Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/fdcd414c-826c-3f5e-8299-d8b8c09ffb2b.roa
File:                     fdcd414c-826c-3f5e-8299-d8b8c09ffb2b.roa (raw, json)
Hash identifier:          msgHawY8R480gNwWYE8AVmecSuNWDz7EPbmhhtheVMQ=
Subject key identifier:   15:17:36:A5:EB:B4:56:96:1B:0A:22:90:A3:56:83:3B:64:A2:27:55
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F43285845708303E701771C26DB01CBC0
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/fdcd414c-826c-3f5e-8299-d8b8c09ffb2b.roa
Signing time:             Fri 05 Apr 2024 01:00:28 +0000
ROA not before:           Fri 05 Apr 2024 01:00:28 +0000
ROA not after:            Thu 04 Jul 2024 01:00:28 +0000
asID:                     62695
IP address blocks:        170.39.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:83:03:e7:01:77:1c:26:db:01:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: Apr  5 01:00:28 2024 GMT
            Not After : Jul  4 01:00:28 2024 GMT
        Subject: CN=ce403e97-b703-4003-b87b-a808f099990c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:8c:a4:7d:3c:78:54:f5:2f:0b:6a:e1:62:
                    96:6d:95:fb:97:49:1c:57:53:c6:3e:b7:5c:62:ee:
                    b9:d6:96:a1:d3:dc:55:e2:eb:97:91:a6:17:e8:a0:
                    6f:b0:dd:14:9e:86:df:f9:d7:f4:b2:ab:ed:e4:26:
                    22:d4:23:fd:a3:b0:95:36:09:9f:48:22:9f:d2:99:
                    6b:77:d0:37:89:dc:dc:02:0a:2c:6e:22:bc:a9:37:
                    36:1b:d8:bd:30:ad:23:dd:48:bf:42:4c:1f:d9:f6:
                    54:09:af:cc:2b:b8:d8:cb:dd:df:07:7a:43:cf:c0:
                    03:5f:fb:31:b0:83:e4:82:9f:5f:d8:cf:dd:d5:82:
                    12:bd:1f:56:d5:52:ad:c6:71:27:17:07:8e:c3:6d:
                    c8:2e:7c:a6:03:fa:b4:01:cd:46:61:22:c4:a8:16:
                    0a:a5:74:4c:ae:c3:8b:48:9c:30:df:ef:b0:c7:6a:
                    a3:17:f0:ba:8e:18:37:bb:e4:d1:98:f2:ec:c8:d8:
                    3b:07:3d:13:2a:61:d6:ff:42:38:49:66:cd:24:27:
                    e1:e2:26:95:55:b1:55:7f:42:24:ab:e3:62:e7:17:
                    cf:f3:75:9a:53:0e:15:6a:ad:8d:59:36:48:ed:ad:
                    f6:6e:0d:a8:83:54:99:71:7c:a1:88:4d:a3:5e:8c:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:17:36:A5:EB:B4:56:96:1B:0A:22:90:A3:56:83:3B:64:A2:27:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/fdcd414c-826c-3f5e-8299-d8b8c09ffb2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:d1:08:f9:76:17:8f:d8:9b:26:b2:9d:d4:35:6d:d9:47:03:
         81:a9:c6:8b:94:2f:3a:92:4f:0b:a2:40:90:da:ea:84:cc:13:
         e5:46:b1:4f:74:53:22:48:89:e1:d9:1c:2e:07:68:65:d6:bb:
         c8:45:0b:10:59:91:0a:c9:80:0f:65:fa:b7:53:44:44:e5:83:
         91:67:e9:25:d6:8c:6a:73:ab:a1:90:54:a6:df:7f:11:fc:7d:
         3d:51:fc:25:ee:3f:34:74:62:fd:d9:b5:46:2a:6e:88:93:c8:
         2f:6d:78:70:34:c7:80:31:a3:ac:af:83:6f:3d:dd:36:47:51:
         e1:49:74:2f:1f:b1:a5:4d:da:b3:ec:52:cb:52:80:22:4f:7a:
         f5:30:4d:3e:40:f9:db:d3:0b:94:ba:58:2e:61:94:1b:73:b9:
         03:d0:c1:88:1a:12:d2:72:e2:55:60:e8:24:15:17:21:3e:e1:
         2b:f7:17:d7:54:14:b6:17:04:c7:9d:7c:f1:46:c9:d4:23:a8:
         54:92:4a:aa:d0:d6:a7:f6:1c:56:50:47:ee:08:26:88:fc:cc:
         7e:0c:05:26:34:a4:f1:6f:39:39:db:cb:1f:23:87:b4:f8:15:
         10:37:ca:be:04:01:10:3b:9a:c0:dc:d3:36:19:33:24:06:8a:
         ab:b0:fa:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwgwPnAXccJtsBy8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFhYmQ0ZDItZDAwNy00N2NlLWFlYjEtMDk4ZjlkYjJj
YzgxMB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk
Y2U0MDNlOTctYjcwMy00MDAzLWI4N2ItYTgwOGYwOTk5OTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIeMpH08eFT1Lwtq4WKWbZX7l0kcV1PGPrdc
Yu651pah09xV4uuXkaYX6KBvsN0Unobf+df0sqvt5CYi1CP9o7CVNgmfSCKf0plr
d9A3idzcAgosbiK8qTc2G9i9MK0j3Ui/Qkwf2fZUCa/MK7jYy93fB3pDz8ADX/sx
sIPkgp9f2M/d1YISvR9W1VKtxnEnFweOw23ILnymA/q0Ac1GYSLEqBYKpXRMrsOL
SJww3++wx2qjF/C6jhg3u+TRmPLsyNg7Bz0TKmHW/0I4SWbNJCfh4iaVVbFVf0Ik
q+Ni5xfP83WaUw4Vaq2NWTZI7a32bg2og1SZcXyhiE2jXowgUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBUXNqXrtFaWGwoikKNWgztkoidVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFi
ZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThmOWRiMmNjODEvZmRjZDQxNGMtODI2Yy0z
ZjVlLTgyOTktZDhiOGMwOWZmYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmFhYmQ0ZDItZDAwNy00N2NlLWFl
YjEtMDk4ZjlkYjJjYzgxL2ZhYWJkNGQyLWQwMDctNDdjZS1hZWIxLTA5OGY5ZGIy
Y2M4MS5jcmwwHwYDVR0jBBgwFoAUxUfVTESwcD5oVY8GruvS/C3QaawwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mYWFiZDRkMi1kMDA3LTQ3Y2UtYWViMS0wOThm
OWRiMmNjODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqieLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMTRCPl2F4/YmyayndQ1bdlHA4GpxouULzqSTwuiQJDa6oTME+VGsU90
UyJIieHZHC4HaGXWu8hFCxBZkQrJgA9l+rdTRETlg5Fn6SXWjGpzq6GQVKbffxH8
fT1R/CXuPzR0Yv3ZtUYqboiTyC9teHA0x4Axo6yvg2893TZHUeFJdC8fsaVN2rPs
UstSgCJPevUwTT5A+dvTC5S6WC5hlBtzuQPQwYgaEtJy4lVg6CQVFyE+4Sv3F9dU
FLYXBMedfPFGydQjqFSSSqrQ1qf2HFZQR+4IJoj8zH4MBSY0pPFvOTnbyx8jh7T4
FRA3yr4EARA7msDc0zYZMyQGiquw+hc=
-----END CERTIFICATE-----
Generated at Fri May 10 00:44:54 2024 by rpki-client on console-fra.rpki-client.org