Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/dedf1a67-51e3-3031-954c-722dadbb83de.roa
File:                     dedf1a67-51e3-3031-954c-722dadbb83de.roa (raw, json)
Hash identifier:          XjVzfBN9esX1Hn69+gjppMEBHSBx/GksTUgjkufpTLU=
Subject key identifier:   8F:21:F9:98:68:9F:F3:EF:DB:DF:B1:5C:97:A0:DC:91:62:08:01:9E
Certificate issuer:       /CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
Certificate serial:       010D0C9F432858458C6DD34AE8AFA3EAF82CB610
Authority key identifier: E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/dedf1a67-51e3-3031-954c-722dadbb83de.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        195.85.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d3:4a:e8:af:a3:ea:f8:2c:b6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=990f1d46-5a2a-468c-9b68-aa16348e34e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:58:43:ec:30:01:80:65:d9:e7:93:e7:37:17:
                    b2:dd:d0:b0:06:1b:0e:56:81:54:f3:cc:4d:be:c7:
                    ae:4b:6a:e4:41:f5:f5:74:a2:cc:af:9c:50:52:b5:
                    28:69:bc:df:29:26:00:0d:3c:ff:0c:98:b4:e5:f8:
                    31:e1:0d:98:64:3c:de:62:f3:fd:9d:34:54:ea:78:
                    55:ae:71:13:27:24:29:3e:df:df:80:37:34:a3:4a:
                    6a:cb:3e:cc:04:84:46:64:cb:08:cf:ab:76:0f:58:
                    71:26:2f:29:fe:1f:d1:b5:2e:9b:a9:0f:a0:d9:84:
                    12:04:f2:6d:b0:e4:cb:b2:81:0d:0b:8e:6b:f9:06:
                    01:87:eb:5a:f3:ad:34:c4:dc:09:7b:6d:c2:09:bf:
                    8e:9b:a5:60:a7:55:e3:ac:5c:0d:99:97:cf:c3:f7:
                    d4:b4:a4:91:75:f6:74:02:72:48:a3:60:7c:66:69:
                    12:6e:46:44:1c:e7:ae:83:28:8f:c4:99:9d:7d:0d:
                    3b:12:c7:f5:48:eb:8c:c8:b6:bb:25:30:82:85:de:
                    d4:27:21:e8:83:13:db:d4:ad:6b:63:3f:69:0a:87:
                    b4:dc:e3:5c:aa:b1:4f:ed:73:47:fc:08:a6:5b:44:
                    29:7d:6b:9a:f4:54:41:5c:15:94:2f:b7:07:e5:3f:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:21:F9:98:68:9F:F3:EF:DB:DF:B1:5C:97:A0:DC:91:62:08:01:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/dedf1a67-51e3-3031-954c-722dadbb83de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl

            X509v3 Authority Key Identifier:
                keyid:E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:34:ce:99:03:bb:17:63:15:b2:1b:a3:b9:8b:5f:e9:2c:8e:
         53:db:29:5e:0f:91:1b:19:94:b4:b5:16:70:67:11:8b:12:6f:
         3d:69:17:fb:55:44:64:81:53:40:da:6a:fa:64:11:38:ff:d4:
         2b:ca:08:98:4d:ff:82:8d:50:66:41:da:df:22:89:e7:03:0a:
         72:72:e0:3b:21:ad:81:65:41:99:9c:dc:20:a8:a5:eb:69:25:
         37:aa:12:1b:9b:da:47:cf:97:c0:85:68:22:9c:fd:3d:97:3d:
         58:c6:a0:ef:22:f7:c1:4e:bd:31:f1:05:fc:fd:cd:83:41:4b:
         27:5c:09:be:3c:7f:c3:3b:8c:32:c7:2e:05:ff:09:51:54:e7:
         9f:be:f4:54:3c:c4:df:c2:e6:16:37:02:c3:60:6c:bf:17:14:
         52:e4:6e:f0:fd:cd:72:88:e5:b2:1a:23:4b:c6:93:2f:b8:42:
         cb:cc:fd:8f:27:c1:5f:fc:cd:c9:e6:4e:38:75:13:72:07:42:
         c6:ee:d0:63:a8:1b:55:b1:51:d4:87:6e:2a:55:64:6b:b8:44:
         e8:c4:c7:44:21:ed:8a:7e:62:96:87:15:ff:74:9f:23:3a:d9:
         e7:76:37:60:43:df:89:3f:db:ac:b1:12:74:ac:c0:8d:fd:1b:
         c9:c2:e5:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWMbdNK6K+j6vgsthAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZjMzc0MWItZGVmZi00ZWNmLWJjMzctMjYyYjIwZTFl
Mjc4MB4XDTI0MDQxNTAxMDAyNloXDTI0MDcxNDAxMDAyNlowLzEtMCsGA1UEAxMk
OTkwZjFkNDYtNWEyYS00NjhjLTliNjgtYWExNjM0OGUzNGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFhD7DABgGXZ55PnNxey3dCwBhsOVoFU88xN
vseuS2rkQfX1dKLMr5xQUrUoabzfKSYADTz/DJi05fgx4Q2YZDzeYvP9nTRU6nhV
rnETJyQpPt/fgDc0o0pqyz7MBIRGZMsIz6t2D1hxJi8p/h/RtS6bqQ+g2YQSBPJt
sOTLsoENC45r+QYBh+ta8600xNwJe23CCb+Om6Vgp1XjrFwNmZfPw/fUtKSRdfZ0
AnJIo2B8ZmkSbkZEHOeugyiPxJmdfQ07Esf1SOuMyLa7JTCChd7UJyHogxPb1K1r
Yz9pCoe03ONcqrFP7XNH/AimW0QpfWua9FRBXBWUL7cH5T/hGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8h+Zhon/Pv29+xXJeg3JFiCAGeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmMz
NzQxYi1kZWZmLTRlY2YtYmMzNy0yNjJiMjBlMWUyNzgvZGVkZjFhNjctNTFlMy0z
MDMxLTk1NGMtNzIyZGFkYmI4M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmZjMzc0MWItZGVmZi00ZWNmLWJj
MzctMjYyYjIwZTFlMjc4LzZmYzM3NDFiLWRlZmYtNGVjZi1iYzM3LTI2MmIyMGUx
ZTI3OC5jcmwwHwYDVR0jBBgwFoAU48Ch8+RHuqq9mAhrsX88GNUiBEMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZmMzNzQxYi1kZWZmLTRlY2YtYmMzNy0yNjJi
MjBlMWUyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1VLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHM0zpkDuxdjFbIbo7mLX+ksjlPbKV4PkRsZlLS1FnBnEYsSbz1pF/tV
RGSBU0DaavpkETj/1CvKCJhN/4KNUGZB2t8iiecDCnJy4DshrYFlQZmc3CCopetp
JTeqEhub2kfPl8CFaCKc/T2XPVjGoO8i98FOvTHxBfz9zYNBSydcCb48f8M7jDLH
LgX/CVFU55++9FQ8xN/C5hY3AsNgbL8XFFLkbvD9zXKI5bIaI0vGky+4QsvM/Y8n
wV/8zcnmTjh1E3IHQsbu0GOoG1WxUdSHbipVZGu4ROjEx0Qh7Yp+YpaHFf90nyM6
2ed2N2BD34k/26yxEnSswI39G8nC5ZQ=
-----END CERTIFICATE-----
Generated at Thu May 2 04:27:54 2024 by rpki-client on console-fra.rpki-client.org