Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa
File:                     db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa (raw, json)
Hash identifier:          9yN47Vzq/46DpXWz1dmV1u8fBU2ToiYtWsLdl2c/6Z4=
Subject key identifier:   51:85:C4:04:2C:39:DB:F8:2C:D8:F8:B6:8E:12:56:81:C5:25:0B:EE
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584774FB8FAB8509D5D69FCCEDC0
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     36511
IP address blocks:        192.149.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:8f:ab:85:09:d5:d6:9f:cc:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=39bc6003-ac0d-402a-8121-cbf2b8018288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:84:95:e5:db:f6:26:5d:14:da:95:60:7e:
                    9e:89:80:35:4c:7d:2b:52:17:cb:64:1c:7e:d9:ce:
                    90:76:84:c5:f4:01:7a:fb:58:b6:f9:90:13:78:a9:
                    cb:bb:52:bf:88:08:ad:1c:2b:ce:9d:54:90:45:4e:
                    28:b8:c2:aa:46:f2:de:48:5b:b0:ec:8f:d1:db:82:
                    28:c7:29:85:e4:b1:50:01:34:35:3a:65:1b:cf:28:
                    aa:70:50:5d:6c:05:57:8a:2c:5f:93:32:53:73:ac:
                    4e:58:11:52:4b:cc:f2:47:ee:5f:66:24:05:23:ec:
                    da:40:8d:13:02:c0:c7:20:3f:e0:6f:08:07:9b:55:
                    90:25:14:ac:16:c1:44:38:0d:1b:9a:df:a5:3f:b8:
                    ec:f0:ef:4a:09:b8:c2:5f:c1:61:74:03:5b:9f:90:
                    35:a5:18:5e:6a:27:c6:45:be:4f:27:a7:0d:35:d7:
                    eb:9b:38:00:83:37:0d:92:4f:72:9a:43:4b:6e:19:
                    e0:1c:a7:27:4f:57:d4:4a:55:e3:77:b6:05:92:47:
                    fa:36:42:20:a3:be:c7:e8:d2:1d:07:9e:ab:2d:2c:
                    0a:f7:a4:aa:c3:c1:0f:3a:a0:b2:a8:a3:69:e8:05:
                    1d:55:5b:51:ae:48:79:b8:90:a4:09:ae:b1:10:8d:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:85:C4:04:2C:39:DB:F8:2C:D8:F8:B6:8E:12:56:81:C5:25:0B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:61:68:b5:63:ca:40:d6:ff:93:b8:e8:ee:02:97:49:ec:78:
         c7:74:f2:87:37:ef:14:80:88:b1:10:d1:f6:97:e1:8f:a5:c9:
         d0:e9:78:65:e5:96:fe:12:e0:95:9c:65:84:e9:a9:e0:30:96:
         94:3a:13:87:56:9f:6b:62:47:3e:94:65:89:8e:71:bf:55:fc:
         f7:14:df:15:2e:fb:04:72:fe:a5:d3:f5:c8:48:4d:da:0d:7c:
         c8:69:a1:d8:e7:ae:79:9d:16:32:e9:15:fe:46:e0:91:4d:ee:
         4e:40:47:29:51:83:c6:11:9f:54:1b:86:8a:6c:45:96:09:8b:
         64:21:6b:24:37:43:90:5f:47:68:ca:b1:6d:20:83:18:76:78:
         6a:eb:26:47:48:05:a1:97:1a:2c:ef:2c:52:59:ef:8b:1c:ff:
         33:12:bb:7b:e5:bc:71:a3:96:a1:bb:81:8c:56:de:27:ec:15:
         68:08:d8:f8:96:83:97:38:92:13:cd:94:6e:03:82:53:13:00:
         2b:73:8d:b2:4f:ab:7d:58:17:f6:43:ed:f8:98:5b:45:20:a6:
         3d:8d:be:40:99:75:56:48:11:85:87:4f:f3:58:51:c9:a0:98:
         04:e3:6b:c9:d9:c0:9a:71:99:81:cc:83:f7:4a:21:b0:be:8e:
         2a:30:2a:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+4+rhQnV1p/M7cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk
MzliYzYwMDMtYWMwZC00MDJhLTgxMjEtY2JmMmI4MDE4Mjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRaEleXb9iZdFNqVYH6eiYA1TH0rUhfLZBx+
2c6QdoTF9AF6+1i2+ZATeKnLu1K/iAitHCvOnVSQRU4ouMKqRvLeSFuw7I/R24Io
xymF5LFQATQ1OmUbzyiqcFBdbAVXiixfkzJTc6xOWBFSS8zyR+5fZiQFI+zaQI0T
AsDHID/gbwgHm1WQJRSsFsFEOA0bmt+lP7js8O9KCbjCX8FhdANbn5A1pRheaifG
Rb5PJ6cNNdfrmzgAgzcNkk9ymkNLbhngHKcnT1fUSlXjd7YFkkf6NkIgo77H6NId
B56rLSwK96Sqw8EPOqCyqKNp6AUdVVtRrkh5uJCkCa6xEI1gNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGFxAQsOdv4LNj4to4SVoHFJQvuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvZGI3ZWEyYzktYTdlMS0z
YmMwLWIzODMtMjAwNmM3MjViODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJUsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFhaLVjykDW/5O46O4Cl0nseMd08oc37xSAiLEQ0faX4Y+lydDpeGXl
lv4S4JWcZYTpqeAwlpQ6E4dWn2tiRz6UZYmOcb9V/PcU3xUu+wRy/qXT9chITdoN
fMhpodjnrnmdFjLpFf5G4JFN7k5ARylRg8YRn1QbhopsRZYJi2QhayQ3Q5BfR2jK
sW0ggxh2eGrrJkdIBaGXGizvLFJZ74sc/zMSu3vlvHGjlqG7gYxW3ifsFWgI2PiW
g5c4khPNlG4DglMTACtzjbJPq31YF/ZD7fiYW0Ugpj2NvkCZdVZIEYWHT/NYUcmg
mATja8nZwJpxmYHMg/dKIbC+jiowKro=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:42 2024 by rpki-client on console-fra.rpki-client.org