Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2af6836-ebf2-3bd4-8d9b-f26490d1003b.roa
File:                     e2af6836-ebf2-3bd4-8d9b-f26490d1003b.roa (raw, json)
Hash identifier:          1lapX1ZrQ2DqPIZk3o/E71SSM+YhdTYGRY2K9Bzvzno=
Subject key identifier:   55:DA:98:5F:DF:6E:89:48:6F:AF:B9:9E:27:F7:6A:28:13:B3:4C:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76E8696FB23192CDBC0700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2af6836-ebf2-3bd4-8d9b-f26490d1003b.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        141.150.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:e8:69:6f:b2:31:92:cd:bc:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=be417cd4-1345-4aa8-9da6-aa741865125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:93:ab:ac:14:20:54:b0:ed:95:17:33:1b:
                    cf:8f:dc:44:ae:4f:42:f0:70:9a:c0:34:27:c8:8c:
                    cf:88:19:51:ca:ab:53:8f:ab:38:de:f2:3a:ff:08:
                    88:7d:95:c6:ad:bf:ac:e4:12:5e:7d:10:d2:3f:a4:
                    a0:2c:bd:07:c6:20:eb:fa:09:a8:d6:58:b1:05:6d:
                    61:e2:a0:91:20:13:21:33:d9:8a:bf:26:c5:9c:38:
                    f3:c9:cd:3f:44:06:db:0f:61:75:ca:38:3d:ae:e6:
                    8b:ec:2b:e5:d3:91:fb:a4:2e:cb:c8:ca:c4:1a:66:
                    60:28:cd:ed:2c:7d:c4:9f:03:08:2a:1b:3a:5d:93:
                    73:95:f4:88:df:31:36:fa:1d:96:a8:8b:dd:eb:01:
                    84:10:5c:5c:56:fc:16:eb:12:d4:c4:28:1e:00:12:
                    e4:22:6d:2a:88:7a:89:a5:39:4c:99:6b:9b:b8:c1:
                    d2:f3:e4:6c:fd:d5:78:bd:07:1a:c2:5e:e5:61:d3:
                    12:96:33:12:d0:26:aa:7f:00:0c:1d:78:0d:e0:ac:
                    44:4d:09:15:29:53:60:83:8f:ce:e1:e1:26:c1:be:
                    35:16:9d:a6:51:53:bc:24:09:f8:a6:7e:ad:4c:8d:
                    97:ee:9a:6a:54:fa:a5:59:c8:2d:c8:38:85:91:aa:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DA:98:5F:DF:6E:89:48:6F:AF:B9:9E:27:F7:6A:28:13:B3:4C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2af6836-ebf2-3bd4-8d9b-f26490d1003b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:dd:46:3e:14:c9:78:10:7b:b4:4c:05:78:2b:fb:36:9b:d0:
         05:6a:ca:8a:bf:06:77:98:af:8f:81:48:6d:fa:c8:9f:57:dc:
         17:3f:5b:a8:b3:06:44:8f:99:a0:5f:1c:83:b6:4b:bb:f5:0c:
         69:ea:50:60:cf:cf:1a:1b:30:a0:76:3b:aa:6f:92:6a:70:3e:
         db:6b:37:6f:34:ad:35:fb:ca:3b:84:8b:80:5d:99:fa:34:c4:
         03:32:f4:e6:fa:1f:64:7c:19:cd:9a:b0:a8:fd:ac:37:16:45:
         94:d6:c5:67:2f:90:c2:37:75:4e:56:1f:ef:3b:65:ff:d2:60:
         82:73:a4:38:13:bc:e7:a6:76:36:9a:e0:d4:0a:8b:dd:93:03:
         49:f5:93:c9:9c:9f:cb:10:a3:bb:d4:5e:f6:f4:57:9e:4c:c4:
         0c:b7:21:76:e5:00:b2:20:30:47:ee:5d:f5:b1:fe:71:37:6f:
         b4:bd:b9:9a:93:9e:d8:7c:e4:1e:07:5c:a2:92:95:65:64:bb:
         9e:43:bd:8e:b7:6d:24:76:4c:35:7f:20:cd:58:1e:58:19:d3:
         76:42:5d:b0:88:ec:c5:ed:58:3c:32:36:d9:fa:cd:e2:5b:04:
         f2:89:59:10:5a:a2:69:80:ed:01:65:14:65:ea:e5:71:bb:57:
         3f:d4:e1:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEedduhpb7Ixks28BwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
YmU0MTdjZDQtMTM0NS00YWE4LTlkYTYtYWE3NDE4NjUxMjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N6Tq6wUIFSw7ZUXMxvPj9xErk9C8HCawDQn
yIzPiBlRyqtTj6s43vI6/wiIfZXGrb+s5BJefRDSP6SgLL0HxiDr+gmo1lixBW1h
4qCRIBMhM9mKvybFnDjzyc0/RAbbD2F1yjg9ruaL7Cvl05H7pC7LyMrEGmZgKM3t
LH3EnwMIKhs6XZNzlfSI3zE2+h2WqIvd6wGEEFxcVvwW6xLUxCgeABLkIm0qiHqJ
pTlMmWubuMHS8+Rs/dV4vQcawl7lYdMSljMS0CaqfwAMHXgN4KxETQkVKVNgg4/O
4eEmwb41Fp2mUVO8JAn4pn6tTI2X7ppqVPqlWcgtyDiFkao73wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFXamF/fbolIb6+5nif3aigTs0zIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTJhZjY4MzYtZWJmMi0z
YmQ0LThkOWItZjI2NDkwZDEwMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzdRj4UyXgQe7RMBXgr+zab0AVqyoq/BneYr4+BSG36yJ9X3Bc/W6iz
BkSPmaBfHIO2S7v1DGnqUGDPzxobMKB2O6pvkmpwPttrN280rTX7yjuEi4Bdmfo0
xAMy9Ob6H2R8Gc2asKj9rDcWRZTWxWcvkMI3dU5WH+87Zf/SYIJzpDgTvOemdjaa
4NQKi92TA0n1k8mcn8sQo7vUXvb0V55MxAy3IXblALIgMEfuXfWx/nE3b7S9uZqT
nth85B4HXKKSlWVku55DvY63bSR2TDV/IM1YHlgZ03ZCXbCI7MXtWDwyNtn6zeJb
BPKJWRBaommA7QFlFGXq5XG7Vz/U4dU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:58 2024 by rpki-client on console-fra.rpki-client.org