Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa
File:                     41f68333-52c9-3f36-ba59-589d37e6bdf7.roa (raw, json)
Hash identifier:          77XLRVCvK29NdDgQ8daprdbczl1HCqnnp4vt2yFMOFw=
Subject key identifier:   18:E9:BD:7C:A5:CA:BC:EC:04:41:7D:48:5E:07:47:8D:CF:28:4C:BF
Certificate issuer:       /CN=edecac80-d7c3-48ad-8738-ec98e8c08265
Certificate serial:       010D0C9F432858455A2D83EDB74F856878B3F200
Authority key identifier: 2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     394475
IP address blocks:        209.35.179.0/24 maxlen: 24
                          209.35.177.0/24 maxlen: 24
                          209.35.180.0/24 maxlen: 24
                          209.35.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:83:ed:b7:4f:85:68:78:b3:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edecac80-d7c3-48ad-8738-ec98e8c08265
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=673b66c4-6404-41bc-be17-314e296f571d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:c4:30:21:27:46:6c:6d:d3:c6:70:af:a9:
                    9e:19:45:78:03:d1:90:c7:ec:e6:15:49:4f:32:cf:
                    63:56:a2:8b:c3:a5:75:1c:ef:5a:95:39:7e:c3:3d:
                    85:eb:8b:0e:ba:72:2a:1e:7c:dc:93:b5:e6:ac:70:
                    10:f8:01:9f:1a:30:11:a5:3f:6d:e7:f1:65:53:88:
                    7b:26:8e:f3:9e:06:e6:d5:42:f1:95:45:71:d3:e8:
                    83:c1:88:48:07:ef:e7:7a:3a:9a:3e:36:89:14:69:
                    a6:02:59:43:ce:18:c2:ce:12:84:c2:8f:92:ce:c6:
                    23:86:6d:be:66:53:71:ee:46:fc:01:cc:5f:18:85:
                    3b:3e:fe:50:77:1b:a1:27:a5:57:da:52:2d:6a:fe:
                    1b:ca:2d:07:bd:c0:8c:1f:21:94:58:c0:d5:52:db:
                    ca:fd:1e:20:c5:b9:8e:7f:31:6b:f2:d1:5e:d9:8f:
                    6f:cb:e5:db:05:6c:42:7a:96:6f:94:f8:8f:c1:4d:
                    b7:a6:a5:ba:53:6f:90:e1:4d:a9:79:7b:51:d7:0b:
                    1c:ea:89:5a:6f:07:03:9d:66:f9:cb:79:b2:5a:8e:
                    0a:16:09:32:69:29:d5:29:2d:31:18:93:15:78:76:
                    3c:c9:4c:9d:78:b8:6b:72:c6:91:0d:c8:9a:82:06:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:BD:7C:A5:CA:BC:EC:04:41:7D:48:5E:07:47:8D:CF:28:4C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.crl

            X509v3 Authority Key Identifier:
                keyid:2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.176.0/23
                  209.35.179.0-209.35.180.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:2c:61:46:fe:e6:82:ce:7a:d2:50:41:0a:b1:04:2e:29:
         e8:2d:20:29:d6:c5:ae:2d:c0:2a:16:6b:2c:d4:ad:82:8a:60:
         a3:e9:55:ab:59:8b:1b:80:f3:de:82:6a:0d:64:1b:2a:53:b3:
         10:21:23:b6:e6:f7:a1:ba:57:34:aa:25:a3:5d:bd:34:33:84:
         0b:ef:02:cf:5a:4a:0f:b3:7f:f5:f2:1f:ef:93:c9:32:f2:d4:
         0a:47:f4:a1:cc:f3:d8:6e:1a:0a:80:c1:ca:a4:06:61:87:38:
         74:47:a3:9e:ee:f2:38:ea:25:bc:52:00:b5:3e:41:11:87:e1:
         eb:e2:24:5c:b9:a7:4d:5b:68:02:ac:6f:89:52:ce:31:b3:79:
         1b:c3:a1:c7:d8:f7:f6:bf:b8:73:81:8a:81:a1:52:b3:98:1d:
         1e:9c:ce:c2:dc:52:6a:71:30:4b:0d:22:59:c5:d4:94:95:0a:
         25:4f:fb:42:42:f8:b3:6a:2e:0f:a2:51:e7:b9:14:fc:d8:47:
         65:34:90:ae:e5:8d:ad:ba:b7:a5:d6:35:93:e4:06:b8:63:b5:
         ce:48:9f:ed:fd:61:2e:d3:ae:04:f5:0b:dc:15:7f:ab:03:de:
         ff:aa:33:e6:50:39:ac:b4:89:91:4e:4b:44:aa:77:68:ca:f3:
         91:17:86:f2
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEVaLYPtt0+FaHiz8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWRlY2FjODAtZDdjMy00OGFkLTg3MzgtZWM5OGU4YzA4
MjY1MB4XDTI0MDMyODAxMDAyN1oXDTI0MDYyNjAxMDAyN1owLzEtMCsGA1UEAxMk
NjczYjY2YzQtNjQwNC00MWJjLWJlMTctMzE0ZTI5NmY1NzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KvEMCEnRmxt08Zwr6meGUV4A9GQx+zmFUlP
Ms9jVqKLw6V1HO9alTl+wz2F64sOunIqHnzck7XmrHAQ+AGfGjARpT9t5/FlU4h7
Jo7zngbm1ULxlUVx0+iDwYhIB+/nejqaPjaJFGmmAllDzhjCzhKEwo+SzsYjhm2+
ZlNx7kb8AcxfGIU7Pv5QdxuhJ6VX2lItav4byi0HvcCMHyGUWMDVUtvK/R4gxbmO
fzFr8tFe2Y9vy+XbBWxCepZvlPiPwU23pqW6U2+Q4U2peXtR1wsc6olabwcDnWb5
y3myWo4KFgkyaSnVKS0xGJMVeHY8yUydeLhrcsaRDciaggYw3wIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFBjpvXylyrzsBEF9SF4HR43PKEy/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZGVj
YWM4MC1kN2MzLTQ4YWQtODczOC1lYzk4ZThjMDgyNjUvNDFmNjgzMzMtNTJjOS0z
ZjM2LWJhNTktNTg5ZDM3ZTZiZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWRlY2FjODAtZDdjMy00OGFkLTg3
MzgtZWM5OGU4YzA4MjY1L2VkZWNhYzgwLWQ3YzMtNDhhZC04NzM4LWVjOThlOGMw
ODI2NS5jcmwwHwYDVR0jBBgwFoAULiA2ytU4BtOOrVCB6mWcc5OiDQkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lZGVjYWM4MC1kN2MzLTQ4YWQtODczOC1lYzk4
ZThjMDgyNjUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQB0SOwMAwD
BADRI7MDBADRI7QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAlrYsYUb+5oLOetJQQQqxBC4p6C0gKdbFri3A
KhZrLNStgopgo+lVq1mLG4Dz3oJqDWQbKlOzECEjtub3obpXNKolo129NDOEC+8C
z1pKD7N/9fIf75PJMvLUCkf0oczz2G4aCoDByqQGYYc4dEejnu7yOOolvFIAtT5B
EYfh6+IkXLmnTVtoAqxviVLOMbN5G8Ohx9j39r+4c4GKgaFSs5gdHpzOwtxSanEw
Sw0iWcXUlJUKJU/7QkL4s2ouD6JR57kU/NhHZTSQruWNrbq3pdY1k+QGuGO1zkif
7f1hLtOuBPUL3BV/qwPe/6oz5lA5rLSJkU5LRKp3aMrzkReG8g==
-----END CERTIFICATE-----
Generated at Mon May 20 15:19:48 2024 by rpki-client on console-fra.rpki-client.org