Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a0ac2aa7-20c3-3813-8979-7448fcaa856e.roa
File:                     a0ac2aa7-20c3-3813-8979-7448fcaa856e.roa (raw, json)
Hash identifier:          9765w3HzUDX42ylorEmBSrfpJbISMSx51t1HLWgqdyU=
Subject key identifier:   CE:0C:FD:98:31:27:29:AD:2B:62:3A:36:7A:34:F1:E4:84:2B:F2:88
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584742BB53BD2A281C66BBC58340
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a0ac2aa7-20c3-3813-8979-7448fcaa856e.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     32209
IP address blocks:        137.239.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:53:bd:2a:28:1c:66:bb:c5:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=43dbe818-ac78-4098-8277-3e633775c75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:10:6b:0e:6d:46:5d:77:29:c8:ae:5d:aa:
                    41:ae:bf:3e:cf:78:c1:69:09:88:8b:4b:ce:c8:29:
                    00:7c:72:c5:de:e8:4a:e9:32:e1:57:d0:61:0f:84:
                    c7:c3:49:42:98:97:8b:44:7c:9c:e0:90:fe:46:f7:
                    c0:32:ef:d2:bd:20:17:5f:10:08:07:54:d4:14:6d:
                    3a:1f:fb:44:b8:87:e8:58:e1:1f:68:68:5b:1d:30:
                    b5:36:d7:20:cb:8a:88:d6:1f:06:f7:c8:e9:2b:06:
                    84:a3:75:d4:0f:ad:c1:15:8c:f7:7f:5d:30:a4:d5:
                    2b:ef:ff:50:a4:a2:46:ab:d4:36:9b:66:3f:e0:0f:
                    aa:06:8e:99:57:d4:a6:5f:7d:b7:e1:b8:be:9c:3e:
                    c0:71:d2:97:e3:b3:a9:79:b2:d2:c2:c9:96:7d:dc:
                    36:1d:5f:6f:fb:93:da:33:1f:15:6c:77:86:28:1e:
                    e7:e9:81:3c:92:52:0f:b0:1b:0a:25:99:07:bb:88:
                    c6:c1:77:52:57:34:2d:30:9f:e4:5e:90:28:6e:53:
                    de:c3:ff:7a:a6:34:69:e1:05:c0:12:d7:22:8d:00:
                    94:89:01:55:af:3c:71:c0:8e:fe:df:01:58:2c:27:
                    75:bf:46:be:bf:1f:8e:12:bc:a8:86:53:d4:1b:78:
                    d5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0C:FD:98:31:27:29:AD:2B:62:3A:36:7A:34:F1:E4:84:2B:F2:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/a0ac2aa7-20c3-3813-8979-7448fcaa856e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:cb:39:ed:9f:d3:b7:d3:cf:e3:d7:2f:fb:05:9a:59:5d:ca:
         9d:07:68:c6:25:30:e8:b1:47:3f:8d:3f:b2:8a:e7:2e:d9:8e:
         f8:ab:99:f4:13:39:ac:1e:c8:74:f0:ad:2c:9f:9a:16:c7:71:
         d6:dc:92:0c:9c:5f:85:b5:a4:00:c5:a5:69:60:af:3f:b7:ea:
         2e:ea:7f:1b:93:1c:51:f9:88:ca:b5:e3:f1:ba:ec:c9:21:a0:
         26:43:e5:c8:27:76:16:2e:9e:36:a1:38:1c:32:c3:36:c8:0f:
         e8:1e:a8:74:3a:48:6c:cc:02:fa:49:a3:09:0a:ce:f9:54:8e:
         b7:7e:54:e0:fb:6d:cd:89:2c:f7:95:32:1f:6b:a6:0c:6f:35:
         10:fd:0b:a7:fd:ba:2c:2e:ba:17:6f:1c:1c:18:0a:8f:de:31:
         2d:90:ce:4d:9f:90:27:49:d0:ac:6f:98:d7:41:60:e4:38:2e:
         98:dd:6b:01:7f:6d:01:9e:ce:98:17:a6:0f:e8:ed:3d:4a:0d:
         92:bb:09:b4:be:8f:2d:d8:eb:15:b1:94:d2:c3:22:1a:4c:20:
         49:f0:bf:14:7e:77:8b:cb:63:c8:f6:f0:ab:94:6f:7b:c8:ea:
         78:08:08:47:0d:89:76:56:cb:d0:cb:c4:9c:87:05:a6:3a:ca:
         a2:48:89:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu1O9KigcZrvFg0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
NDNkYmU4MTgtYWM3OC00MDk4LTgyNzctM2U2MzM3NzVjNzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbMQaw5tRl13KciuXapBrr8+z3jBaQmIi0vO
yCkAfHLF3uhK6TLhV9BhD4THw0lCmJeLRHyc4JD+RvfAMu/SvSAXXxAIB1TUFG06
H/tEuIfoWOEfaGhbHTC1Ntcgy4qI1h8G98jpKwaEo3XUD63BFYz3f10wpNUr7/9Q
pKJGq9Q2m2Y/4A+qBo6ZV9SmX3234bi+nD7AcdKX47OpebLSwsmWfdw2HV9v+5Pa
Mx8VbHeGKB7n6YE8klIPsBsKJZkHu4jGwXdSVzQtMJ/kXpAoblPew/96pjRp4QXA
EtcijQCUiQFVrzxxwI7+3wFYLCd1v0a+vx+OEryohlPUG3jVywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM4M/ZgxJymtK2I6Nno08eSEK/KIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYTBhYzJhYTctMjBjMy0z
ODEzLTg5NzktNzQ0OGZjYWE4NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfLOe2f07fTz+PXL/sFmlldyp0HaMYlMOixRz+NP7KK5y7ZjvirmfQT
OaweyHTwrSyfmhbHcdbckgycX4W1pADFpWlgrz+36i7qfxuTHFH5iMq14/G67Mkh
oCZD5cgndhYunjahOBwywzbID+geqHQ6SGzMAvpJowkKzvlUjrd+VOD7bc2JLPeV
Mh9rpgxvNRD9C6f9uiwuuhdvHBwYCo/eMS2Qzk2fkCdJ0KxvmNdBYOQ4LpjdawF/
bQGezpgXpg/o7T1KDZK7CbS+jy3Y6xWxlNLDIhpMIEnwvxR+d4vLY8j28KuUb3vI
6ngICEcNiXZWy9DLxJyHBaY6yqJIibo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:02 2024 by rpki-client on console-ams.rpki-client.org