Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
File:                     c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa (raw, json)
Hash identifier:          cM9loPWETWdq0Abu23oPi6H9SrHdni5kXrxOumnOkSk=
Subject key identifier:   D1:DA:13:D4:3F:12:05:38:C4:3A:4F:3F:14:6A:D4:5B:85:4F:2A:FF
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858471E7061042122703B26405940
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     61317
IP address blocks:        94.72.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:61:04:21:22:70:3b:26:40:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=ecbf5138-dfbc-4695-a3e6-feefed5bd5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:cf:19:16:3c:36:a9:e2:cb:7b:96:3f:ae:
                    d8:14:86:65:39:cc:96:18:8f:0d:5d:2c:54:05:9a:
                    d5:2b:df:ff:07:66:94:f5:10:9f:5a:4b:b4:f9:68:
                    64:c8:fd:fd:39:a8:45:2a:77:35:4e:55:f1:4e:d6:
                    c8:a1:3e:72:5e:aa:9b:b0:58:d2:d4:49:5d:8d:9d:
                    0e:48:91:dc:96:1d:01:47:3e:88:14:dd:5c:e4:ae:
                    43:0d:95:9a:8b:b6:be:2c:ae:12:2d:7b:ce:f6:3c:
                    79:b1:83:00:02:bf:a7:58:f6:9d:f8:75:ad:00:51:
                    d3:2a:64:0c:78:53:a1:a9:29:c2:72:a6:a7:24:64:
                    a5:42:ce:06:c3:cf:0c:d2:de:6a:63:29:46:2c:0b:
                    2f:75:3c:0b:3c:5c:b4:ab:ec:54:b8:bf:e1:83:c1:
                    60:bf:3d:86:71:72:2a:76:38:7b:08:b8:81:06:0c:
                    f7:66:c0:0c:8b:04:4c:0c:62:0b:b7:f1:5e:06:02:
                    c5:25:82:e5:0f:52:00:9b:81:8b:c5:3d:c3:08:75:
                    a5:1c:2b:15:86:28:6c:81:b9:47:16:ef:87:0d:5f:
                    fb:f4:6e:da:0a:c0:93:b3:66:92:48:be:9c:a4:53:
                    91:52:09:83:dc:7b:41:6b:66:90:ee:21:e2:24:c3:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:13:D4:3F:12:05:38:C4:3A:4F:3F:14:6A:D4:5B:85:4F:2A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1c:74:81:e4:14:9d:d2:44:af:49:ff:21:29:62:3c:7c:e4:
         21:b2:70:55:f0:a9:35:12:a7:d5:1b:19:74:88:da:71:f3:c5:
         c9:ed:8e:87:3b:25:6a:94:44:39:3d:86:c2:48:f4:11:e6:c0:
         96:86:8f:18:c4:8c:5e:1b:3f:10:d1:b8:8a:6e:94:ea:04:34:
         49:a0:81:07:2b:d0:dd:9b:a7:af:48:f0:2f:06:87:00:03:30:
         87:46:45:a9:67:83:27:25:6f:d4:4c:9b:52:c6:23:1c:17:08:
         17:d6:c6:70:f9:a8:7f:2f:1f:50:5e:80:e6:bc:c7:f3:1b:20:
         55:55:72:de:6c:ce:38:18:cd:77:2c:89:df:46:47:99:7f:9f:
         b1:2e:d0:dd:9c:a9:38:d7:84:3d:e2:15:4b:07:ee:14:43:28:
         38:5e:db:7e:0c:81:b8:8e:05:99:28:9f:d6:e7:a6:fd:6d:e0:
         34:85:3e:c3:11:33:33:ab:3b:6d:64:75:dc:47:f0:cf:2a:9d:
         df:e3:04:1a:ec:95:2d:1a:cf:3a:7d:76:63:75:54:e1:a3:d3:
         02:55:fa:b9:d9:98:05:5a:1d:74:5b:ff:66:04:e8:69:bd:c5:
         10:04:c3:7a:b4:e9:5e:6a:43:33:7e:b4:a0:81:f1:6e:a5:03:
         8e:57:9d:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcecGEEISJwOyZAWUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
ZWNiZjUxMzgtZGZiYy00Njk1LWEzZTYtZmVlZmVkNWJkNWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXrPGRY8Nqniy3uWP67YFIZlOcyWGI8NXSxU
BZrVK9//B2aU9RCfWku0+WhkyP39OahFKnc1TlXxTtbIoT5yXqqbsFjS1EldjZ0O
SJHclh0BRz6IFN1c5K5DDZWai7a+LK4SLXvO9jx5sYMAAr+nWPad+HWtAFHTKmQM
eFOhqSnCcqanJGSlQs4Gw88M0t5qYylGLAsvdTwLPFy0q+xUuL/hg8Fgvz2GcXIq
djh7CLiBBgz3ZsAMiwRMDGILt/FeBgLFJYLlD1IAm4GLxT3DCHWlHCsVhihsgblH
Fu+HDV/79G7aCsCTs2aSSL6cpFORUgmD3HtBa2aQ7iHiJMMqfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHaE9Q/EgU4xDpPPxRq1FuFTyr/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvYzc1YjQxMmEtMWQ4OC0z
ODMwLWFkNTAtY2Q3OTUwY2MzYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXkiyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAcdIHkFJ3SRK9J/yEpYjx85CGycFXwqTUSp9UbGXSI2nHzxcntjoc7
JWqURDk9hsJI9BHmwJaGjxjEjF4bPxDRuIpulOoENEmggQcr0N2bp69I8C8GhwAD
MIdGRalngyclb9RMm1LGIxwXCBfWxnD5qH8vH1BegOa8x/MbIFVVct5szjgYzXcs
id9GR5l/n7Eu0N2cqTjXhD3iFUsH7hRDKDhe234MgbiOBZkon9bnpv1t4DSFPsMR
MzOrO21kddxH8M8qnd/jBBrslS0azzp9dmN1VOGj0wJV+rnZmAVaHXRb/2YE6Gm9
xRAEw3q06V5qQzN+tKCB8W6lA45Xnfg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org