Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/747358c6-73e7-338f-9998-e019b2d080af.roa
File:                     747358c6-73e7-338f-9998-e019b2d080af.roa (raw, json)
Hash identifier:          ralk0HtyxpPzzO47qsvspxUESCAgjliR20B5x/pPiRE=
Subject key identifier:   B0:A4:51:F5:73:BC:B9:DD:28:B3:B2:3E:B2:20:DB:48:DA:EE:20:C7
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858470550CF946CBDEBC33313B800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/747358c6-73e7-338f-9998-e019b2d080af.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        173.194.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:50:cf:94:6c:bd:eb:c3:33:13:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=cfdef391-8225-4a7d-a730-cfa35daba71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:e6:73:6d:44:ce:18:e6:44:63:eb:ff:0a:
                    f5:77:bb:8a:6f:58:71:d1:8f:fa:5a:c1:4c:9f:7c:
                    90:85:92:ce:af:6e:be:e1:41:56:e8:9d:0f:5c:3e:
                    e5:de:8d:63:3c:fa:86:9c:56:5f:2d:56:0a:ed:3c:
                    48:4c:c4:2c:9a:f7:3b:fd:9d:e0:2e:3d:3c:0e:55:
                    0b:31:f8:d4:50:7a:7c:20:b1:00:62:0d:85:2d:f4:
                    31:53:2f:4c:78:d3:bd:c6:d7:f1:39:1c:5d:60:b4:
                    e8:56:f7:0d:07:0f:ca:db:22:e6:1f:38:9d:ab:43:
                    ae:ee:ea:84:26:1a:7c:80:7b:61:1f:01:49:79:6b:
                    83:96:dd:c0:bf:00:69:3a:fd:ca:26:55:2c:12:90:
                    7e:2c:aa:d5:24:6d:6d:50:00:44:c4:d3:da:c6:e6:
                    77:a7:9d:c8:0f:35:61:4b:b1:cb:6f:9c:82:6f:33:
                    02:bc:f0:c7:a5:13:e5:11:df:33:e4:9d:15:10:fa:
                    7e:1f:67:a4:7c:92:ed:99:b6:9a:e3:83:ad:1f:06:
                    92:e4:74:77:6e:fd:c1:f6:f4:35:b7:c6:3e:18:03:
                    1c:c1:9a:60:ca:5a:67:4d:f0:84:96:c2:dc:38:ec:
                    63:e3:ca:39:e8:76:44:99:2e:7b:a8:5f:6f:ec:6e:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A4:51:F5:73:BC:B9:DD:28:B3:B2:3E:B2:20:DB:48:DA:EE:20:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/747358c6-73e7-338f-9998-e019b2d080af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:df:bd:84:7e:07:fe:d0:3b:52:7a:83:d5:b2:46:8c:47:3a:
         22:fe:02:0f:48:6a:d7:1c:c5:ce:9a:24:d1:59:c1:5c:7c:92:
         05:ea:41:f1:7b:52:57:79:f1:ec:65:eb:03:ea:e1:5c:de:bd:
         cf:30:4c:42:0c:68:1b:f6:96:c9:50:c3:e3:87:47:46:4e:0a:
         23:75:a5:9e:7d:91:1c:7d:32:2e:7a:7a:a9:2d:13:25:4a:10:
         3c:68:99:7b:b4:e5:4c:4a:32:6a:54:f6:63:aa:6d:16:f6:f7:
         bf:0a:e3:af:42:a4:5c:e6:8f:6c:af:52:73:a3:e7:19:6f:a2:
         18:01:f9:95:48:2a:1e:6e:3d:ab:ed:54:9f:76:d2:6b:9e:40:
         a1:6a:58:c0:53:ad:a6:b5:44:77:7e:c4:b6:e5:f8:49:cd:bb:
         0f:1e:33:50:fd:d3:17:4b:08:5e:04:63:79:38:e0:e7:15:c8:
         12:49:bd:fd:ad:5b:2a:da:34:46:22:32:ce:38:d7:e5:8a:3a:
         60:a2:76:3b:ea:af:dc:14:d5:cb:fc:a1:d1:52:7b:ce:db:0c:
         e9:92:a6:1a:bb:73:56:6f:fb:1a:2a:da:f2:b2:ff:26:f2:4c:
         c1:09:c3:50:20:57:8a:7e:1c:29:2f:b1:a7:b3:bb:46:b8:55:
         93:85:05:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUM+UbL3rwzMTuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
Y2ZkZWYzOTEtODIyNS00YTdkLWE3MzAtY2ZhMzVkYWJhNzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoLmc21EzhjmRGPr/wr1d7uKb1hx0Y/6WsFM
n3yQhZLOr26+4UFW6J0PXD7l3o1jPPqGnFZfLVYK7TxITMQsmvc7/Z3gLj08DlUL
MfjUUHp8ILEAYg2FLfQxUy9MeNO9xtfxORxdYLToVvcNBw/K2yLmHzidq0Ou7uqE
Jhp8gHthHwFJeWuDlt3AvwBpOv3KJlUsEpB+LKrVJG1tUABExNPaxuZ3p53IDzVh
S7HLb5yCbzMCvPDHpRPlEd8z5J0VEPp+H2ekfJLtmbaa44OtHwaS5HR3bv3B9vQ1
t8Y+GAMcwZpgylpnTfCElsLcOOxj48o56HZEmS57qF9v7G6NkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCkUfVzvLndKLOyPrIg20ja7iDHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzQ3MzU4YzYtNzNlNy0z
MzhmLTk5OTgtZTAxOWIyZDA4MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJ3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDfvYR+B/7QO1J6g9WyRoxHOiL+Ag9Iatccxc6aJNFZwVx8kgXqQfF7
Uld58exl6wPq4Vzevc8wTEIMaBv2lslQw+OHR0ZOCiN1pZ59kRx9Mi56eqktEyVK
EDxomXu05UxKMmpU9mOqbRb2978K469CpFzmj2yvUnOj5xlvohgB+ZVIKh5uPavt
VJ920mueQKFqWMBTraa1RHd+xLbl+EnNuw8eM1D90xdLCF4EY3k44OcVyBJJvf2t
WyraNEYiMs441+WKOmCidjvqr9wU1cv8odFSe87bDOmSphq7c1Zv+xoq2vKy/yby
TMEJw1AgV4p+HCkvsaezu0a4VZOFBec=
-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:50 2024 by rpki-client on console-fra.rpki-client.org