Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/75a71b5b-91df-3439-b2cb-5c69efbb36f9.roa
File:                     75a71b5b-91df-3439-b2cb-5c69efbb36f9.roa (raw, json)
Hash identifier:          kE5k2Mmq+ICvFjyS7ER2sM4WeCZRtoEuAcn3h4c8cR8=
Subject key identifier:   9A:22:05:5D:29:4B:CE:E4:2F:90:66:99:75:80:0F:3A:AC:9C:E1:48
Certificate issuer:       /CN=460e35b5-8730-404c-9b7c-76c5af2c5d96
Certificate serial:       010D0C9F432858479D76BCF0114CFFE2CFC71E00
Authority key identifier: AF:1C:3C:98:12:3F:95:9F:FF:E6:EA:0F:16:0E:18:B5:21:DA:25:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/75a71b5b-91df-3439-b2cb-5c69efbb36f9.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     376
IP address blocks:        132.204.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/460e35b5-8730-404c-9b7c-76c5af2c5d96.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/460e35b5-8730-404c-9b7c-76c5af2c5d96.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:bc:f0:11:4c:ff:e2:cf:c7:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460e35b5-8730-404c-9b7c-76c5af2c5d96
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=5eded057-9016-4bd8-9877-6a6a5bfce06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:47:be:99:3c:3e:18:c2:c4:b4:b4:64:c6:
                    33:e7:0b:4a:ec:7c:fa:46:3a:41:01:c2:2e:bd:3f:
                    5d:37:85:0d:82:41:0c:c8:b8:06:c4:23:8e:92:de:
                    aa:c5:dc:c2:d5:0e:27:fb:50:9b:a4:d3:81:84:96:
                    5a:61:6a:d0:61:ca:4f:f3:5a:3a:df:91:90:30:2d:
                    5f:3f:d9:f2:38:bc:cf:6a:eb:1b:24:4a:65:ed:80:
                    bb:fa:4f:22:98:95:6f:93:4e:9a:04:16:ed:08:08:
                    36:ad:c6:35:2b:a7:93:ad:02:7b:3c:aa:02:c0:54:
                    a0:03:02:d0:e1:74:23:c7:6a:d0:29:a5:48:1a:e0:
                    db:0f:14:f9:41:9e:d9:67:4e:e0:4b:d5:00:49:fd:
                    35:19:70:95:5f:62:a3:2b:c8:75:99:b1:57:0e:28:
                    07:5a:18:f1:e1:67:3e:51:47:6f:ac:4b:79:c2:fa:
                    3f:41:72:89:b9:66:e8:da:b2:51:3d:3b:79:fd:e1:
                    2a:aa:03:da:3f:68:90:2f:b9:bc:53:c7:a5:34:7a:
                    e1:51:75:b4:75:ba:ed:68:6a:0c:40:e7:31:b3:46:
                    ea:ef:07:4a:e1:09:d2:62:80:be:2a:b2:87:09:a8:
                    d4:c5:fa:04:be:39:68:73:2f:3a:66:be:a4:c2:de:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:22:05:5D:29:4B:CE:E4:2F:90:66:99:75:80:0F:3A:AC:9C:E1:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/75a71b5b-91df-3439-b2cb-5c69efbb36f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/460e35b5-8730-404c-9b7c-76c5af2c5d96.crl

            X509v3 Authority Key Identifier:
                keyid:AF:1C:3C:98:12:3F:95:9F:FF:E6:EA:0F:16:0E:18:B5:21:DA:25:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:bb:f7:b8:3f:3a:6f:90:da:28:e9:3a:c7:d6:aa:f0:95:
         e0:20:fa:f5:56:77:cd:35:4e:0a:7e:9d:27:36:fc:f0:71:13:
         bb:aa:af:e0:09:9f:4a:aa:75:50:5d:b8:75:95:b7:58:8f:4a:
         c6:4c:2c:1b:4d:d0:99:0b:e5:ab:28:e9:33:da:3d:0b:09:6e:
         4a:25:29:09:cf:59:b6:ed:8c:5e:de:bd:25:07:c8:2d:43:77:
         df:00:bf:61:d1:3e:73:92:91:8a:4c:3b:a2:88:23:a1:b3:cd:
         52:dc:c6:b8:fa:9c:be:50:8a:42:d2:c8:98:47:98:7a:7d:8b:
         75:a7:22:b5:ba:89:9d:f5:25:18:47:54:af:5c:55:50:cc:90:
         ed:0d:2a:94:3f:e3:7d:22:57:44:b0:8e:a7:6e:87:e3:88:a4:
         24:74:a6:0c:95:89:64:70:47:89:5d:99:6d:d2:69:5d:fa:64:
         3f:bd:4a:38:f7:9c:c8:67:af:7a:6b:cc:d1:1a:49:93:08:67:
         e2:3f:41:aa:c5:a8:d3:2a:85:e4:fb:47:02:de:85:27:63:9b:
         21:3e:09:2a:66:26:3f:c4:d3:72:c2:f4:3b:b9:fd:66:28:90:
         6c:ad:c5:97:0e:c9:95:28:88:52:fb:9c:56:6c:fa:fd:1d:67:
         9e:ef:c0:69
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEeddrzwEUz/4s/HHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDYwZTM1YjUtODczMC00MDRjLTliN2MtNzZjNWFmMmM1
ZDk2MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
NWVkZWQwNTctOTAxNi00YmQ4LTk4NzctNmE2YTViZmNlMDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD9Hvpk8PhjCxLS0ZMYz5wtK7Hz6RjpBAcIu
vT9dN4UNgkEMyLgGxCOOkt6qxdzC1Q4n+1CbpNOBhJZaYWrQYcpP81o635GQMC1f
P9nyOLzPausbJEpl7YC7+k8imJVvk06aBBbtCAg2rcY1K6eTrQJ7PKoCwFSgAwLQ
4XQjx2rQKaVIGuDbDxT5QZ7ZZ07gS9UASf01GXCVX2KjK8h1mbFXDigHWhjx4Wc+
UUdvrEt5wvo/QXKJuWbo2rJRPTt5/eEqqgPaP2iQL7m8U8elNHrhUXW0dbrtaGoM
QOcxs0bq7wdK4QnSYoC+KrKHCajUxfoEvjlocy86Zr6kwt6CAQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJoiBV0pS87kL5BmmXWADzqsnOFIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjBl
MzViNS04NzMwLTQwNGMtOWI3Yy03NmM1YWYyYzVkOTYvNzVhNzFiNWItOTFkZi0z
NDM5LWIyY2ItNWM2OWVmYmIzNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDYwZTM1YjUtODczMC00MDRjLTli
N2MtNzZjNWFmMmM1ZDk2LzQ2MGUzNWI1LTg3MzAtNDA0Yy05YjdjLTc2YzVhZjJj
NWQ5Ni5jcmwwHwYDVR0jBBgwFoAUrxw8mBI/lZ//5uoPFg4YtSHaJdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjBlMzViNS04NzMwLTQwNGMtOWI3Yy03NmM1
YWYyYzVkOTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhMwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAh8i797g/Om+Q2ijpOsfWqvCV4CD69VZ3zTVOCn6dJzb88HETu6qv4Amf
Sqp1UF24dZW3WI9KxkwsG03QmQvlqyjpM9o9CwluSiUpCc9Ztu2MXt69JQfILUN3
3wC/YdE+c5KRikw7oogjobPNUtzGuPqcvlCKQtLImEeYen2LdacitbqJnfUlGEdU
r1xVUMyQ7Q0qlD/jfSJXRLCOp26H44ikJHSmDJWJZHBHiV2ZbdJpXfpkP71KOPec
yGevemvM0RpJkwhn4j9BqsWo0yqF5PtHAt6FJ2ObIT4JKmYmP8TTcsL0O7n9ZiiQ
bK3Flw7JlSiIUvucVmz6/R1nnu/AaQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:44 2024 by rpki-client on console-fra.rpki-client.org