Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa
File:                     7cfb3343-9794-3299-b118-155e595370a9.roa (raw, json)
Hash identifier:          FTF45AXKxPVgd4hz2TbGVSaROaKck+7U/rXWIaCeYGw=
Subject key identifier:   28:8A:97:84:FF:3F:94:CE:50:82:5D:E1:62:A6:E2:C2:2D:1D:A2:7C
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584777C63CF58FEB0CF014C5DD00
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     399672
IP address blocks:        165.140.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:3c:f5:8f:eb:0c:f0:14:c5:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=43bcbdad-92d8-4ae6-a24e-e95a94fa7a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:38:b7:f5:ca:87:f1:e4:cc:2a:da:be:83:
                    79:d5:79:e9:3b:1b:80:88:38:d1:21:72:99:3c:ed:
                    c4:6e:55:56:85:1c:f7:bc:19:04:88:7c:a3:f2:11:
                    87:ef:b1:b4:10:14:27:59:d4:04:56:84:05:86:45:
                    bd:84:dc:83:60:50:ec:2e:85:37:e4:39:d4:1f:cb:
                    3f:58:0e:16:bb:20:1e:ea:79:84:6d:db:d7:09:fc:
                    df:83:d8:16:0c:60:98:ae:4c:b0:b8:59:37:7a:ec:
                    9a:9c:b7:7a:e4:11:91:a3:07:47:b5:1e:8f:1f:1b:
                    f5:2f:00:d0:d0:df:3b:65:f7:16:e2:2d:32:c4:d6:
                    de:78:cf:39:65:d4:c1:10:24:53:45:c0:70:b5:61:
                    f8:70:3a:4f:ae:38:51:ed:07:b7:0e:ee:3b:63:d0:
                    82:a8:c3:a9:a7:0f:71:2b:32:53:af:9c:dc:ad:99:
                    fd:42:57:a0:98:08:60:8f:0a:d1:12:9f:0d:0e:32:
                    ce:7c:85:07:e4:12:cc:83:3b:fb:f5:0a:49:fc:d1:
                    74:2c:5c:a4:8f:70:d9:fb:b8:e3:74:2e:31:f6:0d:
                    52:14:37:99:59:c1:22:75:4d:30:83:7f:7d:ec:58:
                    7e:26:af:d3:48:f0:d6:fd:3d:2c:e1:62:91:e9:2d:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8A:97:84:FF:3F:94:CE:50:82:5D:E1:62:A6:E2:C2:2D:1D:A2:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:df:b3:04:56:d2:cd:7a:8c:e8:ea:f8:b9:a6:64:b6:ed:07:
         43:a2:a4:fb:b9:8d:bd:d4:72:df:dc:d5:2f:70:77:45:47:5d:
         89:f9:29:d2:09:02:15:a5:0c:a0:bf:70:76:a9:77:8e:88:0b:
         e8:06:55:7c:f3:a0:91:c9:4d:fa:6e:ed:a9:fc:14:70:e1:9f:
         e0:82:8b:73:3f:d0:b2:6c:59:6a:56:bb:7c:df:f5:b5:12:71:
         ff:e9:7a:f4:fb:cc:b1:84:87:05:86:0d:0a:03:28:5d:03:38:
         44:a3:92:96:25:50:32:11:7e:13:38:f6:23:de:04:3b:01:f3:
         7d:02:49:4e:75:ef:60:d8:03:67:64:f0:a8:c8:3e:43:16:8d:
         8e:c5:f1:93:2b:6b:f6:4f:ba:f3:fe:31:f2:b4:b9:60:7b:09:
         28:ee:67:5f:a5:e3:18:aa:31:cb:6a:85:87:19:0e:a9:fa:0a:
         dc:27:62:11:7b:2f:1e:2e:d5:6f:96:90:2c:b5:22:96:94:fe:
         6c:89:9c:9d:6d:24:4f:91:fa:b4:f9:c5:3e:4c:33:2d:a4:52:
         0b:48:44:e2:50:9d:19:6f:7c:1d:0c:30:7f:c9:ab:e5:51:29:
         47:4d:59:68:a5:12:a2:f3:a1:58:90:a5:82:14:71:0d:bf:27:
         e9:26:34:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3xjz1j+sM8BTF3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3
ZTRmMB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk
NDNiY2JkYWQtOTJkOC00YWU2LWEyNGUtZTk1YTk0ZmE3YTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB04t/XKh/HkzCravoN51XnpOxuAiDjRIXKZ
PO3EblVWhRz3vBkEiHyj8hGH77G0EBQnWdQEVoQFhkW9hNyDYFDsLoU35DnUH8s/
WA4WuyAe6nmEbdvXCfzfg9gWDGCYrkywuFk3euyanLd65BGRowdHtR6PHxv1LwDQ
0N87ZfcW4i0yxNbeeM85ZdTBECRTRcBwtWH4cDpPrjhR7Qe3Du47Y9CCqMOppw9x
KzJTr5zcrZn9QlegmAhgjwrREp8NDjLOfIUH5BLMgzv79QpJ/NF0LFykj3DZ+7jj
dC4x9g1SFDeZWcEidU0wg3997Fh+Jq/TSPDW/T0s4WKR6S0OTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCiKl4T/P5TOUIJd4WKm4sItHaJ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2
ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2NmYjMzNDMtOTc5NC0z
Mjk5LWIxMTgtMTU1ZTU5NTM3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz
YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz
N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz
ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYwkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFffswRW0s16jOjq+LmmZLbtB0OipPu5jb3Uct/c1S9wd0VHXYn5KdIJ
AhWlDKC/cHapd46IC+gGVXzzoJHJTfpu7an8FHDhn+CCi3M/0LJsWWpWu3zf9bUS
cf/pevT7zLGEhwWGDQoDKF0DOESjkpYlUDIRfhM49iPeBDsB830CSU5172DYA2dk
8KjIPkMWjY7F8ZMra/ZPuvP+MfK0uWB7CSjuZ1+l4xiqMctqhYcZDqn6CtwnYhF7
Lx4u1W+WkCy1IpaU/myJnJ1tJE+R+rT5xT5MMy2kUgtIROJQnRlvfB0MMH/Jq+VR
KUdNWWilEqLzoViQpYIUcQ2/J+kmNHY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:17 2024 by rpki-client on console-fra.rpki-client.org