Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa
File:                     2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa (raw, json)
Hash identifier:          BTpZwBy+km5JPd2UU0jC7EjlrDmdPzaP91vO0SZTHLs=
Subject key identifier:   FB:1F:AA:51:64:05:BF:CC:2B:F9:E7:D7:BF:CA:E4:09:5D:F2:22:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76E879234EAC1A36F3D3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        141.150.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e8:79:23:4e:ac:1a:36:f3:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=a33be507-6788-48fd-893d-9d2fc1973a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c1:78:18:16:98:0e:50:c8:ac:80:14:27:2b:
                    8c:2e:07:af:28:dc:33:20:ec:96:e4:59:e6:98:c5:
                    fd:5c:b2:dd:72:58:42:b8:d2:ba:75:0d:1f:45:28:
                    10:e8:f1:c0:4b:fc:03:83:85:84:4f:bf:67:be:5d:
                    6a:a2:64:c3:0b:08:50:c7:78:1f:a2:a6:0d:d1:7d:
                    dc:5a:b2:dd:3e:97:55:97:ba:f9:99:38:27:c9:54:
                    69:57:25:a0:ec:95:6f:ec:90:40:7d:8b:ee:60:93:
                    c1:27:7c:5b:a0:25:58:42:be:38:60:01:76:ea:78:
                    14:d5:d5:b8:28:af:c3:aa:2e:a9:34:43:ab:7b:01:
                    80:2a:26:9a:67:18:f7:29:db:2d:af:16:0d:8f:13:
                    3b:a5:ec:ff:97:e3:d9:bd:3a:30:1e:aa:c4:71:5c:
                    c7:d4:ed:2d:81:a4:f8:b9:f4:67:5b:2f:36:4e:9a:
                    c3:f4:14:a0:be:60:1c:94:21:bf:ce:c2:20:9d:89:
                    79:68:01:6b:04:2f:d5:65:29:ba:ac:50:5a:5d:7e:
                    9f:4e:71:ed:43:20:bc:7a:29:d4:87:29:0c:48:03:
                    f6:77:f3:5e:e4:ce:fb:71:b7:e4:4c:c7:52:dc:20:
                    3f:47:1d:aa:ca:70:c0:8c:f8:88:ef:73:d1:6b:6f:
                    91:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:AA:51:64:05:BF:CC:2B:F9:E7:D7:BF:CA:E4:09:5D:F2:22:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0f:d4:95:42:fd:fa:9d:1d:e5:23:f8:29:91:13:03:d8:33:
         66:a4:c6:2f:44:7a:32:74:cc:9e:23:7a:f9:af:b3:f2:7b:02:
         21:f3:31:64:75:02:99:14:95:e4:89:8d:93:26:eb:6d:7e:af:
         1a:fd:a7:19:58:3b:00:0c:cf:fa:5a:6a:12:ca:31:d0:50:c6:
         89:2b:30:b5:47:01:0b:0a:ff:5b:84:cf:5e:75:b6:f0:f9:a7:
         3e:75:c0:b6:33:ba:43:7a:ef:ec:8b:ca:5f:c1:ac:22:78:f5:
         13:ca:17:5b:ce:ac:cd:32:35:e5:4a:99:f1:c3:94:c6:20:c8:
         46:71:2c:a7:e9:74:f8:48:f0:f1:ce:27:ed:1b:98:0a:8c:77:
         ba:83:ca:87:2a:bb:12:5b:b1:2b:50:a4:82:fb:59:89:6d:bb:
         f6:9a:11:40:17:96:29:d2:f4:e6:62:36:d2:c7:01:c6:e0:ab:
         df:be:7f:01:1e:b6:a4:53:c6:67:01:b1:a9:a1:24:e8:b9:0c:
         85:6c:63:fe:62:23:29:4e:5f:f9:1e:59:b0:1a:0c:56:ef:dd:
         48:e2:97:f5:05:ba:e0:ce:65:46:56:5d:42:f1:ac:03:eb:aa:
         e1:8b:1a:26:f6:42:60:fe:32:16:7b:ec:be:8b:d9:af:e6:10:
         47:4d:a6:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedduh5I06sGjbz08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
YTMzYmU1MDctNjc4OC00OGZkLTg5M2QtOWQyZmMxOTczYTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8F4GBaYDlDIrIAUJyuMLgevKNwzIOyW5Fnm
mMX9XLLdclhCuNK6dQ0fRSgQ6PHAS/wDg4WET79nvl1qomTDCwhQx3gfoqYN0X3c
WrLdPpdVl7r5mTgnyVRpVyWg7JVv7JBAfYvuYJPBJ3xboCVYQr44YAF26ngU1dW4
KK/Dqi6pNEOrewGAKiaaZxj3KdstrxYNjxM7pez/l+PZvTowHqrEcVzH1O0tgaT4
ufRnWy82TprD9BSgvmAclCG/zsIgnYl5aAFrBC/VZSm6rFBaXX6fTnHtQyC8einU
hykMSAP2d/Ne5M77cbfkTMdS3CA/Rx2qynDAjPiI73PRa2+RXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPsfqlFkBb/MK/nn17/K5Ald8iK0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmExYjg3ODQtOGIyNS0z
MWMzLTgzYjktZTgyOWJkNjUzYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZYcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMP1JVC/fqdHeUj+CmREwPYM2akxi9EejJ0zJ4jevmvs/J7AiHzMWR1
ApkUleSJjZMm621+rxr9pxlYOwAMz/paahLKMdBQxokrMLVHAQsK/1uEz151tvD5
pz51wLYzukN67+yLyl/BrCJ49RPKF1vOrM0yNeVKmfHDlMYgyEZxLKfpdPhI8PHO
J+0bmAqMd7qDyocquxJbsStQpIL7WYltu/aaEUAXlinS9OZiNtLHAcbgq9++fwEe
tqRTxmcBsamhJOi5DIVsY/5iIylOX/keWbAaDFbv3Ujil/UFuuDOZUZWXULxrAPr
quGLGib2QmD+MhZ77L6L2a/mEEdNpmI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:22 2024 by rpki-client on console-fra.rpki-client.org