8D7Tcr1EzJNBuxuiowCM5vioD
ZKA6GhQGNM1uR61HKhvY23odBCa6xZMT7PMnQ0Xc1vc8wmyk+SAg48FqYM6sbvvw
Do/jJs0g1x8aExdO+uMwS46vEZ1tUOZEBffYhbRJuUwWxyog23WCWeTGZ/7K9HOm
1YUAgASuge9CpQTg7U5fu257wD7mwxFfrH80aHrQB66T2nbXpyXhsfYAuJ7AwvHM
5SNvt5Hc6udBWSAk1QyERMBBudqmGJ72AYsszWUXN0F6+SfB9nqSEcCMYbWcaCE6
iVpKTWarxEP0IQbFjgwVTVGMjCMeFOQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:18 2024 by rpki-client on console-ams.rpki-client.org