Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/d2e3c3a5-c544-3a1e-a38f-0cf31ddbcd0a.roa
File:                     d2e3c3a5-c544-3a1e-a38f-0cf31ddbcd0a.roa (raw, json)
Hash identifier:          dAEbblPfS0jsFoIRTbVTzB7oXxHprMWQR0GzBt5TT+4=
Subject key identifier:   EE:CC:20:06:19:19:59:A8:36:04:28:F8:B1:51:0A:3C:13:31:E2:33
Certificate issuer:       /CN=0d34fcf6-8f83-4016-b141-8b01958e1eaf
Certificate serial:       010D0C9F432858456128668C9F13ED3D45423D00
Authority key identifier: BC:35:CC:64:3E:7E:99:2E:54:63:0B:EB:6E:6E:C9:D7:35:61:8B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/d2e3c3a5-c544-3a1e-a38f-0cf31ddbcd0a.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     393960
IP address blocks:        139.60.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:66:8c:9f:13:ed:3d:45:42:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d34fcf6-8f83-4016-b141-8b01958e1eaf
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=51842479-ce1f-45ff-ab3c-604557ca878e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:26:14:e6:e1:14:14:04:94:cd:4a:79:54:
                    03:cd:f5:39:62:f2:0c:6f:39:4e:ae:e5:c1:3e:65:
                    92:7f:25:e7:2c:e2:3a:0f:be:1c:db:b3:f7:ae:db:
                    47:9b:cc:1f:c0:35:3c:82:68:d3:ec:a5:f9:59:ba:
                    d0:74:14:26:e9:43:9c:5c:d6:97:66:1c:63:d8:c7:
                    b0:0b:02:21:3c:7a:8a:33:76:03:92:13:be:45:ef:
                    d9:3f:b9:f5:6e:a7:32:43:60:da:21:5b:45:26:9e:
                    64:1d:24:3f:fd:2a:1e:42:df:ed:1f:9e:1e:93:b6:
                    77:03:78:d9:6d:f0:2f:7f:63:03:12:c4:69:15:2a:
                    b0:04:f4:0c:78:ee:ec:90:61:24:0f:49:5e:ad:f4:
                    da:8a:47:7d:11:95:c8:85:73:25:b0:8a:9d:12:59:
                    7a:04:3f:c5:6f:ba:d4:e4:1b:32:d2:87:fe:dc:de:
                    19:05:bf:e0:7b:74:e7:63:0d:2d:77:c2:88:89:1b:
                    70:7a:23:17:09:21:c9:01:27:f4:6e:6b:7f:7f:ca:
                    3f:d9:23:40:d1:ba:06:7e:5d:4d:09:8f:8f:69:b3:
                    43:dc:b2:69:01:15:af:ef:ea:aa:cf:de:06:3b:e9:
                    0a:ae:42:12:59:de:f4:b6:83:c7:0e:52:88:66:79:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CC:20:06:19:19:59:A8:36:04:28:F8:B1:51:0A:3C:13:31:E2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/d2e3c3a5-c544-3a1e-a38f-0cf31ddbcd0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf/0d34fcf6-8f83-4016-b141-8b01958e1eaf.crl

            X509v3 Authority Key Identifier:
                keyid:BC:35:CC:64:3E:7E:99:2E:54:63:0B:EB:6E:6E:C9:D7:35:61:8B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d34fcf6-8f83-4016-b141-8b01958e1eaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:e4:16:9b:8b:f9:d1:51:50:01:3b:c3:a8:61:23:79:b5:
         bd:bb:38:59:4e:55:7f:37:2a:cb:8d:09:71:90:75:cf:5b:ca:
         4f:b6:e3:1a:55:9a:51:63:c6:ec:c6:2f:12:2f:8c:c3:6c:64:
         b5:c7:5e:35:de:87:26:f8:ae:a5:cc:80:f6:96:c8:a5:17:a1:
         4c:10:49:ed:58:f9:c4:8f:34:e5:31:a4:fc:2b:26:44:a2:7a:
         82:6e:fb:63:43:40:1c:ea:c1:e4:8f:31:8d:d5:d0:de:47:7d:
         cd:48:ea:08:b8:e7:3b:b4:fb:21:a7:07:82:51:0d:d2:08:26:
         a3:b1:86:c3:0c:d2:4e:49:f7:eb:5f:9a:6d:d1:c2:f3:d5:c7:
         87:d4:ad:12:e8:b6:c7:ef:30:a8:09:0e:32:a5:5b:d7:49:e5:
         13:e4:8e:33:76:70:5d:8b:b6:86:77:e1:23:0a:92:57:6a:3f:
         7d:f5:b0:0f:fc:ae:e3:38:a7:16:30:56:05:a6:66:1b:46:52:
         fa:5d:81:71:9c:90:d4:68:af:8c:4f:42:fe:08:49:b0:c5:d4:
         24:18:f4:07:fd:fd:f1:f9:33:b8:5e:66:a1:8f:8d:6f:37:4f:
         1a:2d:e2:97:cf:27:c1:06:c7:c7:05:4b:3e:5d:66:30:35:5d:
         0f:e9:5d:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVhKGaMnxPtPUVCPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQzNGZjZjYtOGY4My00MDE2LWIxNDEtOGIwMTk1OGUx
ZWFmMB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk
NTE4NDI0NzktY2UxZi00NWZmLWFiM2MtNjA0NTU3Y2E4NzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXwmFObhFBQElM1KeVQDzfU5YvIMbzlOruXB
PmWSfyXnLOI6D74c27P3rttHm8wfwDU8gmjT7KX5WbrQdBQm6UOcXNaXZhxj2Mew
CwIhPHqKM3YDkhO+Re/ZP7n1bqcyQ2DaIVtFJp5kHSQ//SoeQt/tH54ek7Z3A3jZ
bfAvf2MDEsRpFSqwBPQMeO7skGEkD0lerfTaikd9EZXIhXMlsIqdEll6BD/Fb7rU
5Bsy0of+3N4ZBb/ge3TnYw0td8KIiRtweiMXCSHJASf0bmt/f8o/2SNA0boGfl1N
CY+PabND3LJpARWv7+qqz94GO+kKrkISWd70toPHDlKIZnkGCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7MIAYZGVmoNgQo+LFRCjwTMeIzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZDM0
ZmNmNi04ZjgzLTQwMTYtYjE0MS04YjAxOTU4ZTFlYWYvZDJlM2MzYTUtYzU0NC0z
YTFlLWEzOGYtMGNmMzFkZGJjZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGQzNGZjZjYtOGY4My00MDE2LWIx
NDEtOGIwMTk1OGUxZWFmLzBkMzRmY2Y2LThmODMtNDAxNi1iMTQxLThiMDE5NThl
MWVhZi5jcmwwHwYDVR0jBBgwFoAUvDXMZD5+mS5UYwvrbm7J1zVhi/8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZDM0ZmNmNi04ZjgzLTQwMTYtYjE0MS04YjAx
OTU4ZTFlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizzsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9G5Babi/nRUVABO8OoYSN5tb27OFlOVX83KsuNCXGQdc9byk+24xpV
mlFjxuzGLxIvjMNsZLXHXjXehyb4rqXMgPaWyKUXoUwQSe1Y+cSPNOUxpPwrJkSi
eoJu+2NDQBzqweSPMY3V0N5Hfc1I6gi45zu0+yGnB4JRDdIIJqOxhsMM0k5J9+tf
mm3RwvPVx4fUrRLotsfvMKgJDjKlW9dJ5RPkjjN2cF2LtoZ34SMKkldqP331sA/8
ruM4pxYwVgWmZhtGUvpdgXGckNRor4xPQv4ISbDF1CQY9Af9/fH5M7heZqGPjW83
Txot4pfPJ8EGx8cFSz5dZjA1XQ/pXXU=
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:41:29 2024 by rpki-client on console-ams.rpki-client.org