Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5f609099-d541-3126-8d88-9fd423ed6e25.roa
File:                     5f609099-d541-3126-8d88-9fd423ed6e25.roa (raw, json)
Hash identifier:          r49Lj1gDF6Hg74kbSrQdcsWRKE3OGGB/8sfrskP7YIk=
Subject key identifier:   12:EE:76:85:35:C2:84:49:1F:3E:30:D1:47:B8:BB:FE:2D:E8:4B:2A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584578E30197BACF16B529C2D040
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5f609099-d541-3126-8d88-9fd423ed6e25.roa
Signing time:             Mon 08 Apr 2024 01:00:25 +0000
ROA not before:           Mon 08 Apr 2024 01:00:25 +0000
ROA not after:            Sun 07 Jul 2024 01:00:25 +0000
asID:                     393544
IP address blocks:        128.177.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:e3:01:97:ba:cf:16:b5:29:c2:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  8 01:00:25 2024 GMT
            Not After : Jul  7 01:00:25 2024 GMT
        Subject: CN=b66851af-5c22-4572-a430-327cb40d02f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:69:62:7e:7c:6d:88:80:d1:18:14:b2:2b:
                    01:e7:80:55:b2:44:79:91:25:0e:f0:0f:de:84:33:
                    18:6f:64:a7:5d:2a:e8:20:cc:95:08:ec:d0:9c:9c:
                    20:b0:69:23:b5:01:8b:c2:12:15:26:81:19:1b:75:
                    d1:d8:eb:87:76:d3:13:08:23:5c:da:2f:38:d2:2d:
                    82:b8:6c:39:ee:5c:7d:f9:a4:e0:56:c1:b0:dc:9d:
                    9e:48:40:a9:85:f5:c6:20:41:12:dc:1f:48:55:6e:
                    a9:f3:95:22:62:7f:5a:60:5a:62:51:0f:2e:d8:ca:
                    ef:23:72:c6:c9:92:7b:b2:98:81:17:f5:de:7a:b0:
                    8e:7c:3e:7c:da:45:63:f4:34:33:ca:2d:f0:3d:4c:
                    69:68:1c:8c:2c:4e:96:83:b1:43:67:b7:5b:44:82:
                    ae:cb:f5:2a:9c:1e:cb:02:86:5a:ea:1c:cd:e7:b0:
                    2d:eb:03:e3:61:fb:bd:9e:d7:c2:1e:d2:cf:ff:7c:
                    0e:0e:0e:91:49:3f:84:f7:cf:bb:5b:e0:e4:6d:0a:
                    c0:ef:79:9a:25:ee:40:3b:5d:40:46:09:53:ad:e5:
                    3e:9d:12:57:e0:f5:84:86:b3:ea:b6:46:a3:bb:a7:
                    a0:b5:8d:ec:e1:0c:a4:0c:e6:40:f0:05:2c:ab:17:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EE:76:85:35:C2:84:49:1F:3E:30:D1:47:B8:BB:FE:2D:E8:4B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5f609099-d541-3126-8d88-9fd423ed6e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:33:cd:88:1c:dc:9f:c0:45:a5:6c:c1:0f:fc:9d:68:1b:
         48:48:5c:87:a3:6c:d7:1f:58:b9:5a:25:89:7c:53:f6:eb:9b:
         62:61:4a:44:83:d7:4e:ae:e4:7f:98:61:7c:a1:fd:89:22:45:
         81:95:40:99:7e:61:07:52:bf:f4:39:5c:69:1d:6e:8a:26:81:
         d9:2c:91:dd:e3:41:43:dc:9d:fb:36:b2:0b:36:ac:9a:68:15:
         b8:8a:24:4a:4f:ba:e8:6b:6d:a0:99:14:8f:4f:b9:c2:f1:8d:
         d5:76:a9:9e:0e:ab:73:7d:58:18:dd:e1:9f:42:dc:bc:39:11:
         94:1b:a7:93:a6:ef:db:cf:23:e6:e1:e2:bc:12:bb:8a:86:9b:
         b0:71:1c:17:22:23:76:11:89:88:13:d5:3b:50:5d:0d:de:d3:
         ee:80:0a:24:95:60:1c:f4:25:c5:74:4d:2f:d9:e5:09:98:20:
         c0:55:d3:ec:cf:09:7d:69:9f:fe:c0:c8:00:74:df:9b:ea:42:
         7a:d9:af:cc:1b:99:4c:c5:4e:e9:15:cf:85:d0:18:e5:3b:33:
         03:8a:95:22:32:20:08:10:91:1e:c7:5b:2d:e6:f0:25:1f:c7:
         58:80:0d:0d:c2:4f:96:8e:d9:f7:e7:02:09:3a:aa:53:30:c0:
         45:b8:9d:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV44wGXus8WtSnC0EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDQwODAxMDAyNVoXDTI0MDcwNzAxMDAyNVowLzEtMCsGA1UEAxMk
YjY2ODUxYWYtNWMyMi00NTcyLWE0MzAtMzI3Y2I0MGQwMmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi55pYn58bYiA0RgUsisB54BVskR5kSUO8A/e
hDMYb2SnXSroIMyVCOzQnJwgsGkjtQGLwhIVJoEZG3XR2OuHdtMTCCNc2i840i2C
uGw57lx9+aTgVsGw3J2eSECphfXGIEES3B9IVW6p85UiYn9aYFpiUQ8u2MrvI3LG
yZJ7spiBF/XeerCOfD582kVj9DQzyi3wPUxpaByMLE6Wg7FDZ7dbRIKuy/UqnB7L
AoZa6hzN57At6wPjYfu9ntfCHtLP/3wODg6RST+E98+7W+DkbQrA73maJe5AO11A
RglTreU+nRJX4PWEhrPqtkaju6egtY3s4QykDOZA8AUsqxeblQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLudoU1woRJHz4w0Ue4u/4t6EsqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNWY2MDkwOTktZDU0MS0z
MTI2LThkODgtOWZkNDIzZWQ2ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgLGYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAeM82IHNyfwEWlbMEP/J1oG0hIXIejbNcfWLlaJYl8U/brm2JhSkSD
106u5H+YYXyh/YkiRYGVQJl+YQdSv/Q5XGkdboomgdkskd3jQUPcnfs2sgs2rJpo
FbiKJEpPuuhrbaCZFI9PucLxjdV2qZ4Oq3N9WBjd4Z9C3Lw5EZQbp5Om79vPI+bh
4rwSu4qGm7BxHBciI3YRiYgT1TtQXQ3e0+6ACiSVYBz0JcV0TS/Z5QmYIMBV0+zP
CX1pn/7AyAB035vqQnrZr8wbmUzFTukVz4XQGOU7MwOKlSIyIAgQkR7HWy3m8CUf
x1iADQ3CT5aO2ffnAgk6qlMwwEW4nbM=
-----END CERTIFICATE-----
Generated at Sun Jun 2 17:03:13 2024 by rpki-client on console-fra.rpki-client.org