Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/88c3d08c-384e-3b33-940c-ebc1368ff262.roa
File:                     88c3d08c-384e-3b33-940c-ebc1368ff262.roa (raw, json)
Hash identifier:          Hwh+yT2H71F7VGq3ep0UIKYXeJmVBUgmm8+naH7Tizo=
Subject key identifier:   CB:CC:ED:EB:EE:9A:5F:25:7C:E8:79:C9:60:75:F9:71:6B:3B:7D:76
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858453317EADD4EB1CB85A319F9C0
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/88c3d08c-384e-3b33-940c-ebc1368ff262.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     400529
IP address blocks:        134.195.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:ea:dd:4e:b1:cb:85:a3:19:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=d42f7674-f0e9-4002-96ff-63c4422e2c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:28:06:01:8a:c5:80:0d:75:93:8f:f4:8e:
                    16:09:2c:c6:d7:93:33:8c:b8:df:b1:54:f4:37:a9:
                    b0:84:90:87:13:0b:fd:6f:b2:21:50:78:44:66:1d:
                    fd:05:7e:cc:4a:b9:d1:b6:23:17:21:19:ef:0e:50:
                    97:b7:73:6f:5a:65:f5:aa:b6:12:f8:7f:c3:3f:79:
                    ce:a3:3e:1f:f5:c0:39:34:7b:59:a1:26:79:81:d1:
                    da:93:f3:a9:6b:c0:01:a4:ae:ed:32:4e:e9:48:39:
                    38:e7:f7:f5:2b:1a:1e:e0:9d:c9:f2:1f:99:50:de:
                    3f:9a:0c:57:05:a6:d2:1c:e1:54:b3:af:27:aa:72:
                    f4:3a:6e:6d:4b:a3:79:02:9f:1b:cd:53:0a:a3:1e:
                    86:15:75:b5:7e:b1:e9:fd:a4:2b:ab:01:7d:4e:18:
                    48:6f:64:fb:5e:67:ac:be:2e:b1:d5:6d:53:44:de:
                    b5:b7:28:cd:ee:da:07:80:e1:51:55:a7:d3:85:9f:
                    83:4f:a2:4f:12:1b:06:75:6b:5a:60:74:48:7c:bd:
                    cc:75:d5:54:79:2d:5d:92:c5:cf:06:24:3c:74:eb:
                    19:29:07:4b:18:ae:e5:59:bb:7a:2c:bf:f9:fc:72:
                    5e:b5:fe:fa:e1:66:7e:05:fe:f0:10:e1:0d:9f:4e:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CC:ED:EB:EE:9A:5F:25:7C:E8:79:C9:60:75:F9:71:6B:3B:7D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/88c3d08c-384e-3b33-940c-ebc1368ff262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:d1:91:82:c5:bb:49:fc:ac:11:9f:f7:da:da:af:79:ff:fa:
         81:f5:cd:8a:52:8d:aa:c9:26:77:73:a3:2e:c9:30:49:26:43:
         b2:ff:02:17:1b:88:71:59:f3:87:3d:8b:5b:2e:09:8b:e3:b0:
         ad:e4:a3:1a:87:af:68:16:2b:69:66:87:f0:d0:fa:dd:7f:6f:
         87:c0:45:e3:30:2a:8b:7b:84:f7:e5:83:b6:d1:6f:e3:17:0f:
         91:9e:85:56:01:62:3e:e9:4d:63:d8:e0:8b:d3:bb:ca:98:5c:
         ec:15:39:58:a1:34:05:c3:28:71:de:96:09:89:d5:18:b9:73:
         94:13:dd:1a:2e:9e:c6:c9:bf:de:1f:ac:f8:d7:2d:12:83:4d:
         52:4c:68:f1:b4:a1:61:37:ff:03:1b:64:88:b4:d0:21:4c:dd:
         bc:e6:70:69:bb:92:73:3f:1b:a2:0d:ee:09:17:fc:9c:08:9d:
         b0:2c:4c:1b:ca:a3:8c:d2:8a:66:e1:4c:d3:19:5d:b5:6a:0a:
         e9:c9:f0:01:6f:59:04:dd:1c:03:d8:70:34:48:c5:40:f3:d3:
         0c:e1:86:a5:30:c2:5f:49:bb:32:cb:11:53:7e:30:5b:f3:dd:
         38:c7:a8:94:57:43:a4:17:bc:b5:4f:82:ce:dc:c8:61:98:b0:
         7c:c7:eb:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUzF+rdTrHLhaMZ+cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTI0MDMxNDAxMDAyNVoXDTI0MDYxMjAxMDAyNVowLzEtMCsGA1UEAxMk
ZDQyZjc2NzQtZjBlOS00MDAyLTk2ZmYtNjNjNDQyMmUyYzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM4oBgGKxYANdZOP9I4WCSzG15MzjLjfsVT0
N6mwhJCHEwv9b7IhUHhEZh39BX7MSrnRtiMXIRnvDlCXt3NvWmX1qrYS+H/DP3nO
oz4f9cA5NHtZoSZ5gdHak/Opa8ABpK7tMk7pSDk45/f1Kxoe4J3J8h+ZUN4/mgxX
BabSHOFUs68nqnL0Om5tS6N5Ap8bzVMKox6GFXW1frHp/aQrqwF9ThhIb2T7Xmes
vi6x1W1TRN61tyjN7toHgOFRVafThZ+DT6JPEhsGdWtaYHRIfL3MddVUeS1dksXP
BiQ8dOsZKQdLGK7lWbt6LL/5/HJetf764WZ+Bf7wEOENn05acQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvM7evuml8lfOh5yWB1+XFrO312MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvODhjM2QwOGMtMzg0ZS0z
YjMzLTk0MGMtZWJjMTM2OGZmMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsN5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALDRkYLFu0n8rBGf99rar3n/+oH1zYpSjarJJndzoy7JMEkmQ7L/Ahcb
iHFZ84c9i1suCYvjsK3koxqHr2gWK2lmh/DQ+t1/b4fAReMwKot7hPflg7bRb+MX
D5GehVYBYj7pTWPY4IvTu8qYXOwVOVihNAXDKHHelgmJ1Ri5c5QT3RounsbJv94f
rPjXLRKDTVJMaPG0oWE3/wMbZIi00CFM3bzmcGm7knM/G6IN7gkX/JwInbAsTBvK
o4zSimbhTNMZXbVqCunJ8AFvWQTdHAPYcDRIxUDz0wzhhqUwwl9JuzLLEVN+MFvz
3TjHqJRXQ6QXvLVPgs7cyGGYsHzH68c=
-----END CERTIFICATE-----
Generated at Sun May 19 01:58:22 2024 by rpki-client on console-ams.rpki-client.org