Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa
File:                     a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa (raw, json)
Hash identifier:          AqfZ5juSdBABgGTKJPBmJMo2QKReKD2UJKH7DXCZ8o4=
Subject key identifier:   E6:49:37:C5:BB:4B:BD:4A:E3:1B:45:48:EE:92:0E:BC:08:02:95:6E
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F43285846636480008875421E44F33A00
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa
Signing time:             Mon 01 Jul 2024 01:00:25 +0000
ROA not before:           Mon 01 Jul 2024 01:00:25 +0000
ROA not after:            Sun 29 Sep 2024 01:00:25 +0000
asID:                     399629
IP address blocks:        168.100.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:63:64:80:00:88:75:42:1e:44:f3:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Jul  1 01:00:25 2024 GMT
            Not After : Sep 29 01:00:25 2024 GMT
        Subject: CN=b641426a-a100-4dee-bdc8-42328934623a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:95:37:1c:a1:b0:67:06:28:af:07:bd:e1:
                    ab:25:c9:70:35:2f:ce:db:7b:78:04:a6:fa:d4:37:
                    f3:4c:b4:c1:75:c8:d8:b5:77:36:04:13:35:c5:26:
                    e7:9b:87:21:2a:95:3c:6e:ba:ce:a7:ce:da:5e:e0:
                    a4:24:71:07:61:83:d4:69:a0:b2:79:c3:dc:73:42:
                    85:cd:f7:04:cd:37:f9:1f:8a:ff:a7:f8:70:3c:54:
                    64:cd:61:ca:a7:d8:32:b2:52:13:2e:ca:a5:a7:7c:
                    a4:1f:2b:0b:a5:a6:17:81:34:d0:9a:05:3a:18:9e:
                    16:aa:ab:69:1d:1c:4d:4e:98:95:d9:c2:a6:ac:5a:
                    f1:d7:39:88:68:db:d8:76:f6:d9:c5:50:ae:1f:20:
                    62:85:d4:75:14:d2:a5:a3:a0:45:24:5c:fb:45:8b:
                    d1:ec:91:8f:57:27:ad:aa:04:12:fd:8a:f6:13:27:
                    66:09:41:66:a0:b1:40:04:ee:b3:1c:47:9f:19:0e:
                    e7:04:e5:dd:b4:d5:8b:44:bb:80:81:12:07:92:d1:
                    91:b6:4e:e7:0b:c3:a4:0f:b8:21:d2:6e:ae:03:ba:
                    51:39:b2:e2:8a:4a:a2:75:ba:30:3f:f2:14:e4:56:
                    e3:b6:92:ba:92:e0:c8:95:a6:89:7f:16:a4:95:ef:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:49:37:C5:BB:4B:BD:4A:E3:1B:45:48:EE:92:0E:BC:08:02:95:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/a3f83736-a2f4-3e8b-a694-e4eb72d5c575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:2d:a1:06:b7:df:79:39:f0:33:3b:5a:34:a2:fb:c1:4a:
         34:47:bb:37:f6:e5:ad:f7:f8:7c:b4:eb:40:d5:b0:c0:ad:66:
         5f:4d:92:85:11:e3:3c:77:3c:9f:bb:0a:6e:7a:ab:18:4b:99:
         e5:23:48:75:f3:c5:46:42:0b:87:00:e1:ad:89:b8:0e:95:a7:
         2b:02:fb:74:ab:d1:9a:56:7d:46:14:88:bf:12:94:cf:33:e8:
         04:0a:e1:3e:5c:a6:52:27:d5:0f:c1:bd:5c:11:87:32:a0:14:
         35:b8:1a:23:95:10:a5:2f:a3:16:6e:58:bf:3d:8b:6e:79:12:
         81:f4:44:17:e2:cd:59:6b:e7:60:e9:c1:75:f7:d2:14:7c:b4:
         c6:1f:13:da:6c:29:47:84:2e:51:e8:cb:9c:11:25:ad:97:33:
         0f:b0:40:8b:4c:67:6b:ad:92:cd:39:04:86:69:f3:b3:43:40:
         17:e0:ab:77:cb:87:9f:b6:a1:07:0c:ae:1b:4a:66:c5:d4:e6:
         fc:cb:ab:b5:4f:77:9d:44:96:c6:64:1c:0c:6d:16:90:11:12:
         ed:0f:ca:05:fb:14:e1:83:cd:87:df:a4:73:b8:0d:35:39:60:
         52:80:c1:27:16:a0:b6:43:85:58:01:2d:cd:62:da:85:35:b4:
         09:aa:34:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZjZIAAiHVCHkTzOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI0MDcwMTAxMDAyNVoXDTI0MDkyOTAxMDAyNVowLzEtMCsGA1UEAxMk
YjY0MTQyNmEtYTEwMC00ZGVlLWJkYzgtNDIzMjg5MzQ2MjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSuVNxyhsGcGKK8HveGrJclwNS/O23t4BKb6
1DfzTLTBdcjYtXc2BBM1xSbnm4chKpU8brrOp87aXuCkJHEHYYPUaaCyecPcc0KF
zfcEzTf5H4r/p/hwPFRkzWHKp9gyslITLsqlp3ykHysLpaYXgTTQmgU6GJ4Wqqtp
HRxNTpiV2cKmrFrx1zmIaNvYdvbZxVCuHyBihdR1FNKlo6BFJFz7RYvR7JGPVyet
qgQS/Yr2EydmCUFmoLFABO6zHEefGQ7nBOXdtNWLRLuAgRIHktGRtk7nC8OkD7gh
0m6uA7pRObLiikqidbowP/IU5FbjtpK6kuDIlaaJfxakle/BFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZJN8W7S71K4xtFSO6SDrwIApVuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYTNmODM3MzYtYTJmNC0z
ZThiLWE2OTQtZTRlYjcyZDVjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlNLaEGt995OfAzO1o0ovvBSjRHuzf25a33+Hy060DVsMCtZl9NkoUR
4zx3PJ+7Cm56qxhLmeUjSHXzxUZCC4cA4a2JuA6VpysC+3Sr0ZpWfUYUiL8SlM8z
6AQK4T5cplIn1Q/BvVwRhzKgFDW4GiOVEKUvoxZuWL89i255EoH0RBfizVlr52Dp
wXX30hR8tMYfE9psKUeELlHoy5wRJa2XMw+wQItMZ2utks05BIZp87NDQBfgq3fL
h5+2oQcMrhtKZsXU5vzLq7VPd51ElsZkHAxtFpAREu0PygX7FOGDzYffpHO4DTU5
YFKAwScWoLZDhVgBLc1i2oU1tAmqNHo=
-----END CERTIFICATE-----
Generated at Fri Sep 13 04:49:18 2024 by rpki-client on console-fra.rpki-client.org