Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/fe24cd81-d5da-3df4-a5b1-d2656c6463be.roa
File:                     fe24cd81-d5da-3df4-a5b1-d2656c6463be.roa (raw, json)
Hash identifier:          N/pIWuDG+a1zGh4k8mkZkcrboLA1WtFRthnZ+JBbzcw=
Subject key identifier:   E9:84:6E:77:D1:5B:30:7B:F4:FA:E0:64:93:E3:84:5F:9B:58:5F:BF
Certificate issuer:       /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial:       010D0C9F4328584522759947C669C874109E1A00
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/fe24cd81-d5da-3df4-a5b1-d2656c6463be.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     11131
IP address blocks:        130.85.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:99:47:c6:69:c8:74:10:9e:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=0aa4979e-f28b-4622-a016-cfc1a233b04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:6d:9f:5f:b8:ff:97:d0:4c:05:bc:4f:ae:
                    62:c2:c4:a0:c6:49:9e:eb:98:e8:24:40:da:fb:7a:
                    fa:b6:14:5a:58:5f:2b:35:2b:49:25:11:4c:d4:5d:
                    9c:71:ce:f9:36:e6:06:25:29:7c:f7:2a:0b:f6:7c:
                    9a:7f:60:82:f1:2a:b9:3c:52:ad:16:2f:a6:f7:b5:
                    12:26:48:45:fa:f0:99:3c:2e:1e:82:4b:3b:94:6a:
                    93:68:be:74:11:ca:d9:84:2c:4f:15:85:3d:7e:29:
                    3d:ad:79:b5:03:f5:d6:1f:6d:8a:67:f7:57:75:e8:
                    8c:5b:bb:f4:86:cb:00:8e:ff:44:14:de:dd:93:8f:
                    da:93:17:46:89:92:6a:df:9f:15:12:34:76:15:23:
                    a1:6b:20:c6:7e:5b:09:64:5e:b9:64:8a:ff:1b:88:
                    6f:17:32:70:59:70:5b:92:2e:95:bb:e1:21:59:e7:
                    51:ed:f2:d5:b9:eb:ef:28:e6:1e:3d:92:9c:bb:ed:
                    77:d6:da:56:d8:6a:23:fd:ee:f2:42:57:d0:2c:48:
                    2b:47:c1:ac:ff:91:d9:06:7b:b6:be:c7:47:ee:88:
                    47:db:53:15:cc:ab:6a:5a:06:17:8f:62:8a:da:d3:
                    00:d3:f2:9e:c6:fb:55:2d:40:bf:9c:d0:1a:fb:f6:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:84:6E:77:D1:5B:30:7B:F4:FA:E0:64:93:E3:84:5F:9B:58:5F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/fe24cd81-d5da-3df4-a5b1-d2656c6463be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl

            X509v3 Authority Key Identifier:
                keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.85.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:3f:c0:04:26:5f:e7:ba:fe:4c:3c:9b:71:60:23:9b:a0:
         be:d5:cf:29:0b:0a:40:d7:62:c5:3a:ae:88:eb:a6:2a:19:76:
         9d:74:93:72:83:05:58:3c:e8:ca:84:e4:91:1c:5b:ca:92:28:
         45:5d:4c:b8:83:e4:e6:ad:39:78:cd:52:6a:9f:7c:aa:62:5d:
         41:18:52:51:cf:98:03:71:2b:73:8f:3a:e2:79:4b:9c:f9:78:
         76:dc:bf:88:d6:7c:16:dd:1d:54:be:59:fd:a9:0c:56:c1:8d:
         ee:26:a8:59:f4:26:b2:bf:d4:98:de:24:99:b4:cf:f3:eb:60:
         b5:55:f7:66:1d:61:8f:d8:1e:63:73:85:6a:23:56:70:1c:94:
         c6:ae:8d:6b:b7:b3:0c:6e:33:5f:ce:aa:50:39:56:7d:64:ff:
         ab:8d:66:96:63:66:54:f5:e9:24:30:fb:47:f6:53:63:e4:21:
         0c:9c:63:aa:23:90:09:3e:25:1c:1f:9f:19:21:2b:49:65:fc:
         cf:28:60:76:f8:a8:59:8c:a7:a9:f9:43:51:9e:35:fb:15:67:
         30:08:e9:8c:ca:ac:81:8e:d6:93:6e:45:95:fa:ad:7d:d5:44:
         b8:d0:3e:fc:4d:95:a9:88:f3:df:75:98:7d:b3:a4:17:05:0f:
         2c:dd:9f:e7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEUidZlHxmnIdBCeGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmNzIwYjAtNDNmYi00YWQ2LTkxYmEtYWExMWNmNmIy
MzYyMB4XDTI0MDMwODAyMDAyNloXDTI0MDYwNjAxMDAyNlowLzEtMCsGA1UEAxMk
MGFhNDk3OWUtZjI4Yi00NjIyLWEwMTYtY2ZjMWEyMzNiMDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaltn1+4/5fQTAW8T65iwsSgxkme65joJEDa
+3r6thRaWF8rNStJJRFM1F2ccc75NuYGJSl89yoL9nyaf2CC8Sq5PFKtFi+m97US
JkhF+vCZPC4egks7lGqTaL50EcrZhCxPFYU9fik9rXm1A/XWH22KZ/dXdeiMW7v0
hssAjv9EFN7dk4/akxdGiZJq358VEjR2FSOhayDGflsJZF65ZIr/G4hvFzJwWXBb
ki6Vu+EhWedR7fLVuevvKOYePZKcu+131tpW2Goj/e7yQlfQLEgrR8Gs/5HZBnu2
vsdH7ohH21MVzKtqWgYXj2KK2tMA0/KexvtVLUC/nNAa+/Z0PwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOmEbnfRWzB79PrgZJPjhF+bWF+/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OWY3
MjBiMC00M2ZiLTRhZDYtOTFiYS1hYTExY2Y2YjIzNjIvZmUyNGNkODEtZDVkYS0z
ZGY0LWE1YjEtZDI2NTZjNjQ2M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjlmNzIwYjAtNDNmYi00YWQ2LTkx
YmEtYWExMWNmNmIyMzYyLzY5ZjcyMGIwLTQzZmItNGFkNi05MWJhLWFhMTFjZjZi
MjM2Mi5jcmwwHwYDVR0jBBgwFoAUS+pEVEC3FOuD48/N2yUi1id1KJwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82OWY3MjBiMC00M2ZiLTRhZDYtOTFiYS1hYTEx
Y2Y2YjIzNjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAglUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAA28/wAQmX+e6/kw8m3FgI5ugvtXPKQsKQNdixTquiOumKhl2nXSTcoMF
WDzoyoTkkRxbypIoRV1MuIPk5q05eM1Sap98qmJdQRhSUc+YA3Erc4864nlLnPl4
dty/iNZ8Ft0dVL5Z/akMVsGN7iaoWfQmsr/UmN4kmbTP8+tgtVX3Zh1hj9geY3OF
aiNWcByUxq6Na7ezDG4zX86qUDlWfWT/q41mlmNmVPXpJDD7R/ZTY+QhDJxjqiOQ
CT4lHB+fGSErSWX8zyhgdvioWYynqflDUZ41+xVnMAjpjMqsgY7Wk25FlfqtfdVE
uNA+/E2VqYjz33WYfbOkFwUPLN2f5w==
-----END CERTIFICATE-----
Generated at Wed May 15 21:36:41 2024 by rpki-client on console-ams.rpki-client.org