Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/7358a87f-a0c3-3ff2-8392-3f3d2ecd62cf.roa
File:                     7358a87f-a0c3-3ff2-8392-3f3d2ecd62cf.roa (raw, json)
Hash identifier:          OHQEo82DXDknGQFCc7JUM5r1DIAd1b0i9xlltV/5l3A=
Subject key identifier:   49:11:9B:73:13:78:48:89:A0:89:56:51:45:EE:55:4F:A1:7A:CC:F1
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F43285847A041498187C3E9B26B73DF82
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/7358a87f-a0c3-3ff2-8392-3f3d2ecd62cf.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     395201
IP address blocks:        134.65.192.0/22 maxlen: 22
                          164.152.160.0/22 maxlen: 22
                          169.155.44.0/22 maxlen: 22
                          169.155.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:49:81:87:c3:e9:b2:6b:73:df:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=c4a144e0-d3e4-44d9-95c2-af7c9fc3cce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:42:56:d6:7c:3b:71:78:2e:c6:95:3c:38:
                    b6:dc:ff:07:61:28:03:61:5c:40:5a:13:f9:14:1e:
                    ab:95:b5:1e:c2:87:f7:8b:21:da:d8:07:f8:1e:2d:
                    56:a9:ca:32:d5:b9:1f:4b:e2:53:9c:ac:ef:25:30:
                    3f:df:ed:cf:60:3d:78:f9:db:67:5f:a5:dd:ff:db:
                    84:3e:32:09:ab:e7:f6:3a:19:aa:34:10:6f:9f:db:
                    82:cf:60:59:23:bd:ac:b0:80:75:2f:de:ae:c1:5a:
                    05:76:dc:da:1c:44:f1:b3:aa:97:8e:a7:8f:66:b1:
                    a6:10:70:e6:5a:a3:d9:52:bb:26:1c:e3:06:e8:b2:
                    88:24:b8:36:ba:8f:8f:09:81:b6:57:26:50:ba:46:
                    0b:87:6d:b7:d9:c0:87:a8:de:1d:43:df:ea:d0:61:
                    78:0d:90:90:f6:68:05:ef:54:52:63:99:13:ab:a5:
                    79:4f:70:2c:44:bc:5c:b0:c5:9e:88:b5:0f:95:53:
                    f5:d9:19:9a:f4:73:07:d1:da:fb:b8:70:f7:37:f5:
                    7b:62:9b:ba:11:b3:cf:c1:98:b5:6b:46:d2:e5:8d:
                    76:a8:ad:9a:fe:47:9f:54:0c:de:bd:39:65:02:1e:
                    14:98:37:03:ed:5e:64:6c:ef:72:8a:8d:9f:0e:22:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:9B:73:13:78:48:89:A0:89:56:51:45:EE:55:4F:A1:7A:CC:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/7358a87f-a0c3-3ff2-8392-3f3d2ecd62cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/22
                  164.152.160.0/22
                  169.155.44.0/22
                  169.155.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4f:73:fa:fd:12:df:3e:f9:b2:77:7a:00:07:fc:ed:ea:80:
         5b:5c:49:31:94:7f:1d:79:3f:90:42:ce:e2:4f:d1:ff:46:6e:
         1c:f3:90:6f:c1:56:ae:c5:0d:c6:6c:e1:fd:d1:19:ae:c5:87:
         51:0d:9b:8e:8e:86:94:7a:ea:61:02:9f:22:33:a8:9a:0c:23:
         c9:f0:91:f1:4b:db:46:00:c9:9e:9a:66:2e:84:98:17:0e:4a:
         87:10:67:99:4a:b0:ae:fe:e4:bb:e3:65:60:47:15:a1:30:71:
         25:07:fa:e1:4f:6d:20:1b:f3:7b:b2:2c:e0:ef:9b:ed:5e:fe:
         90:f1:8e:29:dd:90:39:77:e3:0c:64:a6:0f:b1:18:91:ca:15:
         dc:bd:36:cd:53:09:ee:2a:b8:7e:fc:0d:4f:c5:f4:75:48:eb:
         6f:a7:28:7b:0c:07:fd:2e:1b:61:11:92:e7:e4:c1:64:eb:0a:
         df:67:e0:09:38:d5:35:7c:2d:a2:d3:9b:62:be:c1:b2:3e:60:
         1f:00:70:4e:da:54:36:be:d7:7a:c0:b7:63:c5:a4:70:f5:e6:
         8c:81:fc:ef:00:1b:99:f8:01:bf:40:30:3a:f8:64:d1:82:bd:
         07:04:e7:95:09:4a:1f:ef:48:61:b1:c3:e1:48:b9:38:01:44:
         a6:c4:cf:bf
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEegQUmBh8Ppsmtz34IwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl
ZGRiMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk
YzRhMTQ0ZTAtZDNlNC00NGQ5LTk1YzItYWY3YzlmYzNjY2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRBCVtZ8O3F4LsaVPDi23P8HYSgDYVxAWhP5
FB6rlbUewof3iyHa2Af4Hi1Wqcoy1bkfS+JTnKzvJTA/3+3PYD14+dtnX6Xd/9uE
PjIJq+f2OhmqNBBvn9uCz2BZI72ssIB1L96uwVoFdtzaHETxs6qXjqePZrGmEHDm
WqPZUrsmHOMG6LKIJLg2uo+PCYG2VyZQukYLh2232cCHqN4dQ9/q0GF4DZCQ9mgF
71RSY5kTq6V5T3AsRLxcsMWeiLUPlVP12Rma9HMH0dr7uHD3N/V7Ypu6EbPPwZi1
a0bS5Y12qK2a/kefVAzevTllAh4UmDcD7V5kbO9yio2fDiJFWQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFEkRm3MTeEiJoIlWUUXuVU+heszxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj
ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvNzM1OGE4N2YtYTBjMy0z
ZmYyLTgzOTItM2YzZDJlY2Q2MmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl
MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw
ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm
MGRjMGVkZGIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQChkHAAwQC
pJigAwQCqZssAwQCqZuoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACJPc/r9Et8++bJ3egAH/O3qgFtcSTGU
fx15P5BCzuJP0f9GbhzzkG/BVq7FDcZs4f3RGa7Fh1ENm46OhpR66mECnyIzqJoM
I8nwkfFL20YAyZ6aZi6EmBcOSocQZ5lKsK7+5LvjZWBHFaEwcSUH+uFPbSAb83uy
LODvm+1e/pDxjindkDl34wxkpg+xGJHKFdy9Ns1TCe4quH78DU/F9HVI62+nKHsM
B/0uG2ERkufkwWTrCt9n4Ak41TV8LaLTm2K+wbI+YB8AcE7aVDa+13rAt2PFpHD1
5oyB/O8AG5n4Ab9AMDr4ZNGCvQcE55UJSh/vSGGxw+FIuTgBRKbEz78=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org