Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/6e05b890-709e-3fe9-98e6-fa63c956303b.roa
File:                     6e05b890-709e-3fe9-98e6-fa63c956303b.roa (raw, json)
Hash identifier:          Tx+8lNnXptLA089Kuz9eJ5bfi8QjBsXleR8O6NbDNQw=
Subject key identifier:   83:85:06:CD:9F:8A:EA:DF:3A:05:69:55:7F:3D:10:34:B8:78:C6:AB
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584589A31FE72347A3F24DA69B00
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/6e05b890-709e-3fe9-98e6-fa63c956303b.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     14340
IP address blocks:        13.108.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:1f:e7:23:47:a3:f2:4d:a6:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=cfe259ce-76d1-4eb0-9d62-1d3f84fdf7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:18:21:d7:1c:a3:76:82:39:c9:9b:26:86:
                    3d:52:16:84:07:95:a1:e3:12:3f:97:25:7f:7d:fe:
                    cc:a8:f4:dc:da:f3:dc:f1:61:8e:2a:85:7c:8a:57:
                    e9:8c:10:eb:e3:49:75:65:12:98:3f:ea:e0:c1:05:
                    42:c0:38:b0:cd:60:d1:7c:43:45:84:48:4b:76:06:
                    19:7c:57:dd:82:22:36:9d:ad:77:57:37:83:ba:f7:
                    68:f7:b6:93:04:00:09:a3:15:fd:69:4e:4e:f1:54:
                    f3:fb:36:ec:58:66:0f:0b:4a:5c:4b:d3:e3:dd:7c:
                    d9:50:26:db:ee:30:37:9d:96:8d:8a:e1:20:23:09:
                    c2:f5:37:f9:57:15:35:ac:bd:10:e7:ad:05:fa:53:
                    7b:e0:9b:3c:65:63:4f:ec:0f:92:a2:2a:53:e2:35:
                    2f:bf:d9:a1:58:c6:88:10:a1:bc:3e:67:55:dd:a4:
                    46:8e:9e:8f:f8:01:3f:89:c1:80:ba:44:26:bf:6f:
                    1e:2c:2e:56:4b:54:4d:b8:14:00:98:db:aa:a6:7b:
                    1e:e0:50:fc:0f:31:32:db:8c:e3:31:f5:b2:16:35:
                    a9:c4:4b:d5:6e:27:c1:7a:c0:94:df:23:37:de:91:
                    c5:a7:58:3f:c5:6c:b6:49:6a:de:20:af:85:2f:28:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:85:06:CD:9F:8A:EA:DF:3A:05:69:55:7F:3D:10:34:B8:78:C6:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/6e05b890-709e-3fe9-98e6-fa63c956303b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.108.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:41:04:d5:76:2b:c9:77:64:c6:97:6e:9b:1c:83:31:6c:54:
         28:97:a2:8f:52:1e:62:ed:cf:7c:af:28:3d:28:10:3a:dc:60:
         f2:c6:d7:40:62:3d:ad:0d:42:ea:f4:44:c1:0b:9c:a1:40:23:
         01:75:90:c6:41:68:c4:cb:fc:9e:8d:a1:d3:f0:5b:c4:07:7a:
         ce:40:88:10:77:ad:e1:05:2e:ec:56:7c:57:0d:d6:8a:ed:87:
         13:58:ba:d0:53:1f:63:c7:c0:2a:e5:cd:4e:80:88:c7:36:bc:
         0a:28:0d:af:dc:05:60:da:8c:fb:21:a5:02:89:ab:d2:5c:19:
         9f:41:cf:d4:12:93:30:43:a1:55:ed:6d:50:af:d7:23:55:4d:
         64:75:e6:79:28:b7:04:f4:7b:82:fb:c5:84:53:87:05:0a:1a:
         cd:49:31:64:24:b3:94:e7:d4:c9:0a:96:25:ad:f0:c9:d0:16:
         dc:19:ab:80:5e:95:c7:28:fc:8c:56:18:19:dd:08:74:fb:d7:
         22:6e:dc:fd:93:fa:98:ea:95:0e:d6:9d:f9:66:fa:b1:cc:b4:
         7c:50:1e:19:5e:8b:62:e0:0b:35:93:e4:af:c7:c4:09:e9:bc:
         3c:37:2d:8d:ef:5c:99:c2:14:06:af:f1:68:49:3d:0e:c4:59:
         93:56:0a:7b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEWJox/nI0ej8k2mmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI0MDQxNDAxMDAyNFoXDTI0MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk
Y2ZlMjU5Y2UtNzZkMS00ZWIwLTlkNjItMWQzZjg0ZmRmN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogwYIdcco3aCOcmbJoY9UhaEB5Wh4xI/lyV/
ff7MqPTc2vPc8WGOKoV8ilfpjBDr40l1ZRKYP+rgwQVCwDiwzWDRfENFhEhLdgYZ
fFfdgiI2na13VzeDuvdo97aTBAAJoxX9aU5O8VTz+zbsWGYPC0pcS9Pj3XzZUCbb
7jA3nZaNiuEgIwnC9Tf5VxU1rL0Q560F+lN74Js8ZWNP7A+SoipT4jUvv9mhWMaI
EKG8PmdV3aRGjp6P+AE/icGAukQmv28eLC5WS1RNuBQAmNuqpnse4FD8DzEy24zj
MfWyFjWpxEvVbifBesCU3yM33pHFp1g/xWy2SWreIK+FLygW0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIOFBs2fiurfOgVpVX89EDS4eMarMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNmUwNWI4OTAtNzA5ZS0z
ZmU5LTk4ZTYtZmE2M2M5NTYzMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBDWwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcUEE1XYryXdkxpdumxyDMWxUKJeij1IeYu3PfK8oPSgQOtxg8sbXQGI9
rQ1C6vREwQucoUAjAXWQxkFoxMv8no2h0/BbxAd6zkCIEHet4QUu7FZ8Vw3Wiu2H
E1i60FMfY8fAKuXNToCIxza8CigNr9wFYNqM+yGlAomr0lwZn0HP1BKTMEOhVe1t
UK/XI1VNZHXmeSi3BPR7gvvFhFOHBQoazUkxZCSzlOfUyQqWJa3wydAW3BmrgF6V
xyj8jFYYGd0IdPvXIm7c/ZP6mOqVDtad+Wb6scy0fFAeGV6LYuALNZPkr8fECem8
PDctje9cmcIUBq/xaEk9DsRZk1YKew==
-----END CERTIFICATE-----
Generated at Fri May 10 00:44:39 2024 by rpki-client on console-fra.rpki-client.org