Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/b8f3cacf-50d3-3a8d-ab0c-6d38fe0760d5.roa
File:                     b8f3cacf-50d3-3a8d-ab0c-6d38fe0760d5.roa (raw, json)
Hash identifier:          2DYrXnabCU3YaCxIPaR3PRzi8C+oYWKH4HxN5+ZBZZA=
Subject key identifier:   74:DD:35:78:51:8A:93:F6:FD:42:AC:E3:1D:0A:43:A9:2B:7E:61:85
Certificate issuer:       /CN=27b41e1f-1561-4820-9e8b-d00057b5083a
Certificate serial:       010D0C9F4328584843FCE19753A3BD41313F7400
Authority key identifier: DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/b8f3cacf-50d3-3a8d-ab0c-6d38fe0760d5.roa
Signing time:             Fri 20 Dec 2024 04:35:34 +0000
ROA not before:           Fri 20 Dec 2024 04:35:34 +0000
ROA not after:            Thu 20 Mar 2025 03:35:34 +0000
asID:                     14618
IP address blocks:        45.59.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:fc:e1:97:53:a3:bd:41:31:3f:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b41e1f-1561-4820-9e8b-d00057b5083a
        Validity
            Not Before: Dec 20 04:35:34 2024 GMT
            Not After : Mar 20 03:35:34 2025 GMT
        Subject: CN=82d1db83-8622-4850-a0ac-2f2f4f764ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:75:f0:c3:51:14:2b:02:3c:e8:5e:bb:6c:
                    7b:52:20:99:da:ca:d4:4b:fd:9c:87:36:4a:72:b1:
                    f4:bf:e2:75:28:a5:c8:bf:47:06:5f:c5:4f:b4:48:
                    71:d4:95:12:8c:76:56:4b:7a:c8:af:e6:d7:56:f1:
                    82:4d:ab:c8:36:23:58:07:22:b2:d5:f8:f4:eb:0d:
                    a6:a7:84:ec:b8:af:ce:b0:a0:ce:0c:27:58:ee:31:
                    85:8e:db:d3:de:de:9a:53:3c:05:32:3c:ef:f9:99:
                    1d:f6:c7:39:83:f9:c5:a4:95:f3:e8:5a:f2:ab:b5:
                    b8:65:f1:72:71:98:96:3d:9e:35:59:ae:78:2c:b9:
                    95:85:8f:b3:c5:4b:d2:df:b4:6c:4b:ca:a5:b1:94:
                    d0:5f:7c:07:ad:48:32:05:89:c7:03:a1:ec:cf:3c:
                    f9:79:f3:e4:e6:d4:ca:16:ec:94:ef:f9:50:10:ed:
                    53:ac:7e:f5:1b:0a:2c:be:1d:9d:87:8b:39:47:de:
                    09:01:e1:78:05:af:c2:1d:ab:e0:8e:26:3f:02:f9:
                    2d:44:cc:0d:c6:46:90:33:2f:24:d0:45:01:13:8a:
                    8e:57:4f:a9:b5:7b:99:35:8b:28:04:2d:0e:69:fc:
                    42:a9:5b:78:41:27:a4:18:12:6b:cc:1d:2c:66:71:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DD:35:78:51:8A:93:F6:FD:42:AC:E3:1D:0A:43:A9:2B:7E:61:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/b8f3cacf-50d3-3a8d-ab0c-6d38fe0760d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a/27b41e1f-1561-4820-9e8b-d00057b5083a.crl

            X509v3 Authority Key Identifier:
                keyid:DD:D8:F6:1A:C3:0D:42:C9:66:D7:E7:D2:76:3F:DF:8D:83:5F:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/27b41e1f-1561-4820-9e8b-d00057b5083a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:9b:78:c4:e8:08:87:b1:51:d7:82:ea:5b:97:c4:8a:58:1f:
         71:f2:a0:f7:60:7b:52:75:35:c9:7f:30:34:25:fd:d3:73:2c:
         bb:20:45:58:3f:71:cb:48:b8:07:95:1e:5d:02:74:e7:e8:90:
         6d:2f:43:eb:94:b3:5c:d7:ef:e0:f3:d4:d6:d0:dd:33:09:aa:
         62:77:49:ea:64:a7:64:4f:b7:ad:f3:be:3b:0a:75:b5:d0:b5:
         db:73:77:63:09:8a:03:06:19:0d:5d:a0:5c:85:ea:d7:8c:60:
         83:b1:e9:6d:dd:20:60:a8:82:30:9e:f9:31:72:d3:f5:89:96:
         26:3b:76:d7:cd:ac:f5:32:bc:72:d3:ab:01:4c:2c:2b:53:b1:
         d8:ea:b8:2b:1c:1a:7f:26:7b:69:c0:09:f7:73:4a:53:89:80:
         8a:ae:81:26:21:98:8c:0f:4c:ee:fc:75:ba:db:26:99:44:ab:
         72:8a:2c:ad:75:4f:bb:69:c0:22:d5:e4:24:aa:ae:b8:1f:58:
         05:9b:0b:5d:8c:1d:f5:5d:22:1c:3f:0e:13:0d:c7:e1:a2:68:
         b9:9c:71:02:d4:62:7c:28:8e:e6:dc:27:fa:73:98:e9:b1:e5:
         62:91:8b:50:e5:33:df:bf:da:03:58:2a:13:8d:ea:1e:cd:82:
         a9:a0:06:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhD/OGXU6O9QTE/dAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdiNDFlMWYtMTU2MS00ODIwLTllOGItZDAwMDU3YjUw
ODNhMB4XDTI0MTIyMDA0MzUzNFoXDTI1MDMyMDAzMzUzNFowLzEtMCsGA1UEAxMk
ODJkMWRiODMtODYyMi00ODUwLWEwYWMtMmYyZjRmNzY0ZWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPl18MNRFCsCPOheu2x7UiCZ2srUS/2chzZK
crH0v+J1KKXIv0cGX8VPtEhx1JUSjHZWS3rIr+bXVvGCTavINiNYByKy1fj06w2m
p4TsuK/OsKDODCdY7jGFjtvT3t6aUzwFMjzv+Zkd9sc5g/nFpJXz6Fryq7W4ZfFy
cZiWPZ41Wa54LLmVhY+zxUvS37RsS8qlsZTQX3wHrUgyBYnHA6Hszzz5efPk5tTK
FuyU7/lQEO1TrH71Gwosvh2dh4s5R94JAeF4Ba/CHavgjiY/AvktRMwNxkaQMy8k
0EUBE4qOV0+ptXuZNYsoBC0OafxCqVt4QSekGBJrzB0sZnFquwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTdNXhRipP2/UKs4x0KQ6krfmGFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yN2I0
MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAwNTdiNTA4M2EvYjhmM2NhY2YtNTBkMy0z
YThkLWFiMGMtNmQzOGZlMDc2MGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjdiNDFlMWYtMTU2MS00ODIwLTll
OGItZDAwMDU3YjUwODNhLzI3YjQxZTFmLTE1NjEtNDgyMC05ZThiLWQwMDA1N2I1
MDgzYS5jcmwwHwYDVR0jBBgwFoAU3dj2GsMNQslm1+fSdj/fjYNfWdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yN2I0MWUxZi0xNTYxLTQ4MjAtOWU4Yi1kMDAw
NTdiNTA4M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTuWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKybeMToCIexUdeC6luXxIpYH3HyoPdge1J1Ncl/MDQl/dNzLLsgRVg/
cctIuAeVHl0CdOfokG0vQ+uUs1zX7+Dz1NbQ3TMJqmJ3Sepkp2RPt63zvjsKdbXQ
tdtzd2MJigMGGQ1doFyF6teMYIOx6W3dIGCogjCe+TFy0/WJliY7dtfNrPUyvHLT
qwFMLCtTsdjquCscGn8me2nACfdzSlOJgIqugSYhmIwPTO78dbrbJplEq3KKLK11
T7tpwCLV5CSqrrgfWAWbC12MHfVdIhw/DhMNx+GiaLmccQLUYnwojubcJ/pzmOmx
5WKRi1DlM9+/2gNYKhON6h7NgqmgBtE=
-----END CERTIFICATE-----
Generated at Fri Dec 27 23:45:11 2024 by rpki-client on console-fra.rpki-client.org