Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa
File:                     caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa (raw, json)
Hash identifier:          f1R3A5+wNvibHCanjESTjhl7Q5UVh1JG9CPskGi/TPQ=
Subject key identifier:   D4:4D:D6:EB:A3:75:5F:53:61:4D:EF:4B:0F:58:BC:4F:AC:24:90:03
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858477C494C3E5AF7080F16776200
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa
Signing time:             Wed 09 Oct 2024 15:47:52 +0000
ROA not before:           Wed 09 Oct 2024 15:47:52 +0000
ROA not after:            Tue 07 Jan 2025 16:47:52 +0000
asID:                     6939
IP address blocks:        149.19.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:49:4c:3e:5a:f7:08:0f:16:77:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  9 15:47:52 2024 GMT
            Not After : Jan  7 16:47:52 2025 GMT
        Subject: CN=cf2c2ccc-10ff-4917-8342-13b3e4e8f22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:c4:ab:32:11:7d:79:ac:81:1b:ea:e8:44:
                    3e:a0:ab:a1:a9:b5:9a:22:a9:2d:e1:f1:c5:96:fe:
                    00:33:78:9d:0c:10:30:36:2b:dc:01:bb:19:46:56:
                    65:eb:a8:92:03:ce:9e:9f:26:80:ff:77:5a:72:09:
                    a2:c4:b2:2b:7f:3a:b6:dc:cf:12:fb:ce:dd:0c:4e:
                    8a:4e:72:60:81:65:0c:55:34:66:0b:ed:11:b8:47:
                    b2:a7:b7:ed:9f:68:07:35:9e:38:a6:6c:88:d6:ff:
                    ab:6c:0c:65:9a:fb:d2:14:97:02:a3:b7:d2:c1:e3:
                    6e:ef:ce:cd:c9:17:09:a4:80:de:85:e6:b2:7c:94:
                    e6:e1:3a:1d:0f:b3:6b:89:d7:95:d7:08:d5:b6:16:
                    50:f8:db:de:b6:91:6e:4f:30:22:16:f1:c4:bf:6f:
                    c1:ea:ae:de:f7:64:1e:53:a5:e9:f2:9f:57:93:35:
                    ac:99:8c:78:ad:0a:0c:d7:17:bb:52:ec:e6:8c:87:
                    e1:d1:16:f8:6c:a3:55:26:7d:4b:98:28:a0:46:bb:
                    0b:06:a5:60:9f:bf:86:b7:d1:3e:c9:af:59:26:a8:
                    c0:a9:9f:73:53:72:08:3e:cc:ac:64:53:45:f4:05:
                    a4:2e:0d:75:57:2e:8f:36:a5:b6:60:07:db:fb:60:
                    c6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4D:D6:EB:A3:75:5F:53:61:4D:EF:4B:0F:58:BC:4F:AC:24:90:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/caa0ee7f-b319-3ec0-9a6e-a65798f4673d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:12:78:66:8d:bf:99:16:b5:eb:22:c6:a1:5c:2e:a2:5f:74:
         74:95:c7:e7:83:ff:ae:72:bc:bc:d3:8c:8b:d2:ca:db:12:f3:
         14:75:e3:d9:f2:5f:0d:9d:ec:bf:59:15:f4:55:8d:5b:4d:66:
         ba:21:7a:79:69:5f:03:d5:e0:09:b1:bf:23:27:5b:19:a7:61:
         a4:19:23:07:b0:db:9a:a7:db:e7:e7:3b:76:ff:0c:1d:4c:d2:
         6e:e4:a8:76:a7:25:6d:24:cb:07:f6:ce:04:54:f7:7a:e9:7b:
         55:78:2d:e4:b5:77:bc:ff:66:ac:d0:f6:d8:4e:c9:7c:e6:56:
         4c:2b:75:3c:d7:a3:ef:65:5e:06:d7:35:c2:b5:b3:62:5c:53:
         5d:0a:41:f3:39:87:1a:59:56:41:80:c7:1b:68:7a:a7:88:60:
         7f:54:ad:82:c1:a5:22:d8:12:28:b8:9c:79:14:12:ac:a3:fb:
         26:09:ed:1f:df:ae:ca:b5:73:54:12:4a:2e:89:46:e9:48:61:
         6a:17:a2:be:0c:73:54:d5:ea:ce:b1:8a:d8:43:a5:01:49:3b:
         0f:fe:c4:d2:96:41:2f:92:dd:c0:d0:6a:ec:75:c9:ae:a2:43:
         ad:f0:c4:66:da:39:b5:77:8b:2a:7f:7d:2a:96:94:58:b3:ee:
         4d:51:d4:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd8SUw+WvcIDxZ3YgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MTAwOTE1NDc1MloXDTI1MDEwNzE2NDc1MlowLzEtMCsGA1UEAxMk
Y2YyYzJjY2MtMTBmZi00OTE3LTgzNDItMTNiM2U0ZThmMjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuovEqzIRfXmsgRvq6EQ+oKuhqbWaIqkt4fHF
lv4AM3idDBAwNivcAbsZRlZl66iSA86enyaA/3dacgmixLIrfzq23M8S+87dDE6K
TnJggWUMVTRmC+0RuEeyp7ftn2gHNZ44pmyI1v+rbAxlmvvSFJcCo7fSweNu787N
yRcJpIDeheayfJTm4TodD7NrideV1wjVthZQ+NvetpFuTzAiFvHEv2/B6q7e92Qe
U6Xp8p9XkzWsmYx4rQoM1xe7UuzmjIfh0Rb4bKNVJn1LmCigRrsLBqVgn7+Gt9E+
ya9ZJqjAqZ9zU3IIPsysZFNF9AWkLg11Vy6PNqW2YAfb+2DG/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRN1uujdV9TYU3vSw9YvE+sJJADMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvY2FhMGVlN2YtYjMxOS0z
ZWMwLTlhNmUtYTY1Nzk4ZjQ2NzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGISeGaNv5kWtesixqFcLqJfdHSVx+eD/65yvLzTjIvSytsS8xR149ny
Xw2d7L9ZFfRVjVtNZrohenlpXwPV4AmxvyMnWxmnYaQZIwew25qn2+fnO3b/DB1M
0m7kqHanJW0kywf2zgRU93rpe1V4LeS1d7z/ZqzQ9thOyXzmVkwrdTzXo+9lXgbX
NcK1s2JcU10KQfM5hxpZVkGAxxtoeqeIYH9UrYLBpSLYEii4nHkUEqyj+yYJ7R/f
rsq1c1QSSi6JRulIYWoXor4Mc1TV6s6xithDpQFJOw/+xNKWQS+S3cDQaux1ya6i
Q63wxGbaObV3iyp/fSqWlFiz7k1R1Ms=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:18 2024 by rpki-client on console-fra.rpki-client.org