Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1a40aa13-d524-3943-b3f3-22b1374c67ec.roa
File:                     1a40aa13-d524-3943-b3f3-22b1374c67ec.roa (raw, json)
Hash identifier:          BaSiLq7x1BRbMNVweTLU4iUnRk+D8D+oQvfjss9PUVY=
Subject key identifier:   95:AC:3D:A4:07:9C:C3:B6:77:4C:BD:CC:F2:0B:88:93:65:7E:95:FB
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285845F0283E685664FB27FBA05B00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1a40aa13-d524-3943-b3f3-22b1374c67ec.roa
Signing time:             Mon 20 May 2024 18:21:10 +0000
ROA not before:           Mon 20 May 2024 18:21:10 +0000
ROA not after:            Sun 18 Aug 2024 18:21:10 +0000
asID:                     53356
IP address blocks:        139.177.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f0:28:3e:68:56:64:fb:27:fb:a0:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 20 18:21:10 2024 GMT
            Not After : Aug 18 18:21:10 2024 GMT
        Subject: CN=aadcd516-211e-4de9-801b-7a573026149d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:91:eb:90:e5:5e:53:26:8f:6a:dd:15:01:
                    7d:f8:83:1e:64:fe:eb:1c:bd:d6:25:14:94:08:26:
                    70:42:c5:2f:b1:84:8a:8c:6a:b5:b2:d7:81:d8:68:
                    94:b2:31:95:cd:02:7d:83:a1:93:48:d3:e6:1e:22:
                    7b:b4:68:04:f2:5d:cb:40:25:da:89:59:ea:55:ea:
                    26:e2:72:ad:4a:0f:e3:e8:18:3b:82:4b:56:02:40:
                    55:b7:b4:49:9a:0c:8e:63:a8:9b:bb:31:cd:cc:94:
                    e1:11:b2:cd:63:d0:7e:e8:eb:c3:1d:8a:37:68:f1:
                    e2:ee:f5:82:15:19:4b:2a:9c:f6:81:a7:3a:2d:06:
                    75:6c:b2:b3:23:2b:81:09:53:89:4b:c4:c1:f9:20:
                    c8:0d:56:d7:20:b5:36:4e:ae:89:16:e3:b5:11:75:
                    f1:77:dc:0e:ec:47:25:a0:2c:5c:cb:f4:fd:ab:10:
                    44:b5:4e:4b:f8:ca:10:5a:b5:b4:a0:11:57:7b:a5:
                    1a:04:3b:9f:5a:42:d1:d1:fe:6d:d2:c8:7e:23:42:
                    3f:ac:1a:65:94:c2:ba:95:0f:5e:c8:51:a6:bf:4c:
                    7f:0a:0c:f9:e7:be:fe:06:be:c8:0e:02:d2:7c:52:
                    10:91:18:e0:e8:d0:f1:d1:9a:a7:b2:c3:10:3a:4f:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AC:3D:A4:07:9C:C3:B6:77:4C:BD:CC:F2:0B:88:93:65:7E:95:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1a40aa13-d524-3943-b3f3-22b1374c67ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:b3:9d:b4:ad:a3:4b:4a:4b:14:61:79:87:54:18:57:44:
         f9:1a:63:7d:51:f2:7c:f2:ff:a2:c9:b7:40:e5:b4:3b:25:c3:
         8e:15:51:d6:a4:6d:5a:ad:0c:57:96:9e:f0:c5:d7:55:96:13:
         e9:16:b6:fc:17:e8:0c:3c:18:1b:33:09:0d:11:04:b2:9c:dc:
         30:10:e9:5c:b4:48:5f:03:ed:a2:ed:1b:1e:4a:2d:8f:b8:1b:
         73:9a:bf:e6:ad:07:32:45:8b:1c:0b:8b:f3:0b:dd:f2:86:c7:
         21:ff:7b:f4:ef:2d:49:cf:58:28:4d:b1:71:9c:19:bb:51:0e:
         5c:da:5d:8a:a6:d1:b5:37:88:82:28:a6:e9:23:01:fd:f2:cc:
         14:12:fa:9d:08:6c:b6:41:fd:2b:8a:29:e7:08:dc:20:06:c0:
         fe:ce:e4:f7:8d:4b:5c:35:0c:3b:4c:16:3e:f9:f2:5f:16:80:
         de:89:62:6e:8f:5b:88:4d:ee:32:fd:72:41:99:a2:9d:94:13:
         2a:c1:fe:07:9c:4a:93:30:23:bf:5a:fa:80:57:74:32:5e:c9:
         e0:72:94:fd:3b:57:9c:94:27:1e:cc:d5:10:2f:fd:80:9c:1a:
         b3:2e:8b:df:72:81:9f:31:78:8f:05:c7:99:72:d6:9d:15:67:
         bd:bf:eb:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXwKD5oVmT7J/ugWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI0MDUyMDE4MjExMFoXDTI0MDgxODE4MjExMFowLzEtMCsGA1UEAxMk
YWFkY2Q1MTYtMjExZS00ZGU5LTgwMWItN2E1NzMwMjYxNDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0WR65DlXlMmj2rdFQF9+IMeZP7rHL3WJRSU
CCZwQsUvsYSKjGq1steB2GiUsjGVzQJ9g6GTSNPmHiJ7tGgE8l3LQCXaiVnqVeom
4nKtSg/j6Bg7gktWAkBVt7RJmgyOY6ibuzHNzJThEbLNY9B+6OvDHYo3aPHi7vWC
FRlLKpz2gac6LQZ1bLKzIyuBCVOJS8TB+SDIDVbXILU2Tq6JFuO1EXXxd9wO7Ecl
oCxcy/T9qxBEtU5L+MoQWrW0oBFXe6UaBDufWkLR0f5t0sh+I0I/rBpllMK6lQ9e
yFGmv0x/Cgz5577+Br7IDgLSfFIQkRjg6NDx0ZqnssMQOk8UAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWsPaQHnMO2d0y9zPILiJNlfpX7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMWE0MGFhMTMtZDUyNC0z
OTQzLWIzZjMtMjJiMTM3NGM2N2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmos520raNLSksUYXmHVBhXRPkaY31R8nzy/6LJt0DltDslw44VUdak
bVqtDFeWnvDF11WWE+kWtvwX6Aw8GBszCQ0RBLKc3DAQ6Vy0SF8D7aLtGx5KLY+4
G3Oav+atBzJFixwLi/ML3fKGxyH/e/TvLUnPWChNsXGcGbtRDlzaXYqm0bU3iIIo
pukjAf3yzBQS+p0IbLZB/SuKKecI3CAGwP7O5PeNS1w1DDtMFj758l8WgN6JYm6P
W4hN7jL9ckGZop2UEyrB/gecSpMwI79a+oBXdDJeyeBylP07V5yUJx7M1RAv/YCc
GrMui99ygZ8xeI8Fx5ly1p0VZ72/6+U=
-----END CERTIFICATE-----
Generated at Mon Jun 3 06:45:52 2024 by rpki-client on console-fra.rpki-client.org