Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9bbdef67-a5c9-3d13-8467-1af001ef001b.roa
File:                     9bbdef67-a5c9-3d13-8467-1af001ef001b.roa (raw, json)
Hash identifier:          PwnGk19Q0MOqA2NZNhI7v2AWgg3svLbowgktTuA8dr8=
Subject key identifier:   BC:88:B9:5A:76:A5:7E:9F:0E:7B:19:80:28:60:04:6E:F5:29:F3:FA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0D2C3B687C98AD2AF43C0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9bbdef67-a5c9-3d13-8467-1af001ef001b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        47.44.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:d2:c3:b6:87:c9:8a:d2:af:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=5c72839d-d1d5-4de7-b537-eaa166eec5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:df:8a:ba:f4:f5:24:f1:91:8f:32:e0:f9:
                    ce:4d:95:cd:2f:b4:2c:b1:77:af:6e:b8:ad:cd:8d:
                    87:ec:4b:12:c4:e0:03:93:32:26:37:3a:ea:dd:c2:
                    4b:c6:6e:78:20:9f:ec:e0:6b:91:fc:eb:1b:1e:01:
                    da:bb:2d:d0:66:e7:99:8c:92:a7:13:67:93:06:f6:
                    3b:e4:67:ae:b3:f2:e9:65:fe:7a:05:3d:47:16:aa:
                    7f:92:f7:f8:e3:f7:de:29:64:c5:97:74:a5:0c:5d:
                    a4:01:ed:41:7c:78:40:92:b1:8c:fe:0c:3f:88:2b:
                    5b:17:3e:b0:c1:b8:8a:ce:4e:d0:22:62:7b:ae:fb:
                    d3:92:33:6e:ff:25:45:5f:75:08:2a:1b:9b:09:34:
                    ff:a8:d6:6d:e5:e7:05:15:94:d9:13:74:00:28:49:
                    6f:9d:72:c3:f1:fa:46:28:71:68:97:7f:28:9d:c5:
                    87:60:22:2d:5d:c4:bc:2a:26:4c:5b:66:b5:4c:11:
                    bb:4e:9e:8c:2d:2e:27:f5:b7:41:06:90:be:72:eb:
                    4c:7c:79:8d:d7:5b:eb:d1:e2:1f:bb:b1:0a:b6:72:
                    2c:ed:97:cb:bc:a3:ed:ef:56:86:17:27:05:ec:2d:
                    81:c0:5c:53:e7:db:af:55:10:36:bd:6b:45:24:cd:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:88:B9:5A:76:A5:7E:9F:0E:7B:19:80:28:60:04:6E:F5:29:F3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9bbdef67-a5c9-3d13-8467-1af001ef001b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:3d:c6:dd:14:b5:e4:dd:06:47:d5:10:9c:44:de:95:c2:3b:
         86:8f:02:72:cb:c1:49:76:41:84:8d:0f:73:c0:d8:c3:ad:28:
         21:71:dd:4e:5a:81:dc:dd:4f:ac:2d:01:e9:3b:e3:d1:f1:16:
         e0:ba:59:55:db:87:0d:5d:be:49:b9:a9:43:46:23:90:73:96:
         b8:34:5d:91:f0:c8:bd:a3:2d:07:32:49:d7:f9:78:f1:72:b1:
         15:ba:87:21:a5:24:ba:aa:6f:25:da:78:35:a0:e4:30:9d:b4:
         34:89:cf:8a:b7:73:4b:c0:bf:65:72:b9:0e:54:e1:d2:d0:55:
         f0:c4:54:67:5a:de:cb:24:d7:5f:17:31:74:aa:c1:f4:0d:bc:
         0d:89:20:e9:a2:65:79:fb:cc:d5:b3:4b:2a:68:c2:b2:57:74:
         fe:97:50:f9:f3:ca:25:09:a9:18:17:82:c1:69:85:d0:ef:ad:
         12:0c:87:06:6f:89:c6:f5:cb:13:ab:1a:cc:7a:47:06:88:e2:
         6d:eb:cc:d2:58:38:52:01:3e:d8:b4:ca:5f:73:87:b9:0b:2a:
         9b:44:78:55:e7:9d:5b:bb:e5:90:1c:42:be:2c:2a:d4:77:93:
         d0:cf:f7:6f:df:9f:94:54:44:5a:8c:21:87:47:f2:bc:86:63:
         2a:d3:ff:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioNLDtofJitKvQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
NWM3MjgzOWQtZDFkNS00ZGU3LWI1MzctZWFhMTY2ZWVjNWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGvfirr09STxkY8y4PnOTZXNL7QssXevbrit
zY2H7EsSxOADkzImNzrq3cJLxm54IJ/s4GuR/OsbHgHauy3QZueZjJKnE2eTBvY7
5Geus/LpZf56BT1HFqp/kvf44/feKWTFl3SlDF2kAe1BfHhAkrGM/gw/iCtbFz6w
wbiKzk7QImJ7rvvTkjNu/yVFX3UIKhubCTT/qNZt5ecFFZTZE3QAKElvnXLD8fpG
KHFol38oncWHYCItXcS8KiZMW2a1TBG7Tp6MLS4n9bdBBpC+cutMfHmN11vr0eIf
u7EKtnIs7ZfLvKPt71aGFycF7C2BwFxT59uvVRA2vWtFJM2l4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLyIuVp2pX6fDnsZgChgBG71KfP6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWJiZGVmNjctYTVjOS0z
ZDEzLTg0NjctMWFmMDAxZWYwMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLywYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE49xt0UteTdBkfVEJxE3pXCO4aPAnLLwUl2QYSND3PA2MOtKCFx3U5a
gdzdT6wtAek749HxFuC6WVXbhw1dvkm5qUNGI5Bzlrg0XZHwyL2jLQcySdf5ePFy
sRW6hyGlJLqqbyXaeDWg5DCdtDSJz4q3c0vAv2VyuQ5U4dLQVfDEVGda3ssk118X
MXSqwfQNvA2JIOmiZXn7zNWzSypowrJXdP6XUPnzyiUJqRgXgsFphdDvrRIMhwZv
icb1yxOrGsx6RwaI4m3rzNJYOFIBPti0yl9zh7kLKptEeFXnnVu75ZAcQr4sKtR3
k9DP92/fn5RURFqMIYdH8ryGYyrT/+I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:16 2024 by rpki-client on console-fra.rpki-client.org