Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa
File:                     73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa (raw, json)
Hash identifier:          +PS9kSMVmSqs3eP/8qXNeI9pMufN7ByjfJVN/AwcN4s=
Subject key identifier:   64:65:88:A0:6E:5B:2C:6B:D6:C1:0E:2E:9D:F6:CE:A6:B1:C7:A4:14
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F432858469F6A66B573F6145E4E0B4800
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa
Signing time:             Mon 22 Jul 2024 13:00:36 +0000
ROA not before:           Mon 22 Jul 2024 13:00:36 +0000
ROA not after:            Sun 20 Oct 2024 13:00:36 +0000
asID:                     399629
IP address blocks:        149.248.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9f:6a:66:b5:73:f6:14:5e:4e:0b:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Jul 22 13:00:36 2024 GMT
            Not After : Oct 20 13:00:36 2024 GMT
        Subject: CN=809d8be1-1174-45c2-be8e-034bfc5ddcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:57:4b:e0:bc:dc:5c:67:05:66:88:a4:7a:b9:
                    4c:9c:15:cd:9f:6c:d2:cf:b8:94:82:1e:47:0a:56:
                    d7:d0:e3:41:da:5e:e6:34:0c:80:db:9e:49:c3:37:
                    59:65:d7:51:bb:df:93:f5:d3:79:2d:6f:ee:bb:ff:
                    bd:68:39:f8:6c:96:68:2a:ee:48:aa:a7:aa:09:51:
                    3a:68:2a:1b:74:fa:8f:56:7b:a8:5b:db:c6:e0:65:
                    a9:a1:15:59:0c:1f:52:30:38:2e:c6:ee:e8:3c:54:
                    c7:0e:e5:61:21:a0:92:6b:e5:45:8e:fe:d7:b9:44:
                    3c:e8:fb:9a:62:a4:4a:1f:19:ef:d7:65:a4:35:66:
                    28:77:ed:ba:47:a9:d8:67:06:ea:f9:79:d1:6a:42:
                    26:7a:62:f6:0c:90:83:a7:d1:fe:ec:4a:28:7b:c8:
                    32:6d:8c:39:40:29:b8:f3:7c:ed:d5:42:6e:ab:70:
                    d5:f6:a3:48:9f:fa:96:28:97:a5:3e:b9:b7:e7:fa:
                    96:53:22:db:e3:13:53:b7:94:8d:b8:e3:87:97:e9:
                    e7:a7:50:42:42:2d:53:cb:35:1e:a2:3f:41:e7:98:
                    39:c8:7d:49:8d:6e:9a:16:56:af:33:f6:c4:1e:44:
                    60:c2:06:61:e6:8a:0c:73:66:5b:9d:a2:a0:4f:3d:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:65:88:A0:6E:5B:2C:6B:D6:C1:0E:2E:9D:F6:CE:A6:B1:C7:A4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:8f:c7:aa:55:ee:bb:0a:67:1d:37:66:5d:7c:79:c1:b9:24:
         62:8d:41:50:41:54:b2:72:ef:a6:9c:a7:87:c6:3a:08:96:79:
         b8:84:3b:60:a7:aa:cf:26:dd:5e:1d:7f:72:e0:70:69:db:ca:
         4b:21:b1:5d:c5:53:f1:89:17:d2:81:06:73:1f:8e:60:be:f1:
         e4:03:e7:34:df:84:2b:67:16:1f:6c:41:29:40:9d:25:b0:4f:
         0a:93:a7:f5:e3:7f:d2:69:de:d8:d1:cf:3e:9a:1c:9e:97:2d:
         cf:26:10:42:d3:51:c4:6f:30:65:b6:2c:a8:fa:70:ab:76:61:
         0b:64:3c:a5:0f:5b:94:96:a8:26:c5:ef:a4:70:95:9d:a9:78:
         51:ac:79:c0:01:03:b8:c6:01:10:49:eb:a1:80:ca:4f:59:8d:
         22:7d:70:49:b0:34:bc:96:9c:02:ed:28:bc:e2:61:ca:34:cb:
         21:74:eb:c6:d5:a1:51:5e:a9:51:23:78:77:54:f1:87:fc:4f:
         cc:bf:0d:da:3f:c5:6c:7f:b7:98:60:b9:8f:5d:42:16:ad:15:
         33:20:df:94:08:81:3c:e0:86:dd:18:8f:f5:31:24:6b:c8:c4:
         8e:e4:0f:04:01:76:29:8a:c6:d1:18:5a:e0:1d:3f:9b:1c:7f:
         59:d1:6d:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEafama1c/YUXk4LSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI0MDcyMjEzMDAzNloXDTI0MTAyMDEzMDAzNlowLzEtMCsGA1UEAxMk
ODA5ZDhiZTEtMTE3NC00NWMyLWJlOGUtMDM0YmZjNWRkY2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFdL4LzcXGcFZoikerlMnBXNn2zSz7iUgh5H
ClbX0ONB2l7mNAyA255JwzdZZddRu9+T9dN5LW/uu/+9aDn4bJZoKu5IqqeqCVE6
aCobdPqPVnuoW9vG4GWpoRVZDB9SMDguxu7oPFTHDuVhIaCSa+VFjv7XuUQ86Pua
YqRKHxnv12WkNWYod+26R6nYZwbq+XnRakImemL2DJCDp9H+7Eooe8gybYw5QCm4
83zt1UJuq3DV9qNIn/qWKJelPrm35/qWUyLb4xNTt5SNuOOHl+nnp1BCQi1TyzUe
oj9B55g5yH1JjW6aFlavM/bEHkRgwgZh5ooMc2ZbnaKgTz0EywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGRliKBuWyxr1sEOLp32zqaxx6QUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNzNjYjU4Y2MtMGYwYS0z
YzdkLTg1MTgtNTRmMWU3YTcxMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfhOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuPx6pV7rsKZx03Zl18ecG5JGKNQVBBVLJy76acp4fGOgiWebiEO2Cn
qs8m3V4df3LgcGnbykshsV3FU/GJF9KBBnMfjmC+8eQD5zTfhCtnFh9sQSlAnSWw
TwqTp/Xjf9Jp3tjRzz6aHJ6XLc8mEELTUcRvMGW2LKj6cKt2YQtkPKUPW5SWqCbF
76RwlZ2peFGsecABA7jGARBJ66GAyk9ZjSJ9cEmwNLyWnALtKLziYco0yyF068bV
oVFeqVEjeHdU8Yf8T8y/Ddo/xWx/t5hguY9dQhatFTMg35QIgTzght0Yj/UxJGvI
xI7kDwQBdimKxtEYWuAdP5scf1nRbcs=
-----END CERTIFICATE-----
Generated at Sun Sep 15 05:39:26 2024 by rpki-client on console-ams.rpki-client.org