Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/44364e98-9141-386a-9c81-35c87555c167.roa
File:                     44364e98-9141-386a-9c81-35c87555c167.roa (raw, json)
Hash identifier:          /XxH0Gj7zVUoVcPDhXFk+UiO4oxJNX5Ig379bVz1lC8=
Subject key identifier:   21:BF:66:97:7C:BC:A7:57:49:0C:F7:F7:B0:63:01:F7:7E:AE:EE:58
Certificate issuer:       /CN=7aaedf42-8faf-449b-8735-b772a5f92af2
Certificate serial:       010D0C9F432858473A5B2F879D899C82DE2EB5C0
Authority key identifier: 53:47:BF:66:C8:68:67:B2:33:9F:6A:F6:9C:2D:95:0D:27:A6:E6:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/44364e98-9141-386a-9c81-35c87555c167.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     48152
IP address blocks:        149.137.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:2f:87:9d:89:9c:82:de:2e:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aaedf42-8faf-449b-8735-b772a5f92af2
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=bc8bff73-73f4-4294-afaa-5a54789b0553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:16:f9:22:1d:41:a3:b5:1a:d4:89:16:70:
                    46:4c:d6:eb:c0:e2:17:2e:0e:a1:c6:f1:a3:da:fb:
                    f7:ef:ed:92:24:6b:70:f9:75:86:cb:cb:a6:25:7c:
                    53:ff:82:5a:8d:62:dd:47:83:5a:a9:e2:ac:f1:a1:
                    88:e4:a9:28:71:07:c5:d6:89:94:3f:b2:36:78:7b:
                    97:2e:51:5d:24:68:46:b3:01:99:87:b3:d5:31:d0:
                    d2:82:88:b9:94:98:92:b1:39:57:f0:4d:41:94:3c:
                    e1:18:c9:51:9d:82:5b:c7:bf:35:12:ee:9e:5f:c6:
                    a0:70:4c:f4:ec:f7:39:ef:ac:83:17:bd:16:90:b6:
                    86:97:cb:7b:e9:1f:f9:8d:23:e5:f0:83:5b:95:a8:
                    37:06:49:11:bc:47:56:08:a9:ab:61:e2:b6:f9:42:
                    27:e3:bc:33:eb:25:29:2d:2a:04:e3:9b:d9:c8:44:
                    49:a0:f2:49:24:32:c4:96:92:d4:b8:fc:3e:76:45:
                    af:36:98:30:1b:32:ab:9f:10:a1:36:b1:e7:ef:b5:
                    7d:c0:a3:fd:d9:0a:3a:33:d5:a3:eb:3f:a7:2a:eb:
                    e4:b7:e4:48:40:41:c5:cc:eb:61:43:f7:03:6d:c6:
                    1d:34:ea:72:65:30:01:60:09:b2:28:87:77:17:58:
                    af:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BF:66:97:7C:BC:A7:57:49:0C:F7:F7:B0:63:01:F7:7E:AE:EE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/44364e98-9141-386a-9c81-35c87555c167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.crl

            X509v3 Authority Key Identifier:
                keyid:53:47:BF:66:C8:68:67:B2:33:9F:6A:F6:9C:2D:95:0D:27:A6:E6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:66:c3:a6:9f:2f:34:27:2c:c3:ca:d4:8e:f7:6d:8e:6f:ad:
         a8:c0:80:4b:bd:97:fc:96:e6:52:2e:78:ae:69:29:94:cd:85:
         47:e6:5b:92:7d:15:ee:0c:ad:23:8c:68:7e:65:be:d3:0d:15:
         a0:2b:3b:b9:7a:da:bc:03:43:4d:8b:30:4d:d0:ac:06:07:36:
         da:67:46:61:88:52:18:ab:3a:a4:e6:54:95:f5:58:0a:32:24:
         77:d7:53:51:26:e2:d8:2e:f3:d4:3d:09:a3:58:38:98:9e:b9:
         1f:04:3f:2e:e0:5e:ce:b7:78:b4:8b:e7:b8:54:e7:0a:6a:09:
         4a:d0:8e:62:cf:3d:07:cf:32:74:9c:34:3f:a5:0d:11:13:b0:
         f7:86:d1:a6:a8:b7:52:1c:fd:9f:a8:72:02:7b:a8:9f:d8:63:
         99:c3:b7:71:cd:50:f9:de:4d:cb:a9:e6:87:69:80:1a:06:56:
         60:0f:18:4e:0c:2e:c8:06:6f:66:e0:71:b0:06:ff:4e:19:03:
         4c:96:31:f6:8c:96:14:57:77:b6:10:0f:32:64:14:62:07:40:
         cd:8b:05:ce:4d:6d:95:03:31:40:2c:58:6a:a2:b3:02:b6:d8:
         8e:1e:ae:66:2d:4c:13:c9:18:5f:32:8f:dc:11:3a:9e:ce:3e:
         c0:39:f6:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6Wy+HnYmcgt4utcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FhZWRmNDItOGZhZi00NDliLTg3MzUtYjc3MmE1Zjky
YWYyMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
YmM4YmZmNzMtNzNmNC00Mjk0LWFmYWEtNWE1NDc4OWIwNTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsugW+SIdQaO1GtSJFnBGTNbrwOIXLg6hxvGj
2vv37+2SJGtw+XWGy8umJXxT/4JajWLdR4NaqeKs8aGI5KkocQfF1omUP7I2eHuX
LlFdJGhGswGZh7PVMdDSgoi5lJiSsTlX8E1BlDzhGMlRnYJbx781Eu6eX8agcEz0
7Pc576yDF70WkLaGl8t76R/5jSPl8INblag3BkkRvEdWCKmrYeK2+UIn47wz6yUp
LSoE45vZyERJoPJJJDLElpLUuPw+dkWvNpgwGzKrnxChNrHn77V9wKP92Qo6M9Wj
6z+nKuvkt+RIQEHFzOthQ/cDbcYdNOpyZTABYAmyKId3F1ivQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCG/Zpd8vKdXSQz397BjAfd+ru5YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YWFl
ZGY0Mi04ZmFmLTQ0OWItODczNS1iNzcyYTVmOTJhZjIvNDQzNjRlOTgtOTE0MS0z
ODZhLTljODEtMzVjODc1NTVjMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2FhZWRmNDItOGZhZi00NDliLTg3
MzUtYjc3MmE1ZjkyYWYyLzdhYWVkZjQyLThmYWYtNDQ5Yi04NzM1LWI3NzJhNWY5
MmFmMi5jcmwwHwYDVR0jBBgwFoAUU0e/ZshoZ7Izn2r2nC2VDSem5sMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83YWFlZGY0Mi04ZmFmLTQ0OWItODczNS1iNzcy
YTVmOTJhZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClYnUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJmw6afLzQnLMPK1I73bY5vrajAgEu9l/yW5lIueK5pKZTNhUfmW5J9
Fe4MrSOMaH5lvtMNFaArO7l62rwDQ02LME3QrAYHNtpnRmGIUhirOqTmVJX1WAoy
JHfXU1Em4tgu89Q9CaNYOJieuR8EPy7gXs63eLSL57hU5wpqCUrQjmLPPQfPMnSc
ND+lDRETsPeG0aaot1Ic/Z+ocgJ7qJ/YY5nDt3HNUPneTcup5odpgBoGVmAPGE4M
LsgGb2bgcbAG/04ZA0yWMfaMlhRXd7YQDzJkFGIHQM2LBc5NbZUDMUAsWGqiswK2
2I4ermYtTBPJGF8yj9wROp7OPsA59n4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org