Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/50839927-59e2-3289-ac48-074418a325c8.roa
File:                     50839927-59e2-3289-ac48-074418a325c8.roa (raw, json)
Hash identifier:          9p+3i0DNYmCunHPcNlca6XAEt/PmE3/0MAyZHmaXHsE=
Subject key identifier:   00:BF:F5:65:36:F1:BF:78:06:48:82:33:52:E4:A5:5C:30:8F:1E:71
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584566BDAF79AF039578940FE830
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/50839927-59e2-3289-ac48-074418a325c8.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        209.169.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:af:79:af:03:95:78:94:0f:e8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=e453151f-86b8-4088-aa48-63566db22ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:82:01:05:f9:d3:d3:73:73:37:53:5f:ac:d1:
                    b3:e5:2e:2d:b3:31:74:82:6f:cf:54:4a:f9:ad:3c:
                    30:53:fa:18:3c:e5:2c:8a:e6:55:ae:39:f8:2d:0a:
                    3f:be:76:71:e7:22:c7:55:fa:49:64:d1:a3:6b:07:
                    f6:f1:c1:f2:c3:3a:ef:6f:6a:7a:48:b9:c4:d0:e2:
                    a5:37:fe:d9:47:ff:65:a4:53:c4:2a:fc:40:22:f6:
                    66:6a:b6:a0:77:17:6a:93:f0:60:68:c7:35:e6:c3:
                    50:c0:f0:fa:ed:ce:9d:4b:26:d8:40:4d:67:f7:aa:
                    3f:72:38:88:73:e1:6d:71:d3:87:7f:9a:b6:cb:c0:
                    88:19:f6:c5:78:c3:1e:7a:d2:c5:82:ae:d8:aa:1b:
                    e4:36:dd:0e:4d:da:3a:d7:73:e2:10:12:e0:6d:51:
                    e9:f3:15:1c:aa:fa:62:70:54:af:88:62:d6:5a:67:
                    a9:6a:04:93:59:1e:34:c4:84:09:f5:df:5e:a2:c1:
                    27:07:28:fd:a0:7f:ec:81:da:f0:b6:19:3a:de:7e:
                    8f:14:9e:af:05:bd:f7:e2:e4:17:10:38:47:f4:74:
                    cc:5c:fe:f3:0a:f2:64:97:6d:45:50:2f:3b:d3:2f:
                    dd:93:3d:21:8b:bc:ee:d1:28:d7:ba:44:bf:f3:dd:
                    58:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BF:F5:65:36:F1:BF:78:06:48:82:33:52:E4:A5:5C:30:8F:1E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/50839927-59e2-3289-ac48-074418a325c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:f8:38:2a:e9:2f:1e:7d:b6:a2:58:86:a9:16:b9:60:a1:
         1d:74:fd:5a:4e:9f:57:94:62:df:fe:65:b6:6d:d4:d2:a7:d3:
         23:03:70:5f:c0:79:23:7e:8b:87:28:c2:64:65:fc:d6:ed:6b:
         ac:ff:cf:73:e2:64:d1:a6:83:c3:92:83:47:48:13:3f:f8:13:
         f2:db:db:41:f4:df:08:6c:06:4e:df:e2:1e:b5:03:e0:ea:a3:
         30:90:ec:29:e0:6d:6f:6d:1f:39:bd:3b:e5:f9:d8:80:44:ba:
         bc:6f:0f:d7:60:03:d7:31:83:f7:ef:6d:09:11:fa:cc:07:b4:
         6d:55:f3:a5:62:17:db:8c:2e:fb:1a:ab:78:ae:74:28:49:91:
         ef:73:79:8d:1d:3e:d7:b8:9a:f9:9a:1e:33:3e:e3:58:b2:7f:
         c2:48:86:1d:d3:bd:2e:7d:bd:c8:27:8d:c3:80:cb:c8:e4:6f:
         37:f4:32:c4:44:54:19:e5:18:36:fa:0a:98:7c:ef:a6:06:37:
         91:32:35:a2:d0:89:8a:83:51:ec:c8:09:f2:86:fa:04:d3:c1:
         9e:43:93:c2:e7:c9:aa:9e:24:d6:d5:8c:ab:40:f4:96:42:c8:
         35:00:a7:6c:31:2d:78:9d:20:9f:f1:ef:ce:6f:cb:65:d1:39:
         6e:27:51:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVmva95rwOVeJQP6DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw
MjhiMB4XDTI0MDQwMTEzMDAzNloXDTI0MDYzMDEzMDAzNlowLzEtMCsGA1UEAxMk
ZTQ1MzE1MWYtODZiOC00MDg4LWFhNDgtNjM1NjZkYjIyZWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oIBBfnT03NzN1NfrNGz5S4tszF0gm/PVEr5
rTwwU/oYPOUsiuZVrjn4LQo/vnZx5yLHVfpJZNGjawf28cHywzrvb2p6SLnE0OKl
N/7ZR/9lpFPEKvxAIvZmaragdxdqk/BgaMc15sNQwPD67c6dSybYQE1n96o/cjiI
c+FtcdOHf5q2y8CIGfbFeMMeetLFgq7YqhvkNt0OTdo613PiEBLgbVHp8xUcqvpi
cFSviGLWWmepagSTWR40xIQJ9d9eosEnByj9oH/sgdrwthk63n6PFJ6vBb334uQX
EDhH9HTMXP7zCvJkl21FUC870y/dkz0hi7zu0SjXukS/891Y9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAC/9WU28b94BkiCM1LkpVwwjx5xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk
ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNTA4Mzk5MjctNTllMi0z
Mjg5LWFjNDgtMDc0NDE4YTMyNWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk
Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3
MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0
NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0anyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI31+Dgq6S8efbaiWIapFrlgoR10/VpOn1eUYt/+ZbZt1NKn0yMDcF/A
eSN+i4cowmRl/Nbta6z/z3PiZNGmg8OSg0dIEz/4E/Lb20H03whsBk7f4h61A+Dq
ozCQ7CngbW9tHzm9O+X52IBEurxvD9dgA9cxg/fvbQkR+swHtG1V86ViF9uMLvsa
q3iudChJke9zeY0dPte4mvmaHjM+41iyf8JIhh3TvS59vcgnjcOAy8jkbzf0MsRE
VBnlGDb6Cph876YGN5EyNaLQiYqDUezICfKG+gTTwZ5Dk8LnyaqeJNbVjKtA9JZC
yDUAp2wxLXidIJ/x785vy2XROW4nUdQ=
-----END CERTIFICATE-----
Generated at Fri Apr 26 04:02:55 2024 by rpki-client on console-ams.rpki-client.org