Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa
File:                     4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa (raw, json)
Hash identifier:          aNJCTcxLuS6o+fv9+BCHzqWDRB4DaxVWRSjjHMjujko=
Subject key identifier:   1A:A5:88:B0:26:71:D1:FC:30:B9:30:46:B3:84:09:C8:E7:22:1B:22
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285847B696BEAB6FC73CF3AB9E5300
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     134365
IP address blocks:        107.151.200.0/24 maxlen: 24
                          107.151.201.0/24 maxlen: 24
                          107.151.202.0/24 maxlen: 24
                          107.151.203.0/24 maxlen: 24
                          107.151.204.0/24 maxlen: 24
                          107.151.205.0/24 maxlen: 24
                          107.151.206.0/24 maxlen: 24
                          107.151.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:be:ab:6f:c7:3c:f3:ab:9e:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=465bcca1-7132-46d3-a49a-ab9e21db419c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:79:57:84:07:39:86:9c:eb:1f:31:a8:24:
                    a7:bf:96:a7:9e:a9:aa:7d:d3:ac:40:be:57:46:47:
                    0a:13:44:dd:13:01:ca:f1:55:2d:09:d6:7d:fb:0c:
                    ac:86:f0:47:b9:05:27:fa:8d:bf:01:5d:4a:b3:41:
                    83:cf:7f:a3:a3:08:86:a4:26:42:dd:b9:0c:d9:06:
                    f7:e7:58:22:7c:ba:81:e9:41:3b:f5:fd:23:95:d2:
                    d0:11:3a:46:0f:62:f7:35:e6:45:8d:cd:2a:9d:44:
                    aa:ee:4e:b5:6a:64:cc:1d:fc:f0:45:a6:3b:e9:76:
                    b6:1e:1f:04:0a:91:07:7a:52:94:d1:3c:e3:0f:65:
                    a4:c7:50:7c:0d:8f:61:d0:e1:ed:b2:5b:a3:01:27:
                    89:09:2d:6d:b3:a3:05:c0:d1:9a:13:2c:b4:6a:5f:
                    83:1d:f0:c3:ab:e8:09:29:81:70:eb:df:46:1a:2e:
                    ea:0e:98:1f:06:79:9e:99:b9:df:68:76:27:91:54:
                    5e:39:5f:69:69:72:c9:4c:6d:35:2d:17:c6:db:d4:
                    7a:ee:7c:71:2b:41:0c:b1:98:e0:8a:17:cb:12:22:
                    98:3c:01:30:00:58:a5:ee:d9:d4:1f:bf:3b:8a:00:
                    32:0a:0b:c1:1a:00:0e:18:9f:d2:df:41:79:06:99:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A5:88:B0:26:71:D1:FC:30:B9:30:46:B3:84:09:C8:E7:22:1B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4612b6b8-0bb0-34be-8cbb-d89ebd569ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:09:aa:fc:88:20:0e:b4:30:21:89:d9:a2:ac:90:ed:39:e9:
         18:80:a1:dc:4c:f5:30:0a:71:0f:08:f1:5b:04:a8:f3:60:ad:
         e1:f2:9c:48:ef:e5:f2:b5:37:56:25:f8:f1:59:20:bb:5e:56:
         02:de:85:e2:32:de:0e:ed:a6:e2:98:20:92:9c:d5:c4:6f:71:
         6b:16:96:e2:6f:64:ce:b6:7b:6a:39:a0:4c:30:60:2c:02:25:
         f1:b4:e7:a9:6b:a0:c2:da:0f:a4:77:49:91:35:8d:12:c3:00:
         79:64:ac:98:7c:65:55:65:c0:07:cc:1d:1a:69:b6:88:01:c0:
         ce:3c:45:15:a4:50:b1:17:e9:5a:dd:ee:0f:17:19:8d:b5:55:
         5d:c0:c9:ff:0f:5d:cd:b5:8a:66:12:82:31:fb:83:94:33:93:
         e7:8e:38:e4:96:61:f4:ad:df:e0:7d:8c:1b:5a:c9:69:59:67:
         9c:9f:11:44:1a:07:24:11:d1:13:76:f1:ea:42:a3:5f:9c:94:
         4a:97:7e:d4:c4:9d:04:64:9c:de:db:35:0a:80:11:d3:76:dc:
         1a:5f:77:4a:40:39:1b:80:55:27:78:aa:ab:af:e0:d8:61:ab:
         33:e4:1b:99:06:c5:3e:4a:77:95:e6:58:dd:c2:66:4c:2c:0c:
         b5:8f:1a:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe2lr6rb8c886ueUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MTAzMDEzMDA0MFoXDTI1MDEyODE0MDA0MFowLzEtMCsGA1UEAxMk
NDY1YmNjYTEtNzEzMi00NmQzLWE0OWEtYWI5ZTIxZGI0MTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa95V4QHOYac6x8xqCSnv5annqmqfdOsQL5X
RkcKE0TdEwHK8VUtCdZ9+wyshvBHuQUn+o2/AV1Ks0GDz3+jowiGpCZC3bkM2Qb3
51gifLqB6UE79f0jldLQETpGD2L3NeZFjc0qnUSq7k61amTMHfzwRaY76Xa2Hh8E
CpEHelKU0TzjD2Wkx1B8DY9h0OHtslujASeJCS1ts6MFwNGaEyy0al+DHfDDq+gJ
KYFw699GGi7qDpgfBnmembnfaHYnkVReOV9paXLJTG01LRfG29R67nxxK0EMsZjg
ihfLEiKYPAEwAFil7tnUH787igAyCgvBGgAOGJ/S30F5Bpl7iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqliLAmcdH8MLkwRrOECcjnIhsiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNDYxMmI2YjgtMGJiMC0z
NGJlLThjYmItZDg5ZWJkNTY5Y2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa5fIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQJqvyIIA60MCGJ2aKskO056RiAodxM9TAKcQ8I8VsEqPNgreHynEjv
5fK1N1Yl+PFZILteVgLeheIy3g7tpuKYIJKc1cRvcWsWluJvZM62e2o5oEwwYCwC
JfG056lroMLaD6R3SZE1jRLDAHlkrJh8ZVVlwAfMHRpptogBwM48RRWkULEX6Vrd
7g8XGY21VV3Ayf8PXc21imYSgjH7g5Qzk+eOOOSWYfSt3+B9jBtayWlZZ5yfEUQa
ByQR0RN28epCo1+clEqXftTEnQRknN7bNQqAEdN23Bpfd0pAORuAVSd4qquv4Nhh
qzPkG5kGxT5Kd5XmWN3CZkwsDLWPGuA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org