Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e3461dff-c03d-3a88-95c7-b001c6b27025.roa
File:                     e3461dff-c03d-3a88-95c7-b001c6b27025.roa (raw, json)
Hash identifier:          U5vP3hYLJIGC3qa3+BYa28+xr+XgKKkVAZ0UpbFCSLU=
Subject key identifier:   68:5C:F7:A4:06:AD:30:51:57:6E:13:76:19:9A:2F:58:DF:55:BD:8C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328583AA712CEA59E30E0EBB5593CE0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e3461dff-c03d-3a88-95c7-b001c6b27025.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Tue 13 Jul 2027 04:00:00 +0000
asID:                     12271
IP address blocks:        47.230.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:12:ce:a5:9e:30:e0:eb:b5:59:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Jul 13 04:00:00 2027 GMT
        Subject: CN=fcb31b7e-61cd-4295-951b-dd590a93876c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:f2:1b:96:42:8f:7c:e9:71:78:fa:94:ea:
                    be:2f:4b:b3:c2:a6:a0:9c:e7:29:f3:f7:b8:e0:bb:
                    03:f8:bf:9c:39:28:15:25:39:4b:3b:3c:11:a3:14:
                    fb:be:20:62:3a:2e:69:88:44:68:d4:68:f2:71:47:
                    28:0d:e5:6c:3d:86:9d:5f:69:df:74:f9:43:0e:8e:
                    dc:bc:73:9b:09:dc:53:b7:f9:7f:fc:12:45:da:05:
                    23:cc:22:3e:c8:db:1c:9d:dd:ce:65:20:a8:46:ec:
                    81:0a:74:dc:fa:21:82:3e:9e:05:7c:ef:bb:28:da:
                    f2:f7:34:58:5c:8d:6d:ac:39:a0:e8:f6:d0:ab:be:
                    64:5a:19:b1:06:5d:0f:7f:04:a3:75:36:20:1a:1c:
                    59:c8:ba:d8:a0:6d:6b:ae:40:5e:94:de:82:b7:17:
                    a9:52:e8:3f:76:88:a0:36:73:99:c6:78:3b:4a:dc:
                    6a:21:49:90:27:d7:28:82:c0:7f:86:0a:ab:3d:b5:
                    55:cf:26:cc:6b:49:2b:08:29:fb:fc:55:90:f9:4b:
                    c5:df:cb:9a:04:4e:55:41:1b:04:ba:7f:9d:9f:0b:
                    6f:29:0d:46:d2:65:73:29:ca:3b:e8:dd:f8:12:bc:
                    94:68:f2:19:c3:a1:ce:26:94:d7:0d:34:f2:42:8c:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5C:F7:A4:06:AD:30:51:57:6E:13:76:19:9A:2F:58:DF:55:BD:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e3461dff-c03d-3a88-95c7-b001c6b27025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:dc:48:5a:57:f8:74:b9:a6:04:44:7c:c2:11:69:c4:f1:
         fb:d2:d7:d8:04:58:2b:14:eb:36:41:c9:65:3c:b7:4d:22:be:
         f9:5c:c7:f8:53:2d:b4:a4:0f:6e:86:5e:d0:36:98:83:6d:11:
         3d:03:b9:99:92:de:13:00:51:e3:9a:d8:10:85:ca:66:28:ff:
         d2:c7:07:7e:11:5d:53:03:f9:f3:dd:fe:76:fa:37:15:42:ce:
         9d:92:2f:6a:c1:a6:04:a3:88:1d:f3:d5:01:d2:65:e5:80:3a:
         58:c7:af:13:4c:02:eb:5d:ec:76:dc:20:00:d6:71:32:c0:b2:
         ee:54:fa:ca:e2:6a:c0:89:06:a6:a2:6a:e5:39:72:fe:f1:bb:
         82:e3:02:74:34:49:7d:ec:17:27:1c:af:7f:47:65:d0:93:3b:
         57:df:9f:d9:a7:0d:69:86:e2:bb:8b:8c:f1:1e:76:26:65:38:
         74:21:82:43:92:50:54:31:1b:c6:a4:d4:c1:50:0c:1c:54:7d:
         9b:f6:96:7a:5f:09:75:37:a4:fb:4e:98:e3:c9:10:f6:79:50:
         e4:3d:4a:52:c9:8a:46:a1:47:6a:c5:e7:ea:b8:85:99:25:5b:
         69:95:ff:08:9d:05:32:15:36:ac:f2:f9:13:e7:bd:8c:74:e2:
         b1:2e:02:12
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDqnEs6lnjDg67VZPOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTIxMDcyMDA0MDAwMFoXDTI3MDcxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZmNiMzFiN2UtNjFjZC00Mjk1LTk1MWItZGQ1OTBhOTM4NzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn3yG5ZCj3zpcXj6lOq+L0uzwqagnOcp8/e4
4LsD+L+cOSgVJTlLOzwRoxT7viBiOi5piERo1GjycUcoDeVsPYadX2nfdPlDDo7c
vHObCdxTt/l//BJF2gUjzCI+yNscnd3OZSCoRuyBCnTc+iGCPp4FfO+7KNry9zRY
XI1trDmg6PbQq75kWhmxBl0PfwSjdTYgGhxZyLrYoG1rrkBelN6CtxepUug/doig
NnOZxng7StxqIUmQJ9cogsB/hgqrPbVVzybMa0krCCn7/FWQ+UvF38uaBE5VQRsE
un+dnwtvKQ1G0mVzKco76N34EryUaPIZw6HOJpTXDTTyQoyoyQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGhc96QGrTBRV24TdhmaL1jfVb2MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTM0NjFkZmYtYzAzZC0z
YTg4LTk1YzctYjAwMWM2YjI3MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL+YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJKPcSFpX+HS5pgREfMIRacTx+9LX2ARYKxTrNkHJZTy3TSK++VzH+FMt
tKQPboZe0DaYg20RPQO5mZLeEwBR45rYEIXKZij/0scHfhFdUwP5893+dvo3FULO
nZIvasGmBKOIHfPVAdJl5YA6WMevE0wC613sdtwgANZxMsCy7lT6yuJqwIkGpqJq
5Tly/vG7guMCdDRJfewXJxyvf0dl0JM7V9+f2acNaYbiu4uM8R52JmU4dCGCQ5JQ
VDEbxqTUwVAMHFR9m/aWel8JdTek+06Y48kQ9nlQ5D1KUsmKRqFHasXn6riFmSVb
aZX/CJ0FMhU2rPL5E+e9jHTisS4CEg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:23 2024 by rpki-client on console-fra.rpki-client.org