Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/6cdc234a-9c4f-346f-a586-8e2b8e139cf4.roa
File:                     6cdc234a-9c4f-346f-a586-8e2b8e139cf4.roa (raw, json)
Hash identifier:          Umi4u2y3CtkP+qXgZXAnAQxaw/sJD2/UesnyNxU0KhE=
Subject key identifier:   90:D4:A3:93:17:2B:5F:92:D2:C3:43:6B:3A:29:49:3E:36:A2:5E:1F
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285847802650BE8F1D32613A722D80
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/6cdc234a-9c4f-346f-a586-8e2b8e139cf4.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     400317
IP address blocks:        204.119.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:50:be:8f:1d:32:61:3a:72:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=50ef9e8f-4aef-4bfb-9de8-0ce65038c563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:4c:c0:af:42:8b:14:4b:26:f8:9c:0f:8a:
                    04:95:85:8a:52:81:12:31:1a:33:96:9f:89:6f:87:
                    45:eb:89:6a:57:d8:1f:f2:fe:10:09:cf:e1:6c:d3:
                    9c:05:38:46:6e:fb:a9:e4:e0:31:f9:55:62:96:81:
                    04:ab:69:a1:f2:53:8a:7a:7d:b7:78:82:85:45:0f:
                    da:af:2f:1b:a4:5c:d5:b3:cc:65:cb:0d:78:73:3f:
                    61:22:7d:b3:df:0c:f5:3f:03:7e:61:5c:59:c5:b5:
                    1e:0e:43:2b:8d:0a:ad:2c:12:f2:b2:0b:ee:8d:54:
                    4d:1f:0e:e3:fc:b7:d0:03:19:47:7e:9a:a1:99:46:
                    33:cf:24:a0:92:2d:97:ad:b7:5a:56:49:d1:4d:e7:
                    43:ea:02:b5:d0:ad:19:25:94:b4:bf:ba:6d:03:77:
                    19:bc:79:a9:99:0c:00:f4:4f:c1:34:19:4f:14:b1:
                    8d:99:80:08:48:3b:87:c8:f5:e3:85:e3:7d:d0:0d:
                    7c:ff:d8:39:02:1b:e0:26:3e:8c:f8:9a:09:d8:ef:
                    bb:e8:7c:cd:02:b6:c7:2c:60:d6:f4:89:b3:48:a9:
                    7b:7e:eb:5f:8c:8e:11:94:7a:21:fe:02:3a:be:c6:
                    71:c7:2c:55:2d:46:55:59:d3:a3:d6:63:65:63:8e:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D4:A3:93:17:2B:5F:92:D2:C3:43:6B:3A:29:49:3E:36:A2:5E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/6cdc234a-9c4f-346f-a586-8e2b8e139cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.119.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:45:20:55:e3:6f:58:40:63:41:25:ef:4f:97:8e:a3:e9:c6:
         e7:2f:33:80:e8:67:65:28:dc:e0:e3:94:0d:42:26:8c:ae:3b:
         38:58:50:29:fc:b4:8f:17:d9:d8:0a:a4:d7:fe:ce:88:dd:5f:
         ed:63:21:17:7a:c9:df:8b:23:0c:17:68:39:9c:e6:fd:c9:e6:
         b1:88:7a:75:e2:52:3c:d2:96:79:05:4c:72:03:b4:f1:0e:35:
         61:07:36:ee:be:21:c2:55:f9:5f:20:6e:88:2f:22:eb:73:75:
         18:f9:5e:09:9c:4a:c8:cf:f0:8a:b2:27:91:74:d3:71:ea:25:
         e3:6b:39:69:11:4e:5e:84:be:c0:8c:e4:af:d5:46:61:27:31:
         aa:69:5b:e4:0d:a1:73:04:09:ef:76:23:ba:c2:7f:cb:ab:f0:
         94:79:7e:0a:ab:26:e2:72:22:da:7c:54:e0:6e:31:93:48:93:
         ad:e7:fb:8b:13:93:43:54:20:ab:5a:66:ff:2c:8b:a6:1a:97:
         85:9f:f6:b5:59:ae:59:d8:86:c7:0e:08:1e:19:9a:1c:c6:18:
         ff:2a:96:84:1d:7f:1e:e2:b4:92:1a:73:05:c0:8f:54:85:bd:
         51:2a:8a:38:34:dc:81:e4:21:03:47:e7:a7:f5:91:d6:99:30:
         16:e9:2e:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeAJlC+jx0yYTpyLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
NTBlZjllOGYtNGFlZi00YmZiLTlkZTgtMGNlNjUwMzhjNTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+RMwK9CixRLJvicD4oElYWKUoESMRozlp+J
b4dF64lqV9gf8v4QCc/hbNOcBThGbvup5OAx+VViloEEq2mh8lOKen23eIKFRQ/a
ry8bpFzVs8xlyw14cz9hIn2z3wz1PwN+YVxZxbUeDkMrjQqtLBLysgvujVRNHw7j
/LfQAxlHfpqhmUYzzySgki2XrbdaVknRTedD6gK10K0ZJZS0v7ptA3cZvHmpmQwA
9E/BNBlPFLGNmYAISDuHyPXjheN90A18/9g5AhvgJj6M+JoJ2O+76HzNArbHLGDW
9ImzSKl7futfjI4RlHoh/gI6vsZxxyxVLUZVWdOj1mNlY47HswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDUo5MXK1+S0sNDazopST42ol4fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNmNkYzIzNGEtOWM0Zi0z
NDZmLWE1ODYtOGUyYjhlMTM5Y2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHcbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdFIFXjb1hAY0El70+XjqPpxucvM4DoZ2Uo3ODjlA1CJoyuOzhYUCn8
tI8X2dgKpNf+zojdX+1jIRd6yd+LIwwXaDmc5v3J5rGIenXiUjzSlnkFTHIDtPEO
NWEHNu6+IcJV+V8gbogvIutzdRj5XgmcSsjP8IqyJ5F003HqJeNrOWkRTl6EvsCM
5K/VRmEnMappW+QNoXMECe92I7rCf8ur8JR5fgqrJuJyItp8VOBuMZNIk63n+4sT
k0NUIKtaZv8si6Yal4Wf9rVZrlnYhscOCB4ZmhzGGP8qloQdfx7itJIacwXAj1SF
vVEqijg03IHkIQNH56f1kdaZMBbpLoo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:26 2024 by rpki-client on console-fra.rpki-client.org