Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa
File:                     b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa (raw, json)
Hash identifier:          ce1F8224oHPjJSy1h4+UZ97DslShdB/iyfRWUmltDno=
Subject key identifier:   CA:4D:F1:73:EB:00:F2:B4:DD:AB:BD:50:FA:E3:9B:1B:CA:41:CA:39
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858478E1BB8133C67F358E8A67820
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     62610
IP address blocks:        128.1.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:b8:13:3c:67:f3:58:e8:a6:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=219ec405-e018-4f6b-8cfd-58211c3f0c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:37:bb:23:70:f3:24:81:f2:32:f5:72:94:
                    0f:58:93:95:14:32:d6:88:94:1f:cd:0f:04:b0:8e:
                    ea:1b:42:ef:bb:00:4f:3c:e4:d0:0f:30:0a:1d:f9:
                    a4:bf:ae:b4:21:34:80:e1:21:5d:3a:2e:2f:b7:76:
                    e7:be:dc:2d:c3:49:5d:aa:18:3b:79:27:27:eb:54:
                    d6:b9:93:07:62:21:da:bc:4a:03:b1:21:79:43:70:
                    24:15:11:9e:88:ce:bc:ca:a5:0c:00:6d:54:e4:54:
                    c3:97:6c:2b:0e:d3:9c:7b:d6:8e:c5:18:03:f0:8c:
                    ce:4f:bc:06:e2:74:04:09:d0:0e:19:96:bd:31:3f:
                    dc:f4:4c:86:0d:e7:a3:dd:e3:ad:7c:b9:20:4e:08:
                    58:f4:d7:e5:1c:27:dd:e7:c2:ee:41:ce:2d:28:dc:
                    e3:8f:c2:56:5c:fc:be:44:e6:94:e8:33:d6:ae:44:
                    9f:fe:57:dc:99:47:e8:db:37:52:5d:6b:51:01:0b:
                    b6:37:3e:f7:9f:31:bd:29:5c:d7:da:27:d9:0a:aa:
                    db:2f:6f:d4:97:c6:cf:26:cd:a5:3d:07:bf:67:bb:
                    c0:a2:1d:28:60:79:72:a1:0f:06:d2:40:cb:72:f2:
                    90:88:d9:3e:4b:15:14:a2:37:51:55:71:36:b3:a8:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4D:F1:73:EB:00:F2:B4:DD:AB:BD:50:FA:E3:9B:1B:CA:41:CA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ef:e0:7d:ff:c1:d0:ed:31:f6:12:eb:d3:d8:97:1f:41:ef:
         85:a9:1b:6b:22:fd:bc:29:97:03:29:97:48:7b:c3:74:57:c6:
         73:9a:a3:ca:99:61:4d:45:e7:15:6a:6a:42:ca:f1:51:46:6b:
         39:67:b9:24:3d:1c:04:ae:75:17:3c:8d:1f:be:56:19:b1:65:
         fb:c0:e6:d0:b9:30:b2:82:92:64:1c:bb:65:5d:fc:78:5c:26:
         f5:ef:04:f5:ac:c6:a3:2b:d8:82:4d:3a:8d:1a:9b:14:2c:a2:
         11:41:05:c4:0d:e1:19:da:50:c2:68:2c:89:b8:36:eb:8d:e0:
         e4:30:dc:5e:77:8c:3d:8a:ff:b2:d1:01:c3:dc:cb:c7:97:cd:
         59:4d:a9:89:ff:e6:77:4b:74:34:2b:ca:5d:5e:1d:09:62:6b:
         dc:63:26:20:23:ac:ec:e9:a5:16:6d:8f:d4:7c:40:c1:1a:83:
         b7:a6:1f:1d:63:5c:a4:1b:7d:f3:d2:a5:45:bb:44:78:ea:57:
         1e:64:ce:1b:a2:f7:59:72:75:bc:5e:16:98:c5:e9:09:16:cc:
         94:d7:f7:b3:d8:f1:da:6f:90:e9:a3:03:bb:62:4b:7b:32:ad:
         a0:15:8c:64:4d:c4:cf:a8:d1:0b:21:62:e2:9d:e3:1a:d6:f3:
         37:b3:fb:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeOG7gTPGfzWOimeCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MTAxNjAxMDAzMVoXDTI1MDExNDAyMDAzMVowLzEtMCsGA1UEAxMk
MjE5ZWM0MDUtZTAxOC00ZjZiLThjZmQtNTgyMTFjM2YwYzEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6s3uyNw8ySB8jL1cpQPWJOVFDLWiJQfzQ8E
sI7qG0LvuwBPPOTQDzAKHfmkv660ITSA4SFdOi4vt3bnvtwtw0ldqhg7eScn61TW
uZMHYiHavEoDsSF5Q3AkFRGeiM68yqUMAG1U5FTDl2wrDtOce9aOxRgD8IzOT7wG
4nQECdAOGZa9MT/c9EyGDeej3eOtfLkgTghY9NflHCfd58LuQc4tKNzjj8JWXPy+
ROaU6DPWrkSf/lfcmUfo2zdSXWtRAQu2Nz73nzG9KVzX2ifZCqrbL2/Ul8bPJs2l
PQe/Z7vAoh0oYHlyoQ8G0kDLcvKQiNk+SxUUojdRVXE2s6j4qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpN8XPrAPK03au9UPrjmxvKQco5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYjQ5Y2U0YmYtM2FhMC0z
OGU1LTk4MTktNjRlMjM5MTNiOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHv4H3/wdDtMfYS69PYlx9B74WpG2si/bwplwMpl0h7w3RXxnOao8qZ
YU1F5xVqakLK8VFGazlnuSQ9HASudRc8jR++VhmxZfvA5tC5MLKCkmQcu2Vd/Hhc
JvXvBPWsxqMr2IJNOo0amxQsohFBBcQN4RnaUMJoLIm4NuuN4OQw3F53jD2K/7LR
AcPcy8eXzVlNqYn/5ndLdDQryl1eHQlia9xjJiAjrOzppRZtj9R8QMEag7emHx1j
XKQbffPSpUW7RHjqVx5kzhui91lydbxeFpjF6QkWzJTX97PY8dpvkOmjA7tiS3sy
raAVjGRNxM+o0QshYuKd4xrW8zez+8Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:28 2024 by rpki-client on console-fra.rpki-client.org