Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/59869761-7ba1-3163-bf71-c30740d5fd21.roa
File:                     59869761-7ba1-3163-bf71-c30740d5fd21.roa (raw, json)
Hash identifier:          w1GTBrcDpxRzupJEx44DOFFNPriA3Yqv+kgVWZLut1E=
Subject key identifier:   67:86:F5:58:DB:72:C1:4B:D6:26:44:F9:D3:70:15:37:60:CB:45:00
Certificate issuer:       /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Certificate serial:       010D0C9F432858471E706820883F5B4DA60C8400
Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/59869761-7ba1-3163-bf71-c30740d5fd21.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     14977
IP address blocks:        159.238.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:68:20:88:3f:5b:4d:a6:0c:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=d3e5bca3-112b-408a-afb8-afe9c820a9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:6a:bc:37:43:b9:e9:f4:8b:38:72:d2:d3:
                    49:f1:a9:fd:d3:7d:56:66:a2:66:f6:28:c4:46:64:
                    a2:80:36:15:53:62:30:3e:cd:07:c6:b7:aa:83:bf:
                    5c:64:82:66:53:0f:5f:c3:20:d5:63:77:d2:bd:5a:
                    8e:e5:b9:a0:a5:60:9e:dd:5b:be:9f:aa:97:bb:8b:
                    d9:0e:42:26:28:1d:ae:02:2f:64:ea:5c:5e:a6:5f:
                    61:02:e8:43:50:30:08:21:7b:d6:2e:bf:59:86:18:
                    b9:0c:0c:e2:26:33:ee:1d:d9:4e:0a:25:45:e0:bf:
                    07:c7:17:bf:3b:2f:d6:0f:15:24:ef:11:2a:16:84:
                    92:45:b2:24:5e:cf:c6:47:08:02:ee:f1:18:95:18:
                    64:14:84:f8:b3:25:d2:3d:f1:9d:bb:01:de:d6:57:
                    20:76:9b:83:f0:ab:77:bb:ca:5b:82:a2:1e:f9:8c:
                    cf:ff:e4:36:74:e4:99:18:88:4f:c9:2a:40:6c:9d:
                    40:89:74:28:a6:e4:8b:21:c7:62:e5:80:65:b1:89:
                    82:05:ad:3d:70:03:25:a7:2f:c4:17:5f:08:5d:63:
                    2e:d3:ec:25:74:fe:64:b7:80:3c:6e:84:a2:0f:fd:
                    bf:70:42:3c:a4:f0:ce:f5:08:57:c3:3d:be:77:82:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:86:F5:58:DB:72:C1:4B:D6:26:44:F9:D3:70:15:37:60:CB:45:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/59869761-7ba1-3163-bf71-c30740d5fd21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl

            X509v3 Authority Key Identifier:
                keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:64:73:be:cc:8d:b8:0a:fa:3a:77:e6:04:01:0e:b4:ec:96:
         e1:1f:2d:a9:ba:de:f8:90:0c:d6:85:de:c4:23:30:64:2b:2f:
         73:72:23:14:2e:7e:27:8f:cc:63:fe:f8:36:1a:7b:08:79:73:
         8f:6e:55:37:b6:e4:44:ce:18:1d:b3:59:9a:8c:52:75:53:ac:
         71:c5:01:ec:5e:d8:22:64:a0:d5:0f:f0:de:ed:1a:2b:7f:4f:
         37:23:70:12:8a:72:8c:1f:bf:db:db:d6:90:57:4f:15:fc:c0:
         95:84:50:04:cf:dc:5e:2b:db:8d:91:bd:03:cf:cf:d6:6b:92:
         cd:fd:e4:34:1c:49:f9:16:e4:d6:34:dc:76:ea:6b:e0:74:b5:
         51:2c:d6:14:b6:6a:e2:f2:e9:11:e5:47:17:ff:45:95:1b:89:
         4b:ea:07:cc:4d:5b:37:6c:9d:21:5e:aa:ba:62:d0:80:cb:bb:
         03:8f:d5:6c:4e:1b:30:f8:45:b7:2f:c8:de:14:56:03:60:94:
         f1:05:06:bd:18:15:74:95:67:58:93:8b:d1:27:27:83:fd:89:
         99:c5:6a:4c:e7:a7:9a:48:fd:f0:94:72:8a:1b:de:40:b4:f7:
         09:30:bb:1e:b4:42:3f:d0:21:16:11:c4:9c:a7:26:ca:22:b8:
         5c:57:d8:fd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcecGggiD9bTaYMhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmViMjNiMDMtOWQxZC00MTJkLWE1NmEtNDkzYWVhYTVk
MDU3MB4XDTI0MDkwNjAxMDAzMVoXDTI0MTIwNTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDNlNWJjYTMtMTEyYi00MDhhLWFmYjgtYWZlOWM4MjBhOWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbVqvDdDuen0izhy0tNJ8an9031WZqJm9ijE
RmSigDYVU2IwPs0Hxreqg79cZIJmUw9fwyDVY3fSvVqO5bmgpWCe3Vu+n6qXu4vZ
DkImKB2uAi9k6lxepl9hAuhDUDAIIXvWLr9Zhhi5DAziJjPuHdlOCiVF4L8Hxxe/
Oy/WDxUk7xEqFoSSRbIkXs/GRwgC7vEYlRhkFIT4syXSPfGduwHe1lcgdpuD8Kt3
u8pbgqIe+YzP/+Q2dOSZGIhPySpAbJ1AiXQopuSLIcdi5YBlsYmCBa09cAMlpy/E
F18IXWMu0+wldP5kt4A8boSiD/2/cEI8pPDO9QhXwz2+d4KYswIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGeG9VjbcsFL1iZE+dNwFTdgy0UAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82ZWIy
M2IwMy05ZDFkLTQxMmQtYTU2YS00OTNhZWFhNWQwNTcvNTk4Njk3NjEtN2JhMS0z
MTYzLWJmNzEtYzMwNzQwZDVmZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmViMjNiMDMtOWQxZC00MTJkLWE1
NmEtNDkzYWVhYTVkMDU3LzZlYjIzYjAzLTlkMWQtNDEyZC1hNTZhLTQ5M2FlYWE1
ZDA1Ny5jcmwwHwYDVR0jBBgwFoAUNjS2acy/hsHKvgZtNPMkpobTMY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82ZWIyM2IwMy05ZDFkLTQxMmQtYTU2YS00OTNh
ZWFhNWQwNTcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn+4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABWRzvsyNuAr6OnfmBAEOtOyW4R8tqbre+JAM1oXexCMwZCsvc3IjFC5+
J4/MY/74Nhp7CHlzj25VN7bkRM4YHbNZmoxSdVOsccUB7F7YImSg1Q/w3u0aK39P
NyNwEopyjB+/29vWkFdPFfzAlYRQBM/cXivbjZG9A8/P1muSzf3kNBxJ+Rbk1jTc
dupr4HS1USzWFLZq4vLpEeVHF/9FlRuJS+oHzE1bN2ydIV6qumLQgMu7A4/VbE4b
MPhFty/I3hRWA2CU8QUGvRgVdJVnWJOL0Scng/2JmcVqTOenmkj98JRyihveQLT3
CTC7HrRCP9AhFhHEnKcmyiK4XFfY/Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org