Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/8ae61206-0e3b-306d-804c-13aa3425ae40.roa
File:                     8ae61206-0e3b-306d-804c-13aa3425ae40.roa (raw, json)
Hash identifier:          dhGhbuqnxDUm/e+h8rcyIM6X0qg/D382qhrQEE11hcE=
Subject key identifier:   2E:34:BF:3D:85:04:21:51:7D:B5:AD:BB:7F:22:70:35:87:AD:B4:52
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584726D07D7540F8990B9BC1ED00
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/8ae61206-0e3b-306d-804c-13aa3425ae40.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     7385
IP address blocks:        139.60.152.0/22 maxlen: 24
                          162.247.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:7d:75:40:f8:99:0b:9b:c1:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=7905b6f4-7c7d-4f8c-9739-6ed47db17219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:c3:42:d0:1c:d7:d3:9b:93:fd:7f:dc:10:
                    e3:6a:52:90:56:06:ca:7a:d4:f2:cd:7e:1b:be:de:
                    0a:25:db:c9:9c:cc:b3:7b:94:d8:54:fe:78:af:c0:
                    68:c9:54:47:71:ac:3d:6f:32:87:68:6e:55:3f:92:
                    32:bb:71:f4:5b:17:4e:6a:0c:89:4b:62:eb:4f:99:
                    be:ff:18:71:2e:46:eb:6a:88:51:04:f5:95:a7:0f:
                    2b:20:74:75:13:5e:a1:79:6c:c9:2e:d8:1e:bb:8f:
                    e8:36:85:c7:c2:b2:a1:bd:51:c8:f9:de:b3:16:45:
                    cf:e3:fc:80:ce:bf:05:04:d3:1e:e5:ca:72:10:a0:
                    2c:18:a9:20:0b:5f:fd:e0:47:94:6b:98:cb:92:bc:
                    a1:21:be:6f:3b:4a:0f:a3:95:67:51:20:3d:d2:25:
                    14:4f:b9:36:04:e7:77:3f:d0:6e:50:7a:e6:2d:3e:
                    13:f5:8c:21:36:c4:e7:05:0c:68:e8:d8:96:cf:05:
                    1f:74:83:18:a0:75:16:5f:9e:f0:93:9f:51:b4:e6:
                    86:6c:df:00:f1:8a:48:7c:49:67:7f:f0:03:f7:9e:
                    4e:8d:7e:8a:93:3f:8b:15:42:c2:e6:c4:9a:4f:da:
                    f3:d4:43:50:74:c5:43:0f:1b:a6:56:07:ff:d7:21:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:34:BF:3D:85:04:21:51:7D:B5:AD:BB:7F:22:70:35:87:AD:B4:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/8ae61206-0e3b-306d-804c-13aa3425ae40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.60.152.0/22
                  162.247.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:11:26:d6:1a:2c:12:d0:04:8d:b5:13:5c:25:21:8e:14:
         26:d6:8e:01:37:4d:0d:87:11:9b:3b:51:a1:ee:f2:94:66:b1:
         7c:2b:4f:d9:5a:34:d4:0f:e3:c2:cc:73:52:6a:22:6a:74:9b:
         e7:e2:5a:42:43:1f:d3:a7:a5:b0:f9:ed:b2:d5:e9:b8:60:d1:
         66:00:9e:90:2e:08:0c:8b:eb:45:10:d1:0a:9f:fe:01:d1:b2:
         b1:0b:06:d1:db:0e:a8:a9:39:96:79:b0:11:ae:5c:6b:12:ae:
         6c:d1:25:f2:27:64:27:b0:de:36:59:33:74:b1:ed:b9:e5:80:
         38:2e:4d:96:1f:5f:7e:60:63:c9:c1:ba:d1:0f:3b:cc:23:bd:
         11:93:40:19:17:3d:33:de:4d:08:fa:fe:08:8f:08:8e:19:93:
         f6:4c:2d:39:cf:22:30:c5:63:9f:8e:26:e7:e3:63:af:2b:3f:
         7e:2e:75:21:99:87:64:84:3a:72:15:30:76:05:7f:a0:98:c9:
         e0:c8:62:4d:aa:8e:9c:12:f0:d4:51:09:bf:30:b9:b9:45:78:
         69:df:20:ac:b9:44:1a:d6:55:08:c8:dd:47:56:31:cc:b8:a5:
         ef:68:c2:9e:c7:a4:02:9a:d7:e4:9b:af:cf:85:f6:a5:f2:e0:
         de:e5:6e:32
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEcm0H11QPiZC5vB7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk
NzkwNWI2ZjQtN2M3ZC00ZjhjLTk3MzktNmVkNDdkYjE3MjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk33DQtAc19Obk/1/3BDjalKQVgbKetTyzX4b
vt4KJdvJnMyze5TYVP54r8BoyVRHcaw9bzKHaG5VP5Iyu3H0WxdOagyJS2LrT5m+
/xhxLkbraohRBPWVpw8rIHR1E16heWzJLtgeu4/oNoXHwrKhvVHI+d6zFkXP4/yA
zr8FBNMe5cpyEKAsGKkgC1/94EeUa5jLkryhIb5vO0oPo5VnUSA90iUUT7k2BOd3
P9BuUHrmLT4T9YwhNsTnBQxo6NiWzwUfdIMYoHUWX57wk59RtOaGbN8A8YpIfEln
f/AD955OjX6Kkz+LFULC5sSaT9rz1ENQdMVDDxumVgf/1yEtKwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFC40vz2FBCFRfbWtu38icDWHrbRSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvOGFlNjEyMDYtMGUzYi0z
MDZkLTgwNGMtMTNhYTM0MjVhZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC
ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFQ8ESbWGiwS0ASNtRNcJSGOFCbWjgE3TQ2HEZs7UaHu8pRm
sXwrT9laNNQP48LMc1JqImp0m+fiWkJDH9OnpbD57bLV6bhg0WYAnpAuCAyL60UQ
0Qqf/gHRsrELBtHbDqipOZZ5sBGuXGsSrmzRJfInZCew3jZZM3Sx7bnlgDguTZYf
X35gY8nButEPO8wjvRGTQBkXPTPeTQj6/giPCI4Zk/ZMLTnPIjDFY5+OJufjY68r
P34udSGZh2SEOnIVMHYFf6CYyeDIYk2qjpwS8NRRCb8wublFeGnfIKy5RBrWVQjI
3UdWMcy4pe9owp7HpAKa1+Sbr8+F9qXy4N7lbjI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:45 2024 by rpki-client on console-ams.rpki-client.org