Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa
File:                     ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa (raw, json)
Hash identifier:          QeYLvS8jO0lxAK2KzjSsM0CUTvVOvHlZmyFd4dW3F04=
Subject key identifier:   EC:A1:C9:BD:EC:CB:9C:0F:9B:D1:BE:78:FD:3E:85:53:A9:E3:52:0A
Certificate issuer:       /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial:       010D0C9F43285846355442A8A2F007E8D11FD5A0
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa
Signing time:             Fri 14 Jun 2024 13:00:35 +0000
ROA not before:           Fri 14 Jun 2024 13:00:35 +0000
ROA not after:            Thu 12 Sep 2024 13:00:35 +0000
asID:                     136787
IP address blocks:        138.128.133.0/24 maxlen: 24
                          138.128.134.0/24 maxlen: 24
                          138.128.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:35:54:42:a8:a2:f0:07:e8:d1:1f:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
        Validity
            Not Before: Jun 14 13:00:35 2024 GMT
            Not After : Sep 12 13:00:35 2024 GMT
        Subject: CN=ecc1cfb9-f559-4cc6-a0cc-4e5fcef9c543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:2e:bf:c0:c4:4e:be:3e:94:e3:6e:97:05:
                    8d:a0:38:91:75:cf:d8:f2:a8:ef:a9:94:c1:8d:2b:
                    e8:0a:d6:72:c2:41:d1:71:0a:fc:82:36:06:82:63:
                    e7:d2:90:f7:a7:d5:cc:b3:4c:0c:a7:1a:1d:13:41:
                    4f:90:3b:31:1b:f8:a3:84:01:74:81:65:9b:6c:3d:
                    06:5c:91:d0:97:8d:32:50:34:84:97:1b:2f:de:16:
                    a7:2e:43:c9:6d:cb:a3:aa:97:e0:a1:4b:1d:1c:29:
                    a5:90:f2:87:63:bb:32:23:1b:00:83:d7:42:3a:b0:
                    e1:e6:29:65:61:cb:20:a6:bd:f5:49:09:22:4b:fd:
                    2b:8f:fa:5f:ba:cd:0d:d1:61:82:b3:da:6f:40:a3:
                    69:17:64:d1:ea:fc:59:49:08:42:7b:c4:b1:e3:aa:
                    a0:0e:6f:92:9e:55:86:69:2a:47:4d:4e:fd:04:43:
                    c4:41:23:3a:22:89:2e:e6:ea:1d:35:28:ab:8c:7d:
                    14:ad:ae:00:6c:f7:4e:b6:ea:9d:da:ca:82:a4:bb:
                    ad:dd:96:b8:22:02:37:c0:50:00:b6:8b:5d:32:84:
                    6e:9c:b1:73:0e:23:ed:3d:28:98:2a:53:03:18:eb:
                    f5:3a:62:d2:a5:ce:ba:05:2c:5e:a1:e2:c9:9f:8a:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A1:C9:BD:EC:CB:9C:0F:9B:D1:BE:78:FD:3E:85:53:A9:E3:52:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl

            X509v3 Authority Key Identifier:
                keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.133.0-138.128.135.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:33:b7:c9:37:9b:53:49:01:f1:8f:3b:8e:7b:ca:e7:b5:f2:
         5b:f9:c4:98:f5:5c:3a:e2:14:76:0e:9a:c7:b2:0b:e9:4e:37:
         52:bd:35:6c:b1:72:93:3a:f9:01:76:43:13:ed:99:aa:c7:4c:
         bc:9c:6a:d5:52:8a:4e:46:14:85:5f:58:fa:f6:7f:2d:a9:20:
         a3:c8:42:b8:2f:4e:84:01:4f:49:6a:90:ba:68:dc:a0:33:82:
         e6:a5:ae:a6:c0:c0:26:12:dd:b9:af:dd:2b:83:8c:7e:52:d5:
         bb:42:e5:64:62:07:fd:ab:7a:b0:db:d8:64:be:38:4f:b9:a2:
         ac:91:02:da:7d:8f:71:d4:92:94:4f:6e:0f:e6:1f:1a:7c:c0:
         1b:fa:f1:88:3b:73:35:1c:ab:88:8f:a4:a8:bc:31:88:05:c7:
         da:db:e1:bf:78:ba:c8:d8:4d:6d:34:42:4f:4c:e5:04:ef:74:
         3b:70:5f:96:2a:31:dd:ee:0c:5d:07:c6:dc:32:60:41:49:7c:
         07:61:60:28:70:ed:d0:f9:f6:bd:b7:52:a7:05:71:3d:15:39:
         33:0a:cb:a3:60:a0:d0:0e:c5:5d:a7:f3:29:7c:96:1e:28:bd:
         dc:43:8a:5d:d1:5c:29:d5:30:c0:52:5f:f8:dd:ed:52:4f:f1:
         ed:65:36:10
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEY1VEKoovAH6NEf1aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2
MTViMB4XDTI0MDYxNDEzMDAzNVoXDTI0MDkxMjEzMDAzNVowLzEtMCsGA1UEAxMk
ZWNjMWNmYjktZjU1OS00Y2M2LWEwY2MtNGU1ZmNlZjljNTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrEuv8DETr4+lONulwWNoDiRdc/Y8qjvqZTB
jSvoCtZywkHRcQr8gjYGgmPn0pD3p9XMs0wMpxodE0FPkDsxG/ijhAF0gWWbbD0G
XJHQl40yUDSElxsv3hanLkPJbcujqpfgoUsdHCmlkPKHY7syIxsAg9dCOrDh5ill
Ycsgpr31SQkiS/0rj/pfus0N0WGCs9pvQKNpF2TR6vxZSQhCe8Sx46qgDm+SnlWG
aSpHTU79BEPEQSM6Ioku5uodNSirjH0Ura4AbPdOtuqd2sqCpLut3Za4IgI3wFAA
totdMoRunLFzDiPtPSiYKlMDGOv1OmLSpc66BSxeoeLJn4o0kwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFOyhyb3sy5wPm9G+eP0+hVOp41IKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4
NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYmEyY2E1YTItZTIyMi0z
MTk0LWJmYTgtYWI1MjAxMWRjMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj
MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj
NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk
ODU1YzYxNWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACKgIUD
BAOKgIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAlzO3yTebU0kB8Y87jnvK57XyW/nEmPVcOuIUdg6ax7IL
6U43Ur01bLFykzr5AXZDE+2ZqsdMvJxq1VKKTkYUhV9Y+vZ/Lakgo8hCuC9OhAFP
SWqQumjcoDOC5qWupsDAJhLdua/dK4OMflLVu0LlZGIH/at6sNvYZL44T7mirJEC
2n2PcdSSlE9uD+YfGnzAG/rxiDtzNRyriI+kqLwxiAXH2tvhv3i6yNhNbTRCT0zl
BO90O3Bfliox3e4MXQfG3DJgQUl8B2FgKHDt0Pn2vbdSpwVxPRU5MwrLo2Cg0A7F
XafzKXyWHii93EOKXdFcKdUwwFJf+N3tUk/x7WU2EA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 07:49:08 2024 by rpki-client on console-ams.rpki-client.org