Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/effe9ee4-06f0-397d-9c77-10106018e4bc.roa
File:                     effe9ee4-06f0-397d-9c77-10106018e4bc.roa (raw, json)
Hash identifier:          tJRlLYLB/xzqTeAmnmrGKh8na6UpYwIzXP3DXduDG64=
Subject key identifier:   A2:94:F4:FF:20:A6:BF:01:90:BA:1F:1D:AB:D3:B6:4A:E0:D6:C1:CA
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F43285845DBFE5BFE937B98338CD72630
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/effe9ee4-06f0-397d-9c77-10106018e4bc.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     393550
IP address blocks:        192.41.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:5b:fe:93:7b:98:33:8c:d7:26:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=4b29050d-3407-43c5-8ec9-c346b473519f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:94:8b:c3:14:04:d3:db:e5:5c:a3:80:44:
                    28:f3:41:d7:13:fb:12:c1:88:ee:ae:26:d4:d3:64:
                    de:1f:1a:02:aa:34:9b:de:7b:89:d5:ae:db:a7:b8:
                    b7:a4:d6:67:b1:36:40:64:46:fe:0d:12:7e:16:5b:
                    3a:df:82:ba:38:80:53:9b:0c:8d:6c:90:c7:c6:24:
                    ab:39:8e:a3:64:d2:36:8d:cc:e7:81:93:86:73:88:
                    8c:cf:a3:ea:13:21:94:14:bd:fa:fb:95:53:ca:93:
                    80:8d:79:a4:1c:36:16:2d:9d:3b:cf:da:de:3c:b8:
                    ee:8e:49:a8:2a:78:60:fc:86:d7:0a:d0:22:26:c7:
                    93:67:96:37:83:7a:ee:5b:5c:90:e6:0b:9e:49:92:
                    e4:9b:32:a1:b8:5a:52:76:6f:70:36:87:5c:5e:12:
                    63:87:25:35:c2:2a:01:d8:0f:cb:5d:df:61:01:10:
                    d6:2c:1e:81:63:6f:af:f2:9c:5c:e6:d0:b5:51:ea:
                    61:28:dc:d4:24:1f:4b:12:4b:7e:a1:ab:a8:9c:82:
                    1f:e8:16:ff:14:fb:d0:fe:63:86:5f:0e:43:a0:3c:
                    de:37:64:b3:42:72:9f:b6:7f:4e:f9:d9:15:49:70:
                    62:bf:99:e0:35:53:5f:1e:13:a5:7a:34:b9:bf:12:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:94:F4:FF:20:A6:BF:01:90:BA:1F:1D:AB:D3:B6:4A:E0:D6:C1:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/effe9ee4-06f0-397d-9c77-10106018e4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:02:ab:96:93:1c:89:1a:b6:9b:c4:c5:72:c0:fe:c2:48:
         3b:d2:fa:b9:5e:8c:6e:df:38:84:77:28:04:08:95:a3:c9:0b:
         02:f3:52:c6:3b:05:ae:44:76:68:34:06:af:2c:d5:48:8a:1f:
         50:59:e9:14:1e:f8:85:43:99:4e:a7:86:1e:1e:05:31:bb:b5:
         fc:41:82:f7:1a:05:fa:f3:e0:01:29:6d:d4:61:13:20:39:ef:
         45:1e:67:c0:8e:eb:11:3f:93:99:c2:b1:2d:90:53:1a:5b:31:
         bd:9a:0d:4b:e7:b8:c4:59:2f:97:90:7a:f3:c7:2b:2d:e5:36:
         de:c1:40:e0:b3:1d:cd:b9:91:32:26:2e:58:92:d7:be:16:ac:
         19:a1:d5:5a:f4:fa:31:d0:1a:ea:b5:0c:5e:ec:09:93:cf:84:
         90:c7:51:07:a6:80:ff:6e:ae:41:6f:87:17:7d:5f:60:3d:6d:
         e5:6c:c3:d4:80:54:c7:7e:a6:ea:71:21:40:11:d1:91:10:7b:
         d6:dd:05:51:cc:fe:2c:4d:24:fe:8d:4f:53:cd:8d:61:bf:b7:
         4a:67:58:85:32:a8:9d:33:f6:8e:80:3a:6b:91:83:36:87:81:
         8c:a1:2e:bf:26:1f:c1:00:3d:96:9f:c3:d2:41:52:93:35:e2:
         aa:b2:68:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXb/lv+k3uYM4zXJjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ViYmE4NTEtNzNkYy00YzgxLTljODUtZWRiNjNiMzNi
MzA1MB4XDTI0MDUxMzEzMDAzNFoXDTI0MDgxMTEzMDAzNFowLzEtMCsGA1UEAxMk
NGIyOTA1MGQtMzQwNy00M2M1LThlYzktYzM0NmI0NzM1MTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeeUi8MUBNPb5VyjgEQo80HXE/sSwYjuribU
02TeHxoCqjSb3nuJ1a7bp7i3pNZnsTZAZEb+DRJ+Fls634K6OIBTmwyNbJDHxiSr
OY6jZNI2jczngZOGc4iMz6PqEyGUFL36+5VTypOAjXmkHDYWLZ07z9rePLjujkmo
Knhg/IbXCtAiJseTZ5Y3g3ruW1yQ5gueSZLkmzKhuFpSdm9wNodcXhJjhyU1wioB
2A/LXd9hARDWLB6BY2+v8pxc5tC1UephKNzUJB9LEkt+oauonIIf6Bb/FPvQ/mOG
Xw5DoDzeN2SzQnKftn9O+dkVSXBiv5ngNVNfHhOlejS5vxLb9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKKU9P8gpr8BkLofHavTtkrg1sHKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJi
YTg1MS03M2RjLTRjODEtOWM4NS1lZGI2M2IzM2IzMDUvZWZmZTllZTQtMDZmMC0z
OTdkLTljNzctMTAxMDYwMThlNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ViYmE4NTEtNzNkYy00YzgxLTlj
ODUtZWRiNjNiMzNiMzA1LzNlYmJhODUxLTczZGMtNGM4MS05Yzg1LWVkYjYzYjMz
YjMwNS5jcmwwHwYDVR0jBBgwFoAUo0JzHRfgcwo5wkye+fXqjrzFcQEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJiYTg1MS03M2RjLTRjODEtOWM4NS1lZGI2
M2IzM2IzMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDlAquWkxyJGrabxMVywP7CSDvS+rlejG7fOIR3KAQIlaPJCwLzUsY7
Ba5Edmg0Bq8s1UiKH1BZ6RQe+IVDmU6nhh4eBTG7tfxBgvcaBfrz4AEpbdRhEyA5
70UeZ8CO6xE/k5nCsS2QUxpbMb2aDUvnuMRZL5eQevPHKy3lNt7BQOCzHc25kTIm
LliS174WrBmh1Vr0+jHQGuq1DF7sCZPPhJDHUQemgP9urkFvhxd9X2A9beVsw9SA
VMd+pupxIUAR0ZEQe9bdBVHM/ixNJP6NT1PNjWG/t0pnWIUyqJ0z9o6AOmuRgzaH
gYyhLr8mH8EAPZafw9JBUpM14qqyaIQ=
-----END CERTIFICATE-----
Generated at Fri May 24 09:26:53 2024 by rpki-client on console-fra.rpki-client.org