Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa
File:                     24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa (raw, json)
Hash identifier:          e10E3wxr2won4YUMf0Saa/TS4Lrlroqd03VnOW6SSRM=
Subject key identifier:   CD:E9:7D:3E:6E:5A:79:05:08:D2:32:5E:F7:67:05:12:32:6B:D8:DB
Certificate issuer:       /CN=07dfbd1d-6e11-4871-b406-d40f36507b8f
Certificate serial:       010D0C9F432858457A48852BDAD67D4E4106C800
Authority key identifier: 86:CE:D4:C7:12:D5:B5:AA:1C:73:9D:66:FB:29:D7:E4:BF:61:4A:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     33229
IP address blocks:        170.39.27.0/24 maxlen: 24
                          170.39.24.0/23 maxlen: 23
                          2602:fd2f:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/07dfbd1d-6e11-4871-b406-d40f36507b8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/07dfbd1d-6e11-4871-b406-d40f36507b8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:85:2b:da:d6:7d:4e:41:06:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07dfbd1d-6e11-4871-b406-d40f36507b8f
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=baa883dc-3f11-46de-8c96-b37e0b85ebc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4c:bd:88:a2:18:a9:f4:d8:60:03:a9:07:76:
                    bf:63:5d:5c:27:af:a9:d6:c5:8d:87:04:0f:72:a8:
                    31:cd:1d:1b:48:27:6d:39:bd:57:25:da:2c:f9:ff:
                    a6:96:19:7f:81:31:2e:c2:5d:c9:63:68:dc:d3:80:
                    c0:a7:cc:ba:47:05:22:16:0a:fe:62:5b:4d:ea:60:
                    9e:54:1f:3b:dd:c5:3a:87:e5:e1:c1:ad:16:f5:c2:
                    db:f2:2b:9f:5e:5d:be:f9:5e:1b:b0:84:50:e3:15:
                    6d:a5:2f:7a:45:02:9a:2a:e6:6b:53:e7:8e:b9:00:
                    64:e0:36:27:e6:89:ee:d4:fa:46:b3:38:70:32:12:
                    be:29:59:da:e6:23:b3:80:55:a4:63:bc:86:77:7b:
                    0d:0f:14:c9:b4:1a:72:8b:c8:93:64:32:52:97:e0:
                    d5:cd:04:b8:9b:f9:3d:04:d9:d1:20:2f:a7:b1:3d:
                    24:f7:6b:ac:35:84:08:a4:ac:72:da:f0:e3:2e:89:
                    2c:bf:39:03:2b:95:ad:f6:60:a9:1a:ca:e4:3f:7a:
                    f4:ab:df:3b:33:bf:54:6c:aa:a7:d5:94:38:3c:ef:
                    6f:3b:9d:1a:6a:0f:aa:7d:87:39:ad:86:5e:bb:18:
                    84:1d:6d:6f:7e:37:f2:d5:e5:0e:18:ff:9c:a8:fd:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E9:7D:3E:6E:5A:79:05:08:D2:32:5E:F7:67:05:12:32:6B:D8:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/07dfbd1d-6e11-4871-b406-d40f36507b8f.crl

            X509v3 Authority Key Identifier:
                keyid:86:CE:D4:C7:12:D5:B5:AA:1C:73:9D:66:FB:29:D7:E4:BF:61:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.24.0/23
                  170.39.27.0/24
                IPv6:
                  2602:fd2f:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:f5:e8:72:b9:99:a1:79:9d:4f:66:f2:08:1a:f8:dc:41:
         91:7e:87:71:01:13:ac:bb:8a:2d:2b:c2:17:09:36:07:8f:d2:
         36:19:ae:57:8d:8f:14:bd:4d:df:c9:7e:04:49:e4:a5:39:92:
         06:f3:af:89:9d:61:50:b9:31:cf:fd:d8:e3:0f:14:79:2c:55:
         2e:d5:c0:0a:06:be:49:1e:69:c0:71:01:60:4e:bd:3b:1e:cf:
         cb:fd:62:2e:cc:4c:19:62:9f:1a:40:ca:ec:fa:59:86:25:48:
         1f:87:35:c5:a1:61:00:83:e7:b0:e3:ec:99:47:97:8e:0e:99:
         3d:8b:41:6c:a4:40:f7:bc:eb:3f:56:b5:cd:ef:ab:38:5e:99:
         3f:61:b5:7c:cd:84:aa:65:9b:e9:6b:8a:3b:da:7d:16:b6:9f:
         25:dc:2d:4d:51:2c:d5:4c:0d:cc:ed:94:f3:33:71:7f:43:d4:
         00:aa:e9:57:df:b9:fc:20:b7:cd:f8:d2:6b:84:dc:33:42:38:
         5f:68:d6:b5:91:0c:fa:ce:ad:1b:60:37:0c:7f:66:88:d4:b9:
         1d:53:20:8e:a6:36:86:51:57:e0:9f:71:ad:c1:9b:e3:ee:3a:
         25:c7:54:b8:c1:f6:dd:33:b9:07:ad:b2:3b:ed:f0:df:bb:d1:
         0e:8f:65:f9
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEV6SIUr2tZ9TkEGyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDdkZmJkMWQtNmUxMS00ODcxLWI0MDYtZDQwZjM2NTA3
YjhmMB4XDTI0MDQwODEzMDAzNFoXDTI0MDcwNzEzMDAzNFowLzEtMCsGA1UEAxMk
YmFhODgzZGMtM2YxMS00NmRlLThjOTYtYjM3ZTBiODVlYmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEy9iKIYqfTYYAOpB3a/Y11cJ6+p1sWNhwQP
cqgxzR0bSCdtOb1XJdos+f+mlhl/gTEuwl3JY2jc04DAp8y6RwUiFgr+YltN6mCe
VB873cU6h+Xhwa0W9cLb8iufXl2++V4bsIRQ4xVtpS96RQKaKuZrU+eOuQBk4DYn
5onu1PpGszhwMhK+KVna5iOzgFWkY7yGd3sNDxTJtBpyi8iTZDJSl+DVzQS4m/k9
BNnRIC+nsT0k92usNYQIpKxy2vDjLoksvzkDK5Wt9mCpGsrkP3r0q987M79UbKqn
1ZQ4PO9vO50aag+qfYc5rYZeuxiEHW1vfjfy1eUOGP+cqP0PmwIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFM3pfT5uWnkFCNIyXvdnBRIya9jbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wN2Rm
YmQxZC02ZTExLTQ4NzEtYjQwNi1kNDBmMzY1MDdiOGYvMjRlNGQ5MTctOGZmNS0z
NzYwLTgyZjctYmZkMWI4NDI5ZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDdkZmJkMWQtNmUxMS00ODcxLWI0
MDYtZDQwZjM2NTA3YjhmLzA3ZGZiZDFkLTZlMTEtNDg3MS1iNDA2LWQ0MGYzNjUw
N2I4Zi5jcmwwHwYDVR0jBBgwFoAUhs7UxxLVtaocc51m+ynX5L9hShAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wN2RmYmQxZC02ZTExLTQ4NzEtYjQwNi1kNDBm
MzY1MDdiOGYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBqicYAwQA
qicbMA8EAgACMAkDBwQmAv0vABAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACiD16HK5maF5nU9m8gga+NxB
kX6HcQETrLuKLSvCFwk2B4/SNhmuV42PFL1N38l+BEnkpTmSBvOviZ1hULkxz/3Y
4w8UeSxVLtXACga+SR5pwHEBYE69Ox7Py/1iLsxMGWKfGkDK7PpZhiVIH4c1xaFh
AIPnsOPsmUeXjg6ZPYtBbKRA97zrP1a1ze+rOF6ZP2G1fM2EqmWb6WuKO9p9Fraf
JdwtTVEs1UwNzO2U8zNxf0PUAKrpV9+5/CC3zfjSa4TcM0I4X2jWtZEM+s6tG2A3
DH9miNS5HVMgjqY2hlFX4J9xrcGb4+46JcdUuMH23TO5B62yO+3w37vRDo9l+Q==
-----END CERTIFICATE-----
Generated at Fri May 10 08:49:34 2024 by rpki-client on console-fra.rpki-client.org