Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa
File:                     b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa (raw, json)
Hash identifier:          0jE1V1eys1KZqovC+GoVneId1V09oJs2ftiMsTRwuX0=
Subject key identifier:   E8:72:A7:ED:F5:7B:98:72:7D:F8:D3:E2:20:7D:19:2C:50:68:88:C9
Certificate issuer:       /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
Certificate serial:       010D0C9F432858475EA624EF8017E277FEC2E200
Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     16509
IP address blocks:        142.9.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:24:ef:80:17:e2:77:fe:c2:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=2767364f-f987-4710-ab78-dc91aab9f70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:da:0a:f0:cb:c3:cd:05:f5:f4:3d:a6:dd:
                    a4:e6:5b:60:b5:bd:3f:91:dd:b7:27:60:0f:9e:21:
                    18:62:5c:6e:4d:b2:e3:d9:ed:e5:77:9b:30:d4:f2:
                    20:1f:46:61:1d:19:44:59:3a:57:4f:3c:f5:00:bb:
                    1a:0b:c0:c8:80:94:11:21:c9:ab:ab:a5:8e:df:33:
                    69:c0:db:67:18:ab:ca:20:2a:21:e3:ea:fe:1e:94:
                    3b:12:06:bd:06:4e:04:ef:83:e8:85:39:c9:4a:d4:
                    cf:97:0e:c6:93:fe:7c:c5:ba:f6:7d:c9:7e:00:f7:
                    68:48:b1:b8:23:76:84:4e:77:0f:52:72:80:4e:ee:
                    f9:2a:b8:f6:60:7f:57:4a:55:cf:59:4c:4e:d3:42:
                    98:b0:48:60:cb:21:6c:1c:a4:b5:36:5a:68:b0:ee:
                    e6:99:89:b4:87:ad:1f:b6:82:66:65:f1:aa:0f:1b:
                    20:5d:07:58:c8:10:9d:0c:56:33:bf:6a:9e:38:eb:
                    0e:cc:dd:c7:5a:de:b6:05:b8:c6:3c:14:4e:39:91:
                    f2:75:2b:55:8f:4e:77:a0:c1:df:3c:af:0c:f6:d1:
                    0c:57:1b:76:3f:51:67:77:82:28:55:8b:c7:e5:94:
                    99:35:98:93:2a:47:b9:60:01:46:4b:d8:39:05:93:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:72:A7:ED:F5:7B:98:72:7D:F8:D3:E2:20:7D:19:2C:50:68:88:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/b168a7d9-fee4-3f17-986b-6bb7bbfc5f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl

            X509v3 Authority Key Identifier:
                keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.9.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c7:d2:ec:81:07:89:bb:50:10:9a:ff:74:be:b9:2c:3c:b6:
         69:a0:3d:6d:2a:7c:f0:0c:84:06:a4:48:e5:8e:30:03:0c:b5:
         f9:6d:f8:a3:78:15:72:7b:c8:7b:e6:e0:04:de:66:83:07:00:
         98:dd:46:25:33:c8:77:bf:79:b3:ed:f4:95:8a:6f:05:c3:ef:
         66:fb:7b:da:0b:87:88:99:79:71:37:94:63:5f:11:ef:e6:69:
         b3:44:45:ee:51:d8:2e:61:ec:57:88:b6:86:09:0d:e5:90:90:
         a5:b3:bc:20:b8:ee:c2:12:d5:44:c7:53:1f:19:2a:38:5d:16:
         41:cf:00:33:04:87:1d:ee:60:be:fe:3a:26:31:76:5c:c1:7d:
         c5:bd:92:07:49:a0:5b:80:21:5d:8e:2f:0a:f5:4b:f0:20:05:
         fe:d9:e5:dc:72:31:90:c3:ca:81:e1:43:b5:d1:cd:18:c4:9e:
         81:f7:12:2d:d5:81:01:60:01:ff:cc:91:91:5e:b3:2f:b2:79:
         c4:b4:87:f9:6a:8a:e5:a9:a6:69:48:d2:83:dc:18:44:2e:71:
         81:82:c0:dd:3a:a5:d0:86:f8:f2:8a:7d:6c:70:28:69:a2:22:
         5e:84:a2:1b:c5:31:02:e5:c2:25:7e:bd:88:bf:67:3e:2d:ad:
         0f:51:7d:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepiTvgBfid/7C4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc4YzFhN2QtMWNkYi00ZTYzLWJhMzgtYWM1MGQxYTRk
ZDQ2MB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk
Mjc2NzM2NGYtZjk4Ny00NzEwLWFiNzgtZGM5MWFhYjlmNzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnfaCvDLw80F9fQ9pt2k5ltgtb0/kd23J2AP
niEYYlxuTbLj2e3ld5sw1PIgH0ZhHRlEWTpXTzz1ALsaC8DIgJQRIcmrq6WO3zNp
wNtnGKvKICoh4+r+HpQ7Ega9Bk4E74PohTnJStTPlw7Gk/58xbr2fcl+APdoSLG4
I3aETncPUnKATu75Krj2YH9XSlXPWUxO00KYsEhgyyFsHKS1NlposO7mmYm0h60f
toJmZfGqDxsgXQdYyBCdDFYzv2qeOOsOzN3HWt62BbjGPBROOZHydStVj053oMHf
PK8M9tEMVxt2P1Fnd4IoVYvH5ZSZNZiTKke5YAFGS9g5BZMSbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOhyp+31e5hyffjT4iB9GSxQaIjJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNzhj
MWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUwZDFhNGRkNDYvYjE2OGE3ZDktZmVlNC0z
ZjE3LTk4NmItNmJiN2JiZmM1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjc4YzFhN2QtMWNkYi00ZTYzLWJh
MzgtYWM1MGQxYTRkZDQ2L2Y3OGMxYTdkLTFjZGItNGU2My1iYTM4LWFjNTBkMWE0
ZGQ0Ni5jcmwwHwYDVR0jBBgwFoAUDUS9q3wh+wtyI3xyVUVHp+nvQKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mNzhjMWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUw
ZDFhNGRkNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgn/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDH0uyBB4m7UBCa/3S+uSw8tmmgPW0qfPAMhAakSOWOMAMMtflt+KN4
FXJ7yHvm4ATeZoMHAJjdRiUzyHe/ebPt9JWKbwXD72b7e9oLh4iZeXE3lGNfEe/m
abNERe5R2C5h7FeItoYJDeWQkKWzvCC47sIS1UTHUx8ZKjhdFkHPADMEhx3uYL7+
OiYxdlzBfcW9kgdJoFuAIV2OLwr1S/AgBf7Z5dxyMZDDyoHhQ7XRzRjEnoH3Ei3V
gQFgAf/MkZFesy+yecS0h/lqiuWppmlI0oPcGEQucYGCwN06pdCG+PKKfWxwKGmi
Il6EohvFMQLlwiV+vYi/Zz4trQ9RfeY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:12 2024 by rpki-client on console-fra.rpki-client.org