Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f51241ea-9bb0-3b7b-9084-06f3947869d4.roa
File:                     f51241ea-9bb0-3b7b-9084-06f3947869d4.roa (raw, json)
Hash identifier:          MZKdG5b+4qlH8E/5+xPI0VJvUknM3BLj2BeWD0HuJBI=
Subject key identifier:   0D:02:10:C4:B6:6F:85:F6:0E:9F:91:09:30:A4:92:66:88:25:7F:D4
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858474F4B79B87C94B53593AD2390
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f51241ea-9bb0-3b7b-9084-06f3947869d4.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     33759
IP address blocks:        24.38.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:79:b8:7c:94:b5:35:93:ad:23:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=158cd119-daeb-41cc-9e5f-a2501b57b5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:17:55:34:e5:8c:5d:2f:83:9b:6c:ad:3b:ff:
                    e9:b6:0d:e1:a1:16:f5:55:d5:bf:3a:70:12:00:ba:
                    45:cf:4c:03:11:e2:1c:06:c7:09:e0:53:75:89:92:
                    3a:ec:d6:79:ea:dd:42:ff:d4:f2:c3:85:a6:0c:96:
                    b5:ec:cc:cb:21:c2:cd:40:b6:21:33:78:da:cb:04:
                    a6:37:ef:a2:a8:4b:ee:a1:5d:bf:f5:e5:a4:a0:50:
                    c8:86:b6:51:bb:61:1a:2f:43:7d:3c:5e:e7:f3:eb:
                    be:27:fb:10:7e:c5:81:29:6e:83:80:57:b2:a0:d7:
                    de:88:75:c8:ae:3f:b2:ee:bc:5c:26:14:8d:91:d5:
                    f1:d8:6c:52:df:58:af:d1:5e:c5:86:b5:4f:b1:ee:
                    99:2d:30:ee:2a:de:a3:c3:c2:91:1b:aa:56:34:a4:
                    af:5d:5f:41:be:46:1f:d0:eb:c2:cb:d5:2c:00:fa:
                    52:92:e5:8a:a3:53:72:df:f5:cb:3b:71:ae:0d:71:
                    f0:dc:d2:11:99:bf:a9:bf:d5:8c:80:7c:86:2a:56:
                    24:14:1d:8c:a6:59:61:48:ba:7e:06:00:89:36:ab:
                    ad:67:eb:90:14:f1:0c:1a:a9:58:b4:87:d3:7b:cb:
                    60:5e:04:cf:b9:05:19:34:62:17:43:8f:5c:ba:cc:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:10:C4:B6:6F:85:F6:0E:9F:91:09:30:A4:92:66:88:25:7F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f51241ea-9bb0-3b7b-9084-06f3947869d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:aa:12:69:0c:c0:34:ba:78:47:1f:0a:9a:dc:e1:93:b0:
         25:a9:0e:ac:a5:4a:62:65:d8:09:85:3a:83:ec:b4:25:a0:e5:
         d6:8d:81:4e:b0:d1:88:ae:06:3c:66:a4:35:e7:98:23:03:86:
         48:6e:d0:27:cb:30:9c:bb:b6:94:38:44:51:86:05:11:51:71:
         1d:a6:40:05:21:60:a9:3c:95:e5:09:66:f5:70:db:e5:0c:da:
         b7:a4:4d:11:c6:93:48:86:07:83:76:31:29:31:35:cc:4f:d5:
         ba:55:93:73:d3:0a:d3:7d:60:a3:7c:fe:93:b7:e4:bd:57:b5:
         89:0c:b8:16:b1:a0:ec:65:c1:48:88:c3:b7:27:64:65:dd:06:
         ad:89:89:ae:c8:65:4d:4f:fd:c8:18:dd:ac:b4:2a:26:84:07:
         38:da:cd:8e:59:91:c9:52:a4:82:fe:c3:28:12:b4:e9:b0:15:
         9f:ea:33:f5:4e:ee:e1:ef:d9:1e:21:ac:3f:bc:20:61:29:b4:
         dc:8f:5a:4f:e3:97:96:02:c8:69:65:f7:04:c4:15:af:b3:90:
         aa:9b:ae:cb:f4:8a:88:2a:4a:3d:82:78:19:9f:dd:07:6b:bf:
         66:41:71:0b:d7:6a:a8:a9:03:79:b4:97:89:c9:7f:d2:79:98:
         e1:5d:bf:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPS3m4fJS1NZOtI5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MDkyMzEzMDA0MFoXDTI0MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk
MTU4Y2QxMTktZGFlYi00MWNjLTllNWYtYTI1MDFiNTdiNWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BdVNOWMXS+Dm2ytO//ptg3hoRb1VdW/OnAS
ALpFz0wDEeIcBscJ4FN1iZI67NZ56t1C/9Tyw4WmDJa17MzLIcLNQLYhM3jaywSm
N++iqEvuoV2/9eWkoFDIhrZRu2EaL0N9PF7n8+u+J/sQfsWBKW6DgFeyoNfeiHXI
rj+y7rxcJhSNkdXx2GxS31iv0V7FhrVPse6ZLTDuKt6jw8KRG6pWNKSvXV9BvkYf
0OvCy9UsAPpSkuWKo1Ny3/XLO3GuDXHw3NIRmb+pv9WMgHyGKlYkFB2MpllhSLp+
BgCJNqutZ+uQFPEMGqlYtIfTe8tgXgTPuQUZNGIXQ49cusxAYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0CEMS2b4X2Dp+RCTCkkmaIJX/UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvZjUxMjQxZWEtOWJiMC0z
YjdiLTkwODQtMDZmMzk0Nzg2OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCYKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqDqhJpDMA0unhHHwqa3OGTsCWpDqylSmJl2AmFOoPstCWg5daNgU6w
0YiuBjxmpDXnmCMDhkhu0CfLMJy7tpQ4RFGGBRFRcR2mQAUhYKk8leUJZvVw2+UM
2rekTRHGk0iGB4N2MSkxNcxP1bpVk3PTCtN9YKN8/pO35L1XtYkMuBaxoOxlwUiI
w7cnZGXdBq2Jia7IZU1P/cgY3ay0KiaEBzjazY5ZkclSpIL+wygStOmwFZ/qM/VO
7uHv2R4hrD+8IGEptNyPWk/jl5YCyGll9wTEFa+zkKqbrsv0iogqSj2CeBmf3Qdr
v2ZBcQvXaqipA3m0l4nJf9J5mOFdv28=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:32 2024 by rpki-client on console-fra.rpki-client.org