Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa
File:                     2509d60e-c681-37b3-adcf-bad08087cd10.roa (raw, json)
Hash identifier:          tm8ei2UaMiEuajcvOpIno8nv9PT/I+nGOSzV//FuU+w=
Subject key identifier:   15:28:26:E4:A5:B2:6A:07:F4:E3:26:3C:7F:9F:39:4F:0A:1D:B6:CA
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858457FDDCFF11F94C59A2B40DB80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     53640
IP address blocks:        24.38.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:cf:f1:1f:94:c5:9a:2b:40:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=0c2d0149-9c64-404b-9301-4139f85ee048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b2:82:ef:18:15:b6:aa:28:84:c6:21:5e:ef:
                    8e:26:e2:e6:92:c3:a1:82:f2:22:50:8a:55:4a:c3:
                    9a:d2:9c:e5:00:12:86:a8:34:57:29:c5:80:cb:7f:
                    e7:2e:c0:c0:aa:9c:6e:32:a3:20:81:c6:54:ad:5c:
                    49:c3:1a:b1:8e:85:80:43:e4:47:38:35:02:16:11:
                    dd:87:9b:f9:f2:21:75:20:63:04:69:f0:7b:00:bf:
                    07:7f:64:e3:ac:d9:0a:50:13:da:03:10:0d:87:18:
                    d3:ac:fd:9f:f6:26:e8:3c:65:dd:8d:7f:a6:28:63:
                    a0:15:60:ff:34:12:4e:91:91:f2:d2:ec:5d:f2:42:
                    03:52:78:30:66:de:a7:68:8f:6c:59:5d:94:41:06:
                    92:13:c5:16:33:32:f9:9c:7d:b5:3d:c6:d5:60:dd:
                    07:eb:67:c7:38:65:48:ab:9a:3c:16:b3:09:c3:e2:
                    d0:1d:26:7e:14:d8:63:4e:0a:a5:d0:4a:a7:e3:a3:
                    e8:e4:24:e9:21:e9:82:5d:d6:5b:ff:55:19:8f:d0:
                    7e:ff:2b:3b:a0:c0:81:15:95:aa:c4:b9:88:a5:8b:
                    06:4c:5c:37:c5:79:70:84:9a:e1:10:39:3f:42:76:
                    e0:2a:0b:d5:82:e9:a9:32:dd:a9:61:cd:12:a0:75:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:28:26:E4:A5:B2:6A:07:F4:E3:26:3C:7F:9F:39:4F:0A:1D:B6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2509d60e-c681-37b3-adcf-bad08087cd10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7c:ea:5c:00:e9:87:03:9c:d2:16:24:0c:3d:7b:36:47:be:
         fd:4a:7a:e5:64:6c:81:59:95:84:4b:87:3c:c2:aa:56:87:f3:
         75:7e:d3:10:25:18:18:8f:94:4c:52:ec:85:3f:3d:f7:95:ca:
         84:83:d0:c8:52:50:84:ee:f7:19:d7:69:59:6a:68:19:e3:6c:
         74:87:25:03:75:86:da:f9:a9:13:d5:2d:76:30:19:58:c3:c5:
         db:f3:ed:80:15:a3:3e:8c:6c:39:1c:9a:46:23:7a:24:9f:71:
         b0:4f:47:9d:04:4b:0a:6a:ee:44:f0:31:1c:6a:de:95:fc:6a:
         4e:5c:02:e3:ee:92:3c:44:4d:f1:43:dc:97:46:18:6a:3f:89:
         3a:df:45:9c:ab:b0:c1:6a:36:c8:eb:c1:90:fc:bd:51:22:5a:
         ec:58:45:26:c6:e9:2d:83:35:d8:23:e9:1f:d0:d4:fe:ca:64:
         c3:6a:ff:91:78:f8:90:49:96:81:5a:ef:de:e9:42:bf:fa:8f:
         be:39:46:23:28:bb:e7:5f:f1:71:78:39:31:71:c6:79:7e:7f:
         3e:93:67:85:ce:ba:b4:91:30:7c:41:43:c6:8c:e3:45:00:b2:
         ee:da:57:49:4c:64:3b:95:2f:e9:08:70:44:6a:bd:46:44:75:
         54:ae:98:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV/3c/xH5TFmitA24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
MGMyZDAxNDktOWM2NC00MDRiLTkzMDEtNDEzOWY4NWVlMDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7KC7xgVtqoohMYhXu+OJuLmksOhgvIiUIpV
SsOa0pzlABKGqDRXKcWAy3/nLsDAqpxuMqMggcZUrVxJwxqxjoWAQ+RHODUCFhHd
h5v58iF1IGMEafB7AL8Hf2TjrNkKUBPaAxANhxjTrP2f9iboPGXdjX+mKGOgFWD/
NBJOkZHy0uxd8kIDUngwZt6naI9sWV2UQQaSE8UWMzL5nH21PcbVYN0H62fHOGVI
q5o8FrMJw+LQHSZ+FNhjTgql0Eqn46Po5CTpIemCXdZb/1UZj9B+/ys7oMCBFZWq
xLmIpYsGTFw3xXlwhJrhEDk/QnbgKgvVgumpMt2pYc0SoHWALQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBUoJuSlsmoH9OMmPH+fOU8KHbbKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvMjUwOWQ2MGUtYzY4MS0z
N2IzLWFkY2YtYmFkMDgwODdjZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCZyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFx86lwA6YcDnNIWJAw9ezZHvv1KeuVkbIFZlYRLhzzCqlaH83V+0xAl
GBiPlExS7IU/PfeVyoSD0MhSUITu9xnXaVlqaBnjbHSHJQN1htr5qRPVLXYwGVjD
xdvz7YAVoz6MbDkcmkYjeiSfcbBPR50ESwpq7kTwMRxq3pX8ak5cAuPukjxETfFD
3JdGGGo/iTrfRZyrsMFqNsjrwZD8vVEiWuxYRSbG6S2DNdgj6R/Q1P7KZMNq/5F4
+JBJloFa797pQr/6j745RiMou+df8XF4OTFxxnl+fz6TZ4XOurSRMHxBQ8aM40UA
su7aV0lMZDuVL+kIcERqvUZEdVSumNc=
-----END CERTIFICATE-----
Generated at Tue May 7 14:20:18 2024 by rpki-client on console-ams.rpki-client.org