Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/a02e9a9a-066f-3d2d-802b-f3ca17caeff6.roa
File:                     a02e9a9a-066f-3d2d-802b-f3ca17caeff6.roa (raw, json)
Hash identifier:          E3mtRPPzyv5tQToC8vnEGZLDrFSRE621OXELW8PO/RU=
Subject key identifier:   69:E3:B7:49:1E:F0:A3:49:C3:D2:8D:96:1A:9C:0F:04:09:AF:1D:40
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285847EBBF7622E4CCF98C287A7C80
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/a02e9a9a-066f-3d2d-802b-f3ca17caeff6.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     401307
IP address blocks:        136.228.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:76:22:e4:cc:f9:8c:28:7a:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=19a027b8-3ab3-4c5e-a0b7-b213224e1b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:b8:35:08:8f:1b:a5:51:69:7d:dd:b5:3d:
                    76:64:33:a9:f5:00:60:7e:3f:cc:cf:b8:80:0d:66:
                    b2:ef:8b:74:4b:62:cd:27:0a:00:f9:2e:70:2b:a6:
                    73:f4:2e:5e:8c:45:a2:c6:d8:8b:b3:55:64:b7:af:
                    b8:ad:d0:ce:fe:99:63:0f:8d:58:82:7f:aa:dc:e7:
                    c7:ff:a2:6a:c4:7c:73:97:32:19:76:a4:02:cd:c4:
                    cb:ae:5a:d2:c0:03:3a:38:c7:6f:ba:8b:3e:24:b3:
                    86:21:6d:78:03:2d:05:27:18:99:a3:d4:3c:a7:c5:
                    86:47:3a:c1:55:42:78:e8:fb:ab:b0:f2:45:48:7e:
                    38:c4:40:5b:da:f8:a7:c2:06:58:a7:24:2f:6c:7a:
                    e7:25:a0:d9:88:ec:3e:f1:83:d8:8f:fe:8e:ff:97:
                    c6:07:b3:03:a9:41:d3:0f:54:04:44:96:d2:5d:b0:
                    3b:1d:fc:d0:eb:19:cc:01:3f:e3:84:59:e7:f1:84:
                    a7:45:32:13:37:02:de:00:25:d1:0a:00:3c:f2:bb:
                    b3:40:64:ca:03:74:5b:24:37:78:38:bd:63:37:b2:
                    2a:ad:c0:fc:03:34:a7:b1:4a:99:fd:9e:06:e2:75:
                    ab:38:fe:c9:56:5e:34:f6:8e:7d:9e:45:2b:ba:b8:
                    ec:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E3:B7:49:1E:F0:A3:49:C3:D2:8D:96:1A:9C:0F:04:09:AF:1D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/a02e9a9a-066f-3d2d-802b-f3ca17caeff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:3b:80:e3:73:09:c8:02:72:35:6b:cd:5f:f0:33:63:28:
         4b:2d:68:a2:1d:b7:cd:e0:1f:8f:a4:7a:2e:61:e0:ac:e4:45:
         8f:d1:85:bf:5f:3a:5a:47:7c:80:9f:7a:64:44:c4:95:89:26:
         a3:37:9f:3a:36:3c:5f:25:0d:55:bd:75:65:9e:ba:84:67:c3:
         5d:3a:36:ce:c8:db:cf:ef:36:5e:dd:ea:38:a4:04:5d:f1:11:
         80:27:aa:62:bc:55:a9:c7:a1:b5:3b:4b:3c:c6:19:7e:26:d1:
         c2:79:a6:16:bd:b4:2c:69:02:12:73:c1:1c:7f:0e:a0:c9:4a:
         ab:20:ba:98:b0:c4:28:71:34:9d:27:18:1b:35:27:ff:4f:85:
         d5:a6:58:39:19:23:aa:7e:ba:36:4f:73:44:f1:7d:51:ff:6b:
         0e:fd:7f:96:cc:29:e5:63:14:d2:11:9a:80:ff:9a:81:13:2e:
         ad:c2:94:b0:73:f0:40:86:f5:02:c4:19:75:dc:5e:71:51:21:
         61:5e:6d:7b:33:f4:df:13:6b:6f:7f:49:f6:4d:1f:b0:bf:c4:
         d0:d1:ef:f9:ea:d4:c9:ec:bd:8b:7d:c7:29:d0:db:cd:ea:20:
         3c:fc:de:4e:d6:1c:24:70:b8:a4:50:ef:4d:56:37:fc:4b:e2:
         e7:f4:c5:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv3Yi5Mz5jCh6fIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl
NDIyMB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
MTlhMDI3YjgtM2FiMy00YzVlLWEwYjctYjIxMzIyNGUxYjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg24NQiPG6VRaX3dtT12ZDOp9QBgfj/Mz7iA
DWay74t0S2LNJwoA+S5wK6Zz9C5ejEWixtiLs1Vkt6+4rdDO/pljD41Ygn+q3OfH
/6JqxHxzlzIZdqQCzcTLrlrSwAM6OMdvuos+JLOGIW14Ay0FJxiZo9Q8p8WGRzrB
VUJ46PursPJFSH44xEBb2vinwgZYpyQvbHrnJaDZiOw+8YPYj/6O/5fGB7MDqUHT
D1QERJbSXbA7HfzQ6xnMAT/jhFnn8YSnRTITNwLeACXRCgA88ruzQGTKA3RbJDd4
OL1jN7IqrcD8AzSnsUqZ/Z4G4nWrOP7JVl409o59nkUrurjs/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnjt0ke8KNJw9KNlhqcDwQJrx1AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz
ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvYTAyZTlhOWEtMDY2Zi0z
ZDJkLTgwMmItZjNjYTE3Y2FlZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw
ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk
ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi
YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOQ5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5pO4DjcwnIAnI1a81f8DNjKEstaKIdt83gH4+kei5h4KzkRY/Rhb9f
OlpHfICfemRExJWJJqM3nzo2PF8lDVW9dWWeuoRnw106Ns7I28/vNl7d6jikBF3x
EYAnqmK8VanHobU7SzzGGX4m0cJ5pha9tCxpAhJzwRx/DqDJSqsgupiwxChxNJ0n
GBs1J/9PhdWmWDkZI6p+ujZPc0TxfVH/aw79f5bMKeVjFNIRmoD/moETLq3ClLBz
8ECG9QLEGXXcXnFRIWFebXsz9N8Ta29/SfZNH7C/xNDR7/nq1MnsvYt9xynQ283q
IDz83k7WHCRwuKRQ701WN/xL4uf0xcE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:03 2024 by rpki-client on console-ams.rpki-client.org