Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa
File:                     7dc9f381-556f-3234-ab22-8ad7b4242933.roa (raw, json)
Hash identifier:          dZz2yLWN3csY8Yfdq0IUGmoUANo6eCU4vfbtNKAXLFs=
Subject key identifier:   B4:FD:9C:56:11:90:9A:7F:5A:D7:D2:CF:CD:33:1F:16:4B:A9:64:D5
Certificate issuer:       /CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a
Certificate serial:       010D0C9F43285847AE36C4803EAF01E7ED937200
Authority key identifier: 3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     27602
IP address blocks:        23.249.171.0/24 maxlen: 24
                          63.246.134.0/24 maxlen: 24
                          209.209.96.0/22 maxlen: 24
                          2604:f3c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c4:80:3e:af:01:e7:ed:93:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=279361d9-495a-4b9a-8110-422df3cb8f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:92:91:a9:56:36:2e:fd:dc:19:7c:78:ac:
                    10:15:0b:d6:f2:13:cf:ed:26:25:79:53:e6:e8:fc:
                    25:02:b7:3e:f4:5c:6c:f9:ef:5a:71:05:09:1e:27:
                    f1:58:25:52:0d:ed:20:97:d1:91:26:70:ef:da:83:
                    53:19:cf:1e:6d:8e:62:0b:0e:db:9b:b1:a0:ca:3c:
                    a4:77:58:48:60:56:e9:94:e2:59:4f:b2:6e:8e:33:
                    7c:84:63:1f:e9:38:de:38:15:71:bc:b2:7f:8c:33:
                    80:21:c3:c8:52:8d:e0:af:f0:54:ee:e6:48:b6:24:
                    85:ae:72:d0:8d:dc:c0:c2:88:96:4e:0c:09:8e:5a:
                    b3:4f:86:f1:41:ee:61:f1:a2:05:69:20:32:c4:56:
                    7e:89:08:6f:a4:25:66:7b:5d:a6:89:11:da:50:c6:
                    4b:15:03:23:2a:31:c5:a7:e9:33:66:aa:9e:04:94:
                    b4:92:3b:22:de:41:69:d3:de:35:a1:e7:0e:9f:ab:
                    1e:a6:e2:6b:f0:6f:78:ee:02:e7:11:b4:cd:80:ad:
                    40:5a:af:1e:e6:0f:de:c4:e1:77:2d:b3:82:a7:9e:
                    6e:cd:11:72:fc:92:4f:3a:21:2f:4b:b6:4b:d1:a2:
                    f2:e8:d3:35:ed:6c:f5:94:b4:72:71:14:97:67:e0:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:9C:56:11:90:9A:7F:5A:D7:D2:CF:CD:33:1F:16:4B:A9:64:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.171.0/24
                  63.246.134.0/24
                  209.209.96.0/22
                IPv6:
                  2604:f3c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a0:f5:31:51:c4:40:08:4c:4d:15:4d:51:3e:4e:af:0e:fe:
         61:2f:d0:38:be:4e:38:03:88:c7:00:ce:84:0c:76:68:67:84:
         aa:59:fb:19:3d:dc:cc:48:c2:08:70:61:ab:68:62:01:ff:1e:
         92:f0:6e:9d:ff:9d:7c:a4:c4:7b:64:b9:aa:b0:96:ce:56:43:
         d7:9c:f7:5d:a8:d7:ed:b6:d2:ba:f5:35:54:9d:57:50:d5:c4:
         0d:5d:18:1e:26:b0:7d:00:b8:54:e6:2e:fd:1c:14:0c:46:46:
         a2:82:0f:d9:f5:0a:b6:51:b6:eb:c4:d6:6a:70:f3:b1:6a:2a:
         bf:cd:5c:99:d2:5d:44:36:ff:a0:d0:47:fe:30:65:7f:1f:e4:
         db:c9:8a:fa:95:d5:33:df:fe:3c:05:67:5e:82:38:a6:96:53:
         e2:d5:13:03:ae:6d:06:7b:7e:fc:02:48:0c:6a:06:0f:73:46:
         01:de:28:c7:1f:13:66:d1:1d:ae:c5:04:f0:d8:4b:52:20:4a:
         73:82:bd:91:b9:a8:2f:36:20:7e:6d:b9:38:86:eb:c3:01:95:
         c6:a0:e9:02:11:ce:67:28:8c:d0:c6:50:ba:02:28:68:15:3a:
         b6:a2:94:3b:ee:a7:44:90:11:5c:87:d1:5c:c5:89:be:75:8d:
         ec:0e:9b:10
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEeuNsSAPq8B5+2TcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODFjZDljOTctNWIwOC00ZTdkLWFlZDYtMWY1OTlhMzVi
ZDRhMB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
Mjc5MzYxZDktNDk1YS00YjlhLTgxMTAtNDIyZGYzY2I4ZjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbaSkalWNi793Bl8eKwQFQvW8hPP7SYleVPm
6PwlArc+9Fxs+e9acQUJHifxWCVSDe0gl9GRJnDv2oNTGc8ebY5iCw7bm7Ggyjyk
d1hIYFbplOJZT7JujjN8hGMf6TjeOBVxvLJ/jDOAIcPIUo3gr/BU7uZItiSFrnLQ
jdzAwoiWTgwJjlqzT4bxQe5h8aIFaSAyxFZ+iQhvpCVme12miRHaUMZLFQMjKjHF
p+kzZqqeBJS0kjsi3kFp0941oecOn6sepuJr8G947gLnEbTNgK1AWq8e5g/exOF3
LbOCp55uzRFy/JJPOiEvS7ZL0aLy6NM17Wz1lLRycRSXZ+AnXwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFLT9nFYRkJp/WtfSz80zHxZLqWTVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWNk
OWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5OWEzNWJkNGEvN2RjOWYzODEtNTU2Zi0z
MjM0LWFiMjItOGFkN2I0MjQyOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFjZDljOTctNWIwOC00ZTdkLWFl
ZDYtMWY1OTlhMzViZDRhLzgxY2Q5Yzk3LTViMDgtNGU3ZC1hZWQ2LTFmNTk5YTM1
YmQ0YS5jcmwwHwYDVR0jBBgwFoAUP8S2EhEUE8gIcSKKrnEYVpKc20MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84MWNkOWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5
OWEzNWJkNGEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF/mrAwQA
P/aGAwQC0dFgMA0EAgACMAcDBQAmBPPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAig9TFRxEAITE0VTVE+
Tq8O/mEv0Di+TjgDiMcAzoQMdmhnhKpZ+xk93MxIwghwYatoYgH/HpLwbp3/nXyk
xHtkuaqwls5WQ9ec912o1+220rr1NVSdV1DVxA1dGB4msH0AuFTmLv0cFAxGRqKC
D9n1CrZRtuvE1mpw87FqKr/NXJnSXUQ2/6DQR/4wZX8f5NvJivqV1TPf/jwFZ16C
OKaWU+LVEwOubQZ7fvwCSAxqBg9zRgHeKMcfE2bRHa7FBPDYS1IgSnOCvZG5qC82
IH5tuTiG68MBlcag6QIRzmcojNDGULoCKGgVOrailDvup0SQEVyH0VzFib51jewO
mxA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:56 2024 by rpki-client on console-fra.rpki-client.org