Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa
File:                     d981ed21-a25a-3b01-91c0-905497dccc91.roa (raw, json)
Hash identifier:          JMDitiSCTi+TgEtXEoJnlHGZirobYu+dDWjJbVBjdCI=
Subject key identifier:   41:EE:91:1F:7A:66:FB:CB:A8:C5:99:84:CE:65:47:85:64:0B:EA:B5
Certificate issuer:       /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Certificate serial:       010D0C9F43285847299B243AAECC28BDBE666080
Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     29746
IP address blocks:        72.21.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:24:3a:ae:cc:28:bd:be:66:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=0b3a9b51-d2e6-4ff8-9279-36b6fb3110a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:a0:42:fb:47:1c:1d:7d:6b:55:a6:cf:7f:
                    df:15:b5:4a:55:b1:88:77:ab:ca:db:15:1d:d3:d1:
                    82:5c:3d:db:c9:5f:d7:d6:d8:a4:9f:b7:c1:76:62:
                    9a:26:64:eb:81:14:88:0a:cc:28:b2:34:fc:52:84:
                    b3:e8:25:75:09:0d:f4:39:82:02:04:d4:9d:11:d0:
                    66:e2:46:9e:bd:03:4e:e3:e9:9b:78:76:f1:cb:d9:
                    83:dc:11:bd:fd:b3:b6:a5:d2:84:36:4f:17:f0:40:
                    ee:b3:49:29:1f:a5:af:ed:88:39:b3:47:89:a3:8c:
                    91:e4:99:de:a5:1b:8e:29:ff:bf:aa:f2:8d:27:40:
                    13:9d:5d:28:e0:0a:da:ff:41:d5:45:f8:00:61:7d:
                    1b:92:2f:00:bc:5b:1e:b2:cc:4d:63:df:f7:62:72:
                    96:be:51:0b:2b:b9:4d:f7:9c:62:ce:07:80:71:9d:
                    e0:ed:5f:cb:6b:7e:3f:15:b3:a6:aa:dc:1f:86:ac:
                    7b:bb:65:b7:66:17:dc:8d:70:02:75:0c:f9:7c:60:
                    a9:ef:8f:7b:0e:d6:43:10:95:91:a9:18:6c:94:ef:
                    4d:2d:9c:ad:8d:a7:28:6d:49:56:3b:96:1b:d1:e6:
                    e8:b8:6c:6e:3c:db:02:94:ef:ad:89:50:da:d1:59:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EE:91:1F:7A:66:FB:CB:A8:C5:99:84:CE:65:47:85:64:0B:EA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/d981ed21-a25a-3b01-91c0-905497dccc91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl

            X509v3 Authority Key Identifier:
                keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:38:79:91:fd:36:83:fd:73:ff:1b:29:93:ce:29:2e:8b:dc:
         9c:96:5b:ad:16:85:0b:b4:f2:98:b5:09:0b:3e:be:d1:a0:d5:
         ba:9e:3a:c8:5a:91:da:f2:68:2a:4f:68:cf:e4:b7:97:79:29:
         97:6a:7f:e2:e8:93:fa:9c:08:5d:06:d0:b8:4d:62:83:38:6a:
         2c:b6:38:6e:44:b6:a2:a6:c4:7f:6e:65:79:90:48:54:d3:52:
         21:4d:38:96:f3:05:59:77:0a:91:c5:3e:bc:7a:04:84:70:cf:
         be:4e:9b:65:6b:b1:80:07:d8:f6:18:9a:83:8e:3d:83:54:1b:
         52:ef:2e:21:07:16:22:83:70:ca:13:b4:ed:94:a6:25:ea:0f:
         61:73:19:25:8a:3c:f1:f9:ff:50:37:5b:8e:6f:18:a2:2d:a9:
         22:9e:e8:74:dc:15:c7:11:cb:03:62:1d:18:3d:fe:ac:52:20:
         a5:15:a7:68:09:53:09:2a:79:8a:06:a4:f7:c9:c2:0d:31:c5:
         44:80:f0:9f:68:83:cc:99:b0:9e:ed:e7:45:b3:b7:a3:b6:eb:
         25:1d:fd:a4:23:aa:ef:e9:ed:3b:c3:4d:f2:3e:e4:11:ef:74:
         7d:62:9f:ce:eb:90:bf:32:d1:fc:48:54:db:46:14:21:fc:79:
         0f:0c:91:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcpmyQ6rswovb5mYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3
ZTA1MB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk
MGIzYTliNTEtZDJlNi00ZmY4LTkyNzktMzZiNmZiMzExMGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLugQvtHHB19a1Wmz3/fFbVKVbGId6vK2xUd
09GCXD3byV/X1tikn7fBdmKaJmTrgRSICswosjT8UoSz6CV1CQ30OYICBNSdEdBm
4kaevQNO4+mbeHbxy9mD3BG9/bO2pdKENk8X8EDus0kpH6Wv7Yg5s0eJo4yR5Jne
pRuOKf+/qvKNJ0ATnV0o4Ara/0HVRfgAYX0bki8AvFsessxNY9/3YnKWvlELK7lN
95xizgeAcZ3g7V/La34/FbOmqtwfhqx7u2W3ZhfcjXACdQz5fGCp7497DtZDEJWR
qRhslO9NLZytjacobUlWO5Yb0ebouGxuPNsClO+tiVDa0VmJ2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHukR96ZvvLqMWZhM5lR4VkC+q1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1
YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvZDk4MWVkMjEtYTI1YS0z
YjAxLTkxYzAtOTA1NDk3ZGNjYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi
MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj
N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx
N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBWtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHk4eZH9NoP9c/8bKZPOKS6L3JyWW60WhQu08pi1CQs+vtGg1bqeOsha
kdryaCpPaM/kt5d5KZdqf+Lok/qcCF0G0LhNYoM4aiy2OG5EtqKmxH9uZXmQSFTT
UiFNOJbzBVl3CpHFPrx6BIRwz75Om2VrsYAH2PYYmoOOPYNUG1LvLiEHFiKDcMoT
tO2UpiXqD2FzGSWKPPH5/1A3W45vGKItqSKe6HTcFccRywNiHRg9/qxSIKUVp2gJ
UwkqeYoGpPfJwg0xxUSA8J9og8yZsJ7t50Wzt6O26yUd/aQjqu/p7TvDTfI+5BHv
dH1in87rkL8y0fxIVNtGFCH8eQ8MkWo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:13 2024 by rpki-client on console-fra.rpki-client.org