Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa
File:                     bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa (raw, json)
Hash identifier:          66yIR2VN2AnW7WoXAO5QhHGIe4LLc5C0RnJS12Jv4r0=
Subject key identifier:   90:C4:CE:5D:C7:DB:51:E9:8B:F9:3F:0D:58:59:AE:7E:CC:1D:4A:E4
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847600BA62FDF272C9325E66000
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16839
IP address blocks:        149.96.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a6:2f:df:27:2c:93:25:e6:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=fce0c376-d084-4c15-a288-ba0d5c3e6f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:4e:2e:e9:71:2a:ac:05:0d:ee:f1:78:31:
                    17:33:40:7f:e8:3d:18:08:98:60:89:23:d8:d7:bf:
                    fa:a5:cb:ca:52:ed:4e:0b:4b:05:e9:ce:1a:b7:30:
                    12:d9:f3:5a:a3:4c:7c:a9:47:15:b7:ab:14:9a:fa:
                    29:77:e3:e6:da:7f:a5:c7:1d:5a:4e:ed:69:6c:5e:
                    3c:6c:51:9f:2a:eb:a3:03:9b:b7:19:88:68:00:41:
                    6b:63:aa:c0:54:98:d7:ce:e6:b0:00:0a:a8:94:fd:
                    27:85:95:a6:47:3f:57:e8:88:b4:a6:ee:07:ae:db:
                    f0:db:c4:a0:e2:e1:95:ec:fb:e4:c8:73:a6:2b:a7:
                    84:07:9d:da:2d:35:2b:eb:a1:9f:c8:f1:80:e0:fa:
                    60:eb:a3:93:ff:79:bf:2b:bf:bb:d0:e2:88:95:da:
                    11:3e:d5:c4:c1:98:0d:b8:0d:03:39:ab:ea:e4:70:
                    86:02:19:2b:21:ae:8f:64:3f:3e:78:3a:c1:59:73:
                    6c:20:48:c4:ef:9b:16:19:bf:5c:c8:d3:98:6a:04:
                    84:83:17:ab:ae:27:28:8e:ae:7a:40:c6:ec:a8:97:
                    32:55:26:14:6e:2b:a4:71:7a:66:9e:af:97:40:10:
                    9d:79:06:1f:b4:33:c3:ef:f0:39:18:3d:10:a2:eb:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C4:CE:5D:C7:DB:51:E9:8B:F9:3F:0D:58:59:AE:7E:CC:1D:4A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bdab8469-8cb5-3fdf-9f49-ecc56ced21f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:41:ea:5d:02:6e:e6:e8:c8:bd:9d:93:f0:dd:28:6e:d3:db:
         e0:f3:c1:1d:b1:1b:74:33:5d:a0:05:a3:cd:a0:d3:36:0c:0b:
         43:06:c4:b9:87:ce:6f:5a:91:68:a9:66:e0:e6:01:7a:b4:21:
         19:b4:a6:9a:fe:12:86:38:88:23:cb:db:dd:56:95:9a:3d:f3:
         34:19:e0:18:cf:15:e3:e1:ee:a2:0f:c7:f6:9d:2f:b1:98:c1:
         a6:5a:17:80:6f:38:f5:3a:51:78:56:1d:d6:f4:41:ab:b9:ba:
         f3:d7:80:02:11:a8:98:8c:28:89:4a:3c:3b:6f:28:4e:4e:e7:
         fa:d5:b5:02:4b:45:b4:b0:65:9a:65:ee:74:29:37:f9:5e:86:
         e6:c0:67:d7:1d:36:2f:75:cf:7a:61:a9:ce:d4:6e:da:d0:1a:
         99:98:26:cb:c9:b0:83:a1:9b:05:fb:e4:cc:20:85:5c:4f:b9:
         b9:d7:fd:43:a3:30:bf:fa:a3:92:db:be:4b:37:2b:ef:92:d3:
         40:bd:ce:e1:25:ff:48:f4:05:4f:21:f3:28:8f:fd:da:88:67:
         89:a9:52:b8:d7:eb:34:0f:24:a8:a6:0b:7e:70:54:03:91:ce:
         79:90:fd:27:48:84:b2:46:2c:12:c3:5f:75:7e:2c:a0:51:0f:
         e8:98:d1:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC6Yv3ycskyXmYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
ZmNlMGMzNzYtZDA4NC00YzE1LWEyODgtYmEwZDVjM2U2ZjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh9OLulxKqwFDe7xeDEXM0B/6D0YCJhgiSPY
17/6pcvKUu1OC0sF6c4atzAS2fNao0x8qUcVt6sUmvopd+Pm2n+lxx1aTu1pbF48
bFGfKuujA5u3GYhoAEFrY6rAVJjXzuawAAqolP0nhZWmRz9X6Ii0pu4Hrtvw28Sg
4uGV7PvkyHOmK6eEB53aLTUr66GfyPGA4Ppg66OT/3m/K7+70OKIldoRPtXEwZgN
uA0DOavq5HCGAhkrIa6PZD8+eDrBWXNsIEjE75sWGb9cyNOYagSEgxerricojq56
QMbsqJcyVSYUbiukcXpmnq+XQBCdeQYftDPD7/A5GD0QouuPVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDEzl3H21Hpi/k/DVhZrn7MHUrkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmRhYjg0NjktOGNiNS0z
ZmRmLTlmNDktZWNjNTZjZWQyMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlWACMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVB6l0CbuboyL2dk/DdKG7T2+DzwR2xG3QzXaAFo82g0zYMC0MGxLmH
zm9akWipZuDmAXq0IRm0ppr+EoY4iCPL291WlZo98zQZ4BjPFePh7qIPx/adL7GY
waZaF4BvOPU6UXhWHdb0Qau5uvPXgAIRqJiMKIlKPDtvKE5O5/rVtQJLRbSwZZpl
7nQpN/lehubAZ9cdNi91z3phqc7UbtrQGpmYJsvJsIOhmwX75MwghVxPubnX/UOj
ML/6o5Lbvks3K++S00C9zuEl/0j0BU8h8yiP/dqIZ4mpUrjX6zQPJKimC35wVAOR
znmQ/SdIhLJGLBLDX3V+LKBRD+iY0SA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:06 2024 by rpki-client on console-fra.rpki-client.org