Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/7dab8bae-4738-3508-81b7-a25749bccb14.roa
File:                     7dab8bae-4738-3508-81b7-a25749bccb14.roa (raw, json)
Hash identifier:          f6PjlrcOshmwz1jqMpJIAoVPwUMUF8JQKgr1jLPb8gM=
Subject key identifier:   CA:08:AB:9A:F1:C8:0A:BC:2E:5D:70:A2:35:00:E5:74:3D:1E:95:69
Certificate issuer:       /CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20
Certificate serial:       010D0C9F432858473A5B88FDC08541FC837F0590
Authority key identifier: 5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/7dab8bae-4738-3508-81b7-a25749bccb14.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     5723
IP address blocks:        162.129.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:88:fd:c0:85:41:fc:83:7f:05:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=50d6a1f9-db73-465d-9234-3fba4e2852e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:73:3e:ba:ad:c8:c7:4e:40:8b:ba:fe:ab:
                    a0:68:f9:14:ab:4e:ee:20:0f:70:ae:0a:f3:cd:f6:
                    a6:df:5b:dd:6c:eb:02:bc:f7:30:8f:02:39:6c:2f:
                    05:ae:e3:c4:0b:18:98:ed:cf:85:43:cc:14:95:6e:
                    64:20:c8:e1:46:b9:08:eb:9e:37:15:e4:79:4b:37:
                    a5:fe:57:16:53:90:c5:6c:80:d8:42:8e:a4:b3:df:
                    eb:15:54:f1:ec:ea:28:08:06:ee:ec:37:42:20:90:
                    5c:db:33:40:a0:58:97:f4:38:f5:ef:88:79:d0:a1:
                    05:5d:8a:38:64:73:cb:cf:73:fc:31:a8:9f:60:05:
                    af:e0:b9:57:57:ba:d2:3c:57:b7:44:ad:d6:79:23:
                    5b:a2:c4:b6:de:e2:bf:23:ce:08:4d:04:99:07:3e:
                    f3:06:5d:ac:84:ac:5f:3d:07:65:d8:92:fd:10:e5:
                    6b:57:15:50:14:33:32:f6:a6:32:66:2f:4e:af:de:
                    86:71:59:cf:f6:ba:0e:bf:23:76:1f:c1:67:59:9e:
                    21:87:45:c1:3f:4a:56:e5:55:43:16:fc:3d:8a:0d:
                    af:b5:25:0e:96:01:ab:5a:7c:d1:4d:fa:98:d0:31:
                    a8:60:bd:a2:eb:5a:f4:e8:9e:ee:a5:59:55:62:46:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:AB:9A:F1:C8:0A:BC:2E:5D:70:A2:35:00:E5:74:3D:1E:95:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/7dab8bae-4738-3508-81b7-a25749bccb14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl

            X509v3 Authority Key Identifier:
                keyid:5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:59:ec:78:92:75:c7:63:66:d8:0c:12:32:4b:d1:f6:73:35:
         df:3a:c6:d7:ce:bc:f3:0f:7f:62:81:0c:c2:5a:7c:16:8d:71:
         f8:30:29:b3:79:33:ab:98:73:9f:d7:d2:f6:b5:1b:3a:1a:0e:
         11:fd:af:16:34:6c:51:79:86:d1:a8:ff:55:cc:8c:3c:20:de:
         1b:44:a0:78:a0:cc:ab:39:41:07:fa:0b:d8:88:b6:6d:7f:ff:
         ab:f8:91:7a:d6:9c:24:c9:c7:4d:2a:36:05:de:82:fa:80:45:
         28:3c:f4:1c:45:b0:81:a6:b1:08:cf:e2:82:29:78:d5:bf:b2:
         76:6d:0c:91:b5:00:c8:84:37:af:6e:31:25:d3:f9:8f:6c:d7:
         e0:78:d6:03:6e:5d:3d:ab:3a:e1:6d:3a:09:73:6e:43:04:69:
         d8:4c:32:33:20:1a:4f:f1:fc:8f:96:a3:f5:7b:4b:e7:44:dc:
         79:42:11:4b:0e:5e:e7:2b:24:cd:8f:2e:2a:9e:68:7a:e8:4c:
         5c:95:19:a8:fb:0d:24:92:95:c5:64:ef:5c:33:29:66:69:f8:
         fe:39:4b:12:3d:af:22:18:6d:7f:5f:24:60:7c:b7:43:a7:65:
         dd:c8:0c:14:58:93:4a:ba:7c:47:d2:c2:73:f8:1f:04:a8:0f:
         14:a0:86:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEc6W4j9wIVB/IN/BZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JiM2UxMTAtMmY2NS00ZTdmLThmZmEtMGE2NzE5MTky
ZjIwMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
NTBkNmExZjktZGI3My00NjVkLTkyMzQtM2ZiYTRlMjg1MmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdFzPrqtyMdOQIu6/qugaPkUq07uIA9wrgrz
zfam31vdbOsCvPcwjwI5bC8FruPECxiY7c+FQ8wUlW5kIMjhRrkI6543FeR5Szel
/lcWU5DFbIDYQo6ks9/rFVTx7OooCAbu7DdCIJBc2zNAoFiX9Dj174h50KEFXYo4
ZHPLz3P8MaifYAWv4LlXV7rSPFe3RK3WeSNbosS23uK/I84ITQSZBz7zBl2shKxf
PQdl2JL9EOVrVxVQFDMy9qYyZi9Or96GcVnP9roOvyN2H8FnWZ4hh0XBP0pW5VVD
Fvw9ig2vtSUOlgGrWnzRTfqY0DGoYL2i61r06J7upVlVYkaOnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMoIq5rxyAq8Ll1wojUA5XQ9HpVpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIz
ZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3MTkxOTJmMjAvN2RhYjhiYWUtNDczOC0z
NTA4LTgxYjctYTI1NzQ5YmNjYjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2JiM2UxMTAtMmY2NS00ZTdmLThm
ZmEtMGE2NzE5MTkyZjIwLzNiYjNlMTEwLTJmNjUtNGU3Zi04ZmZhLTBhNjcxOTE5
MmYyMC5jcmwwHwYDVR0jBBgwFoAUXYVn4tCQa51VL4yiAqGA0Dh0EVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYmIzZTExMC0yZjY1LTRlN2YtOGZmYS0wYTY3
MTkxOTJmMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAooEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeFnseJJ1x2Nm2AwSMkvR9nM13zrG18688w9/YoEMwlp8Fo1x+DAps3kz
q5hzn9fS9rUbOhoOEf2vFjRsUXmG0aj/VcyMPCDeG0SgeKDMqzlBB/oL2Ii2bX//
q/iRetacJMnHTSo2Bd6C+oBFKDz0HEWwgaaxCM/igil41b+ydm0MkbUAyIQ3r24x
JdP5j2zX4HjWA25dPas64W06CXNuQwRp2EwyMyAaT/H8j5aj9XtL50TceUIRSw5e
5yskzY8uKp5oeuhMXJUZqPsNJJKVxWTvXDMpZmn4/jlLEj2vIhhtf18kYHy3Q6dl
3cgMFFiTSrp8R9LCc/gfBKgPFKCGMw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:34:04 2024 by rpki-client on console-fra.rpki-client.org