Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7044c074-f82f-3009-90ff-30495d0626b0.roa
File:                     7044c074-f82f-3009-90ff-30495d0626b0.roa (raw, json)
Hash identifier:          iE6ht3RuKN4EdoI3dC9wqrl7hMT3i3WvJKKjllzW9RE=
Subject key identifier:   5D:81:7A:5E:B4:73:18:CC:BD:E7:6F:64:3F:DE:C2:F0:EE:DD:6E:57
Certificate issuer:       /CN=dbf66384-fa53-47fb-938a-f1e5064023e5
Certificate serial:       010D0C9F43285847DBB013483F10931315F46F00
Authority key identifier: D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7044c074-f82f-3009-90ff-30495d0626b0.roa
Signing time:             Tue 12 Nov 2024 19:56:45 +0000
ROA not before:           Tue 12 Nov 2024 19:56:45 +0000
ROA not after:            Mon 10 Feb 2025 19:56:45 +0000
asID:                     15830
IP address blocks:        129.176.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:b0:13:48:3f:10:93:13:15:f4:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbf66384-fa53-47fb-938a-f1e5064023e5
        Validity
            Not Before: Nov 12 19:56:45 2024 GMT
            Not After : Feb 10 19:56:45 2025 GMT
        Subject: CN=a94f088f-453f-450a-8c59-45572281f2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:73:ee:4f:02:5c:37:60:05:06:c3:56:ac:
                    8f:d4:d2:a5:07:42:e1:ec:62:92:5e:38:1e:76:11:
                    e7:95:ca:ab:21:5a:7f:39:cb:fc:fe:73:c6:7e:01:
                    44:b7:c3:8b:c5:71:a2:d1:4b:f0:40:9d:ff:49:4d:
                    ca:f8:44:c0:6a:cb:8c:9f:2b:62:d9:01:de:54:d5:
                    bf:f6:39:a6:2d:0b:cf:36:fe:4f:ea:4c:54:76:f1:
                    e0:07:3c:5d:7c:a3:82:3d:89:75:3d:24:6d:48:e6:
                    e8:54:7c:38:0f:30:eb:78:2f:02:4e:b9:f4:c8:ce:
                    e7:1b:f8:c1:20:b2:d7:12:0e:fc:82:07:89:b6:5a:
                    09:67:b0:9d:69:dd:3e:79:6e:01:c7:25:2f:6e:f1:
                    b0:5d:ab:25:33:6c:aa:cd:fc:2a:33:d1:c4:4e:df:
                    bc:61:d8:34:6d:5d:16:dd:8c:b5:81:98:67:f3:c3:
                    c0:1a:f8:a0:e5:2d:61:9d:c3:03:54:65:26:ad:dd:
                    b5:ee:26:75:ae:8b:20:d9:f5:74:68:0d:f4:6c:34:
                    75:b0:af:b4:88:02:f1:15:84:86:ba:60:b3:f1:aa:
                    b5:97:52:ed:30:20:0d:ba:60:aa:ac:eb:cb:67:47:
                    8c:4e:35:96:ac:87:15:c9:5c:b5:b2:65:2a:df:d8:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:7A:5E:B4:73:18:CC:BD:E7:6F:64:3F:DE:C2:F0:EE:DD:6E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7044c074-f82f-3009-90ff-30495d0626b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.176.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:88:33:98:3b:3a:37:38:50:bd:48:5c:82:fc:73:e5:21:a7:
         b6:50:13:5f:37:7b:82:87:2e:72:2c:97:1f:30:4c:f9:89:00:
         4f:12:fe:ea:93:27:34:87:7f:5e:53:83:d0:3f:bf:c2:1a:ca:
         86:6f:ec:e4:32:88:7c:70:3a:cd:e4:e1:67:19:3a:ed:99:fa:
         19:93:5e:09:8b:de:ea:c6:c9:80:91:fa:c2:b6:8e:b8:f3:ec:
         7f:75:6f:11:c9:34:ae:7c:08:0c:6f:fc:da:7c:7d:70:f2:2e:
         66:14:f5:d2:9d:0e:5c:8d:d6:cf:89:fc:4c:37:33:ef:7d:04:
         9c:ab:c5:91:8e:53:1f:30:14:b9:1b:b2:aa:a9:a2:bd:19:52:
         8a:3e:20:7f:8e:e9:d4:e7:a9:fd:bf:f4:25:11:93:c4:fe:a2:
         5e:d6:10:84:09:d8:e2:76:a9:b9:ea:65:10:2a:61:6e:e1:b3:
         dd:51:5a:dd:20:64:bd:63:d0:63:6a:9d:da:30:f1:bb:bd:b3:
         09:05:a4:33:a4:66:11:c5:b2:34:f2:af:19:23:ab:13:9b:d4:
         74:36:31:d6:3c:25:75:be:d6:5d:81:eb:69:03:51:56:07:b8:
         66:6f:ef:27:31:41:af:88:1f:d5:d1:6d:73:73:70:c4:20:0e:
         c3:9c:d3:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfbsBNIPxCTExX0bwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJmNjYzODQtZmE1My00N2ZiLTkzOGEtZjFlNTA2NDAy
M2U1MB4XDTI0MTExMjE5NTY0NVoXDTI1MDIxMDE5NTY0NVowLzEtMCsGA1UEAxMk
YTk0ZjA4OGYtNDUzZi00NTBhLThjNTktNDU1NzIyODFmMmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDBz7k8CXDdgBQbDVqyP1NKlB0Lh7GKSXjge
dhHnlcqrIVp/Ocv8/nPGfgFEt8OLxXGi0UvwQJ3/SU3K+ETAasuMnyti2QHeVNW/
9jmmLQvPNv5P6kxUdvHgBzxdfKOCPYl1PSRtSOboVHw4DzDreC8CTrn0yM7nG/jB
ILLXEg78ggeJtloJZ7Cdad0+eW4BxyUvbvGwXaslM2yqzfwqM9HETt+8Ydg0bV0W
3Yy1gZhn88PAGvig5S1hncMDVGUmrd217iZ1rosg2fV0aA30bDR1sK+0iALxFYSG
umCz8aq1l1LtMCANumCqrOvLZ0eMTjWWrIcVyVy1smUq39jTzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2Bel60cxjMvedvZD/ewvDu3W5XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2
NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1MDY0MDIzZTUvNzA0NGMwNzQtZjgyZi0z
MDA5LTkwZmYtMzA0OTVkMDYyNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGJmNjYzODQtZmE1My00N2ZiLTkz
OGEtZjFlNTA2NDAyM2U1L2RiZjY2Mzg0LWZhNTMtNDdmYi05MzhhLWYxZTUwNjQw
MjNlNS5jcmwwHwYDVR0jBBgwFoAU2cAvW7cA5P+Rm/sAOGgrg1/jqskwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1
MDY0MDIzZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgbAbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOIM5g7Ojc4UL1IXIL8c+Uhp7ZQE183e4KHLnIslx8wTPmJAE8S/uqT
JzSHf15Tg9A/v8IayoZv7OQyiHxwOs3k4WcZOu2Z+hmTXgmL3urGyYCR+sK2jrjz
7H91bxHJNK58CAxv/Np8fXDyLmYU9dKdDlyN1s+J/Ew3M+99BJyrxZGOUx8wFLkb
sqqpor0ZUoo+IH+O6dTnqf2/9CURk8T+ol7WEIQJ2OJ2qbnqZRAqYW7hs91RWt0g
ZL1j0GNqndow8bu9swkFpDOkZhHFsjTyrxkjqxOb1HQ2MdY8JXW+1l2B62kDUVYH
uGZv7ycxQa+IH9XRbXNzcMQgDsOc03w=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:30 2024 by rpki-client on console-fra.rpki-client.org