Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa
File:                     999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa (raw, json)
Hash identifier:          I81+54Un9tgHRlYEUjiljsCaANFYWZbdhRx6/X+mjpc=
Subject key identifier:   2D:EE:95:30:28:42:A0:D3:70:D8:21:EF:F6:64:C7:00:72:E0:B4:68
Certificate issuer:       /CN=9ac7679f-d727-44b3-9b13-6e689c3eff61
Certificate serial:       010D0C9F432858451FAAEAC7A67E6976A8DC7F80
Authority key identifier: DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     399385
IP address blocks:        205.137.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:aa:ea:c7:a6:7e:69:76:a8:dc:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac7679f-d727-44b3-9b13-6e689c3eff61
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=11c42b83-d9ee-43c2-8953-14ce91754ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f6:99:11:9d:23:d4:d9:8c:df:16:3b:f5:cc:
                    b9:3b:ad:4b:d7:d2:a0:12:3b:66:02:50:9a:9a:1c:
                    09:27:f5:93:2f:ee:91:ed:95:e6:f0:fe:78:66:60:
                    7f:46:cd:f4:8b:b5:98:9a:10:5e:f1:58:f5:d5:09:
                    3c:17:54:ed:5a:22:23:52:e9:c1:08:18:36:2d:16:
                    b6:5a:79:ff:1f:55:10:21:00:f7:7b:e5:33:c3:0f:
                    0f:96:37:e2:41:81:1e:45:2d:b1:c4:39:d3:fd:4d:
                    23:fa:8f:bb:79:0c:92:95:9d:dd:73:93:ed:a6:8d:
                    b7:ab:d6:92:2d:90:cc:9c:39:92:0b:06:30:b7:66:
                    73:ae:76:c9:fb:0a:5c:0b:f2:2e:24:6e:e8:73:a9:
                    ba:7a:4a:87:f6:b1:94:58:66:91:22:dc:7c:76:0e:
                    97:84:bf:06:c9:22:61:81:58:9a:6a:2d:62:a6:db:
                    c5:2c:bf:bb:0e:57:d1:fe:6e:82:ca:c7:84:de:c0:
                    f6:2f:8e:cf:4a:8d:c7:33:21:47:ca:8b:e6:75:c3:
                    c2:76:26:7b:ec:5c:74:43:9c:66:2e:18:8b:24:64:
                    8a:7e:5a:10:d7:b4:c5:24:8c:02:32:9f:cb:10:af:
                    14:b6:c7:a6:ca:d5:bf:2e:38:0d:17:4a:48:d9:89:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EE:95:30:28:42:A0:D3:70:D8:21:EF:F6:64:C7:00:72:E0:B4:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl

            X509v3 Authority Key Identifier:
                keyid:DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.137.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d5:c4:6b:c1:6d:80:4f:3b:d9:60:1f:56:08:be:36:c5:28:
         83:89:d6:f4:e8:f7:d3:5b:ef:03:5a:36:61:2a:93:2b:19:e3:
         dc:e7:50:3b:77:eb:fa:21:d4:f3:df:9c:62:02:fa:f0:0c:b4:
         36:7b:3f:d8:b1:b1:3c:06:97:07:dc:a6:82:bc:e2:f0:11:84:
         c8:0d:9b:57:70:64:9e:57:e7:a5:0f:d2:5f:c8:6e:5f:79:20:
         3d:76:65:44:48:08:74:f4:f1:3c:87:9b:66:c2:d2:cd:7e:2e:
         e0:cc:74:e9:d7:d2:c0:e8:ca:0a:a4:8a:b7:33:36:13:06:40:
         d7:2b:18:ce:60:5e:17:e4:c5:fc:83:23:03:15:0d:5d:fb:bd:
         61:3e:e5:c2:f7:9b:ab:95:45:c6:f3:ce:1b:b7:73:d2:f6:9f:
         15:d2:3b:a1:96:b8:c1:58:b2:c6:58:96:3d:ce:90:6e:34:6b:
         81:f3:cf:ac:7c:89:71:f0:f4:22:e0:d3:f4:b9:cb:1c:9d:98:
         ee:e5:96:22:47:63:2f:a1:8e:27:bd:94:7e:ae:37:e1:d6:33:
         62:cc:ee:99:ae:31:6d:f5:93:5f:b4:85:ea:d7:63:90:37:bc:
         ce:83:87:38:34:ff:b1:9e:29:cf:3a:0a:80:5b:25:6b:9d:fd:
         59:2e:f4:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfqurHpn5pdqjcf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFjNzY3OWYtZDcyNy00NGIzLTliMTMtNmU2ODljM2Vm
ZjYxMB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MTFjNDJiODMtZDllZS00M2MyLTg5NTMtMTRjZTkxNzU0YmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vaZEZ0j1NmM3xY79cy5O61L19KgEjtmAlCa
mhwJJ/WTL+6R7ZXm8P54ZmB/Rs30i7WYmhBe8Vj11Qk8F1TtWiIjUunBCBg2LRa2
Wnn/H1UQIQD3e+Uzww8PljfiQYEeRS2xxDnT/U0j+o+7eQySlZ3dc5Ptpo23q9aS
LZDMnDmSCwYwt2ZzrnbJ+wpcC/IuJG7oc6m6ekqH9rGUWGaRItx8dg6XhL8GySJh
gViaai1iptvFLL+7DlfR/m6CyseE3sD2L47PSo3HMyFHyovmdcPCdiZ77Fx0Q5xm
LhiLJGSKfloQ17TFJIwCMp/LEK8UtsemytW/LjgNF0pI2Yl3DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3ulTAoQqDTcNgh7/ZkxwBy4LRoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YWM3
Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4OWMzZWZmNjEvOTk5YmFmM2QtNThiNC0z
ZmRmLTliNWYtNGMwZDI4MDFlM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWFjNzY3OWYtZDcyNy00NGIzLTli
MTMtNmU2ODljM2VmZjYxLzlhYzc2NzlmLWQ3MjctNDRiMy05YjEzLTZlNjg5YzNl
ZmY2MS5jcmwwHwYDVR0jBBgwFoAU3A46C13lZNtnXGsSagLFu2PXQWAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YWM3Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4
OWMzZWZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYn5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7VxGvBbYBPO9lgH1YIvjbFKIOJ1vTo99Nb7wNaNmEqkysZ49znUDt3
6/oh1PPfnGIC+vAMtDZ7P9ixsTwGlwfcpoK84vARhMgNm1dwZJ5X56UP0l/Ibl95
ID12ZURICHT08TyHm2bC0s1+LuDMdOnX0sDoygqkirczNhMGQNcrGM5gXhfkxfyD
IwMVDV37vWE+5cL3m6uVRcbzzhu3c9L2nxXSO6GWuMFYssZYlj3OkG40a4Hzz6x8
iXHw9CLg0/S5yxydmO7lliJHYy+hjie9lH6uN+HWM2LM7pmuMW31k1+0herXY5A3
vM6Dhzg0/7GeKc86CoBbJWud/Vku9Fo=
-----END CERTIFICATE-----
Generated at Wed May 22 06:43:24 2024 by rpki-client on console-fra.rpki-client.org