Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
File:                     dcd878df-351d-3045-9ba1-a9aee88944f5.roa (raw, json)
Hash identifier:          kKkrY3ngiGz0NWAUMgMjpK4ewr8kZrJZYFyewAGfOkk=
Subject key identifier:   BA:FE:E6:37:11:4D:02:5D:97:26:91:9C:DA:6E:CE:C9:35:A7:BF:C9
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F43285845C8739A02DC4BAE2242BD3840
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     11248
IP address blocks:        204.8.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:9a:02:dc:4b:ae:22:42:bd:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=32cca596-2ef8-4743-ae89-e4d1e9cfc6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:ee:38:28:df:5f:ed:dc:a0:17:64:6a:ce:
                    90:e6:b1:51:ba:40:af:75:f1:2a:8a:09:47:67:52:
                    e7:8f:0e:c9:a1:95:3a:81:cc:e6:e8:0d:0f:95:c1:
                    0d:63:91:71:a3:da:20:24:37:60:e4:5d:95:a0:02:
                    13:ac:e8:89:2a:d6:33:fb:5b:a4:89:65:af:1f:85:
                    c6:61:8d:70:fa:23:7c:d9:01:d5:63:0a:19:69:54:
                    13:a7:0c:ec:a2:83:a6:4c:d6:df:94:d9:5c:c7:a5:
                    26:1b:6e:1f:ad:4e:73:a8:12:e8:73:f8:76:33:4c:
                    68:d9:b2:ec:c0:1e:06:48:21:9c:4d:d3:a6:bf:64:
                    79:a0:63:37:96:ce:37:98:c4:2c:c0:17:76:e1:99:
                    69:c2:fd:8f:76:6d:a2:78:45:62:7b:e2:c7:ff:f9:
                    56:71:04:6b:56:c1:f3:92:15:7c:a5:af:28:85:75:
                    9e:4c:65:b9:a7:38:7d:20:73:da:db:68:5d:05:b6:
                    26:a9:08:df:7b:24:7b:77:e3:1e:27:ea:f1:95:f7:
                    00:9c:ed:22:bf:eb:c2:fc:1f:b2:70:b5:58:62:c5:
                    e1:1c:c5:11:02:ab:cd:7b:e8:48:63:1e:92:33:0c:
                    3f:07:8e:4b:fd:16:a5:f1:93:ba:af:2b:17:99:3e:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FE:E6:37:11:4D:02:5D:97:26:91:9C:DA:6E:CE:C9:35:A7:BF:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:cb:84:1e:61:be:42:45:13:85:42:ae:3e:08:6d:0b:09:
         f2:b0:71:ea:9c:ed:b7:0c:02:2f:7a:2f:81:c3:de:cd:8a:2d:
         0b:68:c2:41:dc:df:d0:c9:50:13:d4:b1:c6:c6:7b:62:c0:bb:
         c0:9f:60:40:71:6c:4a:ec:b8:5f:61:f9:2a:08:ba:15:c8:57:
         a1:09:f8:1e:44:51:ef:65:62:ad:dc:4f:63:ed:e8:ea:57:32:
         07:9c:da:d4:5e:fa:51:97:74:e7:5d:3c:fe:56:97:41:48:e1:
         d7:e0:a6:5a:19:31:56:f3:49:d4:8f:0a:1f:f1:d7:d4:73:b9:
         58:29:63:42:5a:14:47:52:27:e6:a7:cc:69:3b:2b:85:0a:04:
         01:2f:15:d5:ed:37:e6:62:24:f9:c0:c4:95:a8:ff:d5:d6:fc:
         5a:a1:9e:29:e9:6d:37:1f:da:05:e0:37:6d:35:51:27:03:55:
         2c:a5:9a:ce:cd:53:ba:b5:35:b3:24:61:58:18:7e:85:04:af:
         d8:1f:6c:51:32:52:64:7c:5d:1c:88:54:7c:89:e2:46:7e:ef:
         97:7a:12:a2:9e:78:a4:25:59:2e:d4:b1:79:d2:9a:51:ef:30:
         62:59:93:8a:e4:27:d7:ef:ae:e5:89:de:c3:b2:c6:48:c0:ef:
         db:16:81:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXIc5oC3EuuIkK9OEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjRlZjY3OWEtYjMxNC00YWQ2LTkwYmItZjdkMmJmYzBj
ZGExMB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk
MzJjY2E1OTYtMmVmOC00NzQzLWFlODktZTRkMWU5Y2ZjNmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f3uOCjfX+3coBdkas6Q5rFRukCvdfEqiglH
Z1Lnjw7JoZU6gczm6A0PlcENY5Fxo9ogJDdg5F2VoAITrOiJKtYz+1ukiWWvH4XG
YY1w+iN82QHVYwoZaVQTpwzsooOmTNbflNlcx6UmG24frU5zqBLoc/h2M0xo2bLs
wB4GSCGcTdOmv2R5oGM3ls43mMQswBd24Zlpwv2Pdm2ieEVie+LH//lWcQRrVsHz
khV8pa8ohXWeTGW5pzh9IHPa22hdBbYmqQjfeyR7d+MeJ+rxlfcAnO0iv+vC/B+y
cLVYYsXhHMURAqvNe+hIYx6SMww/B45L/Ral8ZO6rysXmT4G4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLr+5jcRTQJdlyaRnNpuzsk1p7/JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVm
Njc5YS1iMzE0LTRhZDYtOTBiYi1mN2QyYmZjMGNkYTEvZGNkODc4ZGYtMzUxZC0z
MDQ1LTliYTEtYTlhZWU4ODk0NGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjRlZjY3OWEtYjMxNC00YWQ2LTkw
YmItZjdkMmJmYzBjZGExL2I0ZWY2NzlhLWIzMTQtNGFkNi05MGJiLWY3ZDJiZmMw
Y2RhMS5jcmwwHwYDVR0jBBgwFoAUHw20UM5XU32LvCw/nGuJExAZCIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVmNjc5YS1iMzE0LTRhZDYtOTBiYi1mN2Qy
YmZjMGNkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9Ey4QeYb5CRROFQq4+CG0LCfKwceqc7bcMAi96L4HD3s2KLQtowkHc
39DJUBPUscbGe2LAu8CfYEBxbErsuF9h+SoIuhXIV6EJ+B5EUe9lYq3cT2Pt6OpX
Mgec2tRe+lGXdOddPP5Wl0FI4dfgploZMVbzSdSPCh/x19RzuVgpY0JaFEdSJ+an
zGk7K4UKBAEvFdXtN+ZiJPnAxJWo/9XW/FqhninpbTcf2gXgN201UScDVSylms7N
U7q1NbMkYVgYfoUEr9gfbFEyUmR8XRyIVHyJ4kZ+75d6EqKeeKQlWS7UsXnSmlHv
MGJZk4rkJ9fvruWJ3sOyxkjA79sWgWU=
-----END CERTIFICATE-----
Generated at Wed May 22 18:48:24 2024 by rpki-client on console-fra.rpki-client.org