Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/f875a7fb-100b-3843-aae0-5bb415733a91.roa
File:                     f875a7fb-100b-3843-aae0-5bb415733a91.roa (raw, json)
Hash identifier:          KjyUICij0YLNwc9gSWe//KGntJJFwvIxXMoPS7k03pI=
Subject key identifier:   D9:BA:AA:20:12:4A:8B:C5:87:F4:44:04:C0:94:6E:C1:06:5F:90:D1
Certificate issuer:       /CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
Certificate serial:       010D0C9F43285847924BDA6EE42D9B04F711CD50
Authority key identifier: A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/f875a7fb-100b-3843-aae0-5bb415733a91.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        130.150.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:da:6e:e4:2d:9b:04:f7:11:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=3a6aacd4-f803-4919-956b-cf2b8956e4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:e7:dc:00:dc:1b:7a:20:8b:7d:60:e4:f6:
                    3c:e4:45:9f:6a:08:99:94:8b:c3:f5:d6:17:d0:67:
                    22:ce:a5:aa:41:e8:f7:04:e3:29:bc:78:15:67:50:
                    af:ad:5e:9b:a5:f5:db:ca:77:20:65:b4:e4:4e:fc:
                    5b:35:83:87:85:92:bf:98:cd:9d:e5:a8:3a:4e:6f:
                    ed:bd:1f:8a:5d:ee:5a:bb:e0:a8:1c:44:88:53:b7:
                    64:e1:85:e1:be:cf:93:18:5f:66:83:c2:66:1d:1b:
                    5a:26:cd:e8:16:60:f5:ba:cc:57:38:22:ee:bb:70:
                    1f:ff:9d:aa:b2:9d:72:c0:54:7a:7b:2f:1f:d2:bd:
                    f2:6e:50:0b:34:c8:67:95:73:c2:ea:0d:09:85:08:
                    25:b2:2d:a2:ca:a6:51:b8:f1:db:e5:73:3c:68:85:
                    77:1b:44:b3:6c:0b:4f:b5:b5:1b:b0:f9:86:71:52:
                    d5:59:87:d2:18:b0:6b:1d:c7:26:0c:03:c5:49:42:
                    40:67:e6:46:02:ef:d6:d0:7c:ab:b2:af:5a:df:46:
                    24:93:54:04:d3:09:c1:e3:a1:76:23:fc:21:86:10:
                    a9:ed:3d:d4:17:c0:ee:8d:aa:f6:7a:e9:3f:84:02:
                    18:1f:89:23:9b:2b:ec:86:bd:2d:12:5c:f2:07:08:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BA:AA:20:12:4A:8B:C5:87:F4:44:04:C0:94:6E:C1:06:5F:90:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/f875a7fb-100b-3843-aae0-5bb415733a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl

            X509v3 Authority Key Identifier:
                keyid:A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.150.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:b7:3a:d8:b0:d2:19:f8:5a:c5:8a:3b:3d:95:c5:00:81:
         df:ee:5a:eb:28:e0:9c:10:40:03:96:5b:df:1d:9b:be:5c:92:
         7b:24:46:ae:04:74:9c:20:ef:85:35:b5:90:44:ed:c3:78:3a:
         6a:d1:3f:82:7f:a0:3e:33:f0:e2:87:7f:43:aa:69:d5:b3:d4:
         08:6f:46:da:c4:20:86:1c:df:5b:cd:ab:83:82:71:46:5a:75:
         b4:b2:a8:4d:93:ef:45:4b:2c:ab:87:7f:91:b7:e5:7f:3f:dc:
         0c:1a:ed:9c:c2:91:9e:67:6d:3f:6f:31:f0:96:a1:25:de:d3:
         41:d0:1d:5c:ae:7f:cf:a7:fa:25:c7:9e:8e:3d:06:0e:fc:61:
         a7:6a:7c:61:61:19:6c:8a:18:82:ff:a4:cb:5f:b8:09:2b:fb:
         2e:89:0b:29:5c:9b:f3:26:90:66:ad:9b:1f:9c:61:13:8f:5b:
         48:fc:09:c3:fe:52:c4:c9:99:f9:93:64:09:e7:c1:86:55:24:
         63:1b:6f:f7:1c:bc:af:41:8d:28:f2:18:43:ce:9d:56:5b:60:
         96:0b:2f:72:d7:62:2b:ef:9b:0b:bc:ab:64:27:33:e0:be:cc:
         37:b9:f5:68:4a:e0:11:40:72:9e:17:d6:23:02:0e:8a:70:bf:
         14:48:be:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeSS9pu5C2bBPcRzVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA1MmMwZTctNzg4Yi00N2QxLTgxMjYtZWE5NGRhN2Nl
Y2E3MB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk
M2E2YWFjZDQtZjgwMy00OTE5LTk1NmItY2YyYjg5NTZlNGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Pn3ADcG3ogi31g5PY85EWfagiZlIvD9dYX
0GcizqWqQej3BOMpvHgVZ1CvrV6bpfXbyncgZbTkTvxbNYOHhZK/mM2d5ag6Tm/t
vR+KXe5au+CoHESIU7dk4YXhvs+TGF9mg8JmHRtaJs3oFmD1usxXOCLuu3Af/52q
sp1ywFR6ey8f0r3yblALNMhnlXPC6g0JhQglsi2iyqZRuPHb5XM8aIV3G0SzbAtP
tbUbsPmGcVLVWYfSGLBrHccmDAPFSUJAZ+ZGAu/W0Hyrsq9a30Ykk1QE0wnB46F2
I/whhhCp7T3UF8Dujar2euk/hAIYH4kjmyvshr0tElzyBwi3/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNm6qiASSovFh/REBMCUbsEGX5DRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDUy
YzBlNy03ODhiLTQ3ZDEtODEyNi1lYTk0ZGE3Y2VjYTcvZjg3NWE3ZmItMTAwYi0z
ODQzLWFhZTAtNWJiNDE1NzMzYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjA1MmMwZTctNzg4Yi00N2QxLTgx
MjYtZWE5NGRhN2NlY2E3L2IwNTJjMGU3LTc4OGItNDdkMS04MTI2LWVhOTRkYTdj
ZWNhNy5jcmwwHwYDVR0jBBgwFoAUosqAfE6Xb/GfDvpg8GCWT6WL+icwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDUyYzBlNy03ODhiLTQ3ZDEtODEyNi1lYTk0
ZGE3Y2VjYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgpZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/PtzrYsNIZ+FrFijs9lcUAgd/uWuso4JwQQAOWW98dm75cknskRq4E
dJwg74U1tZBE7cN4OmrRP4J/oD4z8OKHf0OqadWz1AhvRtrEIIYc31vNq4OCcUZa
dbSyqE2T70VLLKuHf5G35X8/3Awa7ZzCkZ5nbT9vMfCWoSXe00HQHVyuf8+n+iXH
no49Bg78YadqfGFhGWyKGIL/pMtfuAkr+y6JCylcm/MmkGatmx+cYROPW0j8CcP+
UsTJmfmTZAnnwYZVJGMbb/ccvK9BjSjyGEPOnVZbYJYLL3LXYivvmwu8q2QnM+C+
zDe59WhK4BFAcp4X1iMCDopwvxRIvrw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:57 2024 by rpki-client on console-ams.rpki-client.org