Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa
File:                     7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa (raw, json)
Hash identifier:          PiHNyxhvRCIfAfb0UXM2m8vi5oCdc6iC2/5Y6dpQBWU=
Subject key identifier:   0F:D9:2F:90:24:EB:BC:C3:0E:42:80:57:69:9E:BA:91:A9:F5:BF:2F
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F432858470C91CA7E6F5582D38FEA54C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa
Signing time:             Fri 30 Aug 2024 15:23:24 +0000
ROA not before:           Fri 30 Aug 2024 15:23:24 +0000
ROA not after:            Thu 28 Nov 2024 16:23:24 +0000
asID:                     7764
IP address blocks:        148.129.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0c:91:ca:7e:6f:55:82:d3:8f:ea:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Aug 30 15:23:24 2024 GMT
            Not After : Nov 28 16:23:24 2024 GMT
        Subject: CN=c66f406a-1422-419e-a428-77e3e235f0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:a7:7b:ec:09:f4:71:47:5d:d3:77:20:ac:
                    5c:1b:d6:18:a1:78:e6:93:74:a9:fc:e9:69:27:ef:
                    24:2f:f5:85:30:88:8c:10:d5:4a:68:d5:e6:5a:df:
                    80:b9:ce:40:d0:bc:0e:c5:7f:5b:8f:ea:31:02:1a:
                    d0:ae:13:e7:51:44:22:c1:23:cb:42:50:93:f6:f5:
                    3b:2d:05:c9:28:04:3f:5b:c6:6e:66:7c:e5:2b:ab:
                    6b:c2:53:b8:6e:42:53:2f:95:13:37:7a:04:db:51:
                    58:08:9f:d3:2e:17:0f:1b:59:7d:62:8e:1d:72:ec:
                    40:41:30:46:15:b0:b1:fa:5a:ba:cc:1d:fe:f1:53:
                    52:4d:e5:8d:11:15:45:1c:2d:a5:10:52:c3:ab:62:
                    b9:79:d2:b7:f5:e6:40:1a:30:3b:88:ba:0c:81:13:
                    da:b0:13:a3:6a:8d:f6:a1:38:3c:e9:8a:da:b4:d2:
                    14:16:4b:93:2b:c6:77:4e:be:4e:b5:4f:70:c7:7b:
                    da:25:16:74:e0:c4:c5:77:64:07:16:4c:ee:a6:67:
                    0c:57:bd:6a:6f:fc:ef:1e:08:30:1b:26:5d:62:88:
                    07:31:35:30:87:c8:ad:3b:1b:f7:0a:4b:96:a2:d1:
                    46:8f:cf:6c:7d:e9:b4:06:ca:45:10:34:ef:4b:ae:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D9:2F:90:24:EB:BC:C3:0E:42:80:57:69:9E:BA:91:A9:F5:BF:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7bad5279-3d80-339c-9b1a-d2ab4b9b2a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:c7:34:d1:c9:08:90:9e:7a:66:d8:7a:d6:d9:13:b0:58:
         f8:43:84:4b:32:ce:f8:75:c0:2d:f7:ca:6b:fd:c0:8b:b6:40:
         25:78:6c:87:30:53:a8:90:d7:83:b3:45:cb:94:9e:dd:56:0a:
         74:d3:9e:dc:93:68:b6:19:c2:a8:57:72:32:13:6b:ea:b4:33:
         cf:b0:2d:b2:56:4a:51:14:39:9e:de:7e:9c:63:61:5e:2b:c7:
         ce:b0:cd:d8:94:f4:d8:1d:e5:73:e2:ee:ae:41:be:60:d6:01:
         be:e6:ce:a6:33:08:f6:21:64:9a:46:05:b0:f0:ae:18:1a:a4:
         3d:06:7c:4d:00:0f:88:0e:3d:eb:e4:ca:d6:9a:fa:d0:53:1a:
         fa:f1:d5:85:ed:75:3c:46:53:68:79:56:86:54:88:e2:84:1f:
         31:5b:56:ab:61:a4:c5:65:7d:41:b7:8c:cd:d7:58:14:e8:85:
         f8:15:47:4d:94:3a:08:77:8a:25:74:9d:e1:c2:b9:9c:33:33:
         bc:df:29:9e:64:3d:4b:32:bc:d0:60:30:49:b9:7d:46:4c:dd:
         38:12:ce:92:93:a1:b8:ed:d1:c3:1c:17:ca:36:f8:ca:cb:29:
         8c:03:7b:5e:3c:ce:03:6f:66:61:62:33:dc:07:fa:a7:e2:b0:
         31:12:30:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcMkcp+b1WC04/qVMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI0MDgzMDE1MjMyNFoXDTI0MTEyODE2MjMyNFowLzEtMCsGA1UEAxMk
YzY2ZjQwNmEtMTQyMi00MTllLWE0MjgtNzdlM2UyMzVmMGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeCne+wJ9HFHXdN3IKxcG9YYoXjmk3Sp/Olp
J+8kL/WFMIiMENVKaNXmWt+Auc5A0LwOxX9bj+oxAhrQrhPnUUQiwSPLQlCT9vU7
LQXJKAQ/W8ZuZnzlK6trwlO4bkJTL5UTN3oE21FYCJ/TLhcPG1l9Yo4dcuxAQTBG
FbCx+lq6zB3+8VNSTeWNERVFHC2lEFLDq2K5edK39eZAGjA7iLoMgRPasBOjao32
oTg86YratNIUFkuTK8Z3Tr5OtU9wx3vaJRZ04MTFd2QHFkzupmcMV71qb/zvHggw
GyZdYogHMTUwh8itOxv3CkuWotFGj89sfem0BspFEDTvS64x/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/ZL5Ak67zDDkKAV2meupGp9b8vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvN2JhZDUyNzktM2Q4MC0z
MzljLTliMWEtZDJhYjRiOWIyYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlIGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGd/xzTRyQiQnnpm2HrW2ROwWPhDhEsyzvh1wC33ymv9wIu2QCV4bIcw
U6iQ14OzRcuUnt1WCnTTntyTaLYZwqhXcjITa+q0M8+wLbJWSlEUOZ7efpxjYV4r
x86wzdiU9Ngd5XPi7q5BvmDWAb7mzqYzCPYhZJpGBbDwrhgapD0GfE0AD4gOPevk
ytaa+tBTGvrx1YXtdTxGU2h5VoZUiOKEHzFbVqthpMVlfUG3jM3XWBTohfgVR02U
Ogh3iiV0neHCuZwzM7zfKZ5kPUsyvNBgMEm5fUZM3TgSzpKTobjt0cMcF8o2+MrL
KYwDe148zgNvZmFiM9wH+qfisDESMOs=
-----END CERTIFICATE-----
Generated at Tue Oct 22 20:13:52 2024 by rpki-client on console-fra.rpki-client.org