Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/1a762a4d-ae55-395b-b28b-a1f47699a9e2.roa
File:                     1a762a4d-ae55-395b-b28b-a1f47699a9e2.roa (raw, json)
Hash identifier:          SPOYHnVN4+wDwcvH1fNpE9vGM3IcobgRynmT4Nq9XPo=
Subject key identifier:   1D:DE:EE:BA:D2:BE:EA:61:49:DE:21:9B:3A:FA:36:E3:70:77:90:A4
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1734E370BDC
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/1a762a4d-ae55-395b-b28b-a1f47699a9e2.roa
Signing time:             Tue 14 Jul 2020 16:44:57 +0000
ROA not before:           Tue 14 Jul 2020 04:00:00 +0000
ROA not after:            Sun 05 May 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        198.49.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:37:0b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Jul 14 04:00:00 2020 GMT
            Not After : May  5 04:00:00 2030 GMT
        Subject: CN=eadf5779-84c6-498a-8e71-76186a3d5c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fc:37:c3:43:eb:52:54:85:2c:af:d4:38:82:
                    be:f0:83:2e:40:ee:d1:96:82:bf:a8:cc:be:4c:67:
                    f4:21:4a:ac:3a:5d:ea:b0:a0:f8:30:63:fe:03:1a:
                    08:52:9d:69:be:7a:e7:b8:88:22:5f:8f:f4:37:67:
                    e4:c2:72:26:0e:ec:3a:17:7b:87:02:71:9a:08:35:
                    be:7b:22:82:45:a4:6f:79:67:a9:8b:71:9e:c2:ab:
                    10:ee:3c:ab:34:4b:de:fe:05:7e:41:31:b4:ec:39:
                    b7:4d:62:1f:bc:84:4e:2f:af:e5:23:23:5d:b5:71:
                    97:33:92:52:92:7a:e5:39:ef:a4:16:e2:60:a9:4d:
                    18:b5:c1:d6:88:d0:db:aa:da:f9:6a:48:2a:b2:27:
                    2a:be:47:a2:2e:a2:cd:11:b2:63:b1:4f:8f:83:72:
                    24:d9:9f:56:73:5d:9a:e4:d8:9f:05:1a:24:29:98:
                    39:84:05:6e:07:94:9d:2d:e2:61:fd:86:89:c8:e8:
                    45:95:a3:96:7e:c9:e2:fb:15:c0:2c:1c:0b:66:7a:
                    1c:6b:26:6c:6d:9b:97:80:e9:a5:18:17:e5:7f:cc:
                    04:63:22:96:e8:0f:14:c5:28:62:b1:80:48:ce:59:
                    3a:f3:62:bb:87:c1:f3:44:c9:96:c2:c0:f6:e6:01:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DE:EE:BA:D2:BE:EA:61:49:DE:21:9B:3A:FA:36:E3:70:77:90:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/1a762a4d-ae55-395b-b28b-a1f47699a9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:be:00:1a:6a:10:9b:ef:a1:9e:83:18:cd:62:7e:d4:18:41:
         b1:1f:76:26:c8:ad:0f:33:79:db:0a:6b:62:ef:24:4d:32:57:
         fa:f4:ce:ff:62:c1:0f:f8:e1:71:f7:62:5e:0f:41:0b:9a:79:
         a0:d6:75:df:11:05:94:73:94:45:d1:92:9e:58:bc:49:8e:b9:
         4a:bb:99:6e:08:5a:ca:71:f5:a5:b6:28:f9:8c:a7:e6:aa:e5:
         1f:b7:5b:7a:cf:15:3a:c3:4d:69:d3:fd:1e:45:76:6a:b7:6b:
         c9:15:d5:cc:31:58:aa:db:d3:63:d4:69:20:a5:9a:99:92:35:
         96:0f:ad:c7:97:b1:57:9e:cc:42:2d:8d:0e:09:06:be:23:15:
         d9:c0:21:ea:7a:d2:20:9e:d7:49:38:b5:ce:ad:ce:d2:17:a8:
         20:8e:c9:17:9b:d5:d5:c8:53:3f:81:fa:bc:fd:d7:23:d1:37:
         91:5c:ce:e7:52:13:6f:11:79:05:00:3e:bd:29:69:be:a1:9d:
         0c:73:1e:49:9b:27:4b:d3:a8:91:54:b8:af:72:0a:cc:71:cd:
         a6:12:8b:00:37:56:cb:36:d4:cd:95:bd:40:5f:d3:0d:a9:f2:
         05:8c:a3:34:ee:52:de:a4:98:c1:e1:78:83:b7:c8:f5:99:d4:
         06:0a:3d:0d
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc043C9wwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2FiNzQz
ZDAeFw0yMDA3MTQwNDAwMDBaFw0zMDA1MDUwNDAwMDBaMC8xLTArBgNVBAMTJGVh
ZGY1Nzc5LTg0YzYtNDk4YS04ZTcxLTc2MTg2YTNkNWMwOTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOz8N8ND61JUhSyv1DiCvvCDLkDu0ZaCv6jMvkxn
9CFKrDpd6rCg+DBj/gMaCFKdab5657iIIl+P9Ddn5MJyJg7sOhd7hwJxmgg1vnsi
gkWkb3lnqYtxnsKrEO48qzRL3v4FfkExtOw5t01iH7yETi+v5SMjXbVxlzOSUpJ6
5TnvpBbiYKlNGLXB1ojQ26ra+WpIKrInKr5Hoi6izRGyY7FPj4NyJNmfVnNdmuTY
nwUaJCmYOYQFbgeUnS3iYf2GicjoRZWjln7J4vsVwCwcC2Z6HGsmbG2bl4DppRgX
5X/MBGMilugPFMUoYrGASM5ZOvNiu4fB80TJlsLA9uYBobECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQd3u660r7qYUneIZs6+jbjcHeQpDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUz
ZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3NDNkLzFhNzYyYTRkLWFlNTUtMzk1
Yi1iMjhiLWExZjQ3Njk5YTllMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4
LTFiNjQxY2FiNzQzZC9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0
M2QuY3JsMB8GA1UdIwQYMBaAFLmj0JFWAovB8vJ3QS2CG87Sv9tDMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFj
YWI3NDNkLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMYxCDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAlb4AGmoQm++hnoMYzWJ+1BhBsR92JsitDzN52wprYu8kTTJX+vTO/2LBD/jh
cfdiXg9BC5p5oNZ13xEFlHOURdGSnli8SY65SruZbghaynH1pbYo+Yyn5qrlH7db
es8VOsNNadP9HkV2ardryRXVzDFYqtvTY9RpIKWamZI1lg+tx5exV57MQi2NDgkG
viMV2cAh6nrSIJ7XSTi1zq3O0heoII7JF5vV1chTP4H6vP3XI9E3kVzO51ITbxF5
BQA+vSlpvqGdDHMeSZsnS9OokVS4r3IKzHHNphKLADdWyzbUzZW9QF/TDanyBYyj
NO5S3qSYweF4g7fI9ZnUBgo9DQ==
-----END CERTIFICATE-----
Generated at Mon Jul 1 03:26:08 2024 by rpki-client on console-fra.rpki-client.org