Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa
File:                     bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa (raw, json)
Hash identifier:          +VRl/DveDWpa1q0J3oT63zFhD01S+VfZ5pW+DabNQ5c=
Subject key identifier:   32:03:43:44:9D:55:FB:3E:56:D4:4A:A7:68:D7:FE:41:2B:EF:60:A9
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858470550C9DC30C8337E5EBB9580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        173.194.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:50:c9:dc:30:c8:33:7e:5e:bb:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=63d6d7f2-967c-4d0b-8748-b924ff6371f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:af:e3:b9:b1:1e:2b:51:47:c4:6f:41:0c:
                    62:9b:f1:a7:5e:ef:71:97:fa:c1:2c:e9:8b:1f:59:
                    1b:88:01:b9:86:22:b6:49:cd:85:e0:bb:5d:8e:6b:
                    b9:8b:ee:4c:d7:5b:ba:7e:98:db:09:87:09:e7:ac:
                    2a:fd:47:ca:86:12:59:ea:69:e1:91:05:fe:a7:e9:
                    41:ed:49:93:75:31:6b:b7:10:6f:49:91:ec:f6:83:
                    83:b1:20:0d:5b:63:d8:d9:5b:8b:99:a8:7b:0f:48:
                    21:ff:a1:87:dc:ea:d3:d4:a7:8f:dd:ff:09:c8:b9:
                    35:87:90:ef:ff:5a:48:00:81:5e:c3:60:52:ff:0c:
                    ff:f4:e5:fb:63:2f:b4:22:fe:b8:13:17:69:73:87:
                    d3:ad:48:08:d2:b1:f7:48:06:1a:18:41:f6:3a:17:
                    99:74:42:77:ee:2a:64:99:b4:a0:1d:dc:1b:17:16:
                    1a:20:ad:76:88:41:84:2a:ba:54:58:3f:53:dd:8f:
                    1c:38:73:b6:ed:5d:52:25:7e:6d:48:a7:6b:5d:3c:
                    38:2c:dd:ee:16:ca:e8:6f:e8:cb:c4:c4:9a:ff:e4:
                    82:1f:27:37:07:86:1d:6c:d6:d3:6a:7f:00:86:e3:
                    02:fe:06:a2:bf:32:eb:ce:69:bd:94:20:43:0a:26:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:43:44:9D:55:FB:3E:56:D4:4A:A7:68:D7:FE:41:2B:EF:60:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:0c:46:3c:e1:c6:5a:49:4f:46:64:5e:f9:c2:30:79:25:68:
         38:15:f8:f2:5c:e6:38:f9:3b:4a:e0:d7:0d:23:d0:9a:ea:74:
         0b:d5:20:81:24:20:a1:b4:29:56:cd:8a:5a:56:51:56:8e:6e:
         26:81:ae:3f:05:92:8e:d6:41:2f:f9:a7:90:f0:18:1b:98:56:
         a3:7b:c6:9e:eb:33:63:37:87:c7:33:bd:37:1d:a3:78:0e:fb:
         50:78:a9:7e:96:7a:60:86:33:8c:64:9b:45:29:4c:0d:22:50:
         ee:45:a0:28:a5:d4:c8:ab:40:ae:58:d1:6d:60:89:d0:1e:62:
         9e:d9:e1:8d:e1:a4:fc:1e:fe:d8:01:0e:4e:9f:23:ef:68:37:
         9d:fa:74:28:13:5d:9d:08:8d:75:e0:11:d7:ab:4f:69:51:ac:
         2b:f3:8a:69:5d:a6:4a:d6:19:92:2c:4e:76:12:9f:26:09:b1:
         b3:b7:85:92:f0:e4:a7:fd:52:2e:c0:a3:76:76:43:d3:31:34:
         19:e8:41:40:b9:a9:92:70:27:5d:61:0f:2c:6f:ea:73:c0:41:
         b5:8f:a4:eb:48:ee:c6:9b:49:61:70:1f:d6:99:db:8b:b6:23:
         e7:39:8e:b0:76:86:29:93:55:6c:05:64:6f:a8:20:29:00:f0:
         04:74:3b:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcFUMncMMgzfl67lYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MDgyODAxMDAzMVoXDTI0MTEyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NjNkNmQ3ZjItOTY3Yy00ZDBiLTg3NDgtYjkyNGZmNjM3MWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNmv47mxHitRR8RvQQxim/GnXu9xl/rBLOmL
H1kbiAG5hiK2Sc2F4Ltdjmu5i+5M11u6fpjbCYcJ56wq/UfKhhJZ6mnhkQX+p+lB
7UmTdTFrtxBvSZHs9oODsSANW2PY2VuLmah7D0gh/6GH3OrT1KeP3f8JyLk1h5Dv
/1pIAIFew2BS/wz/9OX7Yy+0Iv64Exdpc4fTrUgI0rH3SAYaGEH2OheZdEJ37ipk
mbSgHdwbFxYaIK12iEGEKrpUWD9T3Y8cOHO27V1SJX5tSKdrXTw4LN3uFsrob+jL
xMSa/+SCHyc3B4YdbNbTan8AhuMC/gaivzLrzmm9lCBDCibQfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDIDQ0SdVfs+VtRKp2jX/kEr72CpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmQ3ZDBiZGItYTE4My0z
YTk1LTlhM2ItNjA3ODc0MjNhYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALAMRjzhxlpJT0ZkXvnCMHklaDgV+PJc5jj5O0rg1w0j0JrqdAvVIIEk
IKG0KVbNilpWUVaObiaBrj8Fko7WQS/5p5DwGBuYVqN7xp7rM2M3h8czvTcdo3gO
+1B4qX6WemCGM4xkm0UpTA0iUO5FoCil1MirQK5Y0W1gidAeYp7Z4Y3hpPwe/tgB
Dk6fI+9oN536dCgTXZ0IjXXgEderT2lRrCvzimldpkrWGZIsTnYSnyYJsbO3hZLw
5Kf9Ui7Ao3Z2Q9MxNBnoQUC5qZJwJ11hDyxv6nPAQbWPpOtI7sabSWFwH9aZ24u2
I+c5jrB2himTVWwFZG+oICkA8AR0O5o=
-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:55 2024 by rpki-client on console-fra.rpki-client.org