Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
File:                     fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa (raw, json)
Hash identifier:          4kJTa9eMj20MlLavVgRMGnCNw1siMyCp19EtHqerFSI=
Subject key identifier:   58:3F:C9:28:27:63:CB:74:09:7D:29:EA:5F:AF:9D:65:BD:EF:FB:85
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F432858474F7BD79E6839E55DE108CF80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa
Signing time:             Mon 23 Sep 2024 14:38:20 +0000
ROA not before:           Mon 23 Sep 2024 14:38:20 +0000
ROA not after:            Sun 22 Dec 2024 15:38:20 +0000
asID:                     398202
IP address blocks:        137.239.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:7b:d7:9e:68:39:e5:5d:e1:08:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Sep 23 14:38:20 2024 GMT
            Not After : Dec 22 15:38:20 2024 GMT
        Subject: CN=86b4b02f-4bf5-47da-97ce-68453addeaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8e:54:b3:38:71:38:ea:80:5b:78:ce:71:c7:
                    19:81:c6:06:cf:11:c0:b0:cf:bb:df:6a:8f:d3:17:
                    6a:6c:86:e9:08:5a:60:3a:58:02:6c:69:c1:d9:72:
                    90:da:3a:8c:32:cb:43:c8:21:9c:21:fc:d6:25:1e:
                    28:0b:76:5d:86:18:43:36:00:85:3c:32:13:62:1f:
                    d6:ac:bc:bd:ac:38:de:1d:3e:49:3b:c0:1c:08:b1:
                    47:30:0a:b5:f5:51:f3:2d:63:43:14:2d:f1:5d:27:
                    12:ab:7f:f0:d4:48:ae:74:07:56:6b:fb:27:ac:ca:
                    ae:62:3d:82:6b:b9:0d:88:9b:27:b6:a1:96:fb:30:
                    0f:34:03:49:f6:01:3a:fb:31:a2:46:0d:aa:ca:68:
                    a7:94:30:ce:2b:db:d6:9f:bc:16:89:28:cb:03:b7:
                    8d:55:90:b4:a0:db:a3:b9:39:f1:36:df:12:a8:9d:
                    ea:b9:e4:c9:0c:07:f4:e3:ee:cc:72:8a:f9:7e:26:
                    28:56:0e:35:19:54:78:e0:a1:c8:c2:5f:8c:a0:92:
                    4a:e4:79:db:96:dc:41:bc:85:40:b7:65:21:3f:ee:
                    d3:94:21:c4:b9:ef:8b:be:43:fe:1c:c2:01:58:42:
                    ca:39:d8:52:3a:1f:53:50:33:c0:59:fd:fb:e4:b6:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3F:C9:28:27:63:CB:74:09:7D:29:EA:5F:AF:9D:65:BD:EF:FB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fd0599ac-d71b-3904-86c8-061b2e1b2f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.239.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:ce:60:cf:84:09:19:f5:d8:ab:35:e9:98:79:79:cd:0b:
         06:39:8e:ac:5e:1b:b3:28:36:e7:ff:13:39:5a:11:26:6e:b0:
         65:e9:f6:a3:71:f8:87:3b:d5:5d:6e:c7:ad:f0:c8:74:f2:7c:
         8f:7f:70:3a:de:0e:9e:96:58:f0:14:ea:e2:65:b7:ca:7c:f3:
         91:e5:f6:f7:ff:10:59:96:f0:4d:f1:d5:ca:94:21:75:cb:54:
         5b:58:06:60:41:9e:ae:56:f9:42:0a:98:e7:4a:e9:d2:be:d1:
         19:14:e2:b6:ff:f0:a0:a1:9f:b3:15:01:a9:bd:bd:68:47:fc:
         f2:30:66:d7:85:79:ca:e3:92:7f:c1:53:0f:18:aa:04:cb:ea:
         1a:af:86:aa:ce:91:55:7d:2c:5d:bf:d2:86:f8:a6:52:8c:df:
         7e:1d:b6:96:22:d9:6f:50:f3:a7:3e:63:26:4e:9f:c7:c8:b4:
         9f:22:86:e1:67:81:21:ce:84:0a:8d:3b:65:e1:b8:c9:d6:e5:
         00:25:e6:d1:ae:f0:31:ec:b3:c9:ab:46:e3:75:f2:e8:f5:41:
         7c:40:e2:03:28:6c:ca:47:78:f5:f4:6d:9c:6f:72:4a:0b:06:
         ab:20:6f:76:d8:58:82:98:32:8f:49:1d:47:d1:b5:a4:b5:c8:
         31:e8:51:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdPe9eeaDnlXeEIz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI0MDkyMzE0MzgyMFoXDTI0MTIyMjE1MzgyMFowLzEtMCsGA1UEAxMk
ODZiNGIwMmYtNGJmNS00N2RhLTk3Y2UtNjg0NTNhZGRlYWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY5UszhxOOqAW3jOcccZgcYGzxHAsM+732qP
0xdqbIbpCFpgOlgCbGnB2XKQ2jqMMstDyCGcIfzWJR4oC3ZdhhhDNgCFPDITYh/W
rLy9rDjeHT5JO8AcCLFHMAq19VHzLWNDFC3xXScSq3/w1EiudAdWa/snrMquYj2C
a7kNiJsntqGW+zAPNANJ9gE6+zGiRg2qyminlDDOK9vWn7wWiSjLA7eNVZC0oNuj
uTnxNt8SqJ3queTJDAf04+7Mcor5fiYoVg41GVR44KHIwl+MoJJK5HnbltxBvIVA
t2UhP+7TlCHEue+LvkP+HMIBWELKOdhSOh9TUDPAWf375LbH6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg/ySgnY8t0CX0p6l+vnWW97/uFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZmQwNTk5YWMtZDcxYi0z
OTA0LTg2YzgtMDYxYjJlMWIyZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAie/WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEq1zmDPhAkZ9dirNemYeXnNCwY5jqxeG7MoNuf/EzlaESZusGXp9qNx
+Ic71V1ux63wyHTyfI9/cDreDp6WWPAU6uJlt8p885Hl9vf/EFmW8E3x1cqUIXXL
VFtYBmBBnq5W+UIKmOdK6dK+0RkU4rb/8KChn7MVAam9vWhH/PIwZteFecrjkn/B
Uw8YqgTL6hqvhqrOkVV9LF2/0ob4plKM334dtpYi2W9Q86c+YyZOn8fItJ8ihuFn
gSHOhAqNO2XhuMnW5QAl5tGu8DHss8mrRuN18uj1QXxA4gMobMpHePX0bZxvckoL
Bqsgb3bYWIKYMo9JHUfRtaS1yDHoUUg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:27 2024 by rpki-client on console-ams.rpki-client.org