Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e5993e99-5976-314e-90f4-0dae1c793e34.roa
File:                     e5993e99-5976-314e-90f4-0dae1c793e34.roa (raw, json)
Hash identifier:          qbVIexRba+lx4/SNmh3q3DfQs4CdIllDsrjKfmoHtLE=
Subject key identifier:   2A:A3:29:EA:C9:5B:DA:C9:50:04:0E:0A:DF:67:DF:B0:5C:36:3E:E2
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285847B1015E2D49A76D0FDBCE5BA0
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e5993e99-5976-314e-90f4-0dae1c793e34.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     19551
IP address blocks:        160.129.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5e:2d:49:a7:6d:0f:db:ce:5b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=feb41ac5-3435-4bd9-be12-5caf8b82d85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3d:dd:56:51:0b:98:fe:7c:e7:80:87:e8:92:
                    d4:7d:54:e7:89:d2:06:41:f5:b6:a7:68:14:73:97:
                    b0:9f:06:b3:e3:64:6c:2b:62:c5:26:03:ca:5d:03:
                    91:f2:09:0d:31:fd:10:52:45:74:f8:17:21:95:92:
                    e0:c8:e8:6c:56:d7:9a:41:4e:8e:7f:e9:a5:23:e3:
                    f2:46:04:73:1e:5e:fd:28:8d:41:6a:16:3a:8d:4c:
                    53:43:b6:e7:45:89:fa:e6:92:4d:9d:bd:7a:01:01:
                    33:c0:06:63:86:c7:81:2d:79:cc:44:74:26:0f:65:
                    55:1e:c6:ef:b1:c1:fa:99:b5:9f:8d:6d:5f:1e:63:
                    6d:94:d3:f7:7d:f6:d2:1e:4b:f7:9f:20:ba:22:f8:
                    e2:a0:01:b2:3d:0e:5c:b5:bb:8b:0a:54:99:85:12:
                    e9:91:37:fb:e4:38:f4:da:18:29:d2:4d:a4:fb:42:
                    f5:51:94:6c:1a:7d:25:4e:be:4d:3a:0e:2e:02:85:
                    5c:31:b1:51:b7:0d:99:e7:f6:ac:15:25:1e:5d:53:
                    ed:ab:4f:19:cb:af:21:d8:be:78:e6:4b:e0:dc:07:
                    ec:d6:a5:03:50:1e:33:be:14:fa:70:f0:e9:ff:bb:
                    e8:f9:f8:7c:56:23:86:c7:cc:fe:89:b7:88:82:d1:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:29:EA:C9:5B:DA:C9:50:04:0E:0A:DF:67:DF:B0:5C:36:3E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e5993e99-5976-314e-90f4-0dae1c793e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a5:b1:5f:5e:e4:4d:54:d9:c4:07:58:64:ff:15:fd:51:f1:
         ac:76:d6:9f:ad:bf:6d:c0:34:91:d4:bd:c0:f7:3d:67:c7:aa:
         4f:14:eb:4d:c2:d7:9c:47:21:2f:fd:76:8f:e4:5e:9d:3c:1a:
         8f:95:28:72:ca:5a:b6:e4:c7:a8:d3:54:3f:bc:fc:61:31:9c:
         e3:94:77:cc:4f:38:52:fc:d9:9b:9c:c5:01:d0:99:4e:cc:92:
         c3:c4:ac:87:3d:11:77:26:d0:1a:66:96:72:2b:fb:dc:2c:0a:
         25:90:d0:c2:47:74:1b:ee:7d:66:c3:d6:06:67:d5:dc:7c:78:
         93:68:4b:56:7f:7d:a9:8a:d7:fc:0d:30:aa:9d:46:b9:65:b3:
         b9:0f:96:ab:5e:89:db:6b:74:f2:96:e2:46:18:35:dd:b0:f9:
         1f:d8:b3:54:60:ed:ef:0d:00:67:4d:ac:70:1f:68:ce:f5:95:
         ce:c7:07:0c:b3:84:83:cd:74:1e:1d:f8:c4:61:fb:98:c7:ee:
         a0:6b:71:a6:3c:8a:6d:f5:18:f3:ee:53:ed:54:b2:ee:eb:1d:
         14:99:ea:43:da:da:6b:f5:d6:0d:0d:74:a8:87:35:0c:73:88:
         a4:31:6d:a4:01:2f:45:ba:96:bc:45:b2:f7:8e:4f:10:ca:7a:
         7f:ec:9a:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEexAV4tSadtD9vOW6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQxZmNhNzgtOWQ5OC00NTU5LWJkNTEtODBhNmM0N2Jh
MDFlMB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk
ZmViNDFhYzUtMzQzNS00YmQ5LWJlMTItNWNhZjhiODJkODVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD3dVlELmP5854CH6JLUfVTnidIGQfW2p2gU
c5ewnwaz42RsK2LFJgPKXQOR8gkNMf0QUkV0+BchlZLgyOhsVteaQU6Of+mlI+Py
RgRzHl79KI1BahY6jUxTQ7bnRYn65pJNnb16AQEzwAZjhseBLXnMRHQmD2VVHsbv
scH6mbWfjW1fHmNtlNP3ffbSHkv3nyC6IvjioAGyPQ5ctbuLClSZhRLpkTf75Dj0
2hgp0k2k+0L1UZRsGn0lTr5NOg4uAoVcMbFRtw2Z5/asFSUeXVPtq08Zy68h2L54
5kvg3Afs1qUDUB4zvhT6cPDp/7vo+fh8ViOGx8z+ibeIgtFWiQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCqjKerJW9rJUAQOCt9n37BcNj7iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFm
Y2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3YmEwMWUvZTU5OTNlOTktNTk3Ni0z
MTRlLTkwZjQtMGRhZTFjNzkzZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGQxZmNhNzgtOWQ5OC00NTU5LWJk
NTEtODBhNmM0N2JhMDFlLzBkMWZjYTc4LTlkOTgtNDU1OS1iZDUxLTgwYTZjNDdi
YTAxZS5jcmwwHwYDVR0jBBgwFoAUymGb6KykOgfQv2pfW6o/1CDpWtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2
YzQ3YmEwMWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoIEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXqWxX17kTVTZxAdYZP8V/VHxrHbWn62/bcA0kdS9wPc9Z8eqTxTrTcLX
nEchL/12j+RenTwaj5UocspatuTHqNNUP7z8YTGc45R3zE84UvzZm5zFAdCZTsyS
w8Sshz0RdybQGmaWciv73CwKJZDQwkd0G+59ZsPWBmfV3Hx4k2hLVn99qYrX/A0w
qp1GuWWzuQ+Wq16J22t08pbiRhg13bD5H9izVGDt7w0AZ02scB9ozvWVzscHDLOE
g810Hh34xGH7mMfuoGtxpjyKbfUY8+5T7VSy7usdFJnqQ9raa/XWDQ10qIc1DHOI
pDFtpAEvRbqWvEWy945PEMp6f+ya9w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:59 2024 by rpki-client on console-fra.rpki-client.org