Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa
File:                     ba3718d6-b79b-3161-a4a0-732b49a958d4.roa (raw, json)
Hash identifier:          oRMvCC69ScjYqDSRahA3y88vgDQRX0WQ7IXBpm66dX0=
Subject key identifier:   B2:36:1B:0A:53:84:8A:2F:D9:F6:3D:21:A3:5D:DE:EA:1F:DC:C2:85
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F432858471E706808AC5E5E2F4BFC7900
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     14977
IP address blocks:        137.90.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:68:08:ac:5e:5e:2f:4b:fc:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=4f4c7a72-0ad1-4897-a38e-072784e26853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:bd:84:43:e4:fa:d3:9d:72:07:b3:55:92:
                    73:3e:d0:d7:ea:04:69:38:1f:34:a9:26:68:f6:d7:
                    ac:43:b2:10:19:68:0d:9e:e4:a3:90:dc:47:0b:ab:
                    0b:0e:a2:65:2b:88:4b:b7:57:60:40:6a:82:dc:e4:
                    c2:8d:99:77:7d:8d:54:3c:98:6d:c0:0a:31:2f:d1:
                    bf:b7:e8:b2:54:0c:82:f8:cb:70:8a:a2:18:b0:6d:
                    cd:f4:b5:ee:a2:f0:74:64:a8:b7:c0:bd:61:2e:cc:
                    74:41:b9:0e:bf:28:50:e0:1e:8a:83:30:b7:b8:67:
                    83:ca:9a:07:73:8d:5b:ec:a9:81:3e:09:89:41:ab:
                    22:7a:15:a5:3d:87:63:d4:41:83:ae:4d:0c:31:9a:
                    ee:69:c4:02:4c:60:f4:28:c6:70:c9:2e:f1:0b:e4:
                    20:45:55:19:23:90:dc:41:28:92:e0:b3:45:c0:a5:
                    fd:dd:da:d3:01:4a:0a:96:cd:ed:f9:2c:50:82:1b:
                    97:88:7d:7a:b6:7c:74:13:24:42:0a:56:01:d4:22:
                    33:08:a3:30:69:4c:d5:b7:c2:02:61:65:07:bc:b5:
                    c3:3c:f8:48:60:6e:fd:80:e7:3a:24:45:47:38:32:
                    de:e6:60:32:45:b9:0a:1c:10:f7:56:e5:2e:62:0e:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:1B:0A:53:84:8A:2F:D9:F6:3D:21:A3:5D:DE:EA:1F:DC:C2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/ba3718d6-b79b-3161-a4a0-732b49a958d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2b:d9:45:2a:d8:a8:d7:6b:b2:81:f3:66:5c:d6:0a:0a:e5:
         87:b1:fd:17:17:f4:0e:ec:70:69:9c:39:5c:ba:d3:cd:89:a5:
         b3:76:67:c0:ec:0c:71:63:8b:0f:f2:4c:7b:63:7b:04:42:aa:
         0e:f6:b8:e0:6a:a7:87:08:3e:dd:67:c1:ba:e8:71:c5:0a:2a:
         b3:9c:33:04:c4:6e:cd:68:d0:f6:7f:ac:a2:7b:42:ed:15:cd:
         17:cc:e9:cd:85:c6:55:29:3f:b0:dc:ce:3c:1a:2a:3a:31:45:
         ee:9f:87:48:28:19:9b:73:5b:0c:d0:6f:2f:9d:2a:c1:4a:73:
         9a:c4:d1:68:95:61:d0:e7:da:b1:f9:ed:3e:f4:db:ee:b5:4f:
         04:fc:76:6a:4d:0c:65:bf:b5:de:71:26:8c:6c:67:bd:8e:e2:
         7f:71:cc:ef:52:0f:98:6e:37:a9:14:ce:fd:97:36:b6:11:50:
         e7:bd:cb:c1:b7:8a:d9:b4:4e:e4:23:c4:ba:e6:68:59:0e:01:
         59:da:47:6b:f4:eb:16:b1:fe:49:f4:62:7c:ce:0f:6a:af:d5:
         55:14:00:22:40:0b:c5:49:be:04:75:56:fd:60:c1:38:55:67:
         9e:a3:e3:f1:48:10:f0:ae:80:17:36:99:5b:1e:40:8e:e6:b2:
         8e:99:16:65
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcecGgIrF5eL0v8eQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm
ZDhmMB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
NGY0YzdhNzItMGFkMS00ODk3LWEzOGUtMDcyNzg0ZTI2ODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwW9hEPk+tOdcgezVZJzPtDX6gRpOB80qSZo
9tesQ7IQGWgNnuSjkNxHC6sLDqJlK4hLt1dgQGqC3OTCjZl3fY1UPJhtwAoxL9G/
t+iyVAyC+MtwiqIYsG3N9LXuovB0ZKi3wL1hLsx0QbkOvyhQ4B6KgzC3uGeDypoH
c41b7KmBPgmJQasiehWlPYdj1EGDrk0MMZruacQCTGD0KMZwyS7xC+QgRVUZI5Dc
QSiS4LNFwKX93drTAUoKls3t+SxQghuXiH16tnx0EyRCClYB1CIzCKMwaUzVt8IC
YWUHvLXDPPhIYG79gOc6JEVHODLe5mAyRbkKHBD3VuUuYg47JwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLI2GwpThIov2fY9IaNd3uof3MKFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5
MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvYmEzNzE4ZDYtYjc5Yi0z
MTYxLWE0YTAtNzMyYjQ5YTk1OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx
MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz
ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz
MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADSvZRSrYqNdrsoHzZlzWCgrlh7H9Fxf0DuxwaZw5XLrTzYmls3ZnwOwM
cWOLD/JMe2N7BEKqDva44Gqnhwg+3WfBuuhxxQoqs5wzBMRuzWjQ9n+sontC7RXN
F8zpzYXGVSk/sNzOPBoqOjFF7p+HSCgZm3NbDNBvL50qwUpzmsTRaJVh0Ofasfnt
PvTb7rVPBPx2ak0MZb+13nEmjGxnvY7if3HM71IPmG43qRTO/Zc2thFQ573LwbeK
2bRO5CPEuuZoWQ4BWdpHa/TrFrH+SfRifM4Paq/VVRQAIkALxUm+BHVW/WDBOFVn
nqPj8UgQ8K6AFzaZWx5AjuayjpkWZQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org