Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e98b9cd6-4bbd-3be2-be62-068e7e9b8461.roa
File:                     e98b9cd6-4bbd-3be2-be62-068e7e9b8461.roa (raw, json)
Hash identifier:          iZ3C15gaz0Z73Q9pWgZjbps6VhzzD7D2adFLsxviXU4=
Subject key identifier:   C8:BA:32:E2:6B:B2:3D:3B:DF:4D:E2:C1:84:C7:7B:1E:D2:A6:3F:A6
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF480C9FD572F855FFCE7A0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e98b9cd6-4bbd-3be2-be62-068e7e9b8461.roa
Signing time:             Fri 08 Nov 2024 15:04:55 +0000
ROA not before:           Fri 08 Nov 2024 15:04:55 +0000
ROA not after:            Thu 06 Feb 2025 15:04:55 +0000
asID:                     81
IP address blocks:        152.29.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:80:c9:fd:57:2f:85:5f:fc:e7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:55 2024 GMT
            Not After : Feb  6 15:04:55 2025 GMT
        Subject: CN=1ecd3282-f0fa-47ab-afd5-0fbb759d96c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:90:ba:9b:14:2f:7d:ca:d0:79:fb:e5:10:
                    00:69:61:96:cb:77:24:b5:fd:a0:3b:52:da:ad:dc:
                    40:39:03:fb:dd:8a:0d:fe:0d:32:c6:f2:47:c6:43:
                    30:79:25:78:63:38:4a:e8:3e:0b:ce:3f:c3:13:3e:
                    e7:27:ae:fe:14:78:c5:08:3d:e6:7e:7e:c9:b9:e7:
                    d9:b8:1c:84:86:d2:98:0f:94:05:73:ce:0d:87:10:
                    5a:e3:d5:bc:11:b6:d7:49:12:af:9e:91:88:f8:17:
                    68:1e:98:2f:fe:ba:a2:f7:d2:5c:f4:b2:43:be:df:
                    9f:b7:5f:25:85:92:d4:1a:f6:ca:b0:94:a4:37:7f:
                    f8:e2:b3:aa:1d:1f:d7:0a:1a:e6:a8:6a:0d:8d:0c:
                    74:84:76:31:44:c8:b8:b2:27:81:49:24:69:f1:f9:
                    db:b1:c8:2b:a3:f9:b6:aa:8d:67:00:e6:60:8d:cc:
                    85:2a:0a:84:c1:7c:cc:0c:d7:bd:65:67:df:a3:9d:
                    c5:b3:dd:2e:d4:84:90:c5:f8:f1:c8:56:5a:83:68:
                    f0:b6:15:aa:24:5a:ae:71:6b:43:3b:dd:4d:6c:81:
                    eb:bb:a2:7f:dc:03:62:65:ba:1c:89:2b:eb:8f:00:
                    32:24:13:e0:14:1f:34:17:48:c7:2d:7d:53:4a:7f:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BA:32:E2:6B:B2:3D:3B:DF:4D:E2:C1:84:C7:7B:1E:D2:A6:3F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e98b9cd6-4bbd-3be2-be62-068e7e9b8461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:bc:c3:1c:9d:38:c7:1a:ae:74:5b:cc:47:be:f5:f8:c7:
         15:15:38:e9:ec:1f:02:cf:63:f3:63:3f:f0:fd:0b:46:e2:17:
         4a:73:05:c7:8b:f6:93:c4:d1:c3:35:ba:00:59:ac:bd:b2:f8:
         c3:7c:03:de:73:99:0d:59:3c:8f:8e:3c:d9:7e:c1:3c:7b:b3:
         9d:a6:99:b3:bc:e8:68:22:c2:74:4b:60:ea:29:03:67:11:d3:
         0e:9b:b7:fb:ec:47:01:ba:67:37:74:00:65:4b:02:37:bc:91:
         33:d7:0c:22:24:76:17:b4:a0:e0:8c:67:9e:79:e5:c6:ae:5a:
         5d:aa:3e:1e:cb:74:c9:ce:10:47:e6:bd:c5:de:92:11:c1:4b:
         fd:df:ce:50:75:59:ed:c1:41:be:2f:d2:9b:bb:db:4d:f8:bf:
         ab:a3:7b:ad:82:7f:56:3d:fc:53:36:6e:02:40:74:23:c7:07:
         cd:b5:f3:b0:a0:df:f8:a7:1a:62:80:77:13:f8:ce:3b:3f:12:
         03:3c:c4:32:46:d8:4d:fe:1a:77:30:c6:07:20:72:08:d4:43:
         4d:23:a2:13:99:2e:32:cd:3d:6d:5f:50:a6:78:a8:b2:8d:3d:
         f2:a8:63:05:af:0f:6e:76:c9:7a:96:82:03:56:b5:20:87:32:
         77:3a:c7:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEfP9IDJ/VcvhV/856AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTEwODE1MDQ1NVoXDTI1MDIwNjE1MDQ1NVowLzEtMCsGA1UEAxMk
MWVjZDMyODItZjBmYS00N2FiLWFmZDUtMGZiYjc1OWQ5NmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSuQupsUL33K0Hn75RAAaWGWy3cktf2gO1La
rdxAOQP73YoN/g0yxvJHxkMweSV4YzhK6D4Lzj/DEz7nJ67+FHjFCD3mfn7JuefZ
uByEhtKYD5QFc84NhxBa49W8EbbXSRKvnpGI+BdoHpgv/rqi99Jc9LJDvt+ft18l
hZLUGvbKsJSkN3/44rOqHR/XChrmqGoNjQx0hHYxRMi4sieBSSRp8fnbscgro/m2
qo1nAOZgjcyFKgqEwXzMDNe9ZWffo53Fs90u1ISQxfjxyFZag2jwthWqJFqucWtD
O91NbIHru6J/3ANiZbociSvrjwAyJBPgFB80F0jHLX1TSn9QEQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMi6MuJrsj07303iwYTHex7Spj+mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZTk4YjljZDYtNGJiZC0z
YmUyLWJlNjItMDY4ZTdlOWI4NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmB0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALCy8wxydOMcarnRbzEe+9fjHFRU46ewfAs9j82M/8P0LRuIXSnMFx4v2
k8TRwzW6AFmsvbL4w3wD3nOZDVk8j4482X7BPHuznaaZs7zoaCLCdEtg6ikDZxHT
Dpu3++xHAbpnN3QAZUsCN7yRM9cMIiR2F7Sg4Ixnnnnlxq5aXao+Hst0yc4QR+a9
xd6SEcFL/d/OUHVZ7cFBvi/Sm7vbTfi/q6N7rYJ/Vj38UzZuAkB0I8cHzbXzsKDf
+KcaYoB3E/jOOz8SAzzEMkbYTf4adzDGByByCNRDTSOiE5kuMs09bV9Qpnioso09
8qhjBa8PbnbJepaCA1a1IIcydzrHlQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:34 2024 by rpki-client on console-fra.rpki-client.org