Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa
File:                     34356240-b9ca-32e3-ba11-33750e597e1e.roa (raw, json)
Hash identifier:          b0QirFvhaelN87FV+/tkvYcryACC+dFg65bSzrM9QEM=
Subject key identifier:   0D:14:02:60:D7:12:F4:25:33:98:19:23:05:5B:91:A7:58:C4:CA:2B
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285847ED24E0AC2330432AF3CF5000
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     7764
IP address blocks:        148.129.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:e0:ac:23:30:43:2a:f3:cf:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=c8a84791-7ec4-453d-ab6e-b3d79a46842a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:ef:8a:94:f7:63:9e:ea:83:15:ea:ed:c2:
                    9f:42:b7:77:16:c1:d8:f2:06:d3:e4:d2:02:40:bf:
                    c0:66:6f:79:1d:ea:4e:ad:2a:bf:f5:4a:9a:4b:dc:
                    eb:d9:52:3e:1c:35:54:4b:f8:d4:5b:e9:6b:11:fa:
                    87:e5:0d:45:0d:07:65:8f:8f:1f:c3:61:00:41:79:
                    ef:82:78:b7:f7:ab:72:68:c6:95:ad:59:da:0c:d4:
                    44:62:63:ae:bf:9b:0a:0e:44:4b:67:2d:44:8f:aa:
                    8f:2f:96:f3:3a:7c:d4:5f:42:2e:4b:43:33:97:ee:
                    67:cf:89:5e:1d:cf:22:41:44:be:98:bf:bb:60:c1:
                    5b:94:fe:b1:cf:df:4f:0b:09:b2:8c:63:a4:31:50:
                    bc:f9:f2:98:88:a6:80:e2:ec:1e:6d:68:a9:7b:09:
                    c9:fc:ef:4e:a5:51:2f:3e:f3:56:01:28:8a:43:5d:
                    c6:dd:d0:15:d0:c6:61:b6:9a:ea:a7:66:ce:34:b4:
                    3c:27:65:78:92:90:9b:31:7a:37:1a:e1:84:fc:60:
                    45:c6:30:bd:0c:29:d2:87:30:bf:91:17:6b:84:cc:
                    77:55:00:a9:d4:c1:5d:cd:11:25:be:8d:83:5b:de:
                    02:0b:c3:b4:ac:fb:ba:6e:01:ae:4e:f8:bf:e5:af:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:02:60:D7:12:F4:25:33:98:19:23:05:5B:91:A7:58:C4:CA:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:04:46:76:3e:6a:2c:32:09:66:d8:52:f4:ab:10:ee:74:7e:
         f7:ac:fa:46:4a:98:47:58:ba:b2:ef:15:fe:bf:47:c1:aa:bb:
         18:1a:03:f7:a4:78:a7:6e:08:3b:25:bb:c8:64:0b:00:a3:a4:
         00:95:c9:88:f8:a1:9e:cc:b1:48:b7:e2:07:0e:aa:6b:b4:23:
         04:e9:87:01:cf:9b:ea:cf:93:9d:fa:5e:8a:95:bb:55:5e:04:
         46:c3:ee:af:95:b2:3c:81:35:85:de:1a:27:10:91:91:5a:99:
         aa:d0:2c:14:13:49:e5:09:5a:fd:ef:c8:22:fe:a3:3d:03:7c:
         fc:9e:3a:59:0b:bf:ec:8e:c0:8a:8f:e7:ff:d2:cb:7b:34:c3:
         5a:e9:19:76:3e:20:98:39:67:63:2f:cf:c7:eb:b6:5f:1b:da:
         34:05:e3:ef:d9:50:75:e9:98:9b:44:ad:0a:95:f4:02:6a:37:
         86:ed:9f:29:07:2e:d5:af:21:81:17:34:71:d3:39:6d:db:16:
         7f:9c:2e:4e:a2:85:9b:95:fc:30:10:f2:3a:dc:af:bd:1a:c4:
         fd:ec:1c:9e:1e:08:a1:5a:fb:f6:2b:e0:74:4b:10:cf:32:6f:
         9c:26:d5:ca:83:e0:81:22:bf:51:7d:71:de:7b:14:f2:f0:af:
         02:3f:27:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJOCsIzBDKvPPUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
YzhhODQ3OTEtN2VjNC00NTNkLWFiNmUtYjNkNzlhNDY4NDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr3vipT3Y57qgxXq7cKfQrd3FsHY8gbT5NIC
QL/AZm95HepOrSq/9UqaS9zr2VI+HDVUS/jUW+lrEfqH5Q1FDQdlj48fw2EAQXnv
gni396tyaMaVrVnaDNREYmOuv5sKDkRLZy1Ej6qPL5bzOnzUX0IuS0Mzl+5nz4le
Hc8iQUS+mL+7YMFblP6xz99PCwmyjGOkMVC8+fKYiKaA4uwebWipewnJ/O9OpVEv
PvNWASiKQ13G3dAV0MZhtprqp2bONLQ8J2V4kpCbMXo3GuGE/GBFxjC9DCnShzC/
kRdrhMx3VQCp1MFdzRElvo2DW94CC8O0rPu6bgGuTvi/5a8lUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0UAmDXEvQlM5gZIwVbkadYxMorMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvMzQzNTYyNDAtYjljYS0z
MmUzLWJhMTEtMzM3NTBlNTk3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlIFAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcERnY+aiwyCWbYUvSrEO50fves+kZKmEdYurLvFf6/R8GquxgaA/ek
eKduCDslu8hkCwCjpACVyYj4oZ7MsUi34gcOqmu0IwTphwHPm+rPk536XoqVu1Ve
BEbD7q+VsjyBNYXeGicQkZFamarQLBQTSeUJWv3vyCL+oz0DfPyeOlkLv+yOwIqP
5//Sy3s0w1rpGXY+IJg5Z2Mvz8frtl8b2jQF4+/ZUHXpmJtErQqV9AJqN4btnykH
LtWvIYEXNHHTOW3bFn+cLk6ihZuV/DAQ8jrcr70axP3sHJ4eCKFa+/Yr4HRLEM8y
b5wm1cqD4IEiv1F9cd57FPLwrwI/J5Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:57 2024 by rpki-client on console-ams.rpki-client.org