Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/79fdc6be-ec03-3930-b9cc-85802fd5a519.roa
File:                     79fdc6be-ec03-3930-b9cc-85802fd5a519.roa (raw, json)
Hash identifier:          I5s0Nvv7JN74ToX1Cl8y4/MfAWfNlWt8OC9Wq3Zadfo=
Subject key identifier:   F6:E9:3F:AE:CA:BF:B8:8F:42:3C:42:2E:AD:BE:75:1D:37:86:F7:DD
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F432858476C9DBA546C6B24568FFE33B8
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/79fdc6be-ec03-3930-b9cc-85802fd5a519.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     25645
IP address blocks:        137.239.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:ba:54:6c:6b:24:56:8f:fe:33:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=2877b07f-6830-4d3f-baf6-6bc8eac9bf4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:ff:a9:04:a8:2e:68:81:d5:e8:eb:f3:ed:
                    88:72:03:8f:07:31:25:d5:20:51:22:46:dc:2b:79:
                    b8:02:86:8f:31:dd:9d:bc:a2:7f:0b:78:ef:65:06:
                    5b:7a:9b:a1:35:8d:e0:e4:dc:84:9f:bf:e5:cd:38:
                    53:fb:a6:3a:8c:84:b9:7b:ac:66:fb:1b:62:71:f8:
                    42:94:e4:52:fb:5d:73:0d:ef:b9:12:be:b4:f8:95:
                    e0:56:7f:19:c2:6d:5b:67:88:e2:bb:e2:75:8e:fa:
                    30:9c:aa:cd:6f:ba:23:3f:de:55:89:ba:9b:49:0e:
                    f0:96:aa:ec:35:dd:e2:11:fc:56:fd:63:2f:a9:26:
                    11:d7:33:60:5a:12:c3:73:a9:6e:32:5f:4a:4e:45:
                    4a:92:c5:59:ab:d0:1d:a7:7c:d1:68:a7:4b:3d:20:
                    7d:c7:c0:7e:44:d8:34:fa:2b:23:ce:1c:fd:c8:70:
                    f1:ca:55:7b:37:34:d5:e8:8a:65:33:91:ca:ff:3f:
                    0b:53:d6:a0:f1:53:5d:de:70:db:67:56:80:2d:44:
                    b5:41:38:ac:5c:c1:59:18:6c:75:5b:cf:96:6e:32:
                    48:12:ad:09:45:b4:dd:58:01:0c:a0:61:c8:51:84:
                    21:6c:ea:b9:80:4a:16:61:d9:70:5d:92:93:92:42:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E9:3F:AE:CA:BF:B8:8F:42:3C:42:2E:AD:BE:75:1D:37:86:F7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/79fdc6be-ec03-3930-b9cc-85802fd5a519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8e:70:a4:a4:a5:33:e5:73:3f:cc:22:ed:d8:d4:7a:32:13:
         7e:8f:55:16:18:76:e7:0d:2b:c8:58:f9:7c:32:36:c6:ae:d8:
         f4:4e:21:e1:ab:a3:b3:95:55:5a:18:d1:ff:3c:9f:55:95:b5:
         26:aa:8d:b7:aa:8c:a2:d6:05:1a:ea:6a:45:7b:74:0b:1a:b0:
         d8:59:84:0f:9f:2c:45:f1:8d:46:30:9c:55:3c:e2:38:22:2a:
         e9:db:ad:f0:b5:b0:f1:a2:a2:c6:e3:06:72:ac:3d:b2:59:bd:
         ce:9e:54:7f:f2:18:9b:56:d3:83:1b:d6:2b:ab:d3:93:18:10:
         b9:db:9d:b3:bf:40:88:4a:46:93:e5:73:dc:a1:3d:91:ed:87:
         ad:4f:e5:37:b1:3d:68:b2:8f:25:ab:7b:56:24:36:d2:9e:c3:
         b4:99:32:20:24:59:44:3a:51:a5:ee:a9:f3:23:23:ce:b5:e0:
         58:f9:6e:f3:03:7e:f5:cf:08:55:16:7c:3b:fe:3b:e5:2e:30:
         fa:31:a2:4a:04:8f:a3:2e:49:6c:ae:f0:67:fb:01:cd:dc:45:
         e8:ac:bf:8b:8f:4c:65:78:cd:f1:64:08:06:d7:76:92:ea:c5:
         50:0b:c8:91:89:23:39:25:74:5f:a1:7e:e3:4f:61:03:c6:42:
         c8:d8:64:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnbpUbGskVo/+M7gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
Mjg3N2IwN2YtNjgzMC00ZDNmLWJhZjYtNmJjOGVhYzliZjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtj/qQSoLmiB1ejr8+2IcgOPBzEl1SBRIkbc
K3m4AoaPMd2dvKJ/C3jvZQZbepuhNY3g5NyEn7/lzThT+6Y6jIS5e6xm+xticfhC
lORS+11zDe+5Er60+JXgVn8Zwm1bZ4jiu+J1jvownKrNb7ojP95VibqbSQ7wlqrs
Nd3iEfxW/WMvqSYR1zNgWhLDc6luMl9KTkVKksVZq9Adp3zRaKdLPSB9x8B+RNg0
+isjzhz9yHDxylV7NzTV6IplM5HK/z8LU9ag8VNd3nDbZ1aALUS1QTisXMFZGGx1
W8+WbjJIEq0JRbTdWAEMoGHIUYQhbOq5gEoWYdlwXZKTkkJmJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbpP67Kv7iPQjxCLq2+dR03hvfdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNzlmZGM2YmUtZWMwMy0z
OTMwLWI5Y2MtODU4MDJmZDVhNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiOcKSkpTPlcz/MIu3Y1HoyE36PVRYYducNK8hY+XwyNsau2PROIeGr
o7OVVVoY0f88n1WVtSaqjbeqjKLWBRrqakV7dAsasNhZhA+fLEXxjUYwnFU84jgi
KunbrfC1sPGiosbjBnKsPbJZvc6eVH/yGJtW04Mb1iur05MYELnbnbO/QIhKRpPl
c9yhPZHth61P5TexPWiyjyWre1YkNtKew7SZMiAkWUQ6UaXuqfMjI8614Fj5bvMD
fvXPCFUWfDv+O+UuMPoxokoEj6MuSWyu8Gf7Ac3cReisv4uPTGV4zfFkCAbXdpLq
xVALyJGJIzkldF+hfuNPYQPGQsjYZFs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org