Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa
File:                     3507b290-125c-3f58-85ba-ed6602ee5ef5.roa (raw, json)
Hash identifier:          ut/7l0R5tZoB1UDug9Q2cnlsWWjOTacX4rxol5c3X6k=
Subject key identifier:   9F:6E:89:AE:4C:B8:3A:4F:89:4C:D9:5B:F9:F5:7C:44:C3:6B:35:C3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DC246F080322C12D27ADD
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.242.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:c2:46:f0:80:32:2c:12:d2:7a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=6f00ec0f-c3d8-4185-8c69-a4414f4b9c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e0:78:ab:e9:fa:c1:4d:9c:16:e4:8d:f8:f5:
                    f9:dd:79:2b:e8:70:88:b6:cc:d8:90:a4:07:73:ed:
                    80:dd:ab:fe:91:dd:2e:05:b3:73:c2:1d:d6:96:1d:
                    20:34:0a:b9:d9:51:b2:e3:ca:c5:b0:3c:cc:fa:c9:
                    d9:37:43:ee:ab:7a:5e:58:86:4a:a2:3f:5a:17:5c:
                    6b:70:ab:6b:43:a5:bc:75:d5:49:f3:66:1a:49:5a:
                    97:6a:b3:86:be:c9:be:90:6b:42:59:a4:dd:df:09:
                    00:9a:0f:2c:47:28:0b:14:4a:e0:00:c7:0a:cd:2f:
                    be:0a:29:0d:b4:e2:10:e8:33:ab:26:17:7e:31:70:
                    1d:5e:1c:78:08:57:95:55:64:23:69:a7:1b:d4:94:
                    23:10:a6:39:d5:89:1e:fb:63:f7:96:d9:c9:7a:1e:
                    04:fe:ab:0f:ee:21:9f:8d:00:b8:fa:4b:64:82:67:
                    f2:f5:28:d0:4d:bc:85:d3:be:b8:cb:9a:fe:5a:aa:
                    a5:20:48:ed:d7:08:40:fd:a6:e0:47:87:0d:09:b2:
                    5a:6f:08:48:dd:af:5c:68:3d:d1:18:3a:fb:46:8e:
                    14:2e:d8:c8:0f:a4:89:eb:63:5f:7d:5f:45:48:7d:
                    c0:f4:38:a1:a3:69:1d:0c:f4:0c:a3:d3:f5:fa:3b:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6E:89:AE:4C:B8:3A:4F:89:4C:D9:5B:F9:F5:7C:44:C3:6B:35:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:8f:25:a6:07:f7:97:ee:f5:f3:01:aa:ce:b6:f2:b7:66:
         32:81:cb:19:41:72:8b:c6:92:c4:d0:91:c2:de:45:89:35:e3:
         9a:20:ca:76:2d:b1:b7:c6:c8:9b:39:44:2f:9c:57:d4:61:dc:
         df:be:5f:66:af:32:36:81:30:77:97:a9:29:d8:ff:69:e7:58:
         f8:2a:0f:aa:00:79:13:03:2f:7c:f4:4e:ed:c3:6e:e5:26:81:
         32:ca:ec:76:06:5f:ca:40:07:b9:dc:4c:6c:54:6c:e3:f5:6f:
         58:d7:1a:cb:2c:e2:5b:59:c8:ad:5d:b3:bb:0f:b1:59:9b:6c:
         b6:20:af:ea:cf:df:5d:ce:32:f6:e4:02:be:8b:77:25:9e:85:
         09:9f:7a:a8:8a:a2:b0:1f:27:79:a7:bd:92:0b:6f:bb:1f:5b:
         c8:f4:9d:94:99:89:19:ba:e7:f6:83:06:0f:14:b3:c2:c9:1c:
         d3:7e:3b:14:b7:49:ef:7f:75:be:7a:c2:3c:2e:88:60:6c:bf:
         b8:a8:32:a6:a7:16:ba:6b:07:7d:6a:22:db:e9:46:91:e3:a8:
         fb:69:0a:d0:9d:39:0d:01:b7:c0:d6:f3:83:1d:6d:ff:e0:97:
         92:23:f3:dd:1f:fe:c5:81:d3:ee:20:6b:e7:1d:5b:c1:fc:71:
         ce:df:70:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcJG8IAyLBLSet0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
NmYwMGVjMGYtYzNkOC00MTg1LThjNjktYTQ0MTRmNGI5YzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOB4q+n6wU2cFuSN+PX53Xkr6HCItszYkKQH
c+2A3av+kd0uBbNzwh3Wlh0gNAq52VGy48rFsDzM+snZN0Puq3peWIZKoj9aF1xr
cKtrQ6W8ddVJ82YaSVqXarOGvsm+kGtCWaTd3wkAmg8sRygLFErgAMcKzS++CikN
tOIQ6DOrJhd+MXAdXhx4CFeVVWQjaacb1JQjEKY51Yke+2P3ltnJeh4E/qsP7iGf
jQC4+ktkgmfy9SjQTbyF0764y5r+WqqlIEjt1whA/abgR4cNCbJabwhI3a9caD3R
GDr7Ro4ULtjID6SJ62NffV9FSH3A9Diho2kdDPQMo9P1+jsrIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9uia5MuDpPiUzZW/n1fETDazXDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzUwN2IyOTAtMTI1Yy0z
ZjU4LTg1YmEtZWQ2NjAyZWU1ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEk/jyWmB/eX7vXzAarOtvK3ZjKByxlBcovGksTQkcLeRYk145ogynYt
sbfGyJs5RC+cV9Rh3N++X2avMjaBMHeXqSnY/2nnWPgqD6oAeRMDL3z0Tu3DbuUm
gTLK7HYGX8pAB7ncTGxUbOP1b1jXGsss4ltZyK1ds7sPsVmbbLYgr+rP313OMvbk
Ar6LdyWehQmfeqiKorAfJ3mnvZILb7sfW8j0nZSZiRm65/aDBg8Us8LJHNN+OxS3
Se9/db56wjwuiGBsv7ioMqanFrprB31qItvpRpHjqPtpCtCdOQ0Bt8DW84Mdbf/g
l5Ij890f/sWB0+4ga+cdW8H8cc7fcAg=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:34 2024 by rpki-client on console-ams.rpki-client.org