Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa
File:                     53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json)
Hash identifier:          TBcBm0jPEjHOqTYOtWXewD/+m9g4E+4PsG/l2thLhWc=
Subject key identifier:   64:09:11:99:C4:F8:73:A7:34:B3:35:74:F2:F2:A0:11:FF:9D:A1:D8
Certificate issuer:       /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
Certificate serial:       010D0C9F4328584734C8834E77A0FE9DFF7D62C0
Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     25649
IP address blocks:        161.38.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:83:4e:77:a0:fe:9d:ff:7d:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=6b2ba909-ea2d-4188-af01-965a8797bcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:1e:49:2f:88:c4:cb:06:52:cd:83:52:be:
                    ea:ca:f2:03:64:fb:07:75:8b:0e:3e:5a:ec:15:4e:
                    db:97:56:dd:fe:03:f3:54:77:f2:58:ae:9e:53:f0:
                    aa:11:46:30:ea:a5:70:9b:33:6d:33:48:14:fc:a2:
                    e3:de:f2:1c:f1:eb:c2:d4:2c:03:8c:1b:fe:a1:66:
                    cc:bf:8c:bd:c2:d9:52:e2:5e:72:21:44:86:ca:b1:
                    cc:4f:c0:8a:19:c9:05:10:bb:c2:a1:03:70:31:52:
                    1b:cf:18:4e:7a:7c:52:ef:58:57:db:41:87:ef:3b:
                    30:a9:19:28:ac:ef:94:9a:1f:ac:f3:3b:5c:a4:c5:
                    ee:d7:e4:37:d6:81:16:0c:c4:0d:1b:93:7a:f0:3b:
                    6d:8c:d1:08:52:06:23:3d:9d:c2:55:b2:ae:93:55:
                    8d:2d:4d:cb:05:0f:e0:f0:86:65:ce:59:5b:94:2e:
                    82:3f:33:b1:f8:77:fc:f4:8f:9a:1b:b8:fe:ba:e1:
                    f6:5b:69:3a:7b:bc:ba:bb:78:ac:a7:69:8f:04:7c:
                    9a:ca:eb:b9:b2:55:03:4f:df:58:58:ce:67:e9:56:
                    15:e3:60:c6:49:ea:0b:3e:ef:4e:49:2c:b8:05:2f:
                    a1:c9:6e:4d:33:2c:2d:a2:e4:12:98:cf:4a:1e:94:
                    48:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:11:99:C4:F8:73:A7:34:B3:35:74:F2:F2:A0:11:FF:9D:A1:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl

            X509v3 Authority Key Identifier:
                keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:87:24:30:51:a4:9e:b6:33:13:39:5b:ec:7a:49:53:57:d9:
         bc:6d:1e:04:4a:73:c4:b3:b7:1a:0b:f5:14:fd:25:7f:bc:93:
         47:4e:3d:d3:60:e2:51:02:ca:a4:39:5a:8b:c7:b9:77:bc:f4:
         73:7b:59:f2:21:07:4e:90:14:02:24:0b:a4:22:5f:59:f4:54:
         a3:1c:6b:96:d8:26:b9:d0:4d:65:9a:ac:13:62:dd:4a:61:7b:
         4d:60:8d:b8:02:d5:d4:66:b9:1a:78:55:e0:89:89:18:1f:f4:
         05:c1:64:18:ba:71:18:1d:cd:db:f6:f3:99:ea:95:34:90:a0:
         ce:e7:96:91:33:b0:65:48:d8:0c:1b:75:fc:cc:da:49:02:39:
         e3:11:f6:70:c8:46:f1:c6:28:1e:1a:bc:1a:10:2f:c0:f2:ac:
         a6:e5:70:f3:fa:9b:15:82:bc:91:f4:55:2c:12:46:1d:99:fc:
         fa:92:95:0a:97:20:c8:57:f3:35:e5:95:9a:4c:33:6a:36:04:
         4f:80:36:4a:53:d9:a8:74:43:aa:96:ba:20:b9:99:5c:14:7d:
         84:8d:46:da:d8:9c:89:00:bd:87:84:44:61:9d:e8:3f:e4:d1:
         92:70:c0:15:16:3e:49:bc:a0:cc:7a:ce:f2:8e:63:90:84:28:
         8c:06:ca:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yINOd6D+nf99YsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy
ZThlMB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
NmIyYmE5MDktZWEyZC00MTg4LWFmMDEtOTY1YTg3OTdiY2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M8eSS+IxMsGUs2DUr7qyvIDZPsHdYsOPlrs
FU7bl1bd/gPzVHfyWK6eU/CqEUYw6qVwmzNtM0gU/KLj3vIc8evC1CwDjBv+oWbM
v4y9wtlS4l5yIUSGyrHMT8CKGckFELvCoQNwMVIbzxhOenxS71hX20GH7zswqRko
rO+Umh+s8ztcpMXu1+Q31oEWDMQNG5N68DttjNEIUgYjPZ3CVbKuk1WNLU3LBQ/g
8IZlzllblC6CPzOx+Hf89I+aG7j+uuH2W2k6e7y6u3isp2mPBHyayuu5slUDT99Y
WM5n6VYV42DGSeoLPu9OSSy4BS+hyW5NMywtouQSmM9KHpRI/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQJEZnE+HOnNLM1dPLyoBH/naHYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj
ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNTNjOGY2ZGQtNzFlZi0z
ZDU2LWFjOTgtY2M0YzVlYTRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh
NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw
MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw
YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSYqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCHJDBRpJ62MxM5W+x6SVNX2bxtHgRKc8SztxoL9RT9JX+8k0dOPdNg
4lECyqQ5WovHuXe89HN7WfIhB06QFAIkC6QiX1n0VKMca5bYJrnQTWWarBNi3Uph
e01gjbgC1dRmuRp4VeCJiRgf9AXBZBi6cRgdzdv285nqlTSQoM7nlpEzsGVI2Awb
dfzM2kkCOeMR9nDIRvHGKB4avBoQL8DyrKblcPP6mxWCvJH0VSwSRh2Z/PqSlQqX
IMhX8zXllZpMM2o2BE+ANkpT2ah0Q6qWuiC5mVwUfYSNRtrYnIkAvYeERGGd6D/k
0ZJwwBUWPkm8oMx6zvKOY5CEKIwGyi4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:54 2024 by rpki-client on console-fra.rpki-client.org