Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/a6546ddb-a034-39fe-91cc-ec11558b7299.roa
File:                     a6546ddb-a034-39fe-91cc-ec11558b7299.roa (raw, json)
Hash identifier:          8tWRe+pB+eUA5rtT0I6oQMXfoexCvgmQv6JHize5NQw=
Subject key identifier:   76:12:4F:B2:2E:BC:84:75:B2:BA:C7:88:60:91:8A:D5:FB:AB:21:73
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F432858457FDDE63DF2EA79AE74851FA0
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/a6546ddb-a034-39fe-91cc-ec11558b7299.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     29967
IP address blocks:        161.195.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:e6:3d:f2:ea:79:ae:74:85:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=e550b8a4-1087-4a48-8732-48341b1cf18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:86:e4:4f:e3:89:ed:87:14:41:7e:80:34:
                    7b:c6:d4:70:3a:7d:32:76:7c:04:f9:07:db:b7:64:
                    4b:5c:92:bb:3a:4a:73:69:17:7b:56:ad:4c:7d:ae:
                    21:c3:79:e5:e6:4b:42:3e:cc:42:66:f0:70:7d:15:
                    2e:6c:9f:dd:8d:10:f6:86:0f:d7:da:ed:b1:26:61:
                    48:aa:1c:a6:93:2a:b8:a0:29:1e:a7:9f:c4:ab:d1:
                    70:2f:4b:3b:97:f4:36:dc:62:09:e8:fb:5d:f7:5a:
                    e6:d5:86:06:20:26:cf:37:36:49:27:54:13:03:58:
                    b5:6a:e6:c9:bb:6d:0f:82:52:53:7a:cf:b8:f5:53:
                    06:2c:5c:ab:aa:83:d3:ac:47:26:99:f7:e3:d0:aa:
                    fb:a5:d7:c8:3e:e0:7a:8d:85:fc:e3:71:64:87:3c:
                    9a:08:84:33:bd:7e:19:ce:e5:70:18:64:bf:65:1a:
                    49:8d:b6:0b:a9:e9:0d:f7:20:00:40:53:7d:96:f8:
                    7b:1f:d2:64:1a:a7:ca:56:ef:30:b2:30:fe:23:86:
                    45:fc:61:46:cd:9b:49:8a:2e:3b:b4:c1:ea:db:0a:
                    d3:ae:66:8a:98:c4:1f:5c:e0:99:13:28:fa:01:60:
                    90:79:4d:64:44:6b:a6:66:20:28:89:6b:0b:3a:b0:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:12:4F:B2:2E:BC:84:75:B2:BA:C7:88:60:91:8A:D5:FB:AB:21:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/a6546ddb-a034-39fe-91cc-ec11558b7299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:91:69:54:c4:e5:67:5f:f7:43:58:8d:13:b7:b8:3c:45:b5:
         80:cf:af:1a:85:8f:c7:f5:e0:52:42:c5:87:1a:d6:d2:2d:59:
         f8:9c:c5:e0:09:58:12:71:33:ea:36:7b:21:32:82:04:44:bd:
         ef:21:52:d8:c1:42:71:00:71:71:f2:53:a4:8d:bf:1f:86:7a:
         6e:67:fb:b6:fd:4e:b4:46:58:5d:5c:57:73:4c:bf:1f:85:eb:
         59:27:2f:5c:fb:2e:2e:77:a3:a4:07:0d:99:8a:0b:58:23:29:
         be:97:d5:bc:d2:ae:d5:21:30:dc:0d:1a:f3:00:23:63:1e:73:
         01:ba:92:04:eb:6f:e4:43:4e:ad:1e:e7:f3:ef:26:cc:d8:79:
         7f:bf:38:d2:b4:f1:43:8f:0e:81:8d:de:ff:08:e0:6b:4c:bb:
         16:a6:9c:b1:d2:14:c0:7a:54:7e:e1:3f:24:cb:bc:8d:3c:8b:
         74:cd:61:8e:7b:69:62:1e:61:49:15:14:4f:db:3d:ba:36:c0:
         d8:17:37:23:47:35:99:1a:f7:d0:56:40:f0:0d:80:a0:e2:ca:
         3a:83:42:90:eb:06:7c:3d:ee:e1:0c:61:c1:31:d5:9d:e0:3d:
         cc:28:73:d6:43:a3:68:97:80:28:9c:44:87:40:ff:29:93:2e:
         1f:61:90:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV/3eY98up5rnSFH6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTEyYzY2MzYtMGIzNC00ZTQ3LTk1Y2MtMjlhNmI1M2Ez
Mzg4MB4XDTI0MDQxMDEzMDAzNFoXDTI0MDcwOTEzMDAzNFowLzEtMCsGA1UEAxMk
ZTU1MGI4YTQtMTA4Ny00YTQ4LTg3MzItNDgzNDFiMWNmMThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt2G5E/jie2HFEF+gDR7xtRwOn0ydnwE+Qfb
t2RLXJK7OkpzaRd7Vq1Mfa4hw3nl5ktCPsxCZvBwfRUubJ/djRD2hg/X2u2xJmFI
qhymkyq4oCkep5/Eq9FwL0s7l/Q23GIJ6Ptd91rm1YYGICbPNzZJJ1QTA1i1aubJ
u20PglJTes+49VMGLFyrqoPTrEcmmffj0Kr7pdfIPuB6jYX843FkhzyaCIQzvX4Z
zuVwGGS/ZRpJjbYLqekN9yAAQFN9lvh7H9JkGqfKVu8wsjD+I4ZF/GFGzZtJii47
tMHq2wrTrmaKmMQfXOCZEyj6AWCQeU1kRGumZiAoiWsLOrAzNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYST7IuvIR1srrHiGCRitX7qyFzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJj
NjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2YjUzYTMzODgvYTY1NDZkZGItYTAzNC0z
OWZlLTkxY2MtZWMxMTU1OGI3Mjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTEyYzY2MzYtMGIzNC00ZTQ3LTk1
Y2MtMjlhNmI1M2EzMzg4LzExMmM2NjM2LTBiMzQtNGU0Ny05NWNjLTI5YTZiNTNh
MzM4OC5jcmwwHwYDVR0jBBgwFoAU5SZko3dDzL1J1R4WQ4IVj9eHuuwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJjNjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2
YjUzYTMzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocOLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAaRaVTE5Wdf90NYjRO3uDxFtYDPrxqFj8f14FJCxYca1tItWficxeAJ
WBJxM+o2eyEyggREve8hUtjBQnEAcXHyU6SNvx+Gem5n+7b9TrRGWF1cV3NMvx+F
61knL1z7Li53o6QHDZmKC1gjKb6X1bzSrtUhMNwNGvMAI2MecwG6kgTrb+RDTq0e
5/PvJszYeX+/ONK08UOPDoGN3v8I4GtMuxamnLHSFMB6VH7hPyTLvI08i3TNYY57
aWIeYUkVFE/bPbo2wNgXNyNHNZka99BWQPANgKDiyjqDQpDrBnw97uEMYcEx1Z3g
Pcwoc9ZDo2iXgCicRIdA/ymTLh9hkAU=
-----END CERTIFICATE-----
Generated at Mon May 20 14:55:19 2024 by rpki-client on console-ams.rpki-client.org