Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ab79da0e-a726-3044-9b6f-cfed6697d6aa.roa
File:                     ab79da0e-a726-3044-9b6f-cfed6697d6aa.roa (raw, json)
Hash identifier:          bk9NwBRB4T/mRO8Ds9ERhoNUCHvBuyHsN1EQbumODQ8=
Subject key identifier:   2F:BC:98:0F:32:6D:C8:84:14:2F:FA:CC:3C:8F:DB:DF:03:8B:EE:AF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847502F940366C6D1F0E98D4400
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ab79da0e-a726-3044-9b6f-cfed6697d6aa.roa
Signing time:             Mon 23 Sep 2024 20:40:29 +0000
ROA not before:           Mon 23 Sep 2024 20:40:29 +0000
ROA not after:            Sun 22 Dec 2024 21:40:29 +0000
asID:                     54113
IP address blocks:        131.125.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:2f:94:03:66:c6:d1:f0:e9:8d:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 23 20:40:29 2024 GMT
            Not After : Dec 22 21:40:29 2024 GMT
        Subject: CN=a9b5a1cc-8f7b-43da-820b-e36625171be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:7d:c8:30:d1:9c:16:b0:cd:2c:0f:1c:1b:
                    2e:6d:cb:fc:47:df:86:11:23:f1:e7:f5:61:57:57:
                    54:40:e8:99:4b:ec:a6:93:bd:f1:ec:e8:b8:00:06:
                    09:89:bc:db:7a:04:0d:b7:fd:b5:41:b6:1d:dc:fd:
                    18:1e:11:9a:0b:b9:25:bd:05:af:09:d1:7e:5e:17:
                    93:50:20:7a:d8:6e:17:c3:a4:08:8b:b3:4a:6a:df:
                    1c:6c:4e:ea:45:20:0a:18:59:91:a1:d1:d6:c7:77:
                    e2:77:08:38:76:58:51:56:e4:9e:73:44:fa:a3:0a:
                    ca:e0:e8:78:b7:84:a5:d3:40:c5:26:5a:4b:95:d0:
                    bd:3b:f3:92:30:3a:c6:af:85:32:de:4e:f6:1d:a7:
                    18:a0:37:47:60:58:81:20:fd:0a:d4:07:0a:36:e2:
                    f7:bc:6f:8a:1a:9c:da:86:d1:06:5d:45:41:97:4b:
                    7e:9f:9b:f5:fc:e6:81:3b:cf:60:8b:7d:e2:db:7d:
                    9c:5b:52:0a:fc:70:40:04:24:39:df:6f:dc:4e:85:
                    8b:cc:62:40:3b:d6:01:e5:c0:b2:e1:e4:7e:15:a0:
                    28:60:0a:02:ce:33:71:51:60:94:65:aa:58:fa:0b:
                    5a:51:28:6e:ce:44:86:2b:9e:1b:75:01:43:2e:1a:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BC:98:0F:32:6D:C8:84:14:2F:FA:CC:3C:8F:DB:DF:03:8B:EE:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ab79da0e-a726-3044-9b6f-cfed6697d6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:7a:a4:a6:a7:82:5e:6f:cb:f6:d2:01:cc:1a:1e:cc:21:
         ab:bb:86:9d:62:49:45:e1:25:a4:06:3f:6a:91:76:f0:3b:1e:
         14:b1:91:c2:b7:ff:2d:16:b0:a4:eb:3d:c1:93:17:2c:11:e6:
         b6:3e:7f:bb:5f:04:58:a5:79:ae:b2:41:70:9f:85:2a:db:57:
         97:bf:99:71:e9:59:2a:f4:54:bb:fd:11:4f:8e:12:36:b4:56:
         c4:30:7e:e3:92:c9:68:af:18:54:a0:01:46:b7:fe:33:c6:af:
         11:4c:31:1a:c2:da:11:86:4b:98:44:f0:bd:51:2f:45:5f:da:
         62:7f:1e:ce:7b:57:92:23:00:7a:e2:19:30:f8:48:8e:47:53:
         f5:56:4a:ca:74:c0:84:44:cd:c3:72:5a:48:57:6f:f3:e1:55:
         26:6c:fc:3f:06:02:c1:65:32:d8:15:e9:43:bd:a0:20:61:63:
         be:aa:b5:b4:01:cf:03:39:44:2a:53:ba:90:6f:8f:30:9f:36:
         65:ad:14:a1:41:bd:a9:50:f7:b3:b8:ad:8e:88:67:ab:71:33:
         e6:92:f1:d3:d8:09:49:62:f9:03:3c:24:c9:24:1a:75:2a:97:
         16:1d:60:07:52:6f:e8:3d:cb:46:6f:76:8e:68:89:56:ba:39:
         2b:95:65:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdQL5QDZsbR8OmNRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MDkyMzIwNDAyOVoXDTI0MTIyMjIxNDAyOVowLzEtMCsGA1UEAxMk
YTliNWExY2MtOGY3Yi00M2RhLTgyMGItZTM2NjI1MTcxYmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk499yDDRnBawzSwPHBsubcv8R9+GESPx5/Vh
V1dUQOiZS+ymk73x7Oi4AAYJibzbegQNt/21QbYd3P0YHhGaC7klvQWvCdF+XheT
UCB62G4Xw6QIi7NKat8cbE7qRSAKGFmRodHWx3fidwg4dlhRVuSec0T6owrK4Oh4
t4Sl00DFJlpLldC9O/OSMDrGr4Uy3k72HacYoDdHYFiBIP0K1AcKNuL3vG+KGpza
htEGXUVBl0t+n5v1/OaBO89gi33i232cW1IK/HBABCQ532/cToWLzGJAO9YB5cCy
4eR+FaAoYAoCzjNxUWCUZapY+gtaUShuzkSGK54bdQFDLhp8nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+8mA8ybciEFC/6zDyP298Di+6vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWI3OWRhMGUtYTcyNi0z
MDQ0LTliNmYtY2ZlZDY2OTdkNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg31oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6feqSmp4Jeb8v20gHMGh7MIau7hp1iSUXhJaQGP2qRdvA7HhSxkcK3
/y0WsKTrPcGTFywR5rY+f7tfBFilea6yQXCfhSrbV5e/mXHpWSr0VLv9EU+OEja0
VsQwfuOSyWivGFSgAUa3/jPGrxFMMRrC2hGGS5hE8L1RL0Vf2mJ/Hs57V5IjAHri
GTD4SI5HU/VWSsp0wIREzcNyWkhXb/PhVSZs/D8GAsFlMtgV6UO9oCBhY76qtbQB
zwM5RCpTupBvjzCfNmWtFKFBvalQ97O4rY6IZ6txM+aS8dPYCUli+QM8JMkkGnUq
lxYdYAdSb+g9y0Zvdo5oiVa6OSuVZUo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:48 2024 by rpki-client on console-fra.rpki-client.org