Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/d3a22b2e-ca72-3e3e-b3d3-c38b4671c594.roa
File:                     d3a22b2e-ca72-3e3e-b3d3-c38b4671c594.roa (raw, json)
Hash identifier:          1GelboW+HOyvpgchE9Poa5W3Sa4r57yowMvwj9d6HF0=
Subject key identifier:   33:A5:DE:1A:32:7C:BC:31:84:F8:E6:9D:D5:51:CA:AD:1C:88:6E:1C
Certificate issuer:       /CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
Certificate serial:       010D0C9F43285845C5A8E59792EB5D2B0F6A48A0
Authority key identifier: BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/d3a22b2e-ca72-3e3e-b3d3-c38b4671c594.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     56647
IP address blocks:        142.54.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e5:97:92:eb:5d:2b:0f:6a:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d04d7fa-9d89-487a-9eb2-dcfeef539824
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=391c13ea-840e-44d0-8298-4cc60af7e418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0f:3c:5f:be:8d:fc:79:92:46:6f:4a:f4:0e:
                    fe:b5:6f:4d:09:b8:57:e5:fc:ed:f3:a1:8f:b9:60:
                    7a:ef:50:0f:a4:91:05:61:bb:bd:88:c1:ab:3f:bd:
                    b2:55:7f:95:04:e1:36:0e:e4:2a:25:74:77:7f:fa:
                    76:f6:6b:d6:45:6d:52:ac:49:b9:5e:f4:67:3e:9d:
                    b6:a3:b9:31:75:ed:56:4e:71:80:30:ed:f3:b8:43:
                    88:9f:67:f1:f6:0a:4b:62:c8:09:c4:bc:3c:45:c4:
                    98:bd:3e:24:47:a2:a9:af:34:ff:4e:6a:93:47:61:
                    bf:28:87:80:81:14:27:f7:d1:40:4b:97:37:f9:2b:
                    8d:43:cc:ec:b6:d5:88:e3:18:1f:10:5a:8a:19:d8:
                    cf:7f:9c:8d:0b:51:50:e0:ec:2e:19:ef:88:05:a4:
                    d1:8a:ea:08:34:3a:67:45:ed:e5:98:d8:3d:36:d9:
                    6f:12:d4:fb:8e:25:dc:ca:e4:6f:11:15:71:26:f9:
                    7f:3c:5c:b8:bb:5d:f9:1f:c2:57:85:46:49:76:4b:
                    5f:12:a0:cc:e7:06:d1:ef:0b:d3:35:56:37:05:61:
                    85:d1:00:a3:b6:8f:0d:2f:61:df:93:63:fe:38:cf:
                    37:de:65:e4:d6:35:5f:8d:2f:96:39:30:58:04:f0:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A5:DE:1A:32:7C:BC:31:84:F8:E6:9D:D5:51:CA:AD:1C:88:6E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/d3a22b2e-ca72-3e3e-b3d3-c38b4671c594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824/0d04d7fa-9d89-487a-9eb2-dcfeef539824.crl

            X509v3 Authority Key Identifier:
                keyid:BF:76:65:59:44:2C:56:9C:91:71:14:2D:13:63:BB:3F:EE:09:8C:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d04d7fa-9d89-487a-9eb2-dcfeef539824.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:29:d9:ff:5a:97:bd:0a:58:f0:55:69:27:bf:d7:26:16:
         93:09:74:db:51:17:fc:6f:1a:46:1a:79:03:3d:9c:a4:19:bd:
         f2:70:71:82:46:25:1e:ce:aa:b0:11:1d:a4:af:bb:0c:6a:af:
         7f:b1:22:05:f2:e7:d3:70:26:20:a0:03:cd:74:a5:72:1b:56:
         b5:28:5f:9b:90:91:9e:a1:40:34:57:d0:8b:f9:a6:9d:47:f4:
         12:7d:17:c6:77:db:a0:4c:4b:25:e6:8c:88:a7:52:1d:8a:40:
         ed:3f:1b:7d:5e:1c:12:af:c7:d2:41:11:0a:e2:5e:a5:f5:7a:
         7a:52:b2:76:86:92:d4:d8:e4:48:3b:64:38:2d:da:cf:44:09:
         4f:52:ff:09:cf:c8:b9:f3:25:09:ca:c9:ce:e9:f7:74:88:e3:
         6a:db:20:98:4f:c4:5e:73:8a:31:74:f3:61:da:40:aa:c5:fa:
         c6:4e:80:bc:a5:d6:34:ef:fd:2d:cf:a0:6f:41:9e:ea:2a:ab:
         19:50:64:bb:3e:c0:e1:c4:bb:63:0e:cb:7b:29:9e:57:01:3e:
         58:99:05:bc:ff:46:f1:5d:46:3c:13:d7:95:db:18:e9:09:60:
         1e:be:67:d9:42:93:48:d1:37:33:33:9b:0d:09:7d:bb:74:b7:
         c0:9e:8c:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqOWXkutdKw9qSKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwNGQ3ZmEtOWQ4OS00ODdhLTllYjItZGNmZWVmNTM5
ODI0MB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk
MzkxYzEzZWEtODQwZS00NGQwLTgyOTgtNGNjNjBhZjdlNDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ88X76N/HmSRm9K9A7+tW9NCbhX5fzt86GP
uWB671APpJEFYbu9iMGrP72yVX+VBOE2DuQqJXR3f/p29mvWRW1SrEm5XvRnPp22
o7kxde1WTnGAMO3zuEOIn2fx9gpLYsgJxLw8RcSYvT4kR6KprzT/TmqTR2G/KIeA
gRQn99FAS5c3+SuNQ8zsttWI4xgfEFqKGdjPf5yNC1FQ4OwuGe+IBaTRiuoINDpn
Re3lmNg9NtlvEtT7jiXcyuRvERVxJvl/PFy4u135H8JXhUZJdktfEqDM5wbR7wvT
NVY3BWGF0QCjto8NL2Hfk2P+OM833mXk1jVfjS+WOTBYBPAIbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOl3hoyfLwxhPjmndVRyq0ciG4cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDA0
ZDdmYS05ZDg5LTQ4N2EtOWViMi1kY2ZlZWY1Mzk4MjQvZDNhMjJiMmUtY2E3Mi0z
ZTNlLWIzZDMtYzM4YjQ2NzFjNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQwNGQ3ZmEtOWQ4OS00ODdhLTll
YjItZGNmZWVmNTM5ODI0LzBkMDRkN2ZhLTlkODktNDg3YS05ZWIyLWRjZmVlZjUz
OTgyNC5jcmwwHwYDVR0jBBgwFoAUv3ZlWUQsVpyRcRQtE2O7P+4JjCwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDA0ZDdmYS05ZDg5LTQ4N2EtOWViMi1kY2Zl
ZWY1Mzk4MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjjYVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABTPKdn/Wpe9CljwVWknv9cmFpMJdNtRF/xvGkYaeQM9nKQZvfJwcYJG
JR7OqrARHaSvuwxqr3+xIgXy59NwJiCgA810pXIbVrUoX5uQkZ6hQDRX0Iv5pp1H
9BJ9F8Z326BMSyXmjIinUh2KQO0/G31eHBKvx9JBEQriXqX1enpSsnaGktTY5Eg7
ZDgt2s9ECU9S/wnPyLnzJQnKyc7p93SI42rbIJhPxF5zijF082HaQKrF+sZOgLyl
1jTv/S3PoG9BnuoqqxlQZLs+wOHEu2MOy3spnlcBPliZBbz/RvFdRjwT15XbGOkJ
YB6+Z9lCk0jRNzMzmw0Jfbt0t8CejCI=
-----END CERTIFICATE-----
Generated at Wed Jul 3 05:37:30 2024 by rpki-client on console-fra.rpki-client.org