Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa
File:                     895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa (raw, json)
Hash identifier:          WaYh5kouTSZPUsDZTtf9V3z5IiPy6IwMf04/HC3Z/lw=
Subject key identifier:   03:2E:05:D8:DE:A2:9F:78:96:11:36:46:C2:21:93:4E:C9:3A:11:19
Certificate issuer:       /CN=3a000633-c1ee-492c-b730-12e113ab8bd2
Certificate serial:       010D0C9F432858474585F77BF5263FD189DBB380
Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     394710
IP address blocks:        85.131.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:f7:7b:f5:26:3f:d1:89:db:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=2455f775-dbdb-41da-8657-49cb60b893e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:cd:33:64:73:c9:5b:53:a7:4c:0b:bd:10:
                    26:39:8e:c0:05:5f:59:04:30:fa:4d:ba:ce:e3:78:
                    1e:d4:14:30:4f:89:ad:9b:77:ab:48:c9:81:30:ba:
                    1f:26:f1:63:f0:d5:ba:3d:31:12:6d:03:b6:76:5d:
                    bb:7d:a5:3b:47:80:e7:4e:b9:d7:b6:d3:be:3a:8b:
                    8b:22:b0:82:8b:56:fd:a7:d6:7e:c7:ef:75:a9:d2:
                    72:7d:87:63:04:fc:0d:02:c0:3c:73:ca:ac:81:5c:
                    7b:9a:55:7b:34:e8:93:e4:1c:fe:7f:ce:49:81:06:
                    8e:64:23:11:10:e4:e6:b6:71:70:fd:b8:f3:5b:48:
                    2f:82:46:59:f9:d4:27:39:4c:fd:93:39:16:fe:49:
                    7a:78:a3:19:08:85:83:21:a7:15:a3:55:72:93:6b:
                    cc:c9:2f:38:8b:88:b6:79:ce:9f:06:8f:76:57:b9:
                    bc:57:40:98:5d:86:1e:fd:c7:c2:f4:68:fd:53:8f:
                    2d:d8:b4:eb:29:2f:14:e1:bd:82:bd:95:e8:63:e3:
                    0f:6b:9c:ea:89:53:c8:94:39:fe:f0:27:6c:fc:bc:
                    5f:08:78:a1:df:b8:9e:0c:ae:ee:96:88:36:b7:bd:
                    8e:be:17:c5:49:07:da:41:7b:2b:fd:d0:7e:ea:be:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2E:05:D8:DE:A2:9F:78:96:11:36:46:C2:21:93:4E:C9:3A:11:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/895729d7-23c7-3a0f-84a2-b7d5287cd9a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl

            X509v3 Authority Key Identifier:
                keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.131.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:03:1a:03:86:4d:c1:31:df:a0:b4:bf:e7:51:e2:de:be:23:
         4b:40:2b:bd:31:37:4d:5c:c1:56:65:e3:71:87:cb:5a:3d:92:
         63:64:aa:49:a8:41:6d:d5:6c:78:ec:4f:52:55:8b:4e:11:b9:
         51:96:61:29:fa:39:12:dd:91:eb:16:6a:91:b8:83:eb:aa:04:
         6c:c7:5b:f0:3a:8e:6d:95:d8:54:ff:59:72:39:1d:3d:d2:cd:
         06:77:3e:9a:14:b6:48:78:bc:86:cd:7f:58:7b:aa:9f:88:55:
         77:67:38:5b:90:be:84:98:4d:0a:1a:32:90:e1:dc:61:70:b9:
         ef:8d:e9:20:86:48:a0:2d:69:a1:b2:6a:d5:46:28:aa:bd:81:
         63:9c:39:1f:89:6a:02:d4:54:30:43:17:de:f7:48:95:2f:7a:
         5f:29:6f:ca:33:01:d7:95:f2:ae:52:ff:5b:8d:32:3e:6c:30:
         ee:e8:43:9b:ac:02:64:46:d5:fa:1d:3d:89:89:39:f3:36:40:
         3f:e5:3c:84:06:1a:7b:49:e6:d6:fd:e8:a1:20:a2:6f:bc:b4:
         5e:57:ab:6d:e2:5a:6a:82:bc:85:6a:e1:2a:11:c1:20:55:51:
         db:f0:1b:90:a0:c5:e7:47:1e:d0:7d:45:aa:3c:8d:f1:00:b3:
         b3:8d:f5:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdFhfd79SY/0Ynbs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4
YmQyMB4XDTI0MDkyMDAxMDAzMVoXDTI0MTIxOTAyMDAzMVowLzEtMCsGA1UEAxMk
MjQ1NWY3NzUtZGJkYi00MWRhLTg2NTctNDljYjYwYjg5M2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTvNM2RzyVtTp0wLvRAmOY7ABV9ZBDD6TbrO
43ge1BQwT4mtm3erSMmBMLofJvFj8NW6PTESbQO2dl27faU7R4DnTrnXttO+OouL
IrCCi1b9p9Z+x+91qdJyfYdjBPwNAsA8c8qsgVx7mlV7NOiT5Bz+f85JgQaOZCMR
EOTmtnFw/bjzW0gvgkZZ+dQnOUz9kzkW/kl6eKMZCIWDIacVo1Vyk2vMyS84i4i2
ec6fBo92V7m8V0CYXYYe/cfC9Gj9U48t2LTrKS8U4b2CvZXoY+MPa5zqiVPIlDn+
8Cds/LxfCHih37ieDK7ulog2t72OvhfFSQfaQXsr/dB+6r51QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAMuBdjeop94lhE2RsIhk07JOhEZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAw
MDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvODk1NzI5ZDctMjNjNy0z
YTBmLTg0YTItYjdkNTI4N2NkOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMDA2MzMtYzFlZS00OTJjLWI3
MzAtMTJlMTEzYWI4YmQyLzNhMDAwNjMzLWMxZWUtNDkyYy1iNzMwLTEyZTExM2Fi
OGJkMi5jcmwwHwYDVR0jBBgwFoAUFGVxCMW+NO6jxif09m0EUs/PIyAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUx
MTNhYjhiZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFVYOgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUDGgOGTcEx36C0v+dR4t6+I0tAK70xN01cwVZl43GHy1o9kmNkqkmo
QW3VbHjsT1JVi04RuVGWYSn6ORLdkesWapG4g+uqBGzHW/A6jm2V2FT/WXI5HT3S
zQZ3PpoUtkh4vIbNf1h7qp+IVXdnOFuQvoSYTQoaMpDh3GFwue+N6SCGSKAtaaGy
atVGKKq9gWOcOR+JagLUVDBDF973SJUvel8pb8ozAdeV8q5S/1uNMj5sMO7oQ5us
AmRG1fodPYmJOfM2QD/lPIQGGntJ5tb96KEgom+8tF5Xq23iWmqCvIVq4SoRwSBV
UdvwG5CgxedHHtB9Rao8jfEAs7ON9Qg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:42:47 2024 by rpki-client on console-ams.rpki-client.org