Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/59e7face-109a-3046-80f2-18e812612b71.roa
File:                     59e7face-109a-3046-80f2-18e812612b71.roa (raw, json)
Hash identifier:          nffHH1GyvNRM3ZPq4+f/xkQoqj4JCl6U8Eix6tahbxM=
Subject key identifier:   5F:E6:C1:99:06:3D:A6:1D:95:62:2C:02:33:85:46:AA:65:2B:BF:08
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285845BE7968DF078269B2807DF2C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/59e7face-109a-3046-80f2-18e812612b71.roa
Signing time:             Thu 02 May 2024 23:14:17 +0000
ROA not before:           Thu 02 May 2024 23:14:17 +0000
ROA not after:            Wed 31 Jul 2024 23:14:17 +0000
asID:                     394089
IP address blocks:        140.209.224.0/20 maxlen: 24
                          140.209.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:be:79:68:df:07:82:69:b2:80:7d:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May  2 23:14:17 2024 GMT
            Not After : Jul 31 23:14:17 2024 GMT
        Subject: CN=8e3504b3-1ae0-4563-9a19-14a999be72e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:db:98:09:98:b0:8b:11:ea:dc:be:e3:7a:
                    e7:9c:99:c6:ad:7c:74:da:65:c4:97:cf:79:4a:bb:
                    ad:a9:70:f2:2e:df:7b:d9:57:99:81:6b:2c:48:73:
                    ad:ee:59:2e:6c:52:49:07:dd:b0:27:aa:43:d6:df:
                    7d:45:02:de:fe:30:95:45:a7:9c:4e:93:02:84:95:
                    29:fd:3d:30:b9:9f:35:eb:38:f5:61:dc:cc:62:cc:
                    eb:a7:02:d0:e4:5f:22:d2:c3:40:6c:46:96:c9:96:
                    c0:b8:89:cd:cb:4c:0f:66:57:26:2d:ec:cf:d4:35:
                    b1:7c:a8:bd:fb:69:e0:b3:50:5b:12:c0:14:ea:6c:
                    37:3f:f0:bc:e1:d5:33:6b:e2:96:b0:a4:03:7a:21:
                    cf:fa:5f:dc:4c:3f:41:97:1d:56:b1:97:f2:b5:a0:
                    6f:c0:89:62:94:94:a2:b7:30:dd:2e:dd:af:6e:e3:
                    5c:d4:bd:e6:f7:07:3c:32:98:0c:94:5c:90:05:43:
                    ee:e3:7f:67:b8:5c:b7:22:00:02:9f:67:fe:3e:7f:
                    12:20:43:67:c8:90:ac:2d:51:84:bc:8c:20:40:7e:
                    90:89:87:1a:57:5b:fa:f4:24:21:72:70:56:8e:cb:
                    84:64:13:67:75:2a:72:39:07:24:af:4a:3d:cc:b3:
                    8f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E6:C1:99:06:3D:A6:1D:95:62:2C:02:33:85:46:AA:65:2B:BF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/59e7face-109a-3046-80f2-18e812612b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.192.0-140.209.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:5d:4d:f2:54:b1:02:d7:ab:ee:ca:06:b7:fa:d3:91:30:9c:
         fb:fb:b9:f5:8e:f0:d8:bc:50:c3:03:ec:6d:41:c3:0d:96:06:
         f8:26:25:a0:7e:42:ee:e4:92:10:fe:bc:e8:71:57:1a:fa:8c:
         14:50:ae:9a:76:8f:01:e7:20:47:e8:db:ad:cb:e5:52:8c:6b:
         26:7e:19:75:e9:19:76:ff:b6:f7:97:56:b9:c1:74:92:f0:3b:
         0e:72:3f:1b:e3:0d:ad:2f:5a:23:bf:80:18:b7:97:56:8d:f5:
         af:80:43:80:15:f4:df:64:65:94:b7:ce:f0:dc:74:cb:b2:59:
         b1:9c:c5:67:66:fd:f1:aa:67:46:98:93:91:e7:22:03:9c:bf:
         c3:c8:78:ce:74:34:0c:e6:78:ac:c2:25:8a:a5:5e:c3:bb:40:
         ee:2e:6a:1c:cf:e9:12:e0:22:d0:3c:cf:99:ab:03:b0:11:4a:
         85:50:e1:79:8c:27:2a:f2:c9:f7:b2:51:bf:f1:4e:91:db:1e:
         55:48:0a:6a:b0:14:09:a1:65:91:cb:d9:15:d0:d0:78:92:43:
         fa:c7:e3:3a:f5:70:6d:09:df:ab:46:62:63:ad:b7:80:fc:69:
         7d:b5:f2:67:74:0f:47:8a:46:b2:82:f0:10:6f:37:2a:c7:b8:
         71:62:d5:6e
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEW+eWjfB4JpsoB98sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI0MDUwMjIzMTQxN1oXDTI0MDczMTIzMTQxN1owLzEtMCsGA1UEAxMk
OGUzNTA0YjMtMWFlMC00NTYzLTlhMTktMTRhOTk5YmU3MmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PnbmAmYsIsR6ty+43rnnJnGrXx02mXEl895
SrutqXDyLt972VeZgWssSHOt7lkubFJJB92wJ6pD1t99RQLe/jCVRaecTpMChJUp
/T0wuZ816zj1YdzMYszrpwLQ5F8i0sNAbEaWyZbAuInNy0wPZlcmLezP1DWxfKi9
+2ngs1BbEsAU6mw3P/C84dUza+KWsKQDeiHP+l/cTD9Blx1WsZfytaBvwIlilJSi
tzDdLt2vbuNc1L3m9wc8MpgMlFyQBUPu439nuFy3IgACn2f+Pn8SIENnyJCsLVGE
vIwgQH6QiYcaV1v69CQhcnBWjsuEZBNndSpyOQckr0o9zLOPmQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFF/mwZkGPaYdlWIsAjOFRqplK78IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvNTllN2ZhY2UtMTA5YS0z
MDQ2LTgwZjItMThlODEyNjEyYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaM0cAD
BASM0eAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAvl1N8lSxAter7soGt/rTkTCc+/u59Y7w2LxQwwPsbUHD
DZYG+CYloH5C7uSSEP686HFXGvqMFFCumnaPAecgR+jbrcvlUoxrJn4ZdekZdv+2
95dWucF0kvA7DnI/G+MNrS9aI7+AGLeXVo31r4BDgBX032RllLfO8Nx0y7JZsZzF
Z2b98apnRpiTkeciA5y/w8h4znQ0DOZ4rMIliqVew7tA7i5qHM/pEuAi0DzPmasD
sBFKhVDheYwnKvLJ97JRv/FOkdseVUgKarAUCaFlkcvZFdDQeJJD+sfjOvVwbQnf
q0ZiY623gPxpfbXyZ3QPR4pGsoLwEG83Kse4cWLVbg==
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:24:43 2024 by rpki-client on console-fra.rpki-client.org